last executing test programs: 15.479046177s ago: executing program 4 (id=232): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 14.292497853s ago: executing program 1 (id=238): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 14.291730113s ago: executing program 4 (id=239): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x44004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0xa) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 12.76902502s ago: executing program 4 (id=240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_gettime(0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[]) r4 = syz_open_dev$rtc(0x0, 0x5, 0x4000) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000001c0)={0x1, 0x0, {0x26, 0x32, 0x17, 0x2, 0xa, 0x0, 0x4, 0xe6, 0xffffffffffffffff}}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=@v3={0x3000000, [{0xa25, 0x8}, {0x0, 0x5}]}, 0x18, 0x4) 12.336216533s ago: executing program 1 (id=241): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0xffff2000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20000, 0x0) epoll_pwait2(r3, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000400000008000400ffff00000800030006000000050006"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 9.948179245s ago: executing program 2 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 9.938458405s ago: executing program 1 (id=244): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delnexthop={0x18, 0x69, 0xb}, 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000840) setsockopt$inet_tcp_int(r1, 0x6, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310002000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) 9.938095385s ago: executing program 4 (id=245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x100000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x100, 0x101], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.536194174s ago: executing program 1 (id=247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 9.47816487s ago: executing program 2 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 8.485274187s ago: executing program 1 (id=251): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8.218453053s ago: executing program 2 (id=253): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001800)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) inotify_add_watch(r0, 0x0, 0x20000200) write$cgroup_subtree(r5, 0x0, 0x33fe0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r6, 0x0, 0x8000002b) 7.068473014s ago: executing program 0 (id=254): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000e7000904"], 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) pipe2$9p(&(0x7f0000000240), 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x40880) mount$9p_fd(0x0, 0x0, 0x0, 0x80, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000003c0)={0x1, 0x29, 0x5, &(0x7f0000000380)={0x12, "a0acac25062cff010000000000000014e1539402bb225c00"}}) 7.068108674s ago: executing program 4 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_gettime(0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[]) r6 = syz_open_dev$rtc(0x0, 0x5, 0x4000) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f00000001c0)={0x1, 0x0, {0x26, 0x32, 0x17, 0x2, 0xa, 0x0, 0x4, 0xe6, 0xffffffffffffffff}}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=@v3={0x3000000, [{0xa25, 0x8}, {0x0, 0x5}]}, 0x18, 0x4) 6.768521733s ago: executing program 1 (id=256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, 0x0, 0x0, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0xcf}, 0x14) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r9, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r8, &(0x7f00000001c0)='m', 0xfffffdfc}]) 6.673869732s ago: executing program 2 (id=257): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0xffff2000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20000, 0x0) epoll_pwait2(r3, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000400000008000400ffff00000800030006000000050006"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 5.416076364s ago: executing program 2 (id=259): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f21"], 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000340)=0x1d) 5.111103994s ago: executing program 3 (id=260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x1, 0x6, 0x8000, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "4a4faa7920a000ad"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 4.01844953s ago: executing program 0 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x45ff1503}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x6}, 0x3}], 0x4, 0x4022, 0x0) 3.894952142s ago: executing program 0 (id=262): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 3.837525058s ago: executing program 3 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 2.798224128s ago: executing program 0 (id=264): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x44004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0xa) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 2.797786969s ago: executing program 3 (id=265): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x200fad6, 0x40, 0x1}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_adjtime(0x3, &(0x7f0000000040)={0xd54, 0x0, 0xfffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x8000000) socket$kcm(0x10, 0x2, 0x0) 1.977889438s ago: executing program 4 (id=266): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.800328216s ago: executing program 0 (id=267): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.799585276s ago: executing program 3 (id=268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 1.166252887s ago: executing program 2 (id=269): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001800)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) inotify_add_watch(r0, 0x0, 0x20000200) write$cgroup_subtree(r5, 0x0, 0x33fe0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r6, 0x0, 0x8000002b) 728.85599ms ago: executing program 3 (id=270): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delnexthop={0x18, 0x69, 0xb}, 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000840) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000080)=0x7fe00, 0x4) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 663.694206ms ago: executing program 0 (id=271): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140), 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20000, 0x0) epoll_pwait2(r4, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d022bbd7000fedbdf2501000000050005000400000008000400ffff00000800030006000000050006"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 0s ago: executing program 3 (id=272): capset(&(0x7f0000000080)={0x20080522}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x481}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@remote, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 81.018940][ T4176] cgroup: Unknown subsys name 'net' [ 81.163119][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.756846][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.407753][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 84.530203][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 84.577604][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 84.663588][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 84.678671][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.686583][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.696815][ T4197] device bridge_slave_0 entered promiscuous mode [ 84.748494][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.757461][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.767611][ T4197] device bridge_slave_1 entered promiscuous mode [ 84.782984][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 84.870490][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.912164][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.935895][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.944570][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.953129][ T4194] device bridge_slave_0 entered promiscuous mode [ 84.962722][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.971007][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.982155][ T4187] device bridge_slave_0 entered promiscuous mode [ 85.001572][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.010877][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.020450][ T4193] device bridge_slave_0 entered promiscuous mode [ 85.035241][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.043418][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.052320][ T4194] device bridge_slave_1 entered promiscuous mode [ 85.065329][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.074192][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.086377][ T4187] device bridge_slave_1 entered promiscuous mode [ 85.104747][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.112469][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.121252][ T4193] device bridge_slave_1 entered promiscuous