last executing test programs: 3m24.746820351s ago: executing program 3 (id=38): syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300301c800aa6bc323bb898ec92c4b7028271a85c55ee868e2240ed217d162dd"], 0x6) 3m24.41678643s ago: executing program 3 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x3, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x73}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) 3m23.429327166s ago: executing program 3 (id=43): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000003600)=""/120) 3m22.310122622s ago: executing program 3 (id=46): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0xc020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000800)=0x8000000) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000480)="a1a37b91be7ddb15e481057ac6442f88991afe1c595cfca143a0321a820897df31dc39b3dbac4d42583b16dbd7b9b8d105f5f30304ce0bd456277e77c96ec8fc8166823c646ece3d433def802d56887b340af227b949f8b5b91dec788c7a9f6f5b325359cd068435e496d639ce571d721db043490ebfd2e25df0db8d3b1522c86e8a4fed8e3e1f88db7b78039e6a5d4e9b05e8324ed2ead16f9457", 0x9b, 0x2) r7 = getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x5fa, &(0x7f0000000300)={0x0, 0x7164, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r9, 0x27e2, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) sendmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="b4", 0x1}], 0x1}, 0x4041) socket(0x11, 0x800000003, 0x0) 3m20.846227356s ago: executing program 3 (id=50): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe8c, 0x258, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) 3m19.40928142s ago: executing program 3 (id=54): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) sendfile(r0, r0, 0x0, 0x8001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xa00, 0x1000000a00}) sync_file_range(r0, 0x9, 0x6, 0x2) 3m3.250248615s ago: executing program 32 (id=54): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) sendfile(r0, r0, 0x0, 0x8001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xa00, 0x1000000a00}) sync_file_range(r0, 0x9, 0x6, 0x2) 2m41.630411328s ago: executing program 4 (id=151): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x4, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000500)=[0x4], &(0x7f0000000200)=[r3], &(0x7f0000000340)}) 2m41.543971248s ago: executing program 4 (id=152): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x480202, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_DEVICE(r2, 0x0, 0x20000950) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6a040000) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x1fe, 0x1c14, 0xffffffff, 0x42, 0x2]}, &(0x7f00000002c0)=0x54) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCXONC(r0, 0x5608, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) 2m40.214551153s ago: executing program 4 (id=155): ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000007600)={0x1}) r0 = socket(0x10, 0x803, 0x0) recvmmsg$unix(r0, &(0x7f0000007380)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f00000004c0)=""/57, 0x39}], 0x7, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/129, 0x81}, {&(0x7f00000009c0)=""/225, 0xe1}, {&(0x7f0000000580)=""/10, 0xa}, {&(0x7f0000000ac0)=""/75, 0x4b}, {&(0x7f0000000b40)=""/172, 0xac}, {&(0x7f0000000c00)=""/228, 0xe4}], 0x7, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000001180)=[{&(0x7f0000000ec0)=""/17, 0x11}, {&(0x7f0000000f00)=""/152, 0x98}, {&(0x7f0000000fc0)=""/82, 0x52}, {&(0x7f0000001040)=""/29, 0x1d}, {&(0x7f0000001080)=""/253, 0xfd}], 0x5}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001200)=""/150, 0x96}, {&(0x7f0000001300)=""/37, 0x25}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/44, 0x2c}, {&(0x7f0000002380)=""/41, 0x29}, {&(0x7f00000023c0)=""/214, 0xd6}, {&(0x7f00000024c0)=""/58, 0x3a}, {&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)=""/210, 0xd2}], 0x9, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000002880)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000002900)=""/53, 0x35}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x2, &(0x7f0000003980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000003a40), 0x6e, &(0x7f0000005b40)=[{&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/79, 0x4f}], 0x3, &(0x7f0000005b80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005bc0), 0x6e, &(0x7f0000005d80)=[{&(0x7f0000005c40)=""/238, 0xee}, {&(0x7f0000005d40)=""/52, 0x34}], 0x2, &(0x7f0000005dc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005e40)=@abs, 0x6e, &(0x7f0000007280)=[{&(0x7f0000005ec0)=""/17, 0x11}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/119, 0x77}, {&(0x7f0000006f80)=""/41, 0x29}, {&(0x7f0000006fc0)=""/30, 0x1e}, {&(0x7f0000007100)=""/40, 0x28}, {&(0x7f0000007140)=""/238, 0xee}, {&(0x7f0000007240)=""/16, 0x10}], 0x8, &(0x7f0000007340)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x10001, &(0x7f0000007580)={0x0, 0x3938700}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) remap_file_pages(&(0x7f00007c0000/0xa000)=nil, 0xa000, 0x0, 0x72, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x18}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m38.607129566s ago: executing program 4 (id=160): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m38.214702835s ago: executing program 4 (id=161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 2m29.986590662s ago: executing program 4 (id=180): openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2m14.942760441s ago: executing program 33 (id=180): openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1m28.855357606s ago: executing program 6 (id=339): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 1m26.398067207s ago: executing program 6 (id=342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x1, 0xba98}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) 1m24.75912552s ago: executing program 6 (id=343): read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d002, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r1, r0, 0x0, 0x80006) 1m21.981965389s ago: executing program 6 (id=348): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4d, 0xda, 0xcc, 0x20, 0xe41, 0x4750, 0x269c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf4, 0x2, 0x0, 0xd2, 0x98, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m18.627941295s ago: executing program 6 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mknod$loop(0x0, 0x100000000000600d, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000440), 0x10) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000600)=""/205, 0xcd, 0x40020002, 0x0, 0x0) 1m14.005108967s ago: executing program 6 (id=366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1, 0x6, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3}, 0x8) r4 = socket$rds(0x15, 0x5, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, &(0x7f0000000340)) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet6(0xa, 0x6, 0x0) 58.742119866s ago: executing program 34 (id=366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1, 0x6, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3}, 0x8) r4 = socket$rds(0x15, 0x5, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, &(0x7f0000000340)) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet6(0xa, 0x6, 0x0) 17.146564119s ago: executing program 2 (id=509): openat$ttynull(0xffffffffffffff9c, 0x0, 0x50000, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r1, r1) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x1c2b) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) 16.514652726s ago: executing program 1 (id=512): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000800000008f9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13.914393616s ago: executing program 0 (id=516): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x151ff000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000380)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, 0x0, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0x47e2, 0x20, 0x843e}, 0x2f) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) 13.897296786s ago: executing program 1 (id=517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tcp_probe\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {0x0}], 0x2}, 0x4000081) 12.871636711s ago: executing program 0 (id=520): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) 11.982666428s ago: executing program 1 (id=523): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioperm(0x6, 0x3, 0xb017) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x60020161) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f00000002c0)=""/59, 0x3b}], 0x2}}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) 11.866976308s ago: executing program 0 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4000000000000000, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2}}, 0x20) 11.242416985s ago: executing program 7 (id=526): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f00000002c0)) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1408008800"], 0x14}}, 0x4004000) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}]}]}, 0x58}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0xc000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r8, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x5}}, 0x10) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000100)=0x110, 0x4) 11.113204695s ago: executing program 2 (id=527): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@deltclass={0x4c, 0x29, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x2}, {0xfff2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xc, 0xf6}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x1e20, &(0x7f0000000500)={0x0, 0x8221, 0x0, 0x0, 0x8a}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYBLOB="0c0001800800"], 0x24}}, 0x0) read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r7) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$vsock_stream(r7, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000340)=0x15) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) 10.965717374s ago: executing program 0 (id=528): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000003600)=""/120) 9.92257328s ago: executing program 1 (id=529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x200400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 9.828005279s ago: executing program 5 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x4, 0x0) getpriority(0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) listen(r6, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000001010102000000000000"], 0x24}}, 0x0) r7 = mq_open(&(0x7f0000000080)='\x00', 0x40, 0x50, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x5, &(0x7f0000000140)={0x0, 0x3938700}) socket$igmp6(0xa, 0x3, 0x2) 8.802795666s ago: executing program 5 (id=531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) io_uring_enter(r2, 0x64ce, 0xe6d9, 0x31, &(0x7f0000000100)={[0x453c70d5]}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 8.670611015s ago: executing program 1 (id=532): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @val=@tcx={@void, @value}}, 0x1c) 7.136418849s ago: executing program 1 (id=533): syz_open_procfs(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}, 0x40) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x620000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x20000400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28008004) socket$inet6(0xa, 0x6, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000005600)={0x2020}, 0x2020) close(r3) 7.014620688s ago: executing program 5 (id=534): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) ioctl$EVIOCGMASK(r1, 0x5b07, 0x0) 6.231881575s ago: executing program 7 (id=535): bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setuid(0xee01) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 5.968152584s ago: executing program 7 (id=536): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x3000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0x10, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000000780)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setgroups(0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c7041, 0x101) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='hfs\x00', 0x0, 0x0) connect$llc(r6, 0x0, 0x0) 5.814610874s ago: executing program 2 (id=537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/clear_refs\x00', 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000002201"]) 5.02303642s ago: executing program 7 (id=538): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000300), 0x8400, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@setneightbl={0x1c, 0x43, 0x800, 0x70bd25, 0x25dfdbff, {0xa}, [@NDTA_THRESH2={0x8, 0x3, 0x10001}]}, 0x1c}}, 0x20044881) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg$inet6(r0, 0x0, 0x0, 0x40014) 4.774526349s ago: executing program 0 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) get_mempolicy(0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil, 0x2) 4.126602637s ago: executing program 2 (id=540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r0, 0x40087101, 0x8000020001100) 3.045118162s ago: executing program 2 (id=541): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x8}, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.904077372s ago: executing program 7 (id=542): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, 0x0, 0x0) 2.762183611s ago: executing program 5 (id=543): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @val=@tcx={@void, @value}}, 0x1c) 1.173456374s ago: executing program 5 (id=544): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0xc, 0x98cc, 0x7, 0x30385056, [0xfffffffa, 0xfc], [0x3, 0x2], 0x108}}) 900.961284ms ago: executing program 7 (id=545): io_uring_setup(0x4053, &(0x7f00000001c0)={0x0, 0xa557, 0x0, 0x2, 0x94}) socket$inet(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) gettid() bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x1) write(r1, &(0x7f0000000380)="ecc31b33e3db531e4b5ea24c56aa8ad6ec918d5b75014e963046a7bd5a", 0x1d) writev(r0, 0x0, 0x0) fsopen(&(0x7f0000000380)='gfs2meta\x00', 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x3, 0x34324152, 0x5, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xff}, {}, {}, {0x0, 0x4}]}}) 830.640773ms ago: executing program 0 (id=546): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)=ANY=[], 0x28) close(r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400", @ANYRES16=r5, @ANYBLOB="000425bd70000000000022000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) shutdown(r3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 141.002031ms ago: executing program 5 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14"], 0x64}}, 0x0) 0s ago: executing program 