last executing test programs: 5m34.271374611s ago: executing program 32 (id=87): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 4m30.962882334s ago: executing program 33 (id=183): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="f53a203d594ec59e821bdb50c6ac4b338505f54874dae5239c5ca826dd388a0bb8b7", 0x22}], 0x1}}], 0x1, 0x4000c000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) openat$tun(0xffffff9c, 0x0, 0x2401, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000340)={0x400, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/223, &(0x7f0000000180)=0xdf) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040804"], 0x7) r5 = io_uring_setup(0x310f, &(0x7f0000000240)={0x0, 0x5f98, 0x80, 0xffffffff, 0x2000}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x8000) close_range(r5, 0xffffffffffffffff, 0x0) 4m27.103845083s ago: executing program 34 (id=187): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="50000000c000010428bd70000000000800000000", @ANYRES32=0x0, @ANYBLOB="000000001208000014000300626f6e643000000000000000000000001c00128009000100626f6e64000000000c0002800800070002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x4}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x142) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "000001fffbffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) close(r5) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x4000) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m26.25255044s ago: executing program 35 (id=108): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='rxrpc_s\x00', r0) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="98d0", 0x2, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0x5000009) r8 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r9 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r9, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r8, 0x0) 3m58.397478124s ago: executing program 36 (id=200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_open_dev$loop(0x0, 0x1, 0x0) 2m47.135339508s ago: executing program 8 (id=197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xf0d5, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x8, r7, 0x1, 0x80, 0x6, @remote}, 0x23) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m46.056534499s ago: executing program 8 (id=267): socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c0300001b00000225bd7000fedbdf25fc000000000000000000000000000001fe80000000000000000000000000000e4e2000004e2001ff0a002000000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="08000000000000000500000000000000ff0300000000000002000000000000000100000000000000000800000000000006000000000000007900000000000000ffffffffffffff7f0700000000000000a38fcd0f00000000030000000000000005000000c06b6e0001000103ff000000a8000700fe8000000000000000000000000000aaac1414aa0000000000000000000000004e2300004e21fff80200b0003c000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000000010000000000000000b000000000000007f00000000000000040000000000000009000000000000000400000000000000010000000100000020d500000000000002000000000000000500000000000000810000000000000002000000b76b6e000201010308001d0000000100e0000600fc020000000000000000000000000000ac1414bb0000000000000000000000004e2300004e220009020000202c000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01], 0x38c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2m42.788634129s ago: executing program 0 (id=270): openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) 2m42.040690398s ago: executing program 0 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfff8}}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xb}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800) 2m40.545379204s ago: executing program 0 (id=277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) 2m39.9635698s ago: executing program 0 (id=279): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.19487229s ago: executing program 0 (id=283): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$netlink(r0, 0x0, 0x4041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x48}}, 0x20000880) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) 2m35.554449835s ago: executing program 9 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x9bc, 0x101880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f00000010c0)) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x210}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m32.274271745s ago: executing program 9 (id=299): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x3, 0xffffffff}) 2m32.15423538s ago: executing program 0 (id=301): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0x94) chdir(&(0x7f0000000080)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r5, r1, 0x0, 0x20000023893) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2m30.407207028s ago: executing program 37 (id=267): socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c0300001b00000225bd7000fedbdf25fc000000000000000000000000000001fe80000000000000000000000000000e4e2000004e2001ff0a002000000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="08000000000000000500000000000000ff0300000000000002000000000000000100000000000000000800000000000006000000000000007900000000000000ffffffffffffff7f0700000000000000a38fcd0f00000000030000000000000005000000c06b6e0001000103ff000000a8000700fe8000000000000000000000000000aaac1414aa0000000000000000000000004e2300004e21fff80200b0003c000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000000010000000000000000b000000000000007f00000000000000040000000000000009000000000000000400000000000000010000000100000020d500000000000002000000000000000500000000000000810000000000000002000000b76b6e000201010308001d0000000100e0000600fc020000000000000000000000000000ac1414bb0000000000000000000000004e2300004e220009020000202c000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01], 0x38c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2m29.103502114s ago: executing program 9 (id=307): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m27.88111167s ago: executing program 6 (id=309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x9bc, 0x101880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f00000010c0)) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x210}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m27.792449749s ago: executing program 7 (id=310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x800) 2m26.661747881s ago: executing program 7 (id=311): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x66000080) openat$audio1(0xffffff9c, 0x0, 0x101000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) 2m26.47124682s ago: executing program 6 (id=312): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 2m25.494259738s ago: executing program 7 (id=313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfff8}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xb}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800) 2m25.493953256s ago: executing program 9 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f107a0366b8070000000f23c00f21f8663500000a000f23f80f08dbf0c4c215cfdbf40faccc46de6b800f142cba0066ed"}], 0x1, 0x20, 0x0, 0xfffffffffffffef9) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m25.14128254s ago: executing program 6 (id=315): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) close(r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x5, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m24.606526505s ago: executing program 9 (id=316): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x114, 0x30, 0x1, 0x0, 0x0, {}, [{0x100, 0x1, [@m_mirred={0x50, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xffffffff, 0x5, 0x10, 0x2}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x48, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1, 0x1, 0x3, 0x7fffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x64, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x1, 0x20000000, 0x81, 0xfff}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe}]}, {0xe, 0x6, "1df7fae888e399ecc544"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x804}, 0x0) ustat(0x6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r3, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) 2m24.480659452s ago: executing program 7 (id=317): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2cd02, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c08, r0) 2m24.347136395s ago: executing program 6 (id=318): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001840)=""/102390, 0x18ff6}], 0x31, 0x0, 0x2) 2m23.571036666s ago: executing program 6 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x34}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @local}, {{0xc00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 2m23.321633138s ago: executing program 7 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x800) 2m22.642352905s ago: executing program 9 (id=321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x9bc, 0x101880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f00000010c0)) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x210}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m22.330284344s ago: executing program 6 (id=322): sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="67d8908f952400aa303e97380e90231bdbdaff01000000000000b7", 0x1b}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) 2m22.311174052s ago: executing program 7 (id=323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES8=0x0], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = socket(0x10, 0xa, 0x7) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x60, 0x9}, {0xb, 0x9}}}, 0x24}}, 0x20040054) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) 2m6.361032273s ago: executing program 38 (id=301): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0x94) chdir(&(0x7f0000000080)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r5, r1, 0x0, 0x20000023893) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2m5.406256686s ago: executing program 39 (id=321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x9bc, 0x101880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f00000010c0)) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x210}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m4.751662416s ago: executing program 40 (id=323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES8=0x0], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = socket(0x10, 0xa, 0x7) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x60, 0x9}, {0xb, 0x9}}}, 0x24}}, 0x20040054) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) 2m4.150564067s ago: executing program 41 (id=322): sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="67d8908f952400aa303e97380e90231bdbdaff01000000000000b7", 0x1b}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) 1m3.006730394s ago: executing program 5 (id=349): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 1m1.713516439s ago: executing program 5 (id=351): unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = msgget$private(0x0, 0x69c) msgrcv(r1, 0x0, 0x0, 0xffffffffffffffff, 0x1000) unlinkat(r0, &(0x7f00000003c0)='./file0\x00', 0x200) 1m0.455104477s ago: executing program 5 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x30, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x800) 59.215819435s ago: executing program 5 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfff8}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xb}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800) 58.423250471s ago: executing program 5 (id=360): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) 57.122998394s ago: executing program 5 (id=364): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x1, @name="c42a6838d28443227483ec8fe343db49cbeecd991aef557d83b98b12db1f5b3d"}, 0x8, 0x4, 0x47}) 41.811023831s ago: executing program 42 (id=364): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x1, @name="c42a6838d28443227483ec8fe343db49cbeecd991aef557d83b98b12db1f5b3d"}, 0x8, 0x4, 0x47}) 16.597745408s ago: executing program 1 (id=455): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.697831218s ago: executing program 1 (id=457): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x7e6a, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 14.121360052s ago: executing program 1 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}]}]}]}, 0x3c}}, 0x800) 13.295528348s ago: executing program 1 (id=459): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000015001d052abd7000ffdbdf2502013100010089cbe6000f614752b2d3239bd54ade00d8e72e7a46ff77b1085dc3968bd2750871a07905fc4bb52f2f95d35b8c00000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4488c) r2 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) setns(r3, 0x20000) 12.314090654s ago: executing program 1 (id=461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = getpid() r3 = socket$inet6(0xa, 0x2, 0x88) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000900)) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54593, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000400404550700000000000109022400010000"], 0x0) syz_pidfd_open(r2, 0x0) sched_setattr(r2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6d5a586", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) read$alg(r6, &(0x7f0000000000)=""/35, 0x23) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000090) syz_open_dev$dri(0x0, 0xc84f, 0x51d101) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x201, 0x4800003e, r7, 0x0) 8.668833032s ago: executing program 3 (id=467): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x7e6a, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 7.65095131s ago: executing program 2 (id=469): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xb5, 0x8, 0x0, 0x8000000000000000, 0x500, 0x3b2, 0x3, 0x5, 0x7, 0x7, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x66000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0xffffffffffffbfff, 0x9, 0x8000000000000005, 0x4, 0x0, 0x9, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') 7.342704711s ago: executing program 3 (id=471): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) bind$packet(r0, 0x0, 0x0) 6.554029253s ago: executing program 3 (id=473): syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000012b5ec2082058d00980b01020301090212000100fd"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 6.221731986s ago: executing program 2 (id=474): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) capset(&(0x7f0000000080)={0x20071026, r0}, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socket$inet(0x2, 0xb, 0xd672) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb60000000000", 0x86}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470", 0x5b}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90", 0xb4}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d", 0x10}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d", 0xd3}, {&(0x7f0000000740)="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", 0x1fa}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c42e31b1082eec37b959d16afb96240a5d057cab448c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc88775bf6c9794b3ca2f475d25203ec0e0dd996b25d908e16539ac6e6086da296964d83ba527dcb6e7de403ef2a089ba3a5e094333a951cb48b75ac346a40a3aacc5e1c0783121dbceeef071b04ef265498d8b735db3f095", 0xf7}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x3, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) syz_usb_connect(0x0, 