mode [ 85.163109][ T4197] team0: Port device team_slave_0 added [ 85.215418][ T4197] team0: Port device team_slave_1 added [ 85.223770][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.247006][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.257277][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.268235][ T4188] device bridge_slave_0 entered promiscuous mode [ 85.280245][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.306943][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.326251][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.340055][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.352317][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.363993][ T4188] device bridge_slave_1 entered promiscuous mode [ 85.377376][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.414350][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.446836][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.455554][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.490449][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.546505][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.559167][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.599600][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.617216][ T4187] team0: Port device team_slave_0 added [ 85.645260][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.662698][ T4194] team0: Port device team_slave_0 added [ 85.681386][ T4187] team0: Port device team_slave_1 added [ 85.693012][ T4193] team0: Port device team_slave_0 added [ 85.706599][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.724560][ T4194] team0: Port device team_slave_1 added [ 85.762290][ T4193] team0: Port device team_slave_1 added [ 85.839980][ T4197] device hsr_slave_0 entered promiscuous mode [ 85.852844][ T4197] device hsr_slave_1 entered promiscuous mode [ 85.862779][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.871493][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.903545][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.931768][ T4188] team0: Port device team_slave_0 added [ 85.940771][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.951089][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.983686][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.999865][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.009045][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.044633][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.058748][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.069232][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.102147][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.115696][ T4214] Bluetooth: hci3: command 0x0409 tx timeout [ 86.115711][ T1342] Bluetooth: hci1: command 0x0409 tx timeout [ 86.126689][ T4188] team0: Port device team_slave_1 added [ 86.137081][ T1342] Bluetooth: hci4: command 0x0409 tx timeout [ 86.148380][ T1342] Bluetooth: hci0: command 0x0409 tx timeout [ 86.157057][ T1342] Bluetooth: hci2: command 0x0409 tx timeout [ 86.166664][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.174522][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.206570][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.225012][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.232832][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.266212][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.369434][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.377399][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.410633][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.461513][ T4194] device hsr_slave_0 entered promiscuous mode [ 86.470609][ T4194] device hsr_slave_1 entered promiscuous mode [ 86.479282][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.489567][ T4194] Cannot create hsr debugfs directory [ 86.510494][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.519733][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.560027][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.610468][ T4193] device hsr_slave_0 entered promiscuous mode [ 86.619668][ T4193] device hsr_slave_1 entered promiscuous mode [ 86.627622][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.637717][ T4193] Cannot create hsr debugfs directory [ 86.651323][ T4187] device hsr_slave_0 entered promiscuous mode [ 86.659220][ T4187] device hsr_slave_1 entered promiscuous mode [ 86.669397][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.687535][ T4187] Cannot create hsr debugfs directory [ 86.829892][ T4188] device hsr_slave_0 entered promiscuous mode [ 86.838807][ T4188] device hsr_slave_1 entered promiscuous mode [ 86.848783][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.858248][ T4188] Cannot create hsr debugfs directory [ 87.130828][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.145613][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.157805][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.168549][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.227736][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.239161][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.250410][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.275503][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.356526][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.398580][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.425929][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.436793][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.528454][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.548163][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.583697][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.605147][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.643463][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.660095][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.676158][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.689285][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.702495][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.724773][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.740576][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.756247][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.771273][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.810526][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.822547][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.836560][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.846973][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.859758][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.870370][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.881446][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.896420][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.906595][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.915942][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.929399][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.943420][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.975059][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.003318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.017168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.027897][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.036204][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.047870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.065987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.100374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.117209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.130366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.143989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.153830][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.162649][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.175200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.186349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.195828][ T4249] Bluetooth: hci2: command 0x041b tx timeout [ 88.203845][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 88.211710][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.221775][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 88.230504][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.240028][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 88.248281][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 