2 (id=548): creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x1}}, 0x10, 0x0}, 0x4000005) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1f0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_NMI(r1, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x808, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.48' (ED25519) to the list of known hosts. [ 56.401352][ T4156] cgroup: Unknown subsys name 'net' [ 56.541335][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.035239][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.543799][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 59.641598][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 59.668337][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 59.742348][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 59.787475][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.795017][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.803121][ T4174] device bridge_slave_0 entered promiscuous mode [ 59.813743][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.821030][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.829077][ T4172] device bridge_slave_0 entered promiscuous mode [ 59.860070][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.867346][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.875383][ T4174] device bridge_slave_1 entered promiscuous mode [ 59.882926][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.890117][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.898323][ T4172] device bridge_slave_1 entered promiscuous mode [ 59.905472][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 59.950288][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.957472][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.966305][ T4175] device bridge_slave_0 entered promiscuous mode [ 59.997179][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.012682][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.020561][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.028555][ T4175] device bridge_slave_1 entered promiscuous mode [ 60.037979][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.055095][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.087842][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.138435][ T4172] team0: Port device team_slave_0 added [ 60.144714][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.151792][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.160665][ T4168] device bridge_slave_0 entered promiscuous mode [ 60.169851][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.192349][ T4172] team0: Port device team_slave_1 added [ 60.206621][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.213785][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.221889][ T4168] device bridge_slave_1 entered promiscuous mode [ 60.231143][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.242586][ T4174] team0: Port device team_slave_0 added [ 60.251197][ T4174] team0: Port device team_slave_1 added [ 60.301288][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.308581][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.335214][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.370735][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.377889][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.386424][ T4167] device bridge_slave_0 entered promiscuous mode [ 60.395115][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.402069][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.428076][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.440995][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.452830][ T4175] team0: Port device team_slave_0 added [ 60.459438][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.466556][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.492733][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.505971][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.513052][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.521456][ T4167] device bridge_slave_1 entered promiscuous mode [ 60.534215][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.544986][ T4175] team0: Port device team_slave_1 added [ 60.563006][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.570046][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.596683][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.647893][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.672793][ T4168] team0: Port device team_slave_0 added [ 60.681291][ T4168] team0: Port device team_slave_1 added [ 60.699047][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.720889][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.728170][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.754608][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.784496][ T4172] device hsr_slave_0 entered promiscuous mode [ 60.791347][ T4172] device hsr_slave_1 entered promiscuous mode [ 60.807270][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.814504][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.840481][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.859430][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.866716][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.892957][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.906755][ T4167] team0: Port device team_slave_0 added [ 60.931894][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.938887][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.965001][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.982136][ T4167] team0: Port device team_slave_1 added [ 60.999003][ T4174] device hsr_slave_0 entered promiscuous mode [ 61.006931][ T4174] device hsr_slave_1 entered promiscuous mode [ 61.013469][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.021596][ T4174] Cannot create hsr debugfs directory [ 61.079905][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.087289][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.113439][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.153773][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.160776][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.187161][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.204850][ T4168] device hsr_slave_0 entered promiscuous mode [ 61.211770][ T4168] device hsr_slave_1 entered promiscuous mode [ 61.218639][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.226753][ T4168] Cannot create hsr debugfs directory [ 61.235327][ T4175] device hsr_slave_0 entered promiscuous mode [ 61.242074][ T4175] device hsr_slave_1 entered promiscuous mode [ 61.249691][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.257951][ T4175] Cannot create hsr debugfs directory [ 61.265452][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.272693][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 61.279458][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 61.286117][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 61.292835][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 61.396825][ T4167] device hsr_slave_0 entered promiscuous mode [ 61.403631][ T4167] device hsr_slave_1 entered promiscuous mode [ 61.410514][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.418134][ T4167] Cannot create hsr debugfs directory [ 61.600195][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.636255][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.651227][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.671864][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.725607][ T4172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.734837][ T4172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.757797][ T4172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.776708][ T4172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.807175][ T4175] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.828266][ T4175] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.837400][ T4175] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.858756][ T4175] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.908975][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.921981][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.935365][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.965434][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.001291][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.058822][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.069861][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.078970][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.091499][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.111627][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.130456][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.140877][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.157608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.166747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.176238][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.183592][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.221844][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.237879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.246626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.256424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.286059][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.302961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.311890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.321315][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.328427][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.353324][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.361121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.370444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.381575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.390629][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.397745][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.407120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.446597][ T4174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.460294][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.473022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.482418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.491271][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.498395][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.506887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.515925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.524888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.533341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.542053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.551076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.559864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.569711][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.579089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.588141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.598400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.606854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.621945][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.638974][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.678404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.695496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.703800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.719251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.729684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.749652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.763406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.773212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.789252][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.796413][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.812245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.821928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.830993][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.838112][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.846313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.858790][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.872099][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.882663][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.891569][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.900514][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.912257][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.936062][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.948114][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.958810][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.966756][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.975223][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.982986][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.991724][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.012099][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.026722][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.042447][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.050713][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.066345][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.079099][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.088535][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.097698][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.106467][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.113520][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.124317][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.133641][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.143817][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.156637][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.176805][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.191270][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.200981][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.212772][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.219905][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.228346][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.238122][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.247315][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.254446][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.262098][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.273059][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.308703][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.318432][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.328009][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.337371][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.345860][ T2318] Bluetooth: hci0: command 