0x64, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x57) socket(0x10, 0x80002, 0x0) 5.112686057s ago: executing program 8 (id=390): ioprio_set$pid(0x2, 0x0, 0x6000) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) 4.978102979s ago: executing program 2 (id=476): socket(0x10, 0x7, 0x40) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x200000000000011, 0xa, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x12) r2 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000500)={0x1a5000, 0x0, 0x4}, 0x18) execveat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x800) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x3ff, 0x8, 0x8000000000000000, 0xcc, 0x6, 0x9, 0x1}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, {0xa, 0x0, 0x2000000, @mcast2, 0x1}, 0x0, {[0x12, 0x442c, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1ff]}}, 0xfffffffffffffebf) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socket$igmp6(0xa, 0x3, 0x2) 4.565684107s ago: executing program 8 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x804, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, 0x0, 0x0) unlinkat(r5, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'netdevsim0\x00', 0x4}, 0x18) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x3a) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 3.929709689s ago: executing program 3 (id=480): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x7e6a, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 3.508147433s ago: executing program 4 (id=481): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0xe7, {0x400e802, 0x8001, 0x4000, 0x4}}) 2.942394835s ago: executing program 4 (id=482): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x2}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @echo}}}}, 0x0) 2.529927991s ago: executing program 4 (id=483): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xf0d5, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x8, 0x0, 0x1, 0x80, 0x6, @remote}, 0x23) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 2.292713144s ago: executing program 3 (id=484): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) gettid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setresgid(0x0, 0xee01, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) r4 = dup3(r3, r0, 0x80000) ioctl$NBD_DO_IT(r4, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) 1.718488493s ago: executing program 2 (id=485): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xddc, 0x0, 0x0, 0x3ff}, {0xfff, 0xb5, 0x7, 0x2}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.507479327s ago: executing program 3 (id=486): syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000280)={[{}]}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x2}) 1.454710565s ago: executing program 4 (id=487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 1.031486158s ago: executing program 2 (id=488): openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x9) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000021c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3fe0000000000, 0xfffffffd}}, 0x30) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xffffffffffffffda, r1, {0x7, 0x27, 0x0, 0x681d51a0, 0x0, 0x3, 0x26, 0x0, 0x0, 0x0, 0x2, 0xfffffb96}}, 0x50) 731.052352ms ago: executing program 4 (id=489): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 274.734796ms ago: executing program 2 (id=490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x44}}, 0x0) 134.054959ms ago: executing program 1 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}]}]}]}, 0x3c}}, 0x800) 0s ago: executing program 4 (id=492): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = memfd_secret(0x0) ftruncate(r7, 0x51a9497) ftruncate(r7, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): 71.261992][ T6851] IPVS: using max 384 ests per chain, 19200 per kthread [ 373.044739][ T5805] Bluetooth: hci4: command tx timeout [ 373.050389][ T5805] Bluetooth: hci2: command tx timeout [ 373.058113][ T5805] Bluetooth: hci6: command tx timeout [ 373.438378][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 373.640298][ T3618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.939030][ T3618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.186694][ T3618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.612412][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.638634][ T3618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.662852][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.683975][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.741699][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.786111][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.016315][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.023811][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.031359][ T6817] bridge_slave_0: entered allmulticast mode [ 375.039490][ T6817] bridge_slave_0: entered promiscuous mode [ 375.074755][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.082571][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.090098][ T6813] bridge_slave_0: entered allmulticast mode [ 375.098412][ T6813] bridge_slave_0: entered promiscuous mode [ 375.112224][ T5805] Bluetooth: hci6: command tx timeout [ 375.363712][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.371227][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.379788][ T6817] bridge_slave_1: entered allmulticast mode [ 375.389236][ T6817] bridge_slave_1: entered promiscuous mode [ 375.412722][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.420131][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.427774][ T6813] bridge_slave_1: entered allmulticast mode [ 375.436969][ T6813] bridge_slave_1: entered promiscuous mode [ 376.256135][ T3618] bridge_slave_1: left allmulticast mode [ 376.262330][ T3618] bridge_slave_1: left promiscuous mode [ 376.268821][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.408663][ T3618] bridge_slave_0: left allmulticast mode [ 376.414684][ T3618] bridge_slave_0: left promiscuous mode [ 376.420850][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.886263][ T5805] Bluetooth: hci1: command tx timeout [ 377.447453][ T3618] bond0 (unregistering): left promiscuous mode [ 377.453938][ T3618] bond_slave_0: left promiscuous mode [ 377.460005][ T3618] bond_slave_1: left promiscuous mode [ 377.609616][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.713230][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.733135][ T3618] bond0 (unregistering): Released all slaves [ 377.845262][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.211921][ T6813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.231257][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.772443][ T6813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.791020][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.800367][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.808671][ T6821] bridge_slave_0: entered allmulticast mode [ 378.816955][ T6821] bridge_slave_0: entered promiscuous mode [ 378.942564][ T6817] team0: Port device team_slave_0 added [ 378.953388][ T5805] Bluetooth: hci1: command tx timeout [ 379.190266][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.200044][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.208709][ T6821] bridge_slave_1: entered allmulticast mode [ 379.218163][ T6821] bridge_slave_1: entered promiscuous mode [ 379.318351][ T6817] team0: Port device team_slave_1 added [ 379.857597][ T6884] block nbd0: not configured, cannot reconfigure [ 379.931021][ T3618] hsr_slave_0: left promiscuous mode [ 379.949553][ T3618] hsr_slave_1: left promiscuous mode [ 379.956824][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.972395][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.012699][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.020363][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.070205][ T3618] veth1_macvtap: left promiscuous mode [ 380.076175][ T3618] veth0_macvtap: left promiscuous mode [ 380.686948][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 380.824039][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 380.967317][ T6813] team0: Port device team_slave_0 added [ 381.081567][ T5805] Bluetooth: hci1: command tx timeout [ 381.456468][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.463730][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.490158][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.513818][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.569719][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.591892][ T6813] team0: Port device team_slave_1 added [ 381.786035][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.793356][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.820624][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.051065][ T6821] team0: Port device team_slave_0 added [ 382.177538][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.184892][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.211315][ T6813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.248766][ T6821] team0: Port device team_slave_1 added [ 382.296263][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.303651][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.330955][ T6813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.541262][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.548726][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.576351][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.644135][ T6861] chnl_net:caif_netlink_parms(): no params data found [ 382.924678][ T3618] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.998537][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.005938][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.032468][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.096236][ T6813] hsr_slave_0: entered promiscuous mode [ 383.105771][ T6813] hsr_slave_1: entered promiscuous mode [ 383.121082][ T5805] Bluetooth: hci1: command tx timeout [ 383.155871][ T6817] hsr_slave_0: entered promiscuous mode [ 383.165642][ T6817] hsr_slave_1: entered promiscuous mode [ 383.174180][ T6817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.182166][ T6817] Cannot create hsr debugfs directory [ 383.215076][ T3618] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.356717][ T3618] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.830904][ T3618] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.023758][ T6821] hsr_slave_0: entered promiscuous mode [ 384.033581][ T6821] hsr_slave_1: entered promiscuous mode [ 384.042500][ T6821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.050257][ T6821] Cannot create hsr debugfs directory [ 384.285530][ T6905] input: syz1 as /devices/virtual/input/input7 [ 384.863387][ T3618] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.946138][ T3618] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.029497][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.041429][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.049722][ T6861] bridge_slave_0: entered allmulticast mode [ 385.058964][ T6861] bridge_slave_0: entered promiscuous mode [ 385.086519][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.094986][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.102814][ T6861] bridge_slave_1: entered allmulticast mode [ 385.112068][ T6861] bridge_slave_1: entered promiscuous mode [ 385.145152][ T3618] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.281449][ T3618] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.531052][ T6861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.558034][ T6861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.586609][ T6817] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 385.866213][ T6861] team0: Port device team_slave_0 added [ 385.889567][ T6817] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 385.971140][ T6861] team0: Port device team_slave_1 added [ 386.014999][ T6817] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 386.050984][ T6817] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 386.160078][ T6813] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 386.282299][ T6915] netlink: 'syz.0.212': attribute type 4 has an invalid length. [ 386.328629][ T3618] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.377412][ T6813] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 386.453622][ T3618] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.520108][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.527423][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.554026][ T6861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.590125][ T3618] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.630964][ T6813] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 386.675870][ T6813] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 386.736642][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.744049][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.770853][ T6861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.837296][ T3618] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.055471][ T6821] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.243348][ T6821] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.526660][ T6821] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 387.630881][ T3618] bridge_slave_1: left allmulticast mode [ 387.636952][ T3618] bridge_slave_1: left promiscuous mode [ 387.644986][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.707884][ T3618] bridge_slave_0: left allmulticast mode [ 387.714119][ T3618] bridge_slave_0: left promiscuous mode [ 387.720643][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.753353][ T3618] bridge_slave_1: left allmulticast mode [ 387.759911][ T3618] bridge_slave_1: left promiscuous mode [ 387.768166][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.802086][ T3618] bridge_slave_0: left allmulticast mode [ 387.807981][ T3618] bridge_slave_0: left promiscuous mode [ 387.814906][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.830165][ T3618] bridge_slave_1: left allmulticast mode [ 387.836300][ T3618] bridge_slave_1: left promiscuous mode [ 387.844396][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.859030][ T3618] bridge_slave_0: left allmulticast mode [ 387.865196][ T3618] bridge_slave_0: left promiscuous mode [ 387.871678][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.120814][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.144716][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.164795][ T3618] bond0 (unregistering): Released all slaves [ 389.186840][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.205402][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.234947][ T3618] bond0 (unregistering): Released all slaves [ 389.263527][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.283426][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.303784][ T3618] bond0 (unregistering): Released all slaves [ 389.412142][ T6821] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 389.501941][ T6861] hsr_slave_0: entered promiscuous mode [ 389.511155][ T6861] hsr_slave_1: entered promiscuous mode [ 389.519580][ T6861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.527375][ T6861] Cannot create hsr debugfs directory [ 390.169387][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.386128][ T6813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.518496][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.727078][ T6813] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.749093][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.756670][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.800960][ T3618] hsr_slave_0: left promiscuous mode [ 390.811501][ T3618] hsr_slave_1: left promiscuous mode [ 390.819149][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.827033][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.904680][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.912607][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.015035][ T3618] hsr_slave_0: left promiscuous mode [ 391.033771][ T3618] hsr_slave_1: left promiscuous mode [ 391.041325][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.050670][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.062428][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.070176][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.140159][ T3618] hsr_slave_0: left promiscuous mode [ 391.161146][ T3618] hsr_slave_1: left promiscuous mode [ 391.169378][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.177174][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.216350][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.224219][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.383296][ T3618] veth1_macvtap: left promiscuous mode [ 391.389063][ T3618] veth0_macvtap: left promiscuous mode [ 391.395141][ T3618] veth1_vlan: left promiscuous mode [ 391.400611][ T3618] veth0_vlan: left promiscuous mode [ 391.445248][ T3618] veth1_macvtap: left promiscuous mode [ 391.451013][ T3618] veth0_macvtap: left promiscuous mode [ 391.457212][ T3618] veth1_vlan: left promiscuous mode [ 391.462899][ T3618] veth0_vlan: left promiscuous mode [ 391.509830][ T3618] veth1_macvtap: left promiscuous mode [ 391.515816][ T3618] veth0_macvtap: left promiscuous mode [ 391.522122][ T3618] veth1_vlan: left promiscuous mode [ 391.527662][ T3618] veth0_vlan: left promiscuous mode [ 392.479233][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 392.514301][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 392.980822][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 393.064094][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 393.569567][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 393.609755][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 394.049487][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.057079][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.200317][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.207902][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.222355][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.229832][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.556241][ T6817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.566948][ T6817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.694325][ T6813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.705134][ T6813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.805461][ T6861] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.897086][ T6861] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 395.046920][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.093209][ T6861] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 395.163231][ T6861] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 395.374810][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.531980][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.539483][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.638913][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.646475][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.382540][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.753138][ T6813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.828383][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.094622][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.226989][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.234661][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.325632][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.333098][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.502710][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.638726][ T6861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.190790][ T6817] veth0_vlan: entered promiscuous mode [ 400.299216][ T6817] veth1_vlan: entered promiscuous mode [ 400.335761][ T6861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.453601][ T6813] veth0_vlan: entered promiscuous mode [ 400.569128][ T6813] veth1_vlan: entered promiscuous mode [ 400.791361][ T6817] veth0_macvtap: entered promiscuous mode [ 400.850148][ T6817] veth1_macvtap: entered promiscuous mode [ 400.957785][ T6813] veth0_macvtap: entered promiscuous mode [ 401.059253][ T6813] veth1_macvtap: entered promiscuous mode [ 401.134045][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.219120][ T6821] veth0_vlan: entered promiscuous mode [ 401.285711][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.394366][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.405228][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.418167][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.457433][ T6817] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.466730][ T6817] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.475688][ T6817] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.484749][ T6817] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.626612][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.637970][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.656027][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.712315][ T6813] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.721886][ T6813] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.730900][ T6813] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.739843][ T6813] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.430451][ T6861] veth0_vlan: entered promiscuous mode [ 403.579719][ T6861] veth1_vlan: entered promiscuous mode [ 403.621074][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.628264][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.649207][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.682775][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.696935][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.726307][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.738575][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.299949][ T6861] veth0_macvtap: entered promiscuous mode [ 404.385222][ T6861] veth1_macvtap: entered promiscuous mode [ 404.521162][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 404.533353][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 404.553567][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 404.631219][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 404.641177][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 404.719924][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.731167][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.741357][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.752111][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.767081][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.396254][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.407455][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.417629][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.428456][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.443577][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.508352][ T6861] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.519308][ T6861] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.528941][ T6861] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.537977][ T6861] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.842156][ T5805] Bluetooth: hci3: command tx timeout [ 406.142348][ T7020] chnl_net:caif_netlink_parms(): no params data found [ 406.715572][ T5808] Bluetooth: hci5: command tx timeout [ 406.755689][ T5808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 406.789503][ T5808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 406.815219][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 406.867532][ T5808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 406.891346][ T5808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 407.528523][ T7028] chnl_net:caif_netlink_parms(): no params data found [ 407.912026][ T5805] Bluetooth: hci3: command tx timeout [ 408.622220][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.629551][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.639588][ T7020] bridge_slave_0: entered allmulticast mode [ 408.647814][ T7020] bridge_slave_0: entered promiscuous mode [ 408.809809][ T5805] Bluetooth: hci5: command tx timeout [ 408.873696][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.881207][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.889212][ T7020] bridge_slave_1: entered allmulticast mode [ 408.898748][ T7020] bridge_slave_1: entered promiscuous mode [ 408.976585][ T5805] Bluetooth: hci7: command tx timeout [ 409.085499][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.124233][ T57] bridge_slave_1: left allmulticast mode [ 409.130127][ T57] bridge_slave_1: left promiscuous mode [ 409.136918][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.272470][ T57] bridge_slave_0: left allmulticast mode [ 409.278368][ T57] bridge_slave_0: left promiscuous mode [ 409.285401][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.766997][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.785025][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.818958][ T57] bond0 (unregistering): Released all slaves [ 409.876192][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.020001][ T5805] Bluetooth: hci3: command tx timeout [ 410.183860][ T7049] chnl_net:caif_netlink_parms(): no params data found [ 410.382726][ T57] hsr_slave_0: left promiscuous mode [ 410.394975][ T57] hsr_slave_1: left promiscuous mode [ 410.402399][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.416143][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.452030][ T57] veth0_vlan: left promiscuous mode [ 410.873279][ T5805] Bluetooth: hci5: command tx timeout [ 410.980201][ T57] team0 (unregistering): Port device team_slave_1 removed [ 411.036997][ T5805] Bluetooth: hci7: command tx timeout [ 411.055423][ T57] team0 (unregistering): Port device team_slave_0 removed [ 411.428146][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.438006][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.445970][ T7028] bridge_slave_0: entered allmulticast mode [ 411.455310][ T7028] bridge_slave_0: entered promiscuous mode [ 411.535646][ T7020] team0: Port device team_slave_0 added [ 411.544199][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.554255][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.562122][ T7028] bridge_slave_1: entered allmulticast mode [ 411.571192][ T7028] bridge_slave_1: entered promiscuous mode [ 411.610238][ T7020] team0: Port device team_slave_1 added [ 411.947986][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.955301][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.981925][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.043273][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.072911][ T5805] Bluetooth: hci3: command tx timeout [ 412.096515][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.103960][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.131126][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.170943][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.447528][ T7028] team0: Port device team_slave_0 added [ 412.526436][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.651992][ T7028] team0: Port device team_slave_1 added [ 412.734658][ T7020] hsr_slave_0: entered promiscuous mode [ 412.744423][ T7020] hsr_slave_1: entered promiscuous mode [ 412.755256][ T7020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.763209][ T7020] Cannot create hsr debugfs directory [ 412.827757][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.951863][ T5805] Bluetooth: hci5: command tx timeout [ 413.080231][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.136498][ T5805] Bluetooth: hci7: command tx timeout [ 413.160076][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.170808][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.180424][ T7049] bridge_slave_0: entered allmulticast mode [ 413.192583][ T7049] bridge_slave_0: entered promiscuous mode [ 413.235651][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.278455][ T5856] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 413.297214][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.304582][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.331285][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.343931][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.351413][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.359541][ T7049] bridge_slave_1: entered allmulticast mode [ 413.369071][ T7049] bridge_slave_1: entered promiscuous mode [ 413.437455][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.445858][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.474245][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.528139][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 413.624059][ T5856] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 413.633632][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.642037][ T5856] usb 1-1: Product: syz [ 413.646410][ T5856] usb 1-1: Manufacturer: syz [ 413.651217][ T5856] usb 1-1: SerialNumber: syz [ 413.694012][ T5856] usb 1-1: config 0 descriptor?? [ 413.707991][ T5856] empeg 1-1:0.0: empeg converter detected [ 413.714157][ T5856] usb 1-1: active config #0 != 1 ?? [ 413.840698][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.894381][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.903194][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.001016][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.189984][ T7033] usb 1-1: USB disconnect, device number 5 [ 414.457630][ T7049] team0: Port device team_slave_0 added [ 414.486072][ T3802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.495773][ T3802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.550851][ T7028] hsr_slave_0: entered promiscuous mode [ 414.560711][ T7028] hsr_slave_1: entered promiscuous mode [ 414.569213][ T7028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.578014][ T7028] Cannot create hsr debugfs directory [ 414.604040][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.646235][ T7049] team0: Port device team_slave_1 added [ 414.707731][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.095849][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.154756][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.164524][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.191811][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.217799][ T5805] Bluetooth: hci7: command tx timeout [ 415.472740][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.549057][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.557096][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.583605][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.583121][ T7049] hsr_slave_0: entered promiscuous mode [ 416.595192][ T7049] hsr_slave_1: entered