88.292603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.306036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.321698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.335828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.346451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.356492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.370188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.380999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.391429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.401603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.439219][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.450280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.460920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.472799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.483108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.512696][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.529771][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.582777][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.601828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.612208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.632659][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.657055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.686703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.729952][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.745252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.763541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.773815][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.781310][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.789864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.800884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.811227][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.819410][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.829002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.847905][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.888004][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.899442][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.911167][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.923337][ T549] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.932395][ T549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.946123][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.965969][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.977519][ T549] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.985878][ T549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.995945][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.006914][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.017896][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.028357][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.038224][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.056295][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.065139][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.086177][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.095094][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.106351][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.118311][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.132490][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.144217][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.167765][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.180836][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.201534][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.213820][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.223532][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.231982][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.240644][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.250803][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.260511][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.283864][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.311069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.325148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.342338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.355030][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.365661][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.379703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.392723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.404036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.415116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.424671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.433575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.474533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.495501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.511341][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.519792][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.537469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.549596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.561668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.571884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.585247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.612516][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.630473][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.659113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.670094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.680305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.690204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.701720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.713581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.726520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.778871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.796354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.816520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.827961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.841217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.856311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.868510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.882378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.892362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.910288][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.927811][ T4197] device veth0_vlan entered promiscuous mode [ 89.946905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.959464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.985032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.995581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.010905][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.023389][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.033526][ T4194] device veth0_vlan entered promiscuous mode [ 90.050156][ T4197] device veth1_vlan entered promiscuous mode [ 90.059897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.070161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.082571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.095895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.107809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.141268][ T4194] device veth1_vlan entered promiscuous mode [ 90.179283][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.190359][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.215739][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.234902][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.242905][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.275368][ T4249] Bluetooth: hci0: command 0x040f tx timeout [ 90.281715][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 90.284565][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 90.303077][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.304445][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 90.332492][ T4197] device veth0_macvtap entered promiscuous mode [ 90.354934][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 90.362960][ T4194] device veth0_macvtap entered promiscuous mode [ 90.390255][ T4194] device veth1_macvtap entered promiscuous mode [ 90.412014][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.425096][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.444769][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.453758][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.464923][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.475997][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.485668][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.499125][ T4197] device veth1_macvtap entered promiscuous mode [ 