0x041b tx timeout [ 63.350843][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.352653][ T2318] Bluetooth: hci2: command 0x041b tx timeout [ 63.363872][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.366155][ T2318] Bluetooth: hci3: command 0x041b tx timeout [ 63.380420][ T2318] Bluetooth: hci1: command 0x041b tx timeout [ 63.382020][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.387068][ T2318] Bluetooth: hci4: command 0x041b tx timeout [ 63.401553][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.412757][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.421490][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.430400][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.439378][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.446912][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.455526][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.466735][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.475333][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.483701][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.512812][ T4167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.528208][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.541352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.550875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.559895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.568882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.578173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.587261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.596101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.604909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.613554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.622549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.632134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.640825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.649750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.693801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.702710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.725161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.732687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.741811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.765633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.779175][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.795074][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.806147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.814920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.846769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.862195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.880887][ T4174] device veth0_vlan entered promiscuous mode [ 63.912865][ T4174] device veth1_vlan entered promiscuous mode [ 63.957321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.974508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.982933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.992239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.029665][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.037424][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.045991][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.053642][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.061763][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.072667][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.093494][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.103883][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.115660][ T4175] device veth0_vlan entered promiscuous mode [ 64.134199][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.142053][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.186766][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.199578][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.208738][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.218348][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.228192][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.235999][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.244294][ T4175] device veth1_vlan entered promiscuous mode [ 64.251895][ T4174] device veth0_macvtap entered promiscuous mode [ 64.269619][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.313459][ T4174] device veth1_macvtap entered promiscuous mode [ 64.321707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.331141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.340542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.348921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.358155][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.388601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.397346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.406358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.431994][ T4168] device veth0_vlan entered promiscuous mode [ 64.453553][ T4175] device veth0_macvtap entered promiscuous mode [ 64.463816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.473362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.482118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.491796][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.500304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.509054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.519907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.528158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.536694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.550079][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.562342][ T4168] device veth1_vlan entered promiscuous mode [ 64.572768][ T4175] device veth1_macvtap entered promiscuous mode [ 64.580759][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.589563][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.597805][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.606587][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.630820][ T4167] device veth0_vlan entered promiscuous mode [ 64.648756][ T4167] device veth1_vlan entered promiscuous mode [ 64.658586][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.669696][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.680129][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.689483][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.698303][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.710966][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.719736][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.728517][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.737597][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.751115][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.762661][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.775609][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.809500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.818540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.828726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.838090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.848445][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.859950][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.871832][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.922807][ T4175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.931871][ T4175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.941056][ T4175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.951512][ T4175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.961802][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.972278][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.986799][ T4167] device veth0_macvtap entered promiscuous mode [ 64.999685][ T4172] device veth0_vlan entered promiscuous mode [ 65.028083][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.037637][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.047089][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.055697][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.065424][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.074523][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.083071][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.092098][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.100110][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.109262][ T4168] device veth0_macvtap entered promiscuous mode [ 65.123174][ T4168] device veth1_macvtap entered promiscuous mode [ 65.141487][ T4167] device veth1_macvtap entered promiscuous mode [ 65.179222][ T4172] device veth1_vlan entered promiscuous mode [ 65.205184][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.216124][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.226431][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.237191][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.250562][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.263774][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.275022][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.284985][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.295697][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.305858][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.316634][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.328038][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.338192][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.347086][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.355725][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.363771][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.372098][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.380218][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.388926][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.398654][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.407568][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.427061][ T4217] Bluetooth: hci4: command 0x040f tx timeout [ 65.433699][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.437727][ T4217] Bluetooth: hci1: command 0x040f tx timeout [ 65.451071][ T4217] Bluetooth: hci3: command 0x040f tx timeout [ 65.451614][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.457454][ T4217] Bluetooth: hci2: command 0x040f tx timeout [ 65.473539][ T4217] Bluetooth: hci0: command 0x040f tx timeout [ 65.474871][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.490900][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.502063][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.511926][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.513084][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.533158][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.534438][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.543505][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.560966][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.570834][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.581365][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.593034][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.608882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.617765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.627055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.636319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.646022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.657257][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.667308][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.676264][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.686733][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.700334][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.709877][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.718844][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.728718][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.803019][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.830037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.839147][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.851808][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.863680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.897189][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.909110][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.911180][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.926276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.942520][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.947113][ T4172] device veth0_macvtap entered promiscuous mode [ 65.988773][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.997855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.009859][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.017052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.027762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.038980][ T4172] device veth1_macvtap entered promiscuous mode [ 66.108509][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.127592][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.142236][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.153565][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.164951][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.178973][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.189282][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.200182][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.212260][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.227966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.242687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.253005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.270668][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.281436][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.296573][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.307652][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.318923][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.330282][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.342346][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.371820][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.390186][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.401949][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.421923][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.703074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.764576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.779793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.035131][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.098467][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.128708][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144128][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.228957][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.240106][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.250183][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.260268][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.279353][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.310463][ T4245] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.327899][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.504221][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 67.525044][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 67.560877][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 67.633924][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 67.699114][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 68.343274][ T4245] usb 1-1: Using ep0 maxpacket: 8 [ 68.366855][ T4266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 68.382317][ T4266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 69.373955][ C0] sched: RT throttling activated [ 69.605571][ T4245] usb 1-1: device descriptor read/all, error -71 [ 69.687148][ T4278] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.849605][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.925138][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.154257][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.215864][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.250931][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.273982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 70.282925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 70.292458][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.301369][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.304312][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.310288][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.319861][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 70.328663][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.337504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.346228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.355165][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.469052][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.963707][ T4298] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.990906][ T4234] Bluetooth: hci5: Frame reassembly failed (-84) [ 71.190196][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197674][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.334136][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.774131][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.794087][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 71.803063][ T1108] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 71.813165][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.837133][ T1108] usb 2-1: config 0 descriptor?? [ 72.304394][ T1108] Bluetooth: Can't get version to change to load ram patch err [ 72.312360][ T1108] Bluetooth: Loading patch file failed [ 72.318402][ T1108] ath3k: probe of 2-1:0.0 failed with error -71 [ 73.247511][ T1108] usb 2-1: USB disconnect, device number 2 [ 73.593761][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 73.600197][ T4184] Bluetooth: hci5: sending frame failed (-49) [ 74.226907][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.496148][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 74.596798][ T4184] Bluetooth: hci0: unexpected event for opcode 0x6403 [ 74.614710][ T1108] usb 5-1: config 0 has no interfaces? [ 74.620371][ T1108] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.658265][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.681260][ T1108] usb 5-1: config 0 descriptor?? [ 74.744425][ T4339] netlink: 'syz.1.25': attribute type 9 has an invalid length. [ 74.955859][ T1108] usb 5-1: USB disconnect, device number 2 [ 75.937506][ T2318] Bluetooth: hci5: command 0x1001 tx timeout [ 75.943618][ T4184] Bluetooth: hci5: sending frame failed (-49) [ 77.888508][ T4378] syz.1.37 sent an empty control message without MSG_MORE. [ 78.027037][ T2318] Bluetooth: hci5: command 0x1009 tx timeout [ 78.174348][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.290089][ T4382] openvswitch: netlink: Message has 4 unknown bytes. [ 78.617127][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 78.744785][ T1108] usb 5-1: config 157 interface 0 has no altsetting 0 [ 78.925039][ T1108] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 78.950741][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.008876][ T1108] usb 5-1: Product: syz [ 79.013086][ T1108] usb 5-1: Manufacturer: syz [ 79.029660][ T1108] usb 5-1: SerialNumber: syz [ 80.039905][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.047874][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.156932][ T1108] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 80.189873][ T1108] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 80.506179][ T1108] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 80.518543][ T1108] usb 5-1: media controller created [ 80.849195][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.702996][ T1325] cfg80211: failed to load regulatory.db [ 81.745909][ T1108] zl10353_read_register: readreg error (reg=127, ret==-71) [ 81.802705][ T4413] delete_channel: no stack [ 82.000398][ T1108] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 82.062357][ T1108] usb 5-1: USB disconnect, device number 3 [ 82.938013][ T21] Bluetooth: hci2: command 0x0401 tx timeout [ 83.407995][ T4434] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 83.632477][ T21] Bluetooth: hci6: command 0x1003 tx timeout [ 83.863150][ T4184] Bluetooth: hci6: sending frame failed (-49) [ 85.906377][ T21] Bluetooth: hci6: command 0x1001 tx timeout [ 85.913169][ T4184] Bluetooth: hci6: sending frame failed (-49) [ 87.984403][ T21] Bluetooth: hci6: command 0x1009 tx timeout [ 89.406688][ T21] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 90.395269][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.494552][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.754663][ T21] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 90.766328][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.953804][ T21] usb 5-1: config 0 descriptor?? [ 91.557599][ T21] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 91.565155][ T21] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 91.581820][ T21] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 91.612448][ T21] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 91.634003][ T21] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 91.806887][ T21] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.4-1/input0 [ 91.936788][ T21] usb 5-1: USB disconnect, device number 4 [ 94.589000][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 95.239041][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 99.047014][ T4577] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.062830][ T4577] overlayfs: failed to set xattr on upper [ 99.159554][ T4577] overlayfs: ...falling back to index=off,metacopy=off. [ 99.622568][ T4601] ======================================================= [ 99.622568][ T4601] WARNING: The mand mount option has been deprecated and [ 99.622568][ T4601] and is ignored by this kernel. Remove the mand [ 99.622568][ T4601] option from the mount to silence this warning. [ 99.622568][ T4601] ======================================================= [ 99.906578][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 99.942910][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 100.123552][ T4593] chnl_net:caif_netlink_parms(): no params data found [ 101.489145][ T4629] mmap: syz.1.98 (4629) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 101.521934][ T4213] Bluetooth: hci5: command 0x0409 tx timeout [ 101.633084][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.664207][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.712724][ T4593] device bridge_slave_0 entered promiscuous mode [ 101.784241][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.842701][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.885539][ T4593] device bridge_slave_1 entered promiscuous mode [ 102.076810][ T4593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.114290][ T4215] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.136260][ T4593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.342347][ T4593] team0: Port device team_slave_0 added [ 102.385271][ T4593] team0: Port device team_slave_1 added [ 102.574820][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.604200][ T4641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.101'. [ 102.636325][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.676732][ T4215] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 102.707059][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.722119][ T4593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.746510][ T4215] usb 1-1: config 0 descriptor?? [ 102.752027][ T4593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.864132][ T4593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.894540][ T4593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.901675][ T4593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.948415][ T4593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.317204][ T4215] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 103.348098][ T4215] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 103.396055][ T4215] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 103.441252][ T4215] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 103.455121][ T4215] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 103.837021][ T1325] Bluetooth: hci5: command 0x041b tx timeout [ 104.083233][ T4215] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.0-1/input0 [ 104.099277][ T4215] usb 1-1: USB disconnect, device number 4 [ 104.159496][ T4593] device hsr_slave_0 entered promiscuous mode [ 104.227384][ T4593] device hsr_slave_1 entered promiscuous mode [ 104.304215][ T4593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.311829][ T4593] Cannot create hsr debugfs directory [ 105.776378][ T4671] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 105.854966][ T4593] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.550086][ T4593] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.631061][ T4593] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.680506][ T4215] Bluetooth: hci5: command 0x040f tx timeout [ 106.708244][ T4593] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.720360][ T4213] Bluetooth: hci5: command 0x0419 tx timeout [ 110.552717][ T4593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.668489][ T4593] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.749939][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.759162][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.865287][ T4584] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 111.534169][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.589890][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.642909][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.650129][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.661192][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.676660][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.687794][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.694989][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.711996][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.756485][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.833760][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.868028][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.914508][ T4584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.923448][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.419374][ T4584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.430209][ T4584] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 112.714651][ T4584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.788967][ T4724] xt_nat: multiple ranges no longer supported [ 113.538032][ T4584] usb 3-1: config 0 descriptor?? [ 113.559964][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.589737][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.598503][ T4584] usb 3-1: can't set config #0, error -71 [ 113.635046][ T4584] usb 3-1: USB disconnect, device number 2 [ 113.682686][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.735880][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.765045][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.780183][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.852286][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.044922][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.695569][ T4593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.784543][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.892882][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.416649][ T4761] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 118.148370][ T4761] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 118.725985][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.324210][ T23] usb 1-1: device descriptor read/64, error -71 [ 120.576955][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.597047][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.714569][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.782160][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.835290][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.875132][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.916066][ T4593] device veth0_vlan entered promiscuous mode [ 121.120654][ T4593] device veth1_vlan entered promiscuous mode [ 121.599536][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.177897][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.274699][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.499084][ T4826] Zero length message leads to an empty skb [ 122.517806][ T4593] device veth0_macvtap entered promiscuous mode [ 122.627531][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.676583][ T4593] device veth1_macvtap entered promiscuous mode [ 122.828440][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.939866][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.951976][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.964906][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.975051][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.985702][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.995846][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.006521][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.017483][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.066738][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.101228][ T4593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.147575][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.177132][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.208944][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.274846][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.316015][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.407396][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.440973][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.471930][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.491607][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.604944][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.658057][ T4593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.711478][ T4593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.773301][ T4593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.787070][ T4836] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 123.868360][ T4836] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 123.901207][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.977372][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.012486][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.082801][ T4593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.115989][ T4593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.155163][ T21] usb 3-1: device descriptor read/64, error -71 [ 124.191981][ T4593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.214369][ T4593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.354112][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.381448][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.381778][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.403154][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.419697][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.441790][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.454071][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.514469][ T4279] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.674078][ T21] usb 3-1: device descriptor read/64, error -71 [ 124.804196][ T21] usb usb3-port1: attempt power cycle [ 124.984116][ T4279] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 125.002184][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.035383][ T4279] usb 2-1: config 0 descriptor?? [ 125.275437][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.305261][ T4279] kaweth 2-1:0.0: Firmware present in device. [ 125.405008][ T21] usb 3-1: device descriptor read/8, error -71 [ 125.504294][ T4279] kaweth 2-1:0.0: Statistics collection: 0 [ 125.510922][ T4279] kaweth 2-1:0.0: Multicast filter limit: 0 [ 125.525073][ T4279] kaweth 2-1:0.0: MTU: 0 [ 125.529416][ T4279] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 125.695180][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.854327][ T21] usb 3-1: device descriptor read/8, error -71 [ 126.005996][ T21] usb usb3-port1: unable to enumerate USB device [ 126.276077][ T4279] kaweth 2-1:0.0: Error setting receive filter [ 126.606100][ T4279] kaweth: probe of 2-1:0.0 failed with error -5 [ 127.078533][ T4279] usb 2-1: USB disconnect, device number 3 [ 128.411516][ T4876] delete_channel: no stack [ 128.463607][ T4881] tc_dump_action: action bad kind [ 129.826732][ T4894] netlink: 64 bytes leftover after parsing attributes in process `syz.5.173'. [ 130.945725][ T4904] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.961063][ T4904] overlayfs: failed to set xattr on upper [ 130.999569][ T4904] overlayfs: ...falling back to index=off,metacopy=off. [ 132.626354][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.633070][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.506531][ T4984] vivid-003: disconnect [ 144.240984][ T4972] vivid-003: reconnect [ 144.641276][ T4994] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 146.843739][ T5014] syz.1.209 uses obsolete (PF_INET,SOCK_PACKET) [ 147.260334][ T5017] netlink: 196 bytes leftover after parsing attributes in process `syz.1.210'. [ 147.306512][ T5017] mip6: mip6_rthdr_init_state: state's mode is not 2: 1 [ 149.306699][ T5030] chnl_net:caif_netlink_parms(): no params data found [ 149.570649][ T5044] device wireguard0 entered promiscuous mode [ 150.092560][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.289135][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.527685][ T5030] device bridge_slave_0 entered promiscuous mode [ 150.848222][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.911021][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.931420][ T21] Bluetooth: hci6: command 0x0409 tx timeout [ 150.995274][ T5030] device bridge_slave_1 entered promiscuous mode [ 151.140993][ T5030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.191294][ T5030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.430123][ T5030] team0: Port device team_slave_0 added [ 152.449188][ T5030] team0: Port device team_slave_1 added [ 152.806649][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.887181][ T4216] Bluetooth: hci6: command 0x041b tx timeout [ 153.921010][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.921091][ T5030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.931120][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.931139][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.931167][ T5030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.053309][ T5030] device hsr_slave_0 entered promiscuous mode [ 154.060304][ T5030] device hsr_slave_1 entered promiscuous mode [ 154.063020][ T5030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.063131][ T5030] Cannot create hsr debugfs directory [ 154.664429][ T5030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.678384][ T5030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.690796][ T5030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.841402][ T5030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.372357][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.463387][ T5030] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.667651][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.904080][ T4216] Bluetooth: hci6: command 0x040f tx timeout [ 156.027082][ T5104] overlayfs: overlapping lowerdir path [ 156.165487][ T5030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.524668][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.605299][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.669791][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.717204][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.743518][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.792912][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.849010][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.856183][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.964677][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.982547][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.025984][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.033119][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.085528][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.126888][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.162248][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.242145][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.281704][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.306223][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.342463][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.363651][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.414363][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.469449][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.984134][ T13] Bluetooth: hci6: command 0x0419 tx timeout [ 158.357847][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.559368][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.716916][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.760155][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.799718][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.894386][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.975186][ T5030] device veth0_vlan entered promiscuous mode [ 159.151778][ T5030] device veth1_vlan entered promiscuous mode [ 159.223148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.232556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.673797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.072467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.584754][ T5030] device veth0_macvtap entered promiscuous mode [ 160.604979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.692528][ T5030] device veth1_macvtap entered promiscuous mode [ 160.823591][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.895808][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.924223][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.934844][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.944790][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.955804][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.965923][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.003103][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.017943][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.029239][ T4584] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.040731][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.068923][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.080081][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.092498][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.115036][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.132034][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.316212][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.338345][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.352268][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.364749][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.375027][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.386216][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.480237][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.600594][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.710399][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.962111][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.134054][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.188683][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.218933][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.236688][ T5030] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.261909][ T5030] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.272260][ T4584] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.293874][ T4584] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.304372][ T5030] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.313175][ T5030] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.324917][ T4584] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.409127][ T4584] usb 6-1: config 0 interface 0 has no altsetting 0 [ 163.354141][ T4584] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 163.363293][ T4584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.405780][ T4584] usb 6-1: config 0 descriptor?? [ 163.458184][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.491059][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.079689][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.119094][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.183624][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.640337][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.781997][ T4584] usbhid 6-1:0.0: can't add hid device: -71 [ 164.865833][ T4584] usbhid: probe of 6-1:0.0 failed with error -71 [ 164.900731][ T4584] usb 6-1: USB disconnect, device number 3 [ 165.291211][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.333675][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.467869][ T5214] vivid-003: disconnect [ 167.155113][ T5203] vivid-003: reconnect [ 169.965413][ T5267] vivid-001: disconnect [ 169.996853][ T5266] vivid-001: reconnect [ 170.285333][ T4584] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.353293][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 170.534149][ T4584] usb 3-1: Using ep0 maxpacket: 32 [ 170.704272][ T4584] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 170.713689][ T4584] usb 3-1: config 0 has no interface number 0 [ 170.959492][ T4584] usb 3-1: config 0 interface 244 has no altsetting 0 [ 171.351526][ T4584] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 171.824023][ T4584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.904763][ T4584] usb 3-1: Product: syz [ 172.333523][ T4584] usb 3-1: Manufacturer: syz [ 172.440381][ T4584] usb 3-1: SerialNumber: syz [ 172.458508][ T4584] usb 3-1: config 0 descriptor?? [ 172.525341][ T4584] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort found [ 172.538319][ T5304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.285'. [ 172.710826][ T5304] netlink: 'syz.0.285': attribute type 30 has an invalid length. [ 172.925296][ T4584] snd_usb_toneport 3-1:0.244: cannot get proper max packet size [ 172.926736][ T5304] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 173.063669][ T4584] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort now disconnected [ 173.163011][ T4584] snd_usb_toneport: probe of 3-1:0.244 failed with error -22 [ 173.170704][ T5304] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 173.238462][ T4584] usb 3-1: USB disconnect, device number 7 [ 174.352564][ T5322] input: syz1 as /devices/virtual/input/input5 [ 174.858098][ T5363] vivid-000: disconnect [ 175.011411][ T5359] vivid-000: reconnect [ 176.775026][ T5381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 178.600347][ T5398] fuse: Bad value for 'fd' [ 178.625003][ T5398] fuseblk: Bad value for 'fd' [ 180.224567][ T1108] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.574373][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 180.786370][ T1108] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 180.844043][ T1108] usb 6-1: config 0 has no interface number 0 [ 180.853382][ T5420] delete_channel: no stack [ 180.896210][ T1108] usb 6-1: config 0 interface 244 has no altsetting 0 [ 181.314704][ T1108] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 181.324518][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.332754][ T1108] usb 6-1: Product: syz [ 181.358172][ T1108] usb 6-1: Manufacturer: syz [ 181.363145][ T1108] usb 6-1: SerialNumber: syz [ 181.895216][ T1108] usb 6-1: config 0 descriptor?? [ 182.233953][ T1108] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 182.317499][ T1108] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 182.342156][ T1108] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 182.393304][ T1108] snd_usb_toneport: probe of 6-1:0.244 failed with error -22 [ 182.434124][ T5441] fuse: Bad value for 'fd' [ 182.850078][ T13] usb 6-1: USB disconnect, device number 4 [ 183.447701][ T5455] tmpfs: Unknown parameter 'quota' [ 185.345026][ T23] Bluetooth: hci6: command 0x0411 tx timeout [ 187.300615][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 187.325193][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 187.333647][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 187.665887][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 189.434594][ T4279] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.085862][ T4279] usb 2-1: Using ep0 maxpacket: 32 [ 190.302065][ T4279] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 190.311799][ T4279] usb 2-1: config 0 has no interface number 0 [ 190.323522][ T4279] usb 2-1: config 0 interface 244 has no altsetting 0 [ 190.865943][ T4279] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 190.921740][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.133878][ T4279] usb 2-1: Product: syz [ 191.139282][ T4279] usb 2-1: Manufacturer: syz [ 191.174704][ T4279] usb 2-1: SerialNumber: syz [ 191.217273][ T4279] usb 2-1: config 0 descriptor?? [ 191.336780][ T4279] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found [ 192.844968][ T4279] snd_usb_toneport 2-1:0.244: set_interface failed [ 192.851585][ T4279] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected [ 192.876601][ T4279] snd_usb_toneport: probe of 2-1:0.244 failed with error -71 [ 192.902865][ T4279] usb 2-1: USB disconnect, device number 4 [ 194.230913][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.237268][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.677443][ T4279] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 203.063975][ T4279] usb 7-1: Using ep0 maxpacket: 32 [ 203.184665][ T4279] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 203.734134][ T4279] usb 7-1: config 0 has no interface number 0 [ 203.757623][ T4279] usb 7-1: config 0 interface 244 has no altsetting 0 [ 203.834018][ T4279] usb 7-1: string descriptor 0 read error: -71 [ 203.842366][ T4279] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 203.869322][ T4279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.905685][ T4279] usb 7-1: config 0 descriptor?? [ 203.944070][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 203.967112][ T4279] usb 7-1: can't set config #0, error -71 [ 203.991007][ T4279] usb 7-1: USB disconnect, device number 2 [ 204.184019][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 204.461921][ T7] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 204.470382][ T7] usb 1-1: config 0 has no interface number 0 [ 204.479695][ T7] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 204.799723][ T7] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 204.856989][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.948974][ T7] usb 1-1: Product: syz [ 204.964965][ T7] usb 1-1: Manufacturer: syz [ 204.978967][ T7] usb 1-1: SerialNumber: syz [ 205.135453][ T7] usb 1-1: config 0 descriptor?? [ 205.154292][ T5622] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 205.177685][ T7] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 205.230428][ T7] em28xx 1-1:0.132: Video interface 132 found: bulk [ 205.864168][ T7] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 206.334038][ T7] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 206.357681][ T7] em28xx 1-1:0.132: board has no eeprom [ 206.464768][ T7] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 206.472867][ T7] em28xx 1-1:0.132: analog set to bulk mode. [ 207.285155][ T7] usb 1-1: USB disconnect, device number 7 [ 207.295863][ T4213] em28xx 1-1:0.132: Registering V4L2 extension [ 207.308169][ T7] em28xx 1-1:0.132: Disconnecting em28xx [ 207.730632][ T4213] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 207.748641][ T4213] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 207.781472][ T4213] em28xx 1-1:0.132: No AC97 audio processor [ 207.851148][ T4213] usb 1-1: Decoder not found [ 207.932403][ T4213] em28xx 1-1:0.132: failed to create media graph [ 208.013851][ T4213] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 208.095035][ T4213] em28xx 1-1:0.132: Remote control support is not available for this card. [ 208.187728][ T7] em28xx 1-1:0.132: Closing input extension [ 208.336522][ T7] em28xx 1-1:0.132: Freeing device [ 211.784199][ T5686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.371'. [ 211.843356][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.5.371'. [ 212.010963][ T5687] 9pnet_virtio: no channels available for device [ 217.915839][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.384'. [ 217.927811][ T5726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'. [ 218.027961][ T5727] 9pnet_virtio: no channels available for device [ 219.632229][ T5734] netlink: 'syz.5.383': attribute type 1 has an invalid length. [ 221.047974][ T5760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'. [ 221.744119][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 223.384139][ T5775] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 224.107703][ T26] audit: type=1326 audit(1736143184.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e34593d29 code=0x7ffc0000 [ 224.214046][ T26] audit: type=1326 audit(1736143184.333:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f1e34593d29 code=0x7ffc0000 [ 224.504087][ T26] audit: type=1326 audit(1736143184.333:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e34593d29 code=0x7ffc0000 [ 224.532888][ T26] audit: type=1326 audit(1736143184.333:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e34593d29 code=0x7ffc0000 [ 225.874096][ T5801] qnx4: no qnx4 filesystem (no root dir). [ 225.945604][ T5801] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 226.501590][ T4213] Bluetooth: hci7: command 0x0409 tx timeout [ 227.752405][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 228.370255][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.378293][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.386744][ T5787] device bridge_slave_0 entered promiscuous mode [ 228.398908][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.427240][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.451566][ T5787] device bridge_slave_1 entered promiscuous mode [ 228.517684][ T4213] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 228.548251][ T4279] Bluetooth: hci7: command 0x041b tx timeout [ 228.875467][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.912737][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.104068][ T4213] usb 2-1: Using ep0 maxpacket: 8 [ 229.104958][ T5787] team0: Port device team_slave_0 added [ 229.151377][ T5787] team0: Port device team_slave_1 added [ 229.234211][ T4213] usb 2-1: config 0 has no interfaces? [ 229.240447][ T4213] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.294970][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.362155][ T4213] usb 2-1: config 0 descriptor?? [ 229.492384][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.527621][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.607429][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.662889][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.691590][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.773965][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.016564][ T5787] device hsr_slave_0 entered promiscuous mode [ 230.634065][ T13] Bluetooth: hci7: command 0x040f tx timeout [ 230.657097][ T5787] device hsr_slave_1 entered promiscuous mode [ 230.686273][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.707678][ T5787] Cannot create hsr debugfs directory [ 230.778121][ T5852] netlink: 36 bytes leftover after parsing attributes in process `syz.5.416'. [ 231.587007][ T4213] usb 2-1: USB disconnect, device number 5 [ 231.705212][ T5857] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 231.712197][ T5857] overlayfs: failed to set xattr on upper [ 231.842374][ T5857] overlayfs: ...falling back to index=off,metacopy=off. [ 231.918964][ T5865] tmpfs: Bad value for 'mpol' [ 232.272425][ T5787] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 232.431580][ T5787] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 232.470701][ T5787] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 232.538598][ T5787] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 232.671172][ T5875] Process accounting resumed [ 232.704059][ T4213] Bluetooth: hci7: command 0x0419 tx timeout [ 233.084228][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.153600][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.265933][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.312004][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.360974][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.412927][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.462202][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.469399][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.488411][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.674167][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.534613][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.542986][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.550062][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.648255][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.700493][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.771264][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.803442][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.844702][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.876416][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.899256][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.918586][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.964905][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.976706][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.986111][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.003304][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.019681][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.025408][ T5393] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.284157][ T5393] usb 3-1: Using ep0 maxpacket: 32 [ 235.404244][ T5393] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.486634][ T5393] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.705387][ T5393] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 235.723962][ T5393] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 235.754046][ T5393] usb 3-1: Product: syz [ 235.758347][ T5393] usb 3-1: Manufacturer: syz [ 235.840018][ T5393] hub 3-1:4.0: USB hub found [ 235.841503][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.868096][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.996325][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.044081][ T5393] hub 3-1:4.0: 2 ports detected [ 237.378239][ T5393] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 237.386578][ T5393] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 237.425960][ T5393] usb 3-1: USB disconnect, device number 8 [ 238.551814][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.577518][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.662647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.686625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.738447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.747150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.786820][ T5787] device veth0_vlan entered promiscuous mode [ 238.881503][ T5787] device veth1_vlan entered promiscuous mode [ 238.978196][ T5943] qnx4: no qnx4 filesystem (no root dir). [ 238.987176][ T5943] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 239.108886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.145259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.189326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.242095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.330446][ T5787] device veth0_macvtap entered promiscuous mode [ 239.385879][ T5787] device veth1_macvtap entered promiscuous mode [ 239.576541][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.624882][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.634807][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.703018][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.730033][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.761634][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.821718][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.890282][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.903270][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.014031][ T5393] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 240.021169][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.134164][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.234069][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.247801][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.266481][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.277761][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.306983][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.374272][ T5393] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 240.384656][ T5393] usb 1-1: config 0 has no interface number 0 [ 240.426900][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.516762][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.526540][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.539546][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.554241][ T5393] usb 1-1: New USB device found, idVendor=07c4, idProduct=a006, bcdDevice=78.dc [ 240.563780][ T5393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.616168][ T5393] usb 1-1: Product: syz [ 240.620383][ T5393] usb 1-1: Manufacturer: syz [ 240.626015][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.636275][ T5393] usb 1-1: SerialNumber: syz [ 240.645887][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.658283][ T5393] usb 1-1: config 0 descriptor?? [ 240.663428][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.694585][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.727303][ T26] audit: type=1800 audit(1736143200.923:6): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.449" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 240.736523][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.798790][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.837441][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.873833][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.905290][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.915282][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.925836][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.935811][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.946798][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.954983][ T5393] ums-datafab 1-1:0.106: USB Mass Storage device detected [ 240.958393][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.006207][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.042406][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.070650][ T5393] usb 1-1: USB disconnect, device number 8 [ 241.106660][ T5787] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.134843][ T5787] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.191167][ T5787] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.234073][ T5787] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.200312][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.209598][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.283564][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.313015][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.377923][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.421618][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.857632][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.7.396'. [ 242.886240][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.7.396'. [ 243.267800][ T4215] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 243.514296][ T5988] 9pnet_virtio: no channels available for device [ 243.853985][ T4215] usb 1-1: Using ep0 maxpacket: 8 [ 243.974327][ T4215] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 244.022137][ T4215] usb 1-1: config 0 has no interface number 0 [ 244.077741][ T4215] usb 1-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 244.140519][ T4215] usb 1-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 244.232741][ T4215] usb 1-1: config 0 interface 49 has no altsetting 0 [ 244.621949][ T4215] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 245.289697][ T26] audit: type=1800 audit(1736143204.813:7): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.461" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 245.405099][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.449881][ T4215] usb 1-1: Product: syz [ 245.474772][ T4215] usb 1-1: Manufacturer: syz [ 245.497109][ T4215] usb 1-1: SerialNumber: syz [ 245.531749][ T4215] usb 1-1: config 0 descriptor?? [ 245.735556][ T4215] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 245.774109][ T4215] gspca_sonixj: reg_w1 err -71 [ 245.779012][ T4215] sonixj: probe of 1-1:0.49 failed with error -71 [ 246.101917][ T4215] usb 1-1: USB disconnect, device number 9 [ 246.303174][ T6015] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 247.256493][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 248.814013][ T4217] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 249.754489][ T4217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.781872][ T4217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.883833][ T4217] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 249.939328][ T4217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.006814][ T4217] usb 3-1: config 0 descriptor?? [ 250.517400][ T4217] logitech 0003:046D:C626.0003: unexpected long global item [ 250.541654][ T4217] logitech 0003:046D:C626.0003: parse failed [ 250.699716][ T4217] logitech: probe of 0003:046D:C626.0003 failed with error -22 [ 250.740429][ T4217] usb 3-1: USB disconnect, device number 9 [ 250.834116][ T4215] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.094059][ T4215] usb 2-1: Using ep0 maxpacket: 16 [ 251.214543][ T4215] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 251.240821][ T4215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.345179][ T4215] usb 2-1: config 0 descriptor?? [ 251.434902][ T4215] usb 2-1: invalid MIDI EP [ 251.478529][ T4215] usb 2-1: snd-bcd2000: error during probing [ 251.594041][ T4215] snd-bcd2000: probe of 2-1:0.0 failed with error -22 [ 251.793159][ T4215] usb 2-1: USB disconnect, device number 6 [ 253.025595][ T6084] tipc: Started in network mode [ 253.031093][ T6084] tipc: Node identity 7, cluster identity 4711 [ 253.038156][ T6084] tipc: Node number set to 7 [ 255.514991][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.521541][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.706715][ T6102] vivid-000: disconnect [ 255.784091][ T5393] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 256.297891][ T6099] vivid-000: reconnect [ 256.824315][ T5393] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.853479][ T5393] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 256.883911][ T5393] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 257.224979][ T5393] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 257.664580][ T5393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 257.673395][ T5393] usb 1-1: Product: syz [ 257.678319][ T5393] usb 1-1: Manufacturer: syz [ 257.682939][ T5393] usb 1-1: SerialNumber: syz [ 257.713176][ T5393] usb 1-1: config 0 descriptor?? [ 257.844628][ T5393] usb 1-1: can't set config #0, error -71 [ 257.870759][ T5393] usb 1-1: USB disconnect, device number 10 [ 262.951757][ T6154] vivid-001: disconnect [ 263.601541][ T6148] vivid-001: reconnect [ 266.236360][ T4279] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 267.034229][ T4279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.085093][ T4279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.140286][ T4279] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 267.183383][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.211456][ T4279] usb 2-1: config 0 descriptor?? [ 267.705485][ T4279] logitech 0003:046D:C626.0004: unexpected long global item [ 267.719692][ T4279] logitech 0003:046D:C626.0004: parse failed [ 267.741226][ T4279] logitech: probe of 0003:046D:C626.0004 failed with error -22 [ 267.997446][ T21] usb 2-1: USB disconnect, device number 7 [ 270.288145][ T6209] syz.0.520[6209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.288228][ T6209] syz.0.520[6209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.553314][ T6228] batman_adv: batadv0: Adding interface: dummy0 [ 271.571770][ T6228] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.611456][ T6228] batman_adv: batadv0: Interface activated: dummy0 [ 271.634064][ T6237] batadv0: mtu less than device minimum [ 271.641967][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.655234][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.668106][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.680805][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.693652][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.706314][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.718954][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.731583][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.744515][ T6237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.811033][ T6232] netlink: 'syz.7.526': attribute type 1 has an invalid length. [ 272.971757][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.5.530'. [ 275.773948][ T4279] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 276.033942][ T4279] usb 6-1: Using ep0 maxpacket: 8 [ 276.194173][ T4279] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 276.229111][ T4279] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.308461][ T4279] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.331089][ T4279] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.341566][ T4279] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.357987][ T4279] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.368114][ T4279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.092648][ T6267] hfs: can't find a HFS filesystem on dev nullb0 [ 277.105123][ T4279] usb 6-1: usb_control_msg returned -32 [ 277.110810][ T4279] usbtmc 6-1:16.0: can't read capabilities [ 279.410280][ T4216] usb 6-1: USB disconnect, device number 5 [ 279.527048][ T6288] batman_adv: batadv0: Adding interface: dummy0 [ 279.533433][ T6288] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.282567][ T6288] batman_adv: batadv0: Interface activated: dummy0 [ 280.371102][ T6286] net_ratelimit: 11 callbacks suppressed [ 280.371123][ T6286] batadv0: mtu less than device minimum [ 281.172591][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 281.184828][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 281.197514][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 281.210204][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 281.222783][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 281.235527][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 281.249803][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 281.261674][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 281.273433][ T6286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 282.484121][ T26] audit: type=1326 audit(1736143242.603:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694193fd29 code=0x7ffc0000 [ 283.237052][ T27] INFO: task syz.4.180:4918 blocked for more than 143 seconds. [ 283.237222][ T27] Not tainted 5.15.175-syzkaller #0 [ 283.237281][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.237326][ T27] task:syz.4.180 state:D stack:25856 pid: 4918 ppid: 4172 flags:0x00004004 [ 283.237526][ T27] Call Trace: [ 283.237570][ T27] [ 283.237655][ T27] __schedule+0x12c4/0x45b0 [ 283.237931][ T27] ? release_firmware_map_entry+0x190/0x190 [ 283.238056][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 283.238123][ T27] ? print_irqtrace_events+0x210/0x210 [ 283.238193][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 283.238300][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 283.238407][ T27] schedule+0x11b/0x1f0 [ 283.238511][ T27] schedule_preempt_disabled+0xf/0x20 [ 283.238576][ T27] rwsem_down_read_slowpath+0x605/0xb40 [ 283.238723][ T27] ? down_write_killable_nested+0x90/0x90 [ 283.238841][ T27] ? mark_lock+0x98/0x340 [ 283.238943][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 283.239080][ T27] down_read+0x9a/0x2e0 [ 283.239220][ T27] page_cache_ra_unbounded+0x1a6/0x930 [ 283.239323][ T27] ? do_sync_mmap_readahead+0x51e/0x800 [ 283.239428][ T27] ? __up_read+0x2b9/0x690 [ 283.239530][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 283.239596][ T27] ? rcu_lock_release+0x5/0x20 [ 283.239692][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 283.239756][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 283.239838][ T27] ? do_page_cache_ra+0xde/0x100 [ 283.239943][ T27] do_sync_mmap_readahead+0x610/0x800 [ 283.240092][ T27] ? count_memcg_event_mm+0x3d0/0x3d0 [ 283.240158][ T27] ? count_memcg_event_mm+0x37a/0x3d0 [ 283.240272][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 283.240417][ T27] filemap_fault+0x77a/0x1470 [ 283.240605][ T27] ? mapping_seek_hole_data+0x1450/0x1450 [ 283.240710][ T27] ? filemap_read_page+0x4b0/0x4b0 [ 283.240775][ T27] ? count_memcg_event_mm+0x385/0x3e0 [ 283.240844][ T27] ? is_dynamic_key+0x1f0/0x1f0 [ 283.240953][ T27] ? mark_lock+0x98/0x340 [ 283.241141][ T27] __do_fault+0x139/0x340 [ 283.241337][ T27] handle_mm_fault+0x376f/0x5960 [ 283.248904][ T27] ? numa_migrate_prep+0x1a0/0x1a0 [ 283.249438][ T27] ? vmacache_find+0x1e7/0x590 [ 283.249580][ T27] ? vmacache_update+0x9f/0xf0 [ 283.249801][ T27] exc_page_fault+0x271/0x700 [ 283.250069][ T27] asm_exc_page_fault+0x22/0x30 [ 283.250191][ T27] RIP: 0010:__get_user_nocheck_1+0x6/0x10 [ 283.250337][ T27] Code: d0 73 64 48 19 d2 48 21 d0 0f 01 cb 48 8b 10 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 0f 01 cb 0f ae e8 <0f> b6 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f [ 283.250405][ T27] RSP: 0018:ffffc900031cf9b8 EFLAGS: 00050287 [ 283.251286][ T27] RAX: 0000000020001000 RBX: 0000000020001000 RCX: 0000000000080000 [ 283.251383][ T27] RDX: ffffc9000cac2000 RSI: 00000000000008cd RDI: 00000000000008ce [ 283.251474][ T27] RBP: ffffc900031cfa78 R08: ffffffff81b759f3 R09: fffff9400038ccf7 [ 283.251576][ T27] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffffffff [ 283.251673][ T27] R13: 0000000020001000 R14: 0000000020002000 R15: 0000000020001000 [ 283.251845][ T27] ? fault_in_readable+0xb3/0x2e0 [ 283.252126][ T27] fault_in_readable+0x172/0x2e0 [ 283.252341][ T27] ? fault_in_safe_writeable+0x250/0x250 [ 283.252535][ T27] fault_in_iov_iter_readable+0x14a/0x1d0 [ 283.252764][ T27] generic_perform_write+0x1c9/0x5b0 [ 283.253041][ T27] ? grab_cache_page_write_begin+0x90/0x90 [ 283.253150][ T27] ? file_remove_privs+0x610/0x610 [ 283.253332][ T27] ? rwsem_write_trylock+0x166/0x210 [ 283.253601][ T27] __generic_file_write_iter+0x243/0x4f0 [ 283.253930][ T27] generic_file_write_iter+0xa7/0x1b0 [ 283.254132][ T27] vfs_write+0xacd/0xe50 [ 283.257932][ T27] ? file_end_write+0x250/0x250 [ 283.258160][ T27] ? __fget_files+0x413/0x480 [ 283.258454][ T27] ? mutex_lock_nested+0x17/0x20 [ 283.258560][ T27] ? __fdget_pos+0x2cb/0x380 [ 283.258660][ T27] ? ksys_write+0x77/0x2c0 [ 283.258837][ T27] ksys_write+0x1a2/0x2c0 [ 283.258943][ T27] ? print_irqtrace_events+0x210/0x210 [ 283.259120][ T27] ? __ia32_sys_read+0x80/0x80 [ 283.259309][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 283.259416][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 283.259591][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 283.259778][ T27] do_syscall_64+0x3b/0xb0 [ 283.260800][ T27] ? clear_bhb_loop+0x15/0x70 [ 283.260865][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.260977][ T27] RIP: 0033:0x7fde056fad29 [ 283.261075][ T27] RSP: 002b:00007fde0356b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.261265][ T27] RAX: ffffffffffffffda RBX: 00007fde058eafa0 RCX: 00007fde056fad29 [ 283.261360][ T27] RDX: 00000000ffffff6a RSI: 0000000020000000 RDI: 0000000000000005 [ 283.261451][ T27] RBP: 00007fde05776b08 R08: 0000000000000000 R09: 0000000000000000 [ 283.261547][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.261643][ T27] R13: 0000000000000000 R14: 00007fde058eafa0 R15: 00007fffeb00d728 [ 283.262628][ T27] [ 283.262795][ T27] INFO: task syz.4.180:4921 blocked for more than 143 seconds. [ 283.262901][ T27] Not tainted 5.15.175-syzkaller #0 [ 283.263030][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.264044][ T27] task:syz.4.180 state:D stack:26360 pid: 4921 ppid: 4172 flags:0x00004004 [ 283.264356][ T27] Call Trace: [ 283.264632][ T27] [ 283.264647][ T27] __schedule+0x12c4/0x45b0 [ 283.264677][ T27] ? print_irqtrace_events+0x210/0x210 [ 283.264725][ T27] ? release_firmware_map_entry+0x190/0x190 [ 283.264748][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 283.264774][ T27] ? print_irqtrace_events+0x210/0x210 [ 283.264796][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 283.264824][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 283.265587][ T27] schedule+0x11b/0x1f0 [ 283.266523][ T27] schedule_preempt_disabled+0xf/0x20 [ 