promiscuous mode [ 416.606860][ T7049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.615756][ T7049] Cannot create hsr debugfs directory [ 417.103303][ T57] bridge_slave_1: left allmulticast mode [ 417.109189][ T57] bridge_slave_1: left promiscuous mode [ 417.116874][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.196029][ T57] bridge_slave_0: left allmulticast mode [ 417.202199][ T57] bridge_slave_0: left promiscuous mode [ 417.208658][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.247011][ T57] bridge_slave_1: left allmulticast mode [ 417.254981][ T57] bridge_slave_1: left promiscuous mode [ 417.261428][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.300325][ T57] bridge_slave_0: left allmulticast mode [ 417.306581][ T57] bridge_slave_0: left promiscuous mode [ 417.313232][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.432291][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.560515][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.595642][ T57] bond0 (unregistering): Released all slaves [ 418.662299][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.813173][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.845436][ T57] bond0 (unregistering): Released all slaves [ 419.206644][ T57] hsr_slave_0: left promiscuous mode [ 419.221987][ T57] hsr_slave_1: left promiscuous mode [ 419.228939][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.236689][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.334423][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.342430][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.490893][ T57] hsr_slave_0: left promiscuous mode [ 419.532419][ T57] hsr_slave_1: left promiscuous mode [ 419.540009][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.547933][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.612978][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.620659][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.700001][ T57] veth1_macvtap: left promiscuous mode [ 419.706228][ T57] veth0_macvtap: left promiscuous mode [ 419.712261][ T57] veth1_vlan: left promiscuous mode [ 419.717814][ T57] veth0_vlan: left promiscuous mode [ 419.752459][ T57] veth1_macvtap: left promiscuous mode [ 419.758277][ T57] veth0_macvtap: left promiscuous mode [ 419.764426][ T57] veth1_vlan: left promiscuous mode [ 419.769964][ T57] veth0_vlan: left promiscuous mode [ 420.439711][ T5857] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 420.724255][ T57] team0 (unregistering): Port device team_slave_1 removed [ 420.763322][ T5857] usb 10-1: Using ep0 maxpacket: 32 [ 420.776376][ T57] team0 (unregistering): Port device team_slave_0 removed [ 421.169508][ T5857] usb 10-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 421.179974][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.189331][ T5857] usb 10-1: Product: syz [ 421.194615][ T5857] usb 10-1: Manufacturer: syz [ 421.199525][ T5857] usb 10-1: SerialNumber: syz [ 421.226733][ T5857] usb 10-1: config 0 descriptor?? [ 421.240599][ T5857] empeg 10-1:0.0: empeg converter detected [ 421.246930][ T5857] usb 10-1: active config #0 != 1 ?? [ 421.450028][ T57] team0 (unregistering): Port device team_slave_1 removed [ 421.492943][ T5857] usb 10-1: USB disconnect, device number 2 [ 421.564922][ T57] team0 (unregistering): Port device team_slave_0 removed [ 422.811282][ T7020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.935308][ T7020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.035846][ T7020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.066709][ T7020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.440284][ T7028] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 423.464207][ T7028] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 423.496539][ T7028] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.552104][ T2234] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 423.560728][ T7028] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.696057][ T7049] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 423.739734][ T2234] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 423.739978][ T7049] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 423.749825][ T2234] usb 1-1: config 0 interface 0 has no altsetting 0 [ 423.801409][ T2234] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 423.811107][ T2234] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 423.819781][ T2234] usb 1-1: Product: syz [ 423.824249][ T2234] usb 1-1: Manufacturer: syz [ 423.829055][ T2234] usb 1-1: SerialNumber: syz [ 423.834288][ T7049] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 423.938241][ T2234] usb 1-1: config 0 descriptor?? [ 423.938723][ T7049] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 424.010709][ T2234] usb 1-1: selecting invalid altsetting 0 [ 424.388605][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.429511][ T5858] usb 1-1: USB disconnect, device number 6 [ 424.722092][ T7020] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.754923][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.824264][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.831912][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.886841][ T7107] udevd[7107]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.937070][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.944693][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.063203][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.415264][ T7020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.426114][ T7020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.684481][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.692093][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.722145][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.729647][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.896627][ T7028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.014540][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.099090][ T7049] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.717746][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.725376][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.918401][ T30] audit: type=1326 audit(2000000011.920:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.9.236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea7f98e969 code=0x0 [ 428.041039][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.048676][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.205363][ T5849] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 428.458999][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 428.486338][ T5849] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 428.496952][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.506877][ T5849] usb 1-1: Product: syz [ 428.511249][ T5849] usb 1-1: Manufacturer: syz [ 428.516936][ T5849] usb 1-1: SerialNumber: syz [ 428.525091][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.589026][ T5849] usb 1-1: config 0 descriptor?? [ 428.613417][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.621387][ T5849] empeg 1-1:0.0: empeg converter detected [ 428.629475][ T5849] usb 1-1: active config #0 != 1 ?? [ 428.887473][ T5849] usb 1-1: USB disconnect, device number 7 [ 430.118378][ T7049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.974624][ T7028] veth0_vlan: entered promiscuous mode [ 431.129916][ T7028] veth1_vlan: entered promiscuous mode [ 431.298845][ T7020] veth0_vlan: entered promiscuous mode [ 431.426396][ T7028] veth0_macvtap: entered promiscuous mode [ 431.477057][ T7020] veth1_vlan: entered promiscuous mode [ 431.492563][ T7028] veth1_macvtap: entered promiscuous mode [ 431.750838][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.762840][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.779711][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.800453][ T7020] veth0_macvtap: entered promiscuous mode [ 431.872174][ T7028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.884085][ T7028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.898683][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.940509][ T7020] veth1_macvtap: entered promiscuous mode [ 432.080274][ T7028] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.091079][ T7028] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.100656][ T7028] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.109789][ T7028] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.228305][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.240596][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.251252][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.261977][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.281191][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.602194][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.613363][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.623824][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.635159][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.649951][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.829284][ T7049] veth0_vlan: entered promiscuous mode [ 432.840369][ T7020] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.849743][ T7020] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.860032][ T7020] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.869090][ T7020] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.035539][ T7049] veth1_vlan: entered promiscuous mode [ 433.302832][ T5853] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 433.391127][ T7049] veth0_macvtap: entered promiscuous mode [ 433.458330][ T7049] veth1_macvtap: entered promiscuous mode [ 433.497736][ T5853] usb 10-1: Using ep0 maxpacket: 32 [ 433.539619][ T5853] usb 10-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 433.550012][ T5853] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.558929][ T5853] usb 10-1: Product: syz [ 433.563539][ T5853] usb 10-1: Manufacturer: syz [ 433.568437][ T5853] usb 10-1: SerialNumber: syz [ 433.670613][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.683128][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.693301][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.704285][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.714595][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.726171][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.741004][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.764889][ T5853] usb 10-1: config 0 descriptor?? [ 433.795233][ T5853] empeg 10-1:0.0: empeg converter detected [ 433.801331][ T5853] usb 10-1: active config #0 != 1 ?? [ 433.895355][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.906255][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.916485][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.928162][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.938559][ T7049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.949377][ T7049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.963875][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.018689][ T7049] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.028949][ T7049] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.039065][ T7049] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.048445][ T7049] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.089856][ T5853] usb 10-1: USB disconnect, device number 3 ½0=Ò k"0c³CÞ;å.ÀºEÈ@ÞÝw÷ÉÔ…Hiò=¼Rv©™[s;ݧõ8[ †µUxR©ª@å¾Þõ]u+¸'¯Þò“,]u²¨”ÖÐ g‡ª‰›(²¤ë£ÒÍ0ÜwèÀeÍ…z$aá¹’ãu§b9›yû˜ç¯YE)&Oþ)Ÿ‹6ø“b;æÁ©¡yg¾Uü4>´rÉ“´Žt€_ÆœàʘÚG‚†Ã0µØ0Hö”ŽÑVpẑEŠ=N© OeÝ¢Ï2ûæ"yÄJ½Iª†èÝz‰F°<@MS0êQ¥¤up¥øQ¯ʃ’´¥ølƒ’~™ñ7¿çMüžÂؤZGõk½›×íφÈÛwðW·§›_F•°‹cã1×`LÞéŠÏ챈*‘]Ðä°kjF‡U)B–6Ñ=xŒ}³í<˜úiä&vÛ 5@½‰3£ûw]+ú‹ÏÎáÇ$Ì6´_§)¦s½\ç( µH˜‘co bxz$!/ Î*ǽû ˆM3…ËG‡¼¦v[Ȁ¥mތ˖VP§CHØ\«üiÎ>€[4OÑñöwùO_ÑÆ;þø¨öÕ½†a,µÃaÓxÏ0 2a0ˆs¹1œ¼=Ï*¤*Š$þ»S8 ŽÆ+èW1E$”ÆmCK-ÁX_É^y—b1²À9õúQsÙîü'ê°CŒ9ÁñÓwBà°x(›„Ñ›‰ö·…"¯ÐuƒÏ›B«ÑI.XÕïOÚW¸­Zétp»0ÚÇ\PÖ‚ŒòXÎl¥fw;hB²? ŸÂe Þ#`!ödܱ Œo7¥ZlÇ‚¾©`¹ :‰“ýÅ[Ì!vHDÒVû€‘â.MŸgŽ“¹` hZ q­ƒØCÎ>Ô–’E8ĵôq©Ê%SËS·å§*vÔiü#yIWg¢ΙrÞ#ƒ…-¨¦Ô>6lÚc~cà‚²×× .k à7‡Áa#ßJ#÷'NÑN¹·&G]BÂVŸ3È^“"ûô7·ïI+ |£Æ¬¡ž±¹ nŸ‡ŠÎášÐî^F/’8£¹ù'U잦"ïh7&¬1x}O¦ Չ܌sQ"‘:oêLÇf…æƒz}öonùŠ˜ø=Lò»±Fl>¶åàÄËÌ=O£I„áêÒÝø¹éœÐ…9gâ6vß8€DïQHwYǺԒ_fÎ’ü·„‰|qÍ™ƒ'0Y^˜}íW_å³é“ÝÏ{S¼q*‰Ñ{ÒéºWUÓJ¸ªŒ+-TZ7c.Ý÷â¨% ,l6PŽXò6Å? |’ñ9eJ5ì<°›)œ \ˆ8÷ûVóò–Y©Í%v59C%ªwYzÕí2˾¨~Àòšúáúi5îgšR÷Œ‚Ð(\?ņ«;ˆ1!†Jq+tôŒ¹+øŒ5¶Ô·°bNþu£ ÓaY=ãñH©Ìö *9 3Zä\—Pˆ‹¦åWªð'À¶œ_n\‚I¶2×OWE„GR^…Y ^—»2æn« I¸Ú¤Ë­üoÖ+Ó…âJ¶˜º¤\ò0©ü{còŒÜT,—‡Ðg bJMÝãÆ%îýðºKÑìÊ{;. uiT-©Á[…ÀÞ+ðÉìx:‚†%y1zsY<$]cp¥qo4ùß@Dñ„\aÊ)#óŸåGÈ­‘@Ó ·'걜Œz!'‹è?C 1ƒñ¦ë³y§Y «(f€1ýGà˜©¡ž™WZ©Ï‘ç¼Ks~èìe÷˜îq°šg…ÀOþï´‚3îmý™Ím„ÐŽåä×zAŠŸóXË­e`]²†ß³ÙáAxÔvÖÏ+F¼»¶ùñîê¬ë0£—¬Üï?Oø}†.Ì<{„ƒ‚GñÞNJ÷kÒ¿2˜‡šYÃŒ;Tc÷.c&âÍ’&jäzŒRΉc“ȧé¹Ê- îÕzjýz/w$²â(>¼ÒT ”|Ôh‹ÊýÍ3 ÓÀ 7ð`(*ûì¦úéxÃk"ÞºùGzR…òú±AoOäź™:m@dcÜ~້Éî–]°F#§„ø<ÉÐÈHÓKœS¿_ }å ¥&4Ò½¥:– Bƒ@Y»a‹èH{€Iêȃ¢1À/Žt‡683Ù-ªHèÓ‡ÕŸOŽ6dÓÖg;ü„zÕá¿æG·Xê4WÐ6BÛg‘í³\¨"\‹V[1¯C³ç¡ cÀ½[H+í´ó™QçˆK°¾lÍ,NJçèTt0 ôêáO3 «~ÿ7ÄT7æ˜iò†‚ìÃBJ*à©—Mï<OËbù4Ï2Ù¬…x/àÉÏ­Ö:+¨€Þ‰ãß3l"0ËZ¿d®O#ýÃ̵G<'„-ÊP„%¶p»žÀmxB?=Ìž êKÏå;¢¤Âm$8¡™µ¹·ªI@¿;¥ÍŠrmDD"…÷©ÿÄeÑ€>wÿåj&/oc¹ÿáiˆ!iòP_yQ2¨3@†Sèºv³—yAe]Q3œL.Õùp9^€:êèl‚‘Ÿ~ðXöƒŒ±zÔÂ~MÿÏ& H~‚hó !Ôc·N'á²Ð¾Z8í £a–êµõÏ€LRß%Å(Þ…Ðÿ]åÃZG”ÖÓ…Ô–°ºjçÁŸ®3¿ùD õ“C9à°ü§R8„ M¹2æxZý²bÀŒ%„#Rž»|fÍÅæ¼®ä·“Èl_Ià\G_b‘h§Vi×ô?ÓNfgV¾BpI+¢ëh9ãµ?ªæ ïMvÀsîÀ½¹>Å'Çp›MX¥sQâ.™`ìÌläqëx©ÖIóê¶z4Rg[ƒÒªa_®^íAHzôÎz/fš2=ah×ÂeRW³ô³Î5: &É6„k,c’š›æÀ#‡VIVHF¿¦Ã`à²óù±‚ éWèVo&Wõ’lÚËëIirŠ•‚·³æÚdÿcÿ¦áË Ø2È-¤»Äðeƒd¸ŒDÛ*Žñ.=÷8ó—´¦ùÝ;ø Ó?íw¤ž¡»1)nÊß±[§uyøS W¸Òq…·¦5ï'Zb·ÊŒÀ—0yùm:åå}kk™´ |æ´V“×’;¬%×+îlÀ;·Hаï#°ìoŸFœù€J÷;öÎ !YgŽòe4Ëóð<;ýϹ®ˆØ#~­•¦™OpµLª}qü(Qê¶;‡¤gj<Ìó N%ŽüQÁ=@£~NHNß„0‘4Ùè¿ ‚³›†gÅ«Êø¯GÇ,S0lâ,«åÃwm";öæÚïoÓÑûùæ¶ `ŽHà7íÑvòÐå‘Ãâ½Iüj϶Uß(Á˜³þ³‹cçÞ—ŒY­mO[ïA¾•YÉœ•0Ï€`‘Ø;‰W±©dÀªð×!ÐxX~# µ–Ëÿ; ûàäÌâ`VHëˆdUü„“°+ê“ø*íus‡ãþ^[6;מù9[<µûíÁ¯*I41Á=„ÆE0´A¥²ÏêÆÆPn‚Á]“-„Y¹’¥ÔÃÍŒýï@z=ðïÅò‰Õ8·†àÞÉ[wñÝ+¯»´ØØ¿ÑbMUlì•æÐe*ß4xå ½ƒÓ8³Xüp€|&ÿd_ ÊšÖµÀËùì->…Eè¡k]«Pת” _pvš«S.ÄÊRúû^üfx,^É}m÷VŸ5p/Ó¯ù¾YNÄÇŠS°9i`ØP€!‘(œm[,|"¥ûáF ¸çw]×eü4w¼~ÉÒh¡ÜÜ29 œ¨½bÅÚ¬@ñ™×¯˜?ÐðT­ÄÑæR¯›¶>KÒÛÚyZ+bt«ÚžW Â-bQõÕŠ ~ìf£i†hv‡^€ç|/˜xÅ$,YÕÕí 㣖ƒAœêÉ´ÃVÊGáHLSMKÌ*SuÝÊã—L§ãÝ­ð8*Ì1m&ÞúQìópÏ¿5ƒæµ=ùXŸ¥­ú¤ Œ:==öB>];oFÒÈçå jö+ X„þsëm‘ogI OPç€ŽŽ›‹p±=w•«ñ“ûúå§©!z÷¢÷[È­±×‚G$ë[ûniUJœ\œBÔ°ǯJ¨Ûïz¢䲞G«èYE¿]Apaxeê‰&1]Á/hâKDRkZ*°îE°k7ŸÜªcÐ , Ùk*Êu?'«†rÏ“kV}'r¦eàùSJÖÞ¦kpá„”ý¦³ð¿Ròó œ$šH$ëÿ.Ä`ü›{“´“«­Ô^¾ýàç¦DYëÆÝÏ ÿïÛ†Idmy/kQm¶ëÌÏÒ£Ê9¹†tàÄôF˜VÜ|¦A\`K—Gëô‰ÿJÓè˜%ô.