90.542674][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.560975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.570164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.582564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.593575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.605793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.643052][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.662035][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.673880][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.685009][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.696148][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.707537][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.720409][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.733845][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.742230][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.752609][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.762672][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.772493][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.782167][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.792098][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.814644][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.826577][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.843588][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.865411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.875480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.888226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.897256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.905613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.916482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.926047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.935536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.945235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.954507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.962961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.972119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.982330][ T4187] device veth0_vlan entered promiscuous mode [ 90.992087][ T4193] device veth0_vlan entered promiscuous mode [ 91.018118][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.027256][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036597][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.045922][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.055322][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.094527][ T4187] device veth1_vlan entered promiscuous mode [ 91.140083][ T4193] device veth1_vlan entered promiscuous mode [ 91.149791][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.163500][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.172924][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.182842][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.330351][ T549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.333143][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.349082][ T549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.349792][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.368506][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.379063][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.389226][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.399162][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.409204][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.426711][ T4188] device veth0_vlan entered promiscuous mode [ 91.449043][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.459846][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.468940][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.480459][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.493322][ T4193] device veth0_macvtap entered promiscuous mode [ 91.510418][ T4187] device veth0_macvtap entered promiscuous mode [ 91.528808][ T4187] device veth1_macvtap entered promiscuous mode [ 91.538000][ T4188] device veth1_vlan entered promiscuous mode [ 91.552223][ T549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.563391][ T549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.582286][ T4193] device veth1_macvtap entered promiscuous mode [ 91.598720][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.609717][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.619896][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.630594][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.641357][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.651353][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.663248][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.691546][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.720351][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.733256][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.738493][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.754084][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.767539][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.780958][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.796440][ T549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.805385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.815604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.825462][ T549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.826716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.845209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.868625][ T4188] device veth0_macvtap entered promiscuous mode [ 91.887783][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.900765][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.912189][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.923519][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.935285][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.947579][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.961663][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.971676][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.984566][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.996186][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.008278][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.044010][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.067401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.079980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.089976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.100784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.111115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.123643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.135884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.148129][ T4188] device veth1_macvtap entered promiscuous mode [ 92.165274][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.176367][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.186563][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.196954][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.215067][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.244959][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.263056][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.276505][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.287441][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.299497][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.313382][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.329614][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.340619][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.370797][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.377753][ T4299] Bluetooth: hci2: command 0x0419 tx timeout [ 92.391226][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 92.401506][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.403793][ T4299] Bluetooth: hci1: command 0x0419 tx timeout [ 92.417545][ T4299] Bluetooth: hci0: command 0x0419 tx timeout [ 92.448107][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.459841][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.471149][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.482161][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 92.495666][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.507460][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.519478][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.530771][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.542220][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.553670][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.565565][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.577763][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.596413][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.624603][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.633680][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.645620][ T4299] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.688093][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.713125][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.724177][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.736428][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.747239][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.759735][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.771120][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.783522][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.797884][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.829733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.855149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.878486][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.900440][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.909680][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.924378][ T4299] usb 2-1: Using ep0 maxpacket: 32 [ 92.936105][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.022788][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.032403][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.050573][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.068476][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.074747][ T4299] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 93.093621][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.139653][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.170346][ T4299] usb 2-1: config 0 descriptor?? [ 93.185877][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.240115][ T4299] gspca_main: sunplus-2.14.0 probing 041e:400b [ 93.333302][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.352428][ T549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.371609][ T549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.382980][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.400028][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.422214][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.461477][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.461964][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.546995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.580648][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.614784][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.702695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.767996][ T4299] gspca_sunplus: reg_w_riv err -110 [ 94.832323][ T4299] sunplus: probe of 2-1:0.0 failed with error -110 [ 95.445901][ T4242] Bluetooth: hci4: command 0x0405 tx timeout [ 95.665389][ T4242] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.734076][ C0] sched: RT throttling activated [ 96.145469][ T4242] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 96.174428][ T4242] usb 1-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 96.234377][ T4242] usb 1-1: config 1 has no interface number 0 [ 96.304948][ T4242] usb 1-1: config 1 interface 188 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.430506][ T4242] usb 1-1: config 1 interface 188 has no altsetting 0 [ 96.726075][ T4242] usb 1-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=be.5c [ 96.777514][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.848678][ T23] usb 2-1: USB disconnect, device number 2 [ 96.868958][ T4242] usb 1-1: Product: syz [ 96.874976][ T4331] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 96.918287][ T4242] usb 1-1: Manufacturer: syz [ 96.934368][ T4242] usb 1-1: SerialNumber: syz [ 97.043301][ T4336] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.130395][ T4242] usb 1-1: can't set config #1, error -71 [ 97.142287][ T4242] usb 1-1: USB disconnect, device number 2 [ 97.304161][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.504469][ T4301] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 97.574386][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 97.608362][ T4357] device syzkaller1 entered promiscuous mode [ 97.695779][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.711328][ T7] usb 3-1: config 0 has no interface number 0 [ 97.721609][ T7] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 97.739475][ T7] usb 3-1: config 0 interface 1 has no altsetting 0 [ 97.776768][ T4349] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 97.797009][ T1111] cfg80211: failed to load regulatory.db [ 98.029122][ T4301] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 98.042596][ T7] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 98.053260][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.062386][ T4301] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 98.073957][ T7] usb 3-1: Product: syz [ 98.079728][ T4301] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 98.101776][ T7] usb 3-1: Manufacturer: syz [ 98.109094][ T7] usb 3-1: SerialNumber: syz [ 98.131846][ T7] usb 3-1: config 0 descriptor?? [ 98.284380][ T4349] usb 2-1: config 5 has an invalid interface number: 148 but max is 0 [ 98.294559][ T4301] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 98.305153][ T4337] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.313159][ T4349] usb 2-1: config 5 has no interface number 0 [ 98.321603][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.331241][ T4349] usb 2-1: config 5 interface 148 has no altsetting 0 [ 98.338815][ T4301] usb 5-1: Product: syz [ 98.343583][ T4301] usb 5-1: Manufacturer: syz [ 98.349824][ T4301] usb 5-1: SerialNumber: syz [ 98.397085][ T4301] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 98.410074][ T4301] imon 5-1:155.0: unable to initialize intf0, err -19 [ 98.420811][ T7] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 98.438543][ T4301] imon:imon_probe: failed to initialize context! [ 98.447658][ T4301] imon 5-1:155.0: unable to register, err -19 [ 98.474508][ T7] cx231xx 3-1:0.1: Failed to read PCB config [ 98.482437][ T7] cx231xx: probe of 3-1:0.1 failed with error -71 [ 98.504567][ T4349] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=2f.a2 [ 98.522544][ T7] usb 3-1: USB disconnect, device number 2 [ 98.534542][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.559287][ T4349] usb 2-1: Product: syz [ 98.567313][ T4349] usb 2-1: Manufacturer: syz [ 98.575829][ T4349] usb 2-1: SerialNumber: syz [ 98.643400][ T4249] usb 5-1: USB disconnect, device number 2 [ 98.684465][ T4337] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 98.696583][ T4337] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 98.819676][ T4337] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 98.840109][ T4337] usb 4-1: config 220 has no interface number 2 [ 98.847661][ T4337] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 98.863875][ T4337] usb 4-1: config 220 interface 0 has no altsetting 0 [ 98.872967][ T4337] usb 4-1: config 220 interface 76 has no altsetting 0 [ 98.887102][ T4337] usb 4-1: config 220 interface 1 has no altsetting 0 [ 98.905160][ T4349] ums-realtek 2-1:5.148: USB Mass Storage device detected [ 99.054491][ T4337] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 99.086263][ T4337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.114468][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.158588][ T4337] usb 4-1: Product: syz [ 99.192275][ T4349] usb 2-1: USB disconnect, device number 3 [ 99.203989][ T4337] usb 4-1: Manufacturer: syz [ 99.242509][ T4337] usb 4-1: SerialNumber: syz [ 99.425566][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 99.544546][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.573536][ T7] usb 3-1: config 0 has no interface number 0 [ 99.605449][ T7] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 99.634765][ T4337] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 99.648337][ T4337] usb 4-1: No valid video chain found. [ 99.677240][ T7] usb 3-1: config 0 interface 1 has no altsetting 0 [ 99.697886][ T4337] usb 4-1: selecting invalid altsetting 0 [ 99.828231][ T4337] usb 4-1: selecting invalid altsetting 0 [ 99.868632][ T4337] usbtest: probe of 4-1:220.1 failed with error -22 [ 99.954392][ T7] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 99.974654][ T4337] usb 4-1: USB disconnect, device number 2 [ 99.984155][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.024386][ T7] usb 3-1: Product: syz [ 100.028804][ T7] usb 3-1: Manufacturer: syz [ 100.272338][ T7] usb 3-1: config 0 descriptor?? [ 100.294408][ T7] usb 3-1: can't set config #0, error -71 [ 100.316107][ T7] usb 3-1: USB disconnect, device number 3 [ 100.480527][ T4373] overlayfs: failed to resolve './file1/file0': -2 [ 102.874267][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.114218][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 103.235518][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 103.726786][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.741476][ T7] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 103.752114][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.765254][ T7] usb 3-1: config 0 descriptor?? [ 105.018471][ T7] playstation 0003:054C:0DF2.0001: item fetching failed at offset 2/5 [ 105.240081][ T7] playstation 0003:054C:0DF2.0001: Parse failed [ 105.247906][ T7] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 105.268419][ T7] usb 3-1: USB disconnect, device number 4 [ 105.494901][ T4299] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 106.804636][ T4299] usb 2-1: config 1 has an invalid interface number: 188 but max is 0 [ 107.454101][ T4299] usb 2-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 107.497427][ T4299] usb 2-1: config 1 has no interface number 0 [ 107.505710][ T4299] usb 2-1: config 1 interface 188 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.541121][ T4299] usb 2-1: config 1 interface 188 has no altsetting 0 [ 108.582241][ T4299] usb 2-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=be.5c [ 108.668698][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.703048][ T4299] usb 2-1: Product: syz [ 108.719781][ T4299] usb 2-1: Manufacturer: syz [ 108.750328][ T4299] usb 2-1: SerialNumber: syz [ 108.924341][ T4299] usb 2-1: can't set config #1, error -71 [ 108.971734][ T4299] usb 2-1: USB disconnect, device number 4 [ 110.174381][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.604878][ T4299] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 110.635318][ T4299] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 112.247867][ T4299] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 112.315124][ T4299] usb 5-1: config 220 has no interface number 2 [ 112.363718][ T4299] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 112.398206][ T4299] usb 5-1: config 220 interface 0 has no altsetting 0 [ 112.414796][ T4299] usb 5-1: config 220 interface 76 has no altsetting 0 [ 112.431564][ T4299] usb 5-1: config 220 interface 1 has no altsetting 0 [ 112.656569][ T4299] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 112.725668][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.939147][ T4299] usb 5-1: Product: syz [ 113.053477][ T4299] usb 5-1: Manufacturer: syz [ 113.177948][ T4299] usb 5-1: SerialNumber: syz [ 113.394586][ T4299] usb 5-1: can't set config #220, error -71 [ 113.429210][ T4299] usb 5-1: USB disconnect, device number 3 [ 113.727664][ T4495] device syzkaller1 entered promiscuous mode [ 115.189434][ T4299] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 115.654382][ T4299] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 115.673136][ T4299] usb 5-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 115.749239][ T4299] usb 5-1: config 1 has no interface number 0 [ 115.764112][ T4299] usb 5-1: config 1 interface 188 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.788190][ T4299] usb 5-1: config 1 interface 188 has no altsetting 0 [ 116.010000][ T4299] usb 5-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=be.5c [ 116.064769][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.073638][ T4299] usb 5-1: Product: syz [ 116.520099][ T4299] usb 5-1: Manufacturer: syz [ 116.564610][ T4299] usb 5-1: SerialNumber: syz [ 116.772374][ T4299] usb 5-1: can't set config #1, error -71 [ 116.839939][ T4299] usb 5-1: USB disconnect, device number 4 [ 120.254278][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.658681][ T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 120.678950][ T23] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 120.719520][ T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 120.751877][ T23] usb 1-1: config 220 has no interface number 2 [ 120.782372][ T23] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 120.814227][ T23] usb 1-1: config 220 interface 0 has no altsetting 0 [ 120.870798][ T23] usb 1-1: config 220 interface 76 has no altsetting 0 [ 120.895430][ T23] usb 1-1: config 220 interface 1 has no altsetting 0 [ 121.017136][ T4564] device syzkaller1 entered promiscuous mode [ 121.080349][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 121.093106][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.123041][ T23] usb 1-1: Product: syz [ 121.133265][ T23] usb 1-1: Manufacturer: syz [ 121.153838][ T23] usb 1-1: SerialNumber: syz [ 121.984689][ T23] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 121.991257][ T23] usb 1-1: No valid video chain found. [ 122.723026][ T23] usb 1-1: selecting invalid altsetting 0 [ 122.835720][ T23] usb 1-1: selecting invalid altsetting 0 [ 122.856255][ T23] usbtest: probe of 1-1:220.1 failed with error -22 [ 122.914428][ T23] usb 1-1: USB disconnect, device number 3 [ 126.194251][ T4271] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 127.234225][ T4271] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 127.386748][ T4271] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 127.574173][ T4271] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 127.974302][ T4301] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 128.545163][ T4271] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 128.612878][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.033213][ T4271] usb 3-1: Product: syz [ 129.084275][ T4271] usb 3-1: Manufacturer: syz [ 129.110478][ T4271] usb 3-1: SerialNumber: syz [ 129.199908][ T4271] usb 3-1: can't set config #155, error -71 [ 129.233661][ T4271] usb 3-1: USB disconnect, device number 5 [ 129.534310][ T4301] usb 1-1: config 5 has an invalid interface number: 148 but max is 0 [ 129.543677][ T4301] usb 1-1: config 5 has no interface number 0 [ 129.560390][ T4301] usb 1-1: config 5 interface 148 has no altsetting 0 [ 129.804693][ T4301] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=2f.a2 [ 129.868486][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.024411][ T4301] usb 1-1: Product: syz [ 130.254940][ T4301] usb 1-1: Manufacturer: syz [ 130.327723][ T4301] usb 1-1: SerialNumber: syz [ 130.491887][ T4301] usb 1-1: can't set config #5, error -71 [ 130.508127][ T4301] usb 1-1: USB disconnect, device number 4 [ 134.987355][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.274413][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 135.475020][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.532479][ T23] usb 5-1: config 0 has no interface number 0 [ 135.796989][ T23] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 135.874265][ T23] usb 5-1: config 0 interface 1 has no altsetting 0 [ 136.124671][ T23] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 136.254887][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.263499][ T23] usb 5-1: Product: syz [ 136.319164][ T23] usb 5-1: Manufacturer: syz [ 136.621591][ T4718] device syzkaller1 entered promiscuous mode [ 136.670873][ T23] usb 5-1: SerialNumber: syz [ 136.699080][ T23] usb 5-1: config 0 descriptor?? [ 137.943747][ T23] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 138.125660][ T23] cx231xx 5-1:0.1: Failed to read PCB config [ 138.131949][ T23] cx231xx: probe of 5-1:0.1 failed with error -71 [ 138.772836][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.780922][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.245234][ T23] usb 5-1: USB disconnect, device number 5 [ 139.262222][ T4300] udevd[4300]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory [ 141.189638][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.434747][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 141.558237][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.303455][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.734145][ T7] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 143.743531][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 143.803376][ T7] usb 2-1: Product: syz [ 143.817599][ T7] usb 2-1: Manufacturer: syz [ 143.822367][ T7] usb 2-1: SerialNumber: syz [ 143.830683][ T7] usb 2-1: config 0 descriptor?? [ 144.064350][ T7] usb 2-1: can't set config #0, error -71 [ 144.072760][ T7] usb 2-1: USB disconnect, device number 5 [ 144.674667][ T4271] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.205637][ T4271] usb 1-1: Using ep0 maxpacket: 8 [ 146.644762][ T4271] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.814186][ T4349] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.995912][ T4271] usb 1-1: unable to read config index 0 descriptor/all [ 147.040171][ T4271] usb 1-1: can't read configurations, error -71 [ 147.754147][ T4349] usb 2-1: Using ep0 maxpacket: 32 [ 147.874357][ T4349] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 148.568621][ T4349] usb 2-1: config 0 has no interface number 0 [ 148.585197][ T4349] usb 2-1: config 0 interface 184 has no altsetting 0 [ 149.524449][ T4349] usb 2-1: string descriptor 0 read error: -71 [ 150.094971][ T4349] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.588461][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.599410][ T4349] usb 2-1: config 0 descriptor?? [ 150.624471][ T4349] usb 2-1: can't set config #0, error -71 [ 150.663745][ T4349] usb 2-1: USB disconnect, device number 6 [ 154.644130][ T4349] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.774334][ T4178] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 155.209990][ T4349] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 155.220684][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.242263][ T4349] usb 3-1: config 0 descriptor?? [ 155.356481][ T4178] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.425808][ T4178] usb 1-1: not running at top speed; connect to a high speed hub [ 155.544886][ T4178] usb 1-1: config 2 has an invalid interface number: 213 but max is 1 [ 155.567494][ T4178] usb 1-1: config 2 has an invalid interface number: 5 but max is 1 [ 155.603150][ T4178] usb 1-1: config 2 has no interface number 0 [ 155.632573][ T4178] usb 1-1: config 2 has no interface number 1 [ 155.653413][ T4349] gspca_main: mars-2.14.0 probing 093a:050f [ 155.661469][ T4178] usb 1-1: config 2 interface 5 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 155.672396][ T4349] usb 3-1: USB disconnect, device number 6 [ 155.784114][ T4178] usb 1-1: config 2 interface 5 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 155.814127][ T4178] usb 1-1: config 2 interface 5 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.838838][ T4178] usb 1-1: config 2 interface 213 has no altsetting 0 [ 157.443695][ T4178] usb 1-1: New USB device found, idVendor=12d1, idProduct=142c, bcdDevice= 0.00 [ 157.453312][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.461726][ T4178] usb 1-1: Product: syz [ 157.466552][ T4178] usb 1-1: Manufacturer: syz [ 157.471376][ T4178] usb 1-1: SerialNumber: syz [ 157.684293][ T4178] usb 1-1: can't set config #2, error -71 [ 157.734063][ T4178] usb 1-1: USB disconnect, device number 7 [ 164.731256][ T4989] netlink: 14 bytes leftover after parsing attributes in process `syz.1.185'. [ 165.684270][ T4989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.804331][ T4989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.833549][ T4989] bond0 (unregistering): Released all slaves [ 168.527836][ T4271] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.964123][ T5032] block device autoloading is deprecated and will be removed. [ 172.841335][ T4271] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 172.852131][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.860942][ T4271] usb 1-1: Product: syz [ 172.957847][ T4271] usb 1-1: can't set config #1, error -71 [ 173.000778][ T4271] usb 1-1: USB disconnect, device number 8 [ 178.267816][ T5104] syz.4.218 (5104) used greatest stack depth: 20064 bytes left [ 179.085643][ T5118] process 'syz.1.221' launched './file0' with NULL argv: empty string added [ 179.880814][ T4257] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.464389][ T4257] usb 3-1: Using ep0 maxpacket: 8 [ 182.664216][ T4257] usb 3-1: unable to read config index 0 descriptor/all [ 182.678122][ T4257] usb 3-1: can't read configurations, error -71 [ 191.625501][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.764162][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 192.910030][ T7] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 192.937573][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.954388][ T4329] Bluetooth: (null): Invalid header checksum [ 192.962587][ T4329] Bluetooth: (null): Invalid header checksum [ 192.973026][ T7] usb 1-1: config 0 descriptor?? [ 193.035151][ T4329] Bluetooth: (null): Invalid header checksum [ 193.234440][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 193.243294][ T4242] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 193.249579][ T4325] Bluetooth: (null): Invalid header checksum [ 193.292031][ T4325] Bluetooth: (null): Invalid header checksum [ 193.302263][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.442415][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 193.645268][ T7] usb 1-1: media controller created [ 194.029982][ T4450] Bluetooth: (null): Invalid header checksum [ 194.047117][ T4450] Bluetooth: (null): Invalid header checksum [ 194.053581][ T4450] Bluetooth: (null): Invalid header checksum [ 194.064865][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.107603][ T4450] Bluetooth: (null): Invalid header checksum [ 194.113952][ T4450] Bluetooth: (null): Invalid header checksum [ 194.164335][ T4242] usb 3-1: Using ep0 maxpacket: 32 [ 194.171393][ T4450] Bluetooth: (null): Invalid header checksum [ 194.184973][ T7] az6027: usb out operation failed. (-71) [ 194.194307][ T4450] Bluetooth: (null): Invalid header checksum [ 194.214229][ T7] az6027: usb out operation failed. (-71) [ 194.220036][ T7] stb0899_attach: Driver disabled by Kconfig [ 194.278171][ T4326] Bluetooth: (null): Invalid header checksum [ 194.299679][ T7] az6027: no front-end attached [ 194.299679][ T7] [ 194.322565][ T142] Bluetooth: (null): Invalid header checksum [ 194.339968][ T4242] usb 3-1: no configurations [ 194.344897][ T4242] usb 3-1: can't read configurations, error -22 [ 194.417648][ T142] Bluetooth: (null): Invalid header checksum [ 194.544195][ T7] az6027: usb out operation failed. (-71) [ 194.551088][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 194.827188][ T4242] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.852415][ T549] Bluetooth: (null): Invalid header checksum [ 194.922008][ T549] Bluetooth: (null): Invalid header checksum [ 195.031125][ T549] Bluetooth: (null): Invalid header checksum [ 195.140716][ T549] Bluetooth: (null): Invalid header checksum [ 195.286128][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 195.304411][ T4242] usb 3-1: Using ep0 maxpacket: 32 [ 195.306310][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 195.317827][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 195.329905][ T7] usb 1-1: USB disconnect, device number 9 [ 195.346373][ T4242] usb 3-1: no configurations [ 195.350643][ T549] Bluetooth: (null): Invalid header checksum [ 195.354085][ T4242] usb 3-1: can't read configurations, error -22 [ 195.372069][ T549] Bluetooth: (null): Invalid header checksum [ 195.385666][ T4242] usb usb3-port1: attempt power cycle [ 195.405798][ T549] Bluetooth: (null): Invalid header checksum [ 195.412031][ T549] Bluetooth: (null): Invalid header checksum [ 195.500095][ T549] Bluetooth: (null): Invalid header checksum [ 195.644788][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 196.137700][ T4329] Bluetooth: (null): Invalid header checksum [ 196.199728][ T4329] Bluetooth: (null): Invalid header checksum [ 196.289455][ T4242] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 196.889351][ T4249] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.444249][ T4249] usb 5-1: Using ep0 maxpacket: 32 [ 197.450734][ T4242] usb 3-1: device not accepting address 11, error -71 [ 197.744420][ T4249] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.760691][ T4249] usb 5-1: config 0 has no interface number 0 [ 197.767782][ T4249] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 198.558398][ T5302] ================================================================== [ 198.567554][ T5302] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 198.577156][ T5302] Read of size 1 at addr ffff888062214608 by task syz.3.272/5302 [ 198.585502][ T5302] [ 198.588085][ T5302] CPU: 1 PID: 5302 Comm: syz.3.272 Not tainted syzkaller #0 [ 198.595770][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.606066][ T5302] Call Trace: [ 198.609678][ T5302] [ 198.612775][ T5302] dump_stack_lvl+0x168/0x230 [ 198.615339][ T4249] usb 5-1: config 0 interface 1 has no altsetting 0 [ 198.617542][ T5302] ? show_regs_print_info+0x20/0x20 [ 198.629674][ T5302] ? load_image+0x3b0/0x3b0 [ 198.634422][ T5302] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 198.640207][ T5302] ? xfrm_pol_bin_obj+0x140/0x140 [ 198.645393][ T5302] print_address_description+0x60/0x2d0 [ 198.651277][ T5302] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 198.657981][ T5302] kasan_report+0xdf/0x130 [ 198.662482][ T5302] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 198.669515][ T5302] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 198.676516][ T5302] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 198.683116][ T5302] ? xfrm_policy_alloc+0x75/0x2b0 [ 198.688653][ T5302] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 198.695386][ T5302] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 198.701739][ T5302] xfrm_policy_inexact_insert+0xe0/0x1460 [ 198.708484][ T5302] ? __get_hash_thresh+0x105/0x410 [ 198.714111][ T5302] ? policy_hash_bysel+0x10a/0x570 [ 198.720064][ T5302] xfrm_policy_insert+0x112/0x930 [ 198.725465][ T5302] xfrm_add_policy+0x4d6/0x860 [ 198.730616][ T5302] ? xfrm_dump_sa_done+0xc0/0xc0 [ 198.735614][ T5302] ? apparmor_capable+0x12c/0x190 [ 198.740793][ T5302] ? __nla_parse+0x3c/0x50 [ 198.745372][ T5302] xfrm_user_rcv_msg+0x58d/0x860 [ 198.750374][ T5302] ? xfrm_netlink_rcv+0x90/0x90 [ 198.755437][ T5302] ? xfrm_netlink_rcv+0x66/0x90 [ 198.760429][ T5302] ? xfrm_netlink_rcv+0x66/0x90 [ 198.765689][ T5302] ? xfrm_netlink_rcv+0x66/0x90 [ 198.770686][ T5302] ? __mutex_lock_common+0x431/0x2390 [ 198.776310][ T5302] ? __copy_skb_header+0x417/0x5a0 [ 198.781841][ T5302] ? __skb_clone+0x480/0x790 [ 198.785535][ T4249] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 198.786703][ T5302] netlink_rcv_skb+0x1e0/0x430 [ 198.800827][ T5302] ? xfrm_netlink_rcv+0x90/0x90 [ 198.804239][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.805828][ T5302] ? netlink_ack+0xb60/0xb60 [ 198.818128][ T4249] usb 5-1: Product: syz [ 198.818914][ T5302] ? __lock_acquire+0x7c60/0x7c60 [ 198.823621][ T4249] usb 5-1: Manufacturer: syz [ 198.828660][ T5302] xfrm_netlink_rcv+0x75/0x90 [ 198.828699][ T5302] netlink_unicast+0x774/0x920 [ 198.828732][ T5302] netlink_sendmsg+0x8ab/0xbc0 [ 198.828760][ T5302] ? netlink_getsockopt+0x560/0x560 [ 198.828782][ T5302] ? aa_sock_msg_perm+0x94/0x150 [ 198.828808][ T5302] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 198.828830][ T5302] ? security_socket_sendmsg+0x7c/0xa0 [ 198.840064][ T4249] usb 5-1: SerialNumber: syz [ 198.843452][ T5302] ? netlink_getsockopt+0x560/0x560 [ 198.852392][ T4249] usb 5-1: config 0 descriptor?? [ 198.853867][ T5302] ____sys_sendmsg+0x5a2/0x8c0 [ 198.891478][ T5302] ? memset+0x1e/0x40 [ 198.895630][ T5302] ? __sys_sendmsg_sock+0x30/0x30 [ 198.900984][ T5302] ? import_iovec+0x6f/0xa0 [ 198.905640][ T5302] ___sys_sendmsg+0x1f0/0x260 [ 198.910659][ T5302] ? __sys_sendmsg+0x250/0x250 [ 198.915498][ T5302] ? percpu_counter_add_batch+0x13b/0x160 [ 198.921805][ T5302] ? __fdget+0x18b/0x210 [ 198.926494][ T5302] __se_sys_sendmsg+0x190/0x250 [ 198.931671][ T5302] ? __x64_sys_sendmsg+0x80/0x80 [ 198.936760][ T5302] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 198.943072][ T5302] ? lockdep_hardirqs_on+0x94/0x140 [ 198.948325][ T5302] do_syscall_64+0x4c/0xa0 [ 198.952964][ T5302] ? clear_bhb_loop+0x30/0x80 [ 198.957794][ T5302] ? clear_bhb_loop+0x30/0x80 [ 198.962527][ T5302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.969022][ T5302] RIP: 0033:0x7fee96ecdec9 [ 198.973709][ T5302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.994938][ T5302] RSP: 002b:00007fee95135038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.004017][ T5302] RAX: ffffffffffffffda RBX: 00007fee97124fa0 RCX: 00007fee96ecdec9 [ 199.012654][ T5302] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 199.021391][ T5302] RBP: 00007fee96f50f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.030151][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.039198][ T5302] R13: 00007fee97125038 R14: 00007fee97124fa0 R15: 00007ffe7a1a13e8 [ 199.048058][ T5302] [ 199.051518][ T5302] [ 199.053955][ T5302] Allocated by task 5302: [ 199.058610][ T5302] __kasan_kmalloc+0xb5/0xf0 [ 199.063659][ T5302] sk_prot_alloc+0xe7/0x210 [ 199.068584][ T5302] sk_alloc+0x2f/0x310 [ 199.072958][ T5302] pfkey_create+0xd8/0x560 [ 199.078077][ T5302] __sock_create+0x47b/0x900 [ 199.083217][ T5302] __sys_socket+0xe2/0x170 [ 199.088269][ T5302] __x64_sys_socket+0x76/0x80 [ 199.093108][ T5302] do_syscall_64+0x4c/0xa0 [ 199.098104][ T5302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.104230][ T5302] [ 199.106829][ T5302] The buggy address belongs to the object at ffff888062214000 [ 199.106829][ T5302] which belongs to the cache kmalloc-2k of size 2048 [ 199.122702][ T5302] The buggy address is located 1544 bytes inside of [ 199.122702][ T5302] 2048-byte region [ffff888062214000, ffff888062214800) [ 199.137539][ T5302] The buggy address belongs to the page: [ 199.143327][ T5302] page:ffffea0001888400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062212000 pfn:0x62210 [ 199.155307][ T5302] head:ffffea0001888400 order:3 compound_mapcount:0 compound_pincount:0 [ 199.164243][ T5302] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 199.173069][ T5302] raw: 00fff00000010200 ffffea0000962c08 ffffea0001e5a208 ffff888016842000 [ 199.182669][ T5302] raw: ffff888062212000 0000000000080005 00000001ffffffff 0000000000000000 [ 199.191452][ T5302] page dumped because: kasan: bad access detected [ 199.198065][ T5302] page_owner tracks the page as allocated [ 199.204054][ T5302] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4197, ts 84031291169, free_ts 32885774689 [ 199.224453][ T5302] get_page_from_freelist+0x1b77/0x1c60 [ 199.230577][ T5302] __alloc_pages+0x1e1/0x470 [ 199.235559][ T5302] new_slab+0xc0/0x4b0 [ 199.240170][ T5302] ___slab_alloc+0x81e/0xdf0 [ 199.244965][ T5302] __kmalloc+0x1cd/0x330 [ 199.249310][ T5302] rfkill_alloc+0x9a/0x250 [ 199.253746][ T5302] hci_register_dev+0x41d/0x970 [ 199.258612][ T5302] vhci_create_device+0x32c/0x5c0 [ 199.263957][ T5302] vhci_write+0x391/0x450 [ 199.268872][ T5302] vfs_write+0x712/0xd00 [ 199.273461][ T5302] ksys_write+0x14d/0x250 [ 199.277948][ T5302] do_syscall_64+0x4c/0xa0 [ 199.282668][ T5302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.288710][ T5302] page last free stack trace: [ 199.293423][ T5302] free_unref_page_prepare+0x637/0x6c0 [ 199.299648][ T5302] free_unref_page+0x94/0x280 [ 199.304463][ T5302] free_contig_range+0x96/0xf0 [ 199.309544][ T5302] destroy_args+0x100/0xa20 [ 199.315375][ T5302] debug_vm_pgtable+0x318/0x370 [ 199.321323][ T5302] do_one_initcall+0x1ee/0x680 [ 199.328190][ T5302] do_initcall_level+0x137/0x1f0 [ 199.334476][ T5302] do_initcalls+0x4b/0x90 [ 199.339307][ T5302] kernel_init_freeable+0x3ce/0x560 [ 199.345584][ T5302] kernel_init+0x19/0x1b0 [ 199.350327][ T5302] ret_from_fork+0x1f/0x30 [ 199.354905][ T5302] [ 199.357721][ T5302] Memory state around the buggy address: [ 199.365995][ T5302] ffff888062214500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 199.377366][ T5302] ffff888062214580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 199.386777][ T5302] >ffff888062214600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.396014][ T5302] ^ [ 199.400720][ T5302] ffff888062214680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.408885][ T5302] ffff888062214700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.416961][ T5302] ================================================================== [ 199.425606][ T5302] Disabling lock debugging due to kernel taint [ 199.432588][ T5302] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 199.440168][ T5302] CPU: 1 PID: 5302 Comm: syz.3.272 Tainted: G B syzkaller #0 [ 199.449593][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.460524][ T5302] Call Trace: [ 199.464008][ T5302] [ 199.467212][ T5302] dump_stack_lvl+0x168/0x230 [ 199.472436][ T5302] ? show_regs_print_info+0x20/0x20 [ 199.478380][ T5302] ? load_image+0x3b0/0x3b0 [ 199.483266][ T5302] panic+0x2c9/0x7f0 [ 199.487776][ T5302] ? bpf_jit_dump+0xd0/0xd0 [ 199.492319][ T5302] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 199.499099][ T5302] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 199.506103][ T5302] ? _raw_spin_unlock+0x40/0x40 [ 199.511728][ T5302] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 199.519210][ T5302] check_panic_on_warn+0x80/0xa0 [ 199.526870][ T5302] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 199.535134][ T5302] end_report+0x6d/0xf0 [ 199.541389][ T5302] kasan_report+0x102/0x130 [ 199.546745][ T5302] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 199.554650][ T5302] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 199.563011][ T5302] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 199.569401][ T5302] ? xfrm_policy_alloc+0x75/0x2b0 [ 199.574756][ T5302] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 199.581903][ T5302] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 199.589289][ T5302] xfrm_policy_inexact_insert+0xe0/0x1460 [ 199.596215][ T5302] ? __get_hash_thresh+0x105/0x410 [ 199.602695][ T5302] ? policy_hash_bysel+0x10a/0x570 [ 199.609311][ T5302] xfrm_policy_insert+0x112/0x930 [ 199.614696][ T5302] xfrm_add_policy+0x4d6/0x860 [ 199.620117][ T5302] ? xfrm_dump_sa_done+0xc0/0xc0 [ 199.625701][ T5302] ? apparmor_capable+0x12c/0x190 [ 199.631553][ T5302] ? __nla_parse+0x3c/0x50 [ 199.636119][ T5302] xfrm_user_rcv_msg+0x58d/0x860 [ 199.641416][ T5302] ? xfrm_netlink_rcv+0x90/0x90 [ 199.646413][ T5302] ? xfrm_netlink_rcv+0x66/0x90 [ 199.651980][ T5302] ? xfrm_netlink_rcv+0x66/0x90 [ 199.657168][ T5302] ? xfrm_netlink_rcv+0x66/0x90 [ 199.662317][ T5302] ? __mutex_lock_common+0x431/0x2390 [ 199.667917][ T5302] ? __copy_skb_header+0x417/0x5a0 [ 199.673267][ T5302] ? __skb_clone+0x480/0x790 [ 199.678224][ T5302] netlink_rcv_skb+0x1e0/0x430 [ 199.683521][ T5302] ? xfrm_netlink_rcv+0x90/0x90 [ 199.688738][ T5302] ? netlink_ack+0xb60/0xb60 [ 199.693544][ T5302] ? __lock_acquire+0x7c60/0x7c60 [ 199.698883][ T5302] xfrm_netlink_rcv+0x75/0x90 [ 199.703682][ T5302] netlink_unicast+0x774/0x920 [ 199.708573][ T5302] netlink_sendmsg+0x8ab/0xbc0 [ 199.714303][ T5302] ? netlink_getsockopt+0x560/0x560 [ 199.720025][ T5302] ? aa_sock_msg_perm+0x94/0x150 [ 199.725298][ T5302] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 199.731213][ T5302] ? security_socket_sendmsg+0x7c/0xa0 [ 199.737063][ T5302] ? netlink_getsockopt+0x560/0x560 [ 199.743206][ T5302] ____sys_sendmsg+0x5a2/0x8c0 [ 199.748085][ T5302] ? memset+0x1e/0x40 [ 199.752182][ T5302] ? __sys_sendmsg_sock+0x30/0x30 [ 199.757924][ T5302] ? import_iovec+0x6f/0xa0 [ 199.762848][ T5302] ___sys_sendmsg+0x1f0/0x260 [ 199.767950][ T5302] ? __sys_sendmsg+0x250/0x250 [ 199.772780][ T5302] ? percpu_counter_add_batch+0x13b/0x160 [ 199.778802][ T5302] ? __fdget+0x18b/0x210 [ 199.783066][ T5302] __se_sys_sendmsg+0x190/0x250 [ 199.788117][ T5302] ? __x64_sys_sendmsg+0x80/0x80 [ 199.793182][ T5302] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 199.799551][ T5302] ? lockdep_hardirqs_on+0x94/0x140 [ 199.804927][ T5302] do_syscall_64+0x4c/0xa0 [ 199.809837][ T5302] ? clear_bhb_loop+0x30/0x80 [ 199.815704][ T5302] ? clear_bhb_loop+0x30/0x80 [ 199.820710][ T5302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.827657][ T5302] RIP: 0033:0x7fee96ecdec9 [ 199.832653][ T5302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.854710][ T5302] RSP: 002b:00007fee95135038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.863603][ T5302] RAX: ffffffffffffffda RBX: 00007fee97124fa0 RCX: 00007fee96ecdec9 [ 199.871671][ T5302] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 199.879866][ T5302] RBP: 00007fee96f50f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.888555][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.896741][ T5302] R13: 00007fee97125038 R14: 00007fee97124fa0 R15: 00007ffe7a1a13e8 [ 199.904909][ T5302] [ 199.908359][ T5302] Kernel Offset: disabled [ 199.913323][ T5302] Rebooting in 86400 seconds..