283.266634][ T27] rwsem_down_read_slowpath+0x605/0xb40 [ 283.266906][ T27] ? down_write_killable_nested+0x90/0x90 [ 283.267093][ T27] ? mark_lock+0x98/0x340 [ 283.267286][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 283.268051][ T27] down_read+0x9a/0x2e0 [ 283.268249][ T27] page_cache_ra_unbounded+0x1a6/0x930 [ 283.268430][ T27] ? do_sync_mmap_readahead+0x51e/0x800 [ 283.268609][ T27] ? __up_read+0x2b9/0x690 [ 283.269128][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 283.269541][ T27] ? rcu_lock_release+0x5/0x20 [ 283.269909][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 283.270719][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 283.270865][ T27] ? do_page_cache_ra+0xde/0x100 [ 283.271049][ T27] do_sync_mmap_readahead+0x610/0x800 [ 283.271249][ T27] ? count_memcg_event_mm+0x3d0/0x3d0 [ 283.271386][ T27] ? count_memcg_event_mm+0x37a/0x3d0 [ 283.272358][ T27] filemap_fault+0x77a/0x1470 [ 283.272637][ T27] ? rcu_lock_release+0x5/0x20 [ 283.272822][ T27] ? mapping_seek_hole_data+0x1450/0x1450 [ 283.274039][ T27] __do_fault+0x139/0x340 [ 283.274068][ T27] ? __cgroup_throttle_swaprate+0x3a0/0x540 [ 283.274095][ T27] handle_mm_fault+0x30da/0x5960 [ 283.274158][ T27] ? numa_migrate_prep+0x1a0/0x1a0 [ 283.274202][ T27] ? follow_page_mask+0xb59/0x13f0 [ 283.274238][ T27] ? find_vma+0xd3/0x230 [ 283.274261][ T27] ? check_vma_flags+0x439/0x490 [ 283.274287][ T27] __get_user_pages+0x4ed/0x11d0 [ 283.274324][ T27] ? populate_vma_page_range+0x2a0/0x2a0 [ 283.274368][ T27] ? __might_sleep+0xc0/0xc0 [ 283.274390][ T27] ? try_to_wake_up+0x8a8/0x1300 [ 283.274422][ T27] ? vma_is_secretmem+0x9/0x40 [ 283.274447][ T27] ? check_vma_flags+0x439/0x490 [ 283.274472][ T27] faultin_vma_page_range+0x21f/0x2a0 [ 283.274502][ T27] do_madvise+0xbca/0x3470 [ 283.274538][ T27] ? futex_wake+0x607/0x750 [ 283.274581][ T27] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 283.274609][ T27] ? pipe_to_sendpage+0x350/0x350 [ 283.274644][ T27] ? mark_lock+0x98/0x340 [ 283.274670][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 283.274722][ T27] ? read_lock_is_recursive+0x10/0x10 [ 283.274747][ T27] ? __context_tracking_exit+0x4c/0x80 [ 283.274774][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 283.274804][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 283.274840][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 283.274869][ T27] __x64_sys_madvise+0xa1/0xb0 [ 283.274895][ T27] do_syscall_64+0x3b/0xb0 [ 283.274915][ T27] ? clear_bhb_loop+0x15/0x70 [ 283.274937][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.274964][ T27] RIP: 0033:0x7fde056fad29 [ 283.274984][ T27] RSP: 002b:00007fde0354a038 EFLAGS: 00000246 [ 283.814026][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.547'. [ 283.815420][ T27] ORIG_RAX: 000000000000001c [ 283.815437][ T27] RAX: ffffffffffffffda RBX: 00007fde058eb080 RCX: 00007fde056fad29 [ 283.815455][ T27] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000000020000000 [ 283.815470][ T27] RBP: 00007fde05776b08 R08: 0000000000000000 R09: 0000000000000000 [ 283.815485][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.815500][ T27] R13: 0000000000000000 R14: 00007fde058eb080 R15: 00007fffeb00d728 [ 283.815531][ T27] [ 283.815661][ T27] [ 283.815661][ T27] Showing all locks held in the system: [ 283.815677][ T27] 1 lock held by khungtaskd/27: [ 283.815692][ T27] #0: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 283.815799][ T27] 1 lock held by udevd/3546: [ 283.815815][ T27] 2 locks held by getty/3927: [ 283.815828][ T27] #0: ffff88802c906098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 283.815894][ T27] #1: ffffc900026362e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 283.815997][ T27] 3 locks held by kworker/0:7/4216: [ 283.816011][ T27] 2 locks held by kworker/u4:6/4252: [ 283.816025][ T27] 1 lock held by syz.3.54/4429: [ 283.816041][ T27] 4 locks held by syz.4.180/4918: [ 283.816054][ T27] #0: ffff888020dd74f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 283.816120][ T27] #1: ffff888078a62460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 283.816188][ T27] #2: ffff8880261b2190 (&sb->s_type->i_mutex_key#8){+.+.}-{3:3}, at: generic_file_write_iter+0x7c/0x1b0 [ 283.816260][ T27] #3: ffff88814086f338 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 283.816333][ T27] 1 lock held by syz.4.180/4921: [ 283.816346][ T27] #0: ffff88814086f338 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 283.816421][ T27] 1 lock held by syz.6.366/5662: [ 283.816435][ T27] #0: ffff88814086f338 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 283.816507][ T27] 1 lock held by syz.6.366/5671: [ 283.816521][ T27] #0: ffff88814086f338 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 283.816594][ T27] 4 locks held by syz.7.545/6306: [ 283.816607][ T27] #0: ffffffff8d1f0028 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x237/0xde0 [ 283.816673][ T27] #1: ffff888020e301c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_init_dev+0x6a/0x4b0 [ 283.816736][ T27] #2: ffffffff8c9fc5e0 (console_lock){+.+.}-{0:0}, at: con_install+0x95/0x7f0 [ 283.816800][ T27] #3: ffffffff8cc523f0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0x53/0x640 [ 283.816859][ T27] 2 locks held by syz.5.547/6302: [ 283.816871][ T27] #0: ffff88802368f6b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x2e/0x100 [ 283.816934][ T27] #1: ffffffff8cb242e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 283.817009][ T27] 2 locks held by syz.2.548/6309: [ 283.817024][ T27] [ 283.817030][ T27] ============================================= [ 283.817030][ T27] [ 283.817048][ T27] NMI backtrace for cpu 1 [ 283.817060][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.175-syzkaller #0 [ 283.817080][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 283.817092][ T27] Call Trace: [ 283.817100][ T27] [ 283.817108][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 283.817130][ T27] ? console_trylock_spinning+0x259/0x3f0 [ 283.817156][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 283.817178][ T27] ? panic+0x860/0x860 [ 283.817204][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 283.817232][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 283.817253][ T27] ? __wake_up_klogd+0xd5/0x100 [ 283.817279][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 283.817302][ T27] ? _printk+0xd1/0x120 [ 283.817324][ T27] ? panic+0x860/0x860 [ 283.817347][ T27] ? __wake_up_klogd+0xcc/0x100 [ 283.817369][ T27] ? panic+0x860/0x860 [ 283.817393][ T27] ? wq_watchdog_touch+0xeb/0x170 [ 283.817420][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 283.817444][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 283.817471][ T27] watchdog+0xe72/0xeb0 [ 283.817506][ T27] kthread+0x3f6/0x4f0 [ 283.817526][ T27] ? hungtask_pm_notify+0x50/0x50 [ 283.817549][ T27] ? kthread_blkcg+0xd0/0xd0 [ 283.817572][ T27] ret_from_fork+0x1f/0x30 [ 283.817609][ T27] [ 283.817617][ T27] Sending NMI from CPU 1 to CPUs 0: [ 283.817642][ C0] NMI backtrace for cpu 0 [ 283.817650][ C0] CPU: 0 PID: 4429 Comm: syz.3.54 Not tainted 5.15.175-syzkaller #0 [ 283.817667][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 283.817675][ C0] RIP: 0010:arch_stack_walk+0x101/0x140 [ 283.817697][ C0] Code: c5 e2 08 00 83 bd 70 ff ff ff 00 74 32 48 8d 9d 70 ff ff ff 48 89 df e8 dd c0 08 00 48 85 c0 74 1e 4c 89 f7 48 89 c6 41 ff d5 <84> c0 74 11 48 89 df e8 e3 c1 08 00 83 bd 70 ff ff ff 00 75 d5 65 [ 283.817710][ C0] RSP: 0018:ffffc900014eec60 EFLAGS: 00000286 [ 283.817724][ C0] RAX: 0000000000000001 RBX: ffffc900014eec60 RCX: 0000000080000000 [ 283.817736][ C0] RDX: dffffc0000000000 RSI: ffffffff83f7ab1d RDI: ffffc900014eed4c [ 283.817748][ C0] RBP: ffffc900014eecf0 R08: 000000000000000b R09: ffffc900014eed50 [ 283.817759][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888025463b80 [ 283.817771][ C0] R13: ffffffff816e19d0 R14: ffffc900014eed40 R15: 0000000000000000 [ 283.817782][ C0] FS: 00007fc02972c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 283.817796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.817808][ C0] CR2: 000000110c3ac3f2 CR3: 000000005aefb000 CR4: 00000000003506f0 [ 283.817822][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.817832][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.817842][ C0] Call Trace: [ 283.817846][ C0] [ 283.817851][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 283.817868][ C0] ? read_lock_is_recursive+0x10/0x10 [ 283.817886][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 283.817904][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 283.817930][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 283.817946][ C0] ? nmi_handle+0xf7/0x370 [ 283.817964][ C0] ? arch_stack_walk+0x101/0x140 [ 283.817983][ C0] ? default_do_nmi+0x62/0x150 [ 283.818000][ C0] ? exc_nmi+0xa8/0x100 [ 283.818015][ C0] ? end_repeat_nmi+0x16/0x31 [ 283.818031][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 283.818052][ C0] ? submit_bio+0x2dd/0x560 [ 283.818069][ C0] ? arch_stack_walk+0x101/0x140 [ 283.818087][ C0] ? arch_stack_walk+0x101/0x140 [ 283.818106][ C0] ? arch_stack_walk+0x101/0x140 [ 283.818124][ C0] [ 283.818129][ C0] [ 283.818137][ C0] ? submit_bio+0x2dd/0x560 [ 283.818156][ C0] stack_trace_save+0x113/0x1c0 [ 283.818174][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 283.818200][ C0] ? reacquire_held_locks+0x660/0x660 [ 283.818216][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 283.818235][ C0] __kasan_slab_alloc+0x8e/0xc0 [ 283.818250][ C0] ? __kasan_slab_alloc+0x8e/0xc0 [ 283.818265][ C0] ? slab_post_alloc_hook+0x53/0x380 [ 283.818282][ C0] ? kmem_cache_alloc+0xf3/0x280 [ 283.818298][ C0] ? mempool_alloc+0x17f/0x590 [ 283.818315][ C0] ? bio_alloc_bioset+0x132/0x8c0 [ 283.818329][ C0] ? bio_clone_fast+0x25/0x170 [ 283.818343][ C0] ? bio_split+0xa7/0x2d0 [ 283.818357][ C0] ? __blk_queue_split+0x111d/0x1770 [ 283.818374][ C0] ? blk_mq_submit_bio+0x239/0x1c40 [ 283.818391][ C0] ? __submit_bio+0x813/0x850 [ 283.818408][ C0] ? submit_bio_noacct+0xa44/0xb30 [ 283.818424][ C0] ? submit_bio+0x2dd/0x560 [ 283.818462][ C0] slab_post_alloc_hook+0x53/0x380 [ 283.818480][ C0] ? should_failslab+0x5/0x20 [ 283.818497][ C0] ? slab_pre_alloc_hook+0x53/0xc0 [ 283.818514][ C0] ? mempool_alloc+0x17f/0x590 [ 283.818532][ C0] kmem_cache_alloc+0xf3/0x280 [ 283.818550][ C0] ? mempool_free+0x360/0x360 [ 283.818567][ C0] mempool_alloc+0x17f/0x590 [ 283.818591][ C0] ? mempool_resize+0x850/0x850 [ 283.818611][ C0] ? mark_lock+0x98/0x340 [ 283.818628][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 283.818646][ C0] bio_alloc_bioset+0x132/0x8c0 [ 283.818664][ C0] bio_clone_fast+0x25/0x170 [ 283.818681][ C0] bio_split+0xa7/0x2d0 [ 283.818697][ C0] __blk_queue_split+0x111d/0x1770 [ 283.818726][ C0] ? blk_end_sync_rq+0x70/0x70 [ 283.818741][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 283.818759][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 283.818776][ C0] ? __might_sleep+0xc0/0xc0 [ 283.818795][ C0] blk_mq_submit_bio+0x239/0x1c40 [ 283.818815][ C0] ? ktime_get+0x242/0x270 [ 283.818831][ C0] ? submit_bio_checks+0xe80/0x1940 [ 283.818850][ C0] ? blk_mq_try_issue_list_directly+0x650/0x650 [ 283.818875][ C0] ? __kasan_slab_alloc+0xa5/0xc0 [ 283.818892][ C0] ? blk_try_enter_queue+0x38e/0x4e0 [ 283.818910][ C0] ? __se_sys_ioctl+0xf1/0x160 [ 283.818926][ C0] ? do_syscall_64+0x3b/0xb0 [ 283.818940][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.818963][ C0] __submit_bio+0x813/0x850 [ 283.818987][ C0] ? rcu_lock_release+0x20/0x20 [ 283.819014][ C0] submit_bio_noacct+0xa44/0xb30 [ 283.819032][ C0] ? slab_post_alloc_hook+0x73/0x380 [ 283.819053][ C0] ? mempool_alloc+0x17f/0x590 [ 283.819070][ C0] ? kmem_cache_alloc+0x128/0x280 [ 283.819087][ C0] ? blk_put_request+0x20/0x20 [ 283.819104][ C0] ? mempool_free+0x360/0x360 [ 283.819121][ C0] ? mempool_alloc+0x18c/0x590 [ 283.819145][ C0] ? mempool_resize+0x850/0x850 [ 283.819167][ C0] submit_bio+0x2dd/0x560 [ 283.819185][ C0] ? submit_bio_noacct+0xb30/0xb30 [ 283.819212][ C0] ? bio_chain+0xbb/0xf0 [ 283.819227][ C0] __blkdev_issue_zero_pages+0x155/0x3b0 [ 283.819249][ C0] blkdev_issue_zeroout+0x2c5/0x470 [ 283.819270][ C0] ? __blkdev_issue_zero_pages+0x3b0/0x3b0 [ 283.819294][ C0] ? _raw_spin_unlock+0x24/0x40 [ 283.819311][ C0] ? truncate_bdev_range+0x214/0x260 [ 283.819331][ C0] blkdev_common_ioctl+0x1ce5/0x2080 [ 283.819352][ C0] ? blkdev_bszset+0x250/0x250 [ 283.819368][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 283.819404][ C0] blkdev_ioctl+0x286/0x6b0 [ 283.819421][ C0] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 283.819443][ C0] block_ioctl+0xb1/0xf0 [ 283.819460][ C0] ? blkdev_iopoll+0x100/0x100 [ 283.819479][ C0] __se_sys_ioctl+0xf1/0x160 [ 283.819497][ C0] do_syscall_64+0x3b/0xb0 [ 283.819517][ C0] ? clear_bhb_loop+0x15/0x70 [ 283.819531][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.819551][ C0] RIP: 0033:0x7fc02b8bbd29 [ 283.819564][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.819578][ C0] RSP: 002b:00007fc02972c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.819593][ C0] RAX: ffffffffffffffda RBX: 00007fc02baabfa0 RCX: 00007fc02b8bbd29 [ 283.819605][ C0] RDX: 0000000020000080 RSI: 000000000000127f RDI: 0000000000000004 [ 283.819615][ C0] RBP: 00007fc02b937b08 R08: 0000000000000000 R09: 0000000000000000 [ 283.819625][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.819635][ C0] R13: 0000000000000000 R14: 00007fc02baabfa0 R15: 00007ffe7cbf2068 [ 283.819654][ C0] [ 283.820650][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 283.820662][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.175-syzkaller #0 [ 283.820684][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 283.820697][ T27] Call Trace: [ 283.820704][ T27] [ 283.820711][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 283.820738][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 283.820761][ T27] ? panic+0x860/0x860 [ 283.820797][ T27] panic+0x318/0x860 [ 283.820821][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 283.820845][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 283.820870][ T27] ? __irq_work_queue_local+0x122/0x180 [ 283.820894][ T27] ? irq_work_queue+0xc6/0x150 [ 283.820916][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 283.820949][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 283.820972][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 283.820994][ T27] ? nmi_trigger_cpumask_backtrace+0x22a/0x2a0 [ 283.821019][ T27] watchdog+0xeb0/0xeb0 [ 283.821054][ T27] kthread+0x3f6/0x4f0 [ 283.821075][ T27] ? hungtask_pm_notify+0x50/0x50 [ 283.821098][ T27] ? kthread_blkcg+0xd0/0xd0 [ 283.821121][ T27] ret_from_fork+0x1f/0x30 [ 283.821157][ T27] [ 283.821428][ T27] Kernel Offset: disabled [ 285.860307][ T27] Rebooting in 86400 seconds..