í©R Dh)ŽøT"/0ê¤Kâh»BçöÕûô&ýƈ“ÒJ¶+a z9ÝY2®«z—˜…Å ÄÚãdXÑ[E E³¢J¸ižVAoU˜m4T„[Ó-½>`Ѥg-;¨“3e-ú4$¾ë…‹ô’¯º6#<¬[ 438.333739][ T45] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 438.333739][ T5853] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 438.401208][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.409520][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.454867][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.463063][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.532634][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 438.568176][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.579989][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.590291][ T45] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 438.596484][ T5853] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 438.603760][ T45] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.612724][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.612840][ T5853] usb 1-1: Product: syz [ 438.612925][ T5853] usb 1-1: Manufacturer: syz [ 438.613015][ T5853] usb 1-1: SerialNumber: syz [ 438.647702][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.691217][ T5853] usb 1-1: config 0 descriptor?? [ 438.743032][ T5853] empeg 1-1:0.0: empeg converter detected [ 438.749120][ T5853] usb 1-1: active config #0 != 1 ?? [ 438.871544][ T45] usb 10-1: config 0 descriptor?? [ 439.050440][ T5853] usb 1-1: USB disconnect, device number 8 [ 439.218870][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.226968][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.445588][ T45] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 439.513494][ T45] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 439.628993][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.637659][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.766132][ T45] usb 10-1: USB disconnect, device number 4 [ 440.019521][ T7347] overlayfs: missing 'lowerdir' [ 441.185757][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.194448][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.425946][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.434219][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.840871][ T7376] batman_adv: batadv0: Adding interface: macvlan2 [ 442.847757][ T7376] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.873689][ T7376] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 443.622411][ T45] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 444.125457][ T7393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 444.173026][ T45] usb 8-1: Using ep0 maxpacket: 32 [ 444.278848][ T45] usb 8-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 444.288909][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.297253][ T45] usb 8-1: Product: syz [ 444.301523][ T45] usb 8-1: Manufacturer: syz [ 444.306543][ T45] usb 8-1: SerialNumber: syz [ 444.443679][ T45] usb 8-1: config 0 descriptor?? [ 444.485440][ T45] empeg 8-1:0.0: empeg converter detected [ 444.491460][ T45] usb 8-1: active config #0 != 1 ?? [ 444.675889][ T45] usb 8-1: USB disconnect, device number 2 [ 451.510600][ T7462] block device autoloading is deprecated and will be removed. [ 458.269965][ T45] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 458.525017][ T7525] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 458.592889][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 458.619560][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.630976][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.650206][ T45] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.664345][ T45] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.674103][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.851888][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 458.912303][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.923814][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.933951][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.944522][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.957913][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.967303][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.024318][ T45] usb 10-1: config 0 descriptor?? [ 459.512662][ T45] usbhid 10-1:0.0: can't add hid device: -71 [ 459.519667][ T45] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 459.612510][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 459.618355][ T24] usbtmc 7-1:16.0: can't read capabilities [ 459.662962][ T45] usb 10-1: USB disconnect, device number 5 [ 459.804577][ T24] usb 7-1: USB disconnect, device number 2 [ 459.886514][ T7537] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 909 [ 460.871827][ T5853] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 460.897787][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.914018][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.943484][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.963462][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.978870][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.072006][ T5853] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.081062][ T5853] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 461.092317][ T5853] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.101838][ T5853] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 461.113344][ T5853] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 461.326083][ T5853] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.335817][ T5853] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.344332][ T5853] usb 10-1: Product: syz [ 461.350248][ T5853] usb 10-1: Manufacturer: syz [ 461.372998][ T5853] cdc_wdm 10-1:1.0: skipping garbage [ 461.378548][ T5853] cdc_wdm 10-1:1.0: skipping garbage [ 461.413341][ T5853] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 461.419600][ T5853] cdc_wdm 10-1:1.0: Unknown control protocol [ 462.630554][ T7545] chnl_net:caif_netlink_parms(): no params data found [ 463.031926][ T5808] Bluetooth: hci2: command tx timeout [ 463.235518][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.7.311'. [ 463.245302][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.7.311'. [ 463.269494][ T7575] geneve2: entered allmulticast mode [ 463.587982][ T45] usb 10-1: USB disconnect, device number 6 [ 464.367982][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.377463][ T7545] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.385411][ T7545] bridge_slave_0: entered allmulticast mode [ 464.397648][ T7545] bridge_slave_0: entered promiscuous mode [ 464.584857][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.592600][ T7545] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.600405][ T7545] bridge_slave_1: entered allmulticast mode [ 464.610474][ T7545] bridge_slave_1: entered promiscuous mode [ 464.943471][ T7545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.051119][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.059028][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.112248][ T5808] Bluetooth: hci2: command tx timeout [ 465.196305][ T3802] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.211925][ T7592] 9pnet_virtio: no channels available for device syz [ 465.288040][ T7595] loop6: detected capacity change from 0 to 524287999 [ 465.296148][ T7545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.315715][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.324218][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.332493][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.342794][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.350900][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.359864][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.369171][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.377693][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.385809][ T7595] ldm_validate_partition_table(): Disk read failed. [ 465.392772][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.400904][ T7595] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.409270][ T7595] Dev loop6: unable to read RDB block 0 [ 465.415607][ T7595] loop6: unable to read partition table [ 465.456168][ T7595] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 465.807754][ T3802] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.178746][ T7545] team0: Port device team_slave_0 added [ 466.224420][ T3802] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.300083][ T7598] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 466.310095][ T7598] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 466.396208][ T3802] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.486099][ T7545] team0: Port device team_slave_1 added [ 466.825421][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.832959][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.859314][ T7545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.149154][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.157631][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.186365][ T7545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.203472][ T5808] Bluetooth: hci2: command tx timeout [ 467.321296][ T3802] bridge_slave_1: left allmulticast mode [ 467.327753][ T3802] bridge_slave_1: left promiscuous mode [ 467.334758][ T3802] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.378966][ T3802] bridge_slave_0: left allmulticast mode [ 467.385247][ T3802] bridge_slave_0: left promiscuous mode [ 467.394056][ T3802] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.304799][ T7616] netlink: 16 bytes leftover after parsing attributes in process `syz.6.322'. [ 469.322059][ T5808] Bluetooth: hci2: command tx timeout [ 482.237857][ T3802] batman_adv: batadv0: Removing interface: macvlan2 [ 482.762535][ T3802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.911006][ T3802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.117097][ T3802] bond0 (unregistering): Released all slaves [ 485.032714][ T7545] hsr_slave_0: entered promiscuous mode [ 485.042579][ T7545] hsr_slave_1: entered promiscuous mode [ 487.451906][ T3802] hsr_slave_0: left promiscuous mode [ 487.542394][ T3802] hsr_slave_1: left promiscuous mode [ 487.550251][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.558292][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.634535][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.642342][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.852346][ T3802] veth1_macvtap: left promiscuous mode [ 487.858125][ T3802] veth0_macvtap: left promiscuous mode [ 487.864454][ T3802] veth1_vlan: left promiscuous mode [ 487.872008][ T3802] veth0_vlan: left promiscuous mode [ 488.972799][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.983914][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.997000][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.010022][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.023714][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.222343][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 489.252479][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 489.264550][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 489.277841][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 489.289963][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 491.124886][ T5805] Bluetooth: hci4: command tx timeout [ 491.210049][ T5808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 491.221479][ T5808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 491.262446][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 491.278292][ T3802] team0 (unregistering): Port device team_slave_1 removed [ 491.342412][ T5808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 491.423812][ T5805] Bluetooth: hci6: command tx timeout [ 491.432377][ T5805] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 491.444760][ T5805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 491.522260][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 491.552143][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 491.582374][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 491.594607][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 491.683820][ T3802] team0 (unregistering): Port device team_slave_0 removed [ 493.243767][ T52] Bluetooth: hci4: command tx timeout [ 493.525236][ T52] Bluetooth: hci7: command tx timeout [ 493.530891][ T52] Bluetooth: hci6: command tx timeout [ 494.293749][ T5808] Bluetooth: hci8: command tx timeout [ 495.320299][ T52] Bluetooth: hci4: command tx timeout [ 495.605016][ T52] Bluetooth: hci6: command tx timeout [ 495.610664][ T52] Bluetooth: hci7: command tx timeout [ 496.353193][ T52] Bluetooth: hci8: command tx timeout [ 496.536054][ T3802] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.828199][ T3802] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.307990][ T3802] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.356543][ T52] Bluetooth: hci4: command tx timeout [ 497.443047][ T7625] chnl_net:caif_netlink_parms(): no params data found [ 497.671979][ T52] Bluetooth: hci7: command tx timeout [ 497.677630][ T52] Bluetooth: hci6: command tx timeout [ 497.709083][ T3802] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.410927][ T52] Bluetooth: hci8: command tx timeout [ 498.748515][ T3802] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.012938][ T3802] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.111273][ T7545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.175765][ T3802] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.240092][ T7545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 499.396979][ T3802] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.599787][ T7545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.753132][ T52] Bluetooth: hci7: command tx timeout [ 499.822456][ T7545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.191222][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 500.422382][ T7624] chnl_net:caif_netlink_parms(): no params data found [ 500.443085][ T7630] chnl_net:caif_netlink_parms(): no params data found [ 500.512468][ T52] Bluetooth: hci8: command tx timeout [ 500.984836][ T7614] kexec: Could not allocate control_code_buffer [ 502.451304][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.459180][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.467365][ T7625] bridge_slave_0: entered allmulticast mode [ 502.476653][ T7625] bridge_slave_0: entered promiscuous mode [ 502.538887][ T3802] bridge_slave_1: left allmulticast mode [ 502.545791][ T3802] bridge_slave_1: left promiscuous mode [ 502.552639][ T3802] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.672881][ T3802] bridge_slave_0: left allmulticast mode [ 502.678766][ T3802] bridge_slave_0: left promiscuous mode [ 502.685468][ T3802] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.747809][ T3802] bridge_slave_1: left allmulticast mode [ 502.753729][ T3802] bridge_slave_1: left promiscuous mode [ 502.759835][ T3802] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.802089][ T3802] bridge_slave_0: left allmulticast mode [ 502.807877][ T3802] bridge_slave_0: left promiscuous mode [ 502.814210][ T3802] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.878752][ T3802] bridge_slave_1: left allmulticast mode [ 502.884702][ T3802] bridge_slave_1: left promiscuous mode [ 502.890818][ T3802] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.936695][ T3802] bridge_slave_0: left allmulticast mode [ 502.945975][ T3802] bridge_slave_0: left promiscuous mode [ 502.954024][ T3802] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.850214][ T3802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.894018][ T3802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.927490][ T3802] bond0 (unregistering): Released all slaves [ 503.982249][ T3802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.004245][ T3802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.018209][ T3802] bond0 (unregistering): Released all slaves [ 504.050023][ T3802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.083535][ T3802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.095271][ T3802] bond0 (unregistering): Released all slaves [ 504.170197][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.179060][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.186745][ T7625] bridge_slave_1: entered allmulticast mode [ 504.194966][ T7625] bridge_slave_1: entered promiscuous mode [ 504.742420][ T7625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.759554][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.769580][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.777401][ T7632] bridge_slave_0: entered allmulticast mode [ 504.786574][ T7632] bridge_slave_0: entered promiscuous mode [ 504.988289][ T7625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.000218][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.011112][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.019349][ T7624] bridge_slave_0: entered allmulticast mode [ 505.028650][ T7624] bridge_slave_0: entered promiscuous mode [ 505.060138][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.067954][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.080141][ T7632] bridge_slave_1: entered allmulticast mode [ 505.092663][ T7632] bridge_slave_1: entered promiscuous mode [ 505.107225][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.114884][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.122729][ T7630] bridge_slave_0: entered allmulticast mode [ 505.132074][ T7630] bridge_slave_0: entered promiscuous mode [ 505.263969][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.271493][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.283289][ T7624] bridge_slave_1: entered allmulticast mode [ 505.292569][ T7624] bridge_slave_1: entered promiscuous mode [ 505.326088][ T7625] team0: Port device team_slave_0 added [ 505.408263][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.416154][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.424066][ T7630] bridge_slave_1: entered allmulticast mode [ 505.434263][ T7630] bridge_slave_1: entered promiscuous mode [ 505.519307][ T7625] team0: Port device team_slave_1 added [ 505.886379][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.999262][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.066731][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.074718][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.102716][ T7625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.143250][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.164150][ T7630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.187323][ T7630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.240270][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.307481][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.315003][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.341455][ T7625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.573832][ T7632] team0: Port device team_slave_0 added [ 506.677824][ T7630] team0: Port device team_slave_0 added [ 506.693589][ T7624] team0: Port device team_slave_0 added [ 506.709455][ T7632] team0: Port device team_slave_1 added [ 506.731055][ T7624] team0: Port device team_slave_1 added [ 506.804615][ T7630] team0: Port device team_slave_1 added [ 507.078780][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.086039][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.112555][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.174140][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.181308][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.209075][ T7630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.226264][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.233712][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.262717][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.389071][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.396484][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.422823][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.440046][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.447345][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.473814][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.488373][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.495858][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.522828][ T7630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.681081][ T7625] hsr_slave_0: entered promiscuous mode [ 507.690840][ T7625] hsr_slave_1: entered promiscuous mode [ 507.699270][ T7625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.707446][ T7625] Cannot create hsr debugfs directory [ 507.785918][ T3802] hsr_slave_0: left promiscuous mode [ 507.807666][ T3802] hsr_slave_1: left promiscuous mode [ 507.818445][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.827042][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.847079][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.854998][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.877422][ T3802] hsr_slave_0: left promiscuous mode [ 507.885585][ T3802] hsr_slave_1: left promiscuous mode [ 507.893351][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.901062][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.913630][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.921329][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.971008][ T3802] hsr_slave_0: left promiscuous mode [ 507.992584][ T3802] hsr_slave_1: left promiscuous mode [ 508.000106][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.024307][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.077293][ T3802] veth1_macvtap: left promiscuous mode [ 508.085885][ T3802] veth0_macvtap: left promiscuous mode [ 508.092133][ T3802] veth1_vlan: left promiscuous mode [ 508.097701][ T3802] veth0_vlan: left promiscuous mode [ 508.115741][ T3802] veth1_macvtap: left promiscuous mode [ 508.121483][ T3802] veth0_macvtap: left promiscuous mode [ 508.127701][ T3802] veth1_vlan: left promiscuous mode [ 508.133443][ T3802] veth0_vlan: left promiscuous mode [ 508.924554][ T3802] team0 (unregistering): Port device team_slave_1 removed [ 508.949704][ T3802] team0 (unregistering): Port device team_slave_0 removed [ 509.397534][ T3802] team0 (unregistering): Port device team_slave_1 removed [ 509.419407][ T3802] team0 (unregistering): Port device team_slave_0 removed [ 509.968350][ T3802] team0 (unregistering): Port device team_slave_1 removed [ 510.001409][ T3802] team0 (unregistering): Port device team_slave_0 removed [ 510.427427][ T7545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.647320][ T7624] hsr_slave_0: entered promiscuous mode [ 510.656966][ T7624] hsr_slave_1: entered promiscuous mode [ 510.665324][ T7624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.673182][ T7624] Cannot create hsr debugfs directory [ 510.996693][ T7630] hsr_slave_0: entered promiscuous mode [ 511.006241][ T7630] hsr_slave_1: entered promiscuous mode [ 511.014691][ T7630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.022619][ T7630] Cannot create hsr debugfs directory [ 511.174479][ T7632] hsr_slave_0: entered promiscuous mode [ 511.184188][ T7632] hsr_slave_1: entered promiscuous mode [ 511.192965][ T7632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.200711][ T7632] Cannot create hsr debugfs directory [ 511.361994][ T7545] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.603192][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.610685][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.755348][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.762981][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.799533][ T3802] IPVS: stop unused estimator thread 0... [ 512.669361][ T3802] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.885242][ T3802] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.105242][ T3802] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.187963][ T3802] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.536998][ T3802] bridge_slave_1: left allmulticast mode [ 513.544242][ T3802] bridge_slave_1: left promiscuous mode [ 513.550716][ T3802] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.647370][ T3802] bridge_slave_0: left allmulticast mode [ 513.653523][ T3802] bridge_slave_0: left promiscuous mode [ 513.659974][ T3802] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.110113][ T3802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.132259][ T3802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.163570][ T3802] bond0 (unregistering): Released all slaves [ 514.752442][ T3802] hsr_slave_0: left promiscuous mode [ 514.773046][ T3802] hsr_slave_1: left promiscuous mode [ 514.780552][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.788780][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.804187][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.812048][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.840301][ T3802] veth1_macvtap: left promiscuous mode [ 514.847239][ T3802] veth0_macvtap: left promiscuous mode [ 514.853267][ T3802] veth1_vlan: left promiscuous mode [ 514.858805][ T3802] veth0_vlan: left promiscuous mode [ 515.393272][ T3802] team0 (unregistering): Port device team_slave_1 removed [ 515.435566][ T3802] team0 (unregistering): Port device team_slave_0 removed [ 516.024507][ T7545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.596871][ T7625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 516.658354][ T7625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 516.739595][ T7625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 516.776147][ T7624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.813167][ T7625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 516.987180][ T7624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 517.017529][ T7632] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 517.076545][ T7624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 517.113120][ T7632] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 517.188093][ T7632] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 517.214241][ T7630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 517.243182][ T7632] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 517.277029][ T7624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.333895][ T7630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 517.427630][ T7630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 517.465750][ T7630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 518.014606][ T7545] veth0_vlan: entered promiscuous mode [ 518.183933][ T7545] veth1_vlan: entered promiscuous mode [ 518.444976][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.464480][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.501178][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.715972][ T7545] veth0_macvtap: entered promiscuous mode [ 518.762931][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.778885][ T7625] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.806151][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.813704][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.835680][ T7545] veth1_macvtap: entered promiscuous mode [ 518.865197][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.897980][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.950495][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.958105][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.973003][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.980494][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.995268][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.002885][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.132897][ T7545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.167735][ T7630] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.248572][ T7545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.331497][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.339106][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.380008][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.387632][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.422812][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.430316][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.475843][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.483485][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.553045][ T7632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.563807][ T7632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.861494][ T7625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.895049][ T7630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.906439][ T7630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.992964][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.002461][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.018412][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.035830][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.047079][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.544268][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.925160][ T7624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.017286][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.203903][ T7630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.653503][ T7625] veth0_vlan: entered promiscuous mode [ 522.685286][ T7624] veth0_vlan: entered promiscuous mode [ 522.760585][ T7796] chnl_net:caif_netlink_parms(): no params data found [ 522.828419][ T7625] veth1_vlan: entered promiscuous mode [ 522.877978][ T7624] veth1_vlan: entered promiscuous mode [ 523.110467][ T7630] veth0_vlan: entered promiscuous mode [ 523.112106][ T5808] Bluetooth: hci0: command tx timeout [ 523.341309][ T7630] veth1_vlan: entered promiscuous mode [ 523.456956][ T7624] veth0_macvtap: entered promiscuous mode [ 523.489366][ T7625] veth0_macvtap: entered promiscuous mode [ 523.566288][ T7624] veth1_macvtap: entered promiscuous mode [ 523.580407][ T7625] veth1_macvtap: entered promiscuous mode [ 523.933587][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.944439][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.958806][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.121959][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.132840][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.143040][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.156107][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.170582][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.204963][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.215916][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.230030][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.260174][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.271246][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.281744][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.292446][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.306649][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.399974][ T7796] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.407920][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.415809][ T7796] bridge_slave_0: entered allmulticast mode [ 524.424985][ T7796] bridge_slave_0: entered promiscuous mode [ 524.452050][ T7624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.461051][ T7624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.470286][ T7624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.480001][ T7624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.509841][ T7630] veth0_macvtap: entered promiscuous mode [ 524.548144][ T7796] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.560934][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.570735][ T7796] bridge_slave_1: entered allmulticast mode [ 524.580703][ T7796] bridge_slave_1: entered promiscuous mode [ 524.720528][ T7625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.730247][ T7625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.739489][ T7625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.748628][ T7625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.830878][ T7632] veth0_vlan: entered promiscuous mode [ 524.842560][ T7630] veth1_macvtap: entered promiscuous mode [ 525.057844][ T7632] veth1_vlan: entered promiscuous mode [ 525.071932][ T1127] bridge_slave_1: left allmulticast mode [ 525.077810][ T1127] bridge_slave_1: left promiscuous mode [ 525.084460][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.108313][ T1127] bridge_slave_0: left allmulticast mode [ 525.114686][ T1127] bridge_slave_0: left promiscuous mode [ 525.121138][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.194814][ T5808] Bluetooth: hci0: command tx timeout [ 525.663357][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.690940][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.705050][ T1127] bond0 (unregistering): Released all slaves [ 525.739255][ T7796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.819993][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.832316][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.845863][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.858993][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.870782][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.881665][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.895891][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.980397][ T7796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.031150][ T1127] hsr_slave_0: left promiscuous mode [ 526.048779][ T1127] hsr_slave_1: left promiscuous mode [ 526.056347][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.064322][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.114415][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.123968][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.173276][ T1127] veth1_macvtap: left promiscuous mode [ 526.179038][ T1127] veth0_macvtap: left promiscuous mode [ 526.185290][ T1127] veth1_vlan: left promiscuous mode [ 526.190843][ T1127] veth0_vlan: left promiscuous mode [ 526.498950][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.507037][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.868817][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 526.926423][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 527.274349][ T5808] Bluetooth: hci0: command tx timeout [ 527.468542][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.480150][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.490300][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.501009][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.515160][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.538030][ T7796] team0: Port device team_slave_0 added [ 527.659515][ T7796] team0: Port device team_slave_1 added [ 527.818319][ T7630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.829003][ T7630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.838249][ T7630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.847332][ T7630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.872864][ T7632] veth0_macvtap: entered promiscuous mode [ 527.904722][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.912918][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.941271][ T7796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.994210][ T7632] veth1_macvtap: entered promiscuous mode [ 528.097207][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.109104][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.119839][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.130586][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.140832][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.151697][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.166040][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.195826][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.203211][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.229647][ T7796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.401180][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.413156][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.423354][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.434159][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.444305][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.455120][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.469341][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.643808][ T7632] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.654600][ T7632] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.663879][ T7632] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.672999][ T7632] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.724407][ T7796] hsr_slave_0: entered promiscuous mode [ 528.734196][ T7796] hsr_slave_1: entered promiscuous mode [ 529.352557][ T5808] Bluetooth: hci0: command tx timeout [ 530.757046][ T7796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 530.867620][ T7796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 530.957579][ T7796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 531.034478][ T7796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 531.924985][ T7617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.933226][ T7617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.292842][ T7617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.301357][ T7617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.385563][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.484650][ T7796] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.560387][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.567994][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.623609][ T1812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.632010][ T1812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.730433][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.738024][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.899778][ T3917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.907975][ T3917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.046401][ T7796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.509778][ T1812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.518752][ T1812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.827899][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.894783][ T1812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.903589][ T1812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.053652][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.061777][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.398197][ T7617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.406513][ T7617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.396523][ T5808] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 536.405756][ T5808] Bluetooth: Wrong link type (-22) [ 536.411209][ T5808] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 536.419531][ T5808] Bluetooth: Wrong link type (-22) [ 536.425221][ T5808] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 536.432001][ T5808] Bluetooth: Wrong link type (-22) [ 536.437420][ T5808] Bluetooth: Wrong link type (-71) [ 536.444398][ T5808] Bluetooth: hci4: link tx timeout [ 536.449722][ T5808] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 537.764970][ T7992] netlink: 'syz.3.333': attribute type 27 has an invalid length. [ 538.164191][ T7683] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 538.302934][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.312493][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.511846][ T7683] usb 4-1: Using ep0 maxpacket: 16 [ 538.585457][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 538.733131][ T7683] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 538.743541][ T7683] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 538.755133][ T7683] usb 4-1: Product: syz [ 538.759522][ T7683] usb 4-1: Manufacturer: syz [ 538.765813][ T7683] usb 4-1: SerialNumber: syz [ 538.839368][ T7683] usb 4-1: config 0 descriptor?? [ 538.844379][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.869276][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.642183][ T7992] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.651399][ T7992] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.660788][ T7992] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.670220][ T7992] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.534916][ T7796] veth0_vlan: entered promiscuous mode [ 540.563662][ T5858] usb 4-1: USB disconnect, device number 3 [ 540.783077][ T7796] veth1_vlan: entered promiscuous mode [ 541.217205][ T7796] veth0_macvtap: entered promiscuous mode [ 541.303763][ T7796] veth1_macvtap: entered promiscuous mode [ 541.383483][ T8029] Bluetooth: MGMT ver 1.23 [ 544.331336][ T7796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.342337][ T7796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.352562][ T7796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.363751][ T7796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.373950][ T7796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.389058][ T7796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.408856][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.718068][ T7796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.728958][ T7796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.739296][ T7796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.750028][ T7796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.760160][ T7796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.770913][ T7796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.785354][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.373131][ T7796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.382284][ T7796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.391284][ T7796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.400504][ T7796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.171275][ T8082] trusted_key: encrypted_key: keyword 'updÝd' not recognized [ 549.636334][ T8094] tipc: Started in network mode [ 549.641875][ T8094] tipc: Node identity ac141425, cluster identity 4711 [ 549.649570][ T8094] tipc: New replicast peer: 0.0.0.0 [ 549.656842][ T8094] tipc: Enabled bearer , priority 10 [ 550.772828][ T5858] tipc: Node number set to 2886997029 [ 551.744776][ T8128] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 553.098543][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.106758][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.719770][ T7617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.727915][ T7617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.190269][ T8190] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 567.262784][ T8239] 9pnet_virtio: no channels available for device syz [ 567.475807][ T8243] overlayfs: missing 'lowerdir' [ 567.568487][ T8243] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 569.281780][ T52] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 569.288536][ T52] Bluetooth: Wrong link type (-22) [ 569.294359][ T52] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 569.301077][ T52] Bluetooth: Wrong link type (-22) [ 569.307166][ T52] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 569.314196][ T52] Bluetooth: Wrong link type (-22) [ 569.319547][ T52] Bluetooth: Wrong link type (-71) [ 569.326089][ T52] Bluetooth: hci6: link tx timeout [ 569.331368][ T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 569.847813][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 569.864983][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 569.893946][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 569.927810][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 569.954664][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 571.371943][ T5805] Bluetooth: hci6: command 0x0406 tx timeout [ 571.788262][ T8284] could not allocate digest TFM handle sha1-ssse3 [ 572.073975][ T5808] Bluetooth: hci1: command tx timeout [ 572.369224][ T8260] chnl_net:caif_netlink_parms(): no params data found [ 574.152833][ T5808] Bluetooth: hci1: command tx timeout [ 574.793421][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.806224][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.813891][ T8260] bridge_slave_0: entered allmulticast mode [ 574.821964][ T8260] bridge_slave_0: entered promiscuous mode [ 574.975759][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.983449][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.990992][ T8260] bridge_slave_1: entered allmulticast mode [ 575.001047][ T8260] bridge_slave_1: entered promiscuous mode [ 575.578373][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.754124][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.849560][ T5808] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 575.856608][ T5808] Bluetooth: Wrong link type (-22) [ 575.862307][ T5808] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 575.869021][ T5808] Bluetooth: Wrong link type (-22) [ 575.874603][ T5808] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 575.881318][ T5808] Bluetooth: Wrong link type (-22) [ 575.886874][ T5808] Bluetooth: Wrong link type (-71) [ 575.893800][ T5808] Bluetooth: hci7: link tx timeout [ 575.899114][ T5808] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 576.234220][ T5808] Bluetooth: hci1: command tx timeout [ 576.370737][ T8260] team0: Port device team_slave_0 added [ 576.448605][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.533283][ T8318] block nbd4: NBD_DISCONNECT [ 576.543534][ T8318] block nbd4: Disconnected due to user request. [ 576.550030][ T8318] block nbd4: shutting down sockets [ 576.580868][ T8260] team0: Port device team_slave_1 added [ 576.679285][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.060981][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.159923][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.167328][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.193693][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.293531][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.417296][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.424783][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.451209][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.922605][ T57] bridge_slave_1: left allmulticast mode [ 577.928663][ T57] bridge_slave_1: left promiscuous mode [ 577.935434][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.943077][ T5808] Bluetooth: hci7: command 0x0406 tx timeout [ 578.109307][ T57] bridge_slave_0: left allmulticast mode [ 578.115312][ T57] bridge_slave_0: left promiscuous mode [ 578.122062][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.347396][ T5805] Bluetooth: hci1: command tx timeout [ 578.950566][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.989780][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.067123][ T57] bond0 (unregistering): Released all slaves [ 579.226619][ T8260] hsr_slave_0: entered promiscuous mode [ 579.236342][ T8260] hsr_slave_1: entered promiscuous mode [ 579.244903][ T8260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.252783][ T8260] Cannot create hsr debugfs directory [ 580.030267][ T57] hsr_slave_0: left promiscuous mode [ 580.052944][ T57] hsr_slave_1: left promiscuous mode [ 580.060700][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.068584][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.118971][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.131819][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.221273][ T57] veth1_macvtap: left promiscuous mode [ 580.233976][ T57] veth0_macvtap: left promiscuous mode [ 580.239872][ T57] veth1_vlan: left promiscuous mode [ 580.245573][ T57] veth0_vlan: left promiscuous mode [ 581.222171][ T8353] block nbd1: NBD_DISCONNECT [ 581.227462][ T8353] block nbd1: Disconnected due to user request. [ 581.234459][ T8353] block nbd1: shutting down sockets [ 581.318540][ T5805] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 581.325513][ T5805] Bluetooth: Wrong link type (-22) [ 581.331017][ T5805] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 581.337862][ T5805] Bluetooth: Wrong link type (-22) [ 581.343371][ T5805] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 581.350066][ T5805] Bluetooth: Wrong link type (-22) [ 581.356350][ T5805] Bluetooth: Wrong link type (-71) [ 582.075367][ T57] team0 (unregistering): Port device team_slave_1 removed [ 582.188219][ T57] team0 (unregistering): Port device team_slave_0 removed [ 583.610586][ T8379] loop2: detected capacity change from 0 to 7 [ 583.656254][ T8379] Dev loop2: unable to read RDB block 7 [ 583.662543][ T8379] loop2: unable to read partition table [ 583.697989][ T8379] loop2: partition table beyond EOD, truncated [ 583.705026][ T8379] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 584.123590][ T8384] block nbd4: NBD_DISCONNECT [ 584.159009][ T8260] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 584.275178][ T8260] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 584.461098][ T8260] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 584.658458][ T8260] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 584.752232][ T5805] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 584.759139][ T5805] Bluetooth: Wrong link type (-22) [ 584.765769][ T5805] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 584.772612][ T5805] Bluetooth: Wrong link type (-22) [ 584.778015][ T5805] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 584.784837][ T5805] Bluetooth: Wrong link type (-22) [ 584.790241][ T5805] Bluetooth: Wrong link type (-71) [ 585.118204][ T8390] syz.4.431 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 585.762344][ T7033] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 585.962833][ T7683] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 585.987242][ T7033] usb 5-1: Using ep0 maxpacket: 32 [ 586.054348][ T7033] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.068570][ T7033] usb 5-1: config 0 has no interfaces? [ 586.076348][ T7033] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 586.085895][ T7033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.250751][ T7683] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.264231][ T7683] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 586.274446][ T7683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.661733][ T7033] usb 5-1: config 0 descriptor?? [ 586.685765][ T7683] usb 2-1: config 0 descriptor?? [ 586.805945][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.574376][ T7683] usbhid 2-1:0.0: can't add hid device: -71 [ 587.580968][ T7683] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 587.723285][ T7683] usb 2-1: USB disconnect, device number 3 [ 587.749121][ T8260] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.842362][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.849699][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.944012][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.950784][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.009718][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.017197][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.943786][ T8418] block nbd3: NBD_DISCONNECT [ 590.240579][ T8260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.302153][ T8465] block nbd3: NBD_DISCONNECT [ 593.147750][ T8260] veth0_vlan: entered promiscuous mode [ 593.251251][ T8260] veth1_vlan: entered promiscuous mode [ 593.725277][ T8260] veth0_macvtap: entered promiscuous mode [ 593.800774][ T8260] veth1_macvtap: entered promiscuous mode [ 593.902059][ T7683] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 594.005192][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.015962][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.026066][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.036689][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.046875][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.057659][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.070743][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.206750][ T7683] usb 4-1: Using ep0 maxpacket: 32 [ 594.208816][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.224810][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.235102][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.245743][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.255759][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.266407][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.279255][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.343884][ T7683] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 594.352712][ T7683] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 594.361673][ T7683] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 594.370805][ T7683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 594.380687][ T7683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 594.390516][ T7683] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 594.403754][ T7683] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 594.412970][ T7683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.729918][ T7683] usb 4-1: config 0 descriptor?? [ 594.770700][ T8260] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.779797][ T8260] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.788880][ T8260] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.797902][ T8260] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.974669][ T7683] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 595.096613][ T7683] usb 4-1: USB disconnect, device number 4 [ 595.140077][ T7683] usblp0: removed [ 595.582318][ T7683] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 595.836466][ T7683] usb 4-1: Using ep0 maxpacket: 32 [ 595.909019][ T7683] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 595.917888][ T7683] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 595.926781][ T7683] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 595.935973][ T7683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 595.945801][ T7683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 595.955648][ T7683] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 595.968850][ T7683] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 595.978103][ T7683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.192936][ T7683] usb 4-1: config 0 descriptor?? [ 596.205275][ T8390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.285792][ T7033] usb 5-1: USB disconnect, device number 5 [ 596.418761][ T7683] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 596.521035][ T8509] capability: warning: `syz.1.459' uses deprecated v2 capabilities in a way that may be insecure [ 596.992134][ T7033] usb 4-1: USB disconnect, device number 5 [ 597.032590][ T7033] usblp0: removed [ 597.851972][ T7033] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 598.264220][ T7033] usb 2-1: config 0 has no interfaces? [ 598.675400][ T7033] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 598.686671][ T7033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.695273][ T7033] usb 2-1: Product: syz [ 598.699643][ T7033] usb 2-1: Manufacturer: syz [ 598.704529][ T7033] usb 2-1: SerialNumber: syz [ 598.742395][ T7033] usb 2-1: config 0 descriptor?? [ 599.626413][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.636337][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.201145][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.203947][ T8598] syz_tun: entered allmulticast mode [ 603.209780][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.313116][ T8597] syz_tun: left allmulticast mode [ 603.321924][ T7683] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 603.506242][ T7683] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.518049][ T7683] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 603.546872][ T3802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.555348][ T3802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.587658][ T7683] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= b.98 [ 603.597361][ T7683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.605892][ T7683] usb 4-1: Product: syz [ 603.610223][ T7683] usb 4-1: Manufacturer: syz [ 603.615074][ T7683] usb 4-1: SerialNumber: syz [ 603.693697][ T7683] usb 4-1: config 0 descriptor?? [ 604.393975][ T7683] usb 4-1: USB disconnect, device number 6 [ 604.867638][ T8613] xt_hashlimit: size too large, truncated to 1048576 [ 607.563759][ T8643] block nbd3: NBD_DISCONNECT [ 608.451901][ T7683] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 608.672206][ T7683] usb 4-1: Using ep0 maxpacket: 8 [ 608.786369][ T7683] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 608.795925][ T7683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.804328][ T7683] usb 4-1: Product: syz [ 608.808701][ T7683] usb 4-1: Manufacturer: syz [ 608.813729][ T7683] usb 4-1: SerialNumber: syz [ 608.944656][ T7683] usb 4-1: config 0 descriptor?? [ 608.975142][ T7683] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 608.983801][ T7683] usb 4-1: setting power ON [ 608.988531][ T7683] dvb-usb: bulk message failed: -22 (2/0) [ 609.059871][ T7683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 609.073398][ T7683] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 609.082295][ T7683] usb 4-1: media controller created [ 609.182425][ T7683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.236190][ T5853] usb 2-1: USB disconnect, device number 4 [ 609.434695][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.445705][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.542819][ T8662] netlink: 'syz.2.490': attribute type 3 has an invalid length. [ 609.553730][ T8650] dvb-usb: bulk message failed: -22 (3/0) [ 609.559667][ T8650] ===================================================== [ 609.567271][ T8650] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 609.574684][ T8650] cxusb_i2c_xfer+0x1303/0x18e0 [ 609.579641][ T8650] __i2c_transfer+0xec7/0x30e0 [ 609.584610][ T8650] i2c_transfer+0x300/0x4b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 609.589220][ T8650] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 609.595207][ T8650] i2cdev_ioctl+0xc36/0xf40 [ 609.599901][ T8650] __se_sys_ioctl+0x239/0x400 [ 609.605263][ T8650] __x64_sys_ioctl+0x97/0xe0 [ 609.610019][ T8650] x64_sys_call+0x1ebe/0x3db0 [ 609.614993][ T8650] do_syscall_64+0xd9/0x1b0 [ 609.619689][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.626214][ T8650] [ 609.628636][ T8650] Local variable i.i838 created at: [ 609.634940][ T8650] cxusb_i2c_xfer+0x304/0x18e0 [ 609.639873][ T8650] __i2c_transfer+0xec7/0x30e0 [ 609.644969][ T8650] [ 609.647392][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.3.486 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 609.660553][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.670934][ T8650] ===================================================== [ 609.678564][ T8650] Disabling lock debugging due to kernel taint [ 609.685167][ T8650] Kernel panic - not syncing: kmsan.panic set ... [ 609.691728][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.3.486 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 609.705480][ T8650] Tainted: [B]=BAD_PAGE [ 609.709688][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.719866][ T8650] Call Trace: [ 609.723277][ T8650] [ 609.726321][ T8650] __dump_stack+0x26/0x30 [ 609.730852][ T8650] dump_stack_lvl+0x53/0x270 [ 609.735638][ T8650] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 609.741659][ T8650] dump_stack+0x1e/0x25 [ 609.745993][ T8650] panic+0x4bd/0xd50 [ 609.750034][ T8650] kmsan_report+0x29d/0x2a0 [ 609.754657][ T8650] ? vprintk_default+0x3f/0x50 [ 609.759550][ T8650] ? __msan_warning+0x96/0x120 [ 609.764431][ T8650] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 609.769556][ T8650] ? __i2c_transfer+0xec7/0x30e0 [ 609.774611][ T8650] ? i2c_transfer+0x300/0x4b0 [ 609.779400][ T8650] ? i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 609.784649][ T8650] ? i2cdev_ioctl+0xc36/0xf40 [ 609.789465][ T8650] ? __se_sys_ioctl+0x239/0x400 [ 609.794454][ T8650] ? __x64_sys_ioctl+0x97/0xe0 [ 609.799305][ T8650] ? x64_sys_call+0x1ebe/0x3db0 [ 609.804274][ T8650] ? do_syscall_64+0xd9/0x1b0 [ 609.809063][ T8650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.815299][ T8650] ? kmsan_get_metadata+0x105/0x1b0 [ 609.820616][ T8650] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 609.827056][ T8650] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 609.833268][ T8650] ? kmsan_get_metadata+0x105/0x1b0 [ 609.838624][ T8650] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 609.845101][ T8650] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 609.851293][ T8650] ? mutex_unlock+0x29/0x50 [ 609.855899][ T8650] ? kmsan_get_metadata+0x105/0x1b0 [ 609.861216][ T8650] __msan_warning+0x96/0x120 [ 609.865903][ T8650] cxusb_i2c_xfer+0x1303/0x18e0 [ 609.870866][ T8650] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 609.877036][ T8650] ? kmsan_get_metadata+0x105/0x1b0 [ 609.882355][ T8650] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 609.888285][ T8650] ? kmsan_get_metadata+0x105/0x1b0 [ 609.893596][ T8650] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 609.898892][ T8650] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 609.904202][ T8650] __i2c_transfer+0xec7/0x30e0 [ 609.909094][ T8650] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 609.915537][ T8650] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 609.921418][ T8650] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 609.927674][ T8650] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 609.933530][ T8650] i2c_transfer+0x300/0x4b0 [ 609.938152][ T8650] i2cdev_ioctl_rdwr+0x7c2/0xc80 [ 609.943227][ T8650] i2cdev_ioctl+0xc36/0xf40 [ 609.947847][ T8650] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 609.952980][ T8650] __se_sys_ioctl+0x239/0x400 [ 609.957754][ T8650] __x64_sys_ioctl+0x97/0xe0 [ 609.962462][ T8650] x64_sys_call+0x1ebe/0x3db0 [ 609.967321][ T8650] do_syscall_64+0xd9/0x1b0 [ 609.971936][ T8650] ? irqentry_exit+0x16/0x60 [ 609.976710][ T8650] ? clear_bhb_loop+0x25/0x80 [ 609.981507][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.987565][ T8650] RIP: 0033:0x7f325538e969 [ 609.992076][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.011869][ T8650] RSP: 002b:00007f32561ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.020397][ T8650] RAX: ffffffffffffffda RBX: 00007f32555b5fa0 RCX: 00007f325538e969 [ 610.028557][ T8650] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 610.036625][ T8650] RBP: 00007f3255410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 610.044678][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.052723][ T8650] R13: 0000000000000000 R14: 00007f32555b5fa0 R15: 00007ffd6f8afb58 [ 610.060802][ T8650] [ 610.064060][ T8650] Kernel Offset: disabled [ 610.068459][ T8650] Rebooting in 86400 seconds..