last executing test programs: 1m52.150084941s ago: executing program 3 (id=4): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414"], 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) io_uring_enter(r2, 0x4e14, 0x912a, 0x41, 0x0, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) unshare(0x6a040000) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) 1m36.473462308s ago: executing program 32 (id=4): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414"], 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) io_uring_enter(r2, 0x4e14, 0x912a, 0x41, 0x0, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) unshare(0x6a040000) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) 1m21.220020794s ago: executing program 4 (id=71): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000200)=0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1m20.635013907s ago: executing program 4 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) 1m20.26747097s ago: executing program 4 (id=74): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000021404d2277a9b8dd3e6b2d22a9763a88226ba18052ab25d2ac9ee920e979e492806afa3f828b836772d93cb77533ae3292418941eea71b2064e13be4d86511c6daec7bae21063123a42646b4fafe97eb99e19c9fb59637a4b4cc468809c7cd10d2a4091d5547f92a22a237c12724c88d4dc83c03c17cc46025678c16019076a42a4db12974f5eeb4f552645c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r6, 0x3, 0x4002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000000), 0xe) listen(r7, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 1m15.637997871s ago: executing program 4 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x203f00, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 1m13.800485874s ago: executing program 4 (id=87): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 1m13.589677476s ago: executing program 4 (id=88): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x10000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x66c, [0x0, 0x80000480, 0x8000068c, 0x80000926], 0x0, &(0x7f0000000180), &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x64b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet(0x2, 0x802, 0x1) getsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) fchown(r4, 0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 58.176944311s ago: executing program 33 (id=88): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x10000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x66c, [0x0, 0x80000480, 0x8000068c, 0x80000926], 0x0, &(0x7f0000000180), &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000110000003100000060036272696467655f736c6176655f30000076657468305f746f5f687372000000007663616e300000000000000000000000766c616e31000000000000000000a80000ffffffffffffff00ff000000c62e182f1c67ff00ff00ff006e0000006e000000b20000004552524f520000000000000000000000000000000000000000000000000000002000000063f6700faa549e9894c47c7b4debac0dfc07ac5ed7c8e901eca3392a630900001100000010000000888476657468315f746f5f62726964676500776c616e3100000000000000000000007465616d5f736c6176655f310000000070696d36726567000000000000000000bbbbbbbbbbbb00ff00ff0000000000000000ff00ffffff006e000000020100002a0100006c6f67000000000000000000000000000000000000000000000000000000000024000000000644a1c6b0b9432c3b8b58572c4ef54ab9b5b777ee2ab307875b7c71d8ed000800000049444c4554494d45520000000000000000000000000000000000000000000000280000000900000073797a310000000000000000000000000000000000000000000000000500000000000000434c415353494659000000000000000000000000000000000000000000000000040000000900000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff010000000900000012000000d0ed76657468305f6d616376746170000000766c616e3000000000000000000000007767300000000000000000000000000076657468305f6d616376746170000000aaaaaaaaaabb00000000ffff0180c200000e00ff000000ff160100003e0100006a02000069700000000000000000000000000000000000000000000000000000000000001c000000ac1414aa7f00000100000000000000ff002f08104e214e214e204e22706879736465760000000000000000000000000000000000000000000000000044000000626f6e645f736c6176655f3100000000000000000000000000000000000000006261746164765f736c6176655f300000ff00000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000004000000000000005345434d41524b0000000000000000000000000000000000000000000000000008010000010000000200000073797374656d5f753a6f626a6563745f723a73797374656d645f6c6f676765725f657865635f743a73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff010000000600000010000000809b736974300000000000000000000000006772657461703000000000000000000076657468315f746f5f6261746164760076657468300000000000000000000000aaaaaaaaaabb00000000ffffaaaaaaaaaa18ff0000ff00ffaa0000001a01000066010000636f6e6e62797465730000000000000000000000000000000000000000000000180000000d00000000000000080000000000000000020000000000006c6f6700000000000000000000000000000000000000000000000000000000002400"]}, 0x64b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet(0x2, 0x802, 0x1) getsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) fchown(r4, 0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 29.489349758s ago: executing program 1 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x398}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xb7, 0x2000213}) 26.820442446s ago: executing program 1 (id=197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) syz_open_pts(0xffffffffffffffff, 0x0) io_setup(0x7, 0x0) getpid() inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r5, 0x0, 0x0, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x0) 25.125752368s ago: executing program 1 (id=199): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x1e9a, &(0x7f0000000140)={0x0, 0xbcb5, 0x1000, 0x5, 0x1000}, &(0x7f0000000200), &(0x7f0000000300)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xa) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$netlink(0x10, 0x3, 0x1) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x8, 0x0, 'queue0\x00', 0x200000}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a0b040000000000000000020000004c000480480001880a000100696e6e65720000003800028008000240000000bb0800034000000007080004400000000f08000140000000a1ae7b02800e000100696d6d6564696174650000000000010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xfffffffffffffe01}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 24.484838023s ago: executing program 1 (id=201): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f00000009c0)={0x17df000000000000, r2, r1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x84}}, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) 23.36711549s ago: executing program 1 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x192) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000003c0)={0x8, 0x1000, "88ccc5daf80cd6a4471030967393bca9378705edf628163e", {0x7, 0x2}, 0x800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x4, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {0x0, 0xffffffff}, {0x6}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r6, &(0x7f0000000080)="255b2a20f709b4a43a1307c620044218fe1f90c892edda55948fc95472faf24df297a8e4228b32dcc11a0a004c287b035078ffffffffffeffffd", 0x3a, 0x800, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x4e20, 0x4, @mcast2}}, {{0xa, 0x4e23, 0x9, @private2, 0x5}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="5f00000000003df150d0555f86dd60d2339600103afffe80000000000000000000000000e5d8e8528b535f890b0000000000000000018600907800fd020001000000060a00"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 20.949997337s ago: executing program 1 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x1000, 0x0, 0x0, r2}) 12.582325684s ago: executing program 2 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020801"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 11.590156871s ago: executing program 2 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) fcntl$setown(r0, 0x8, 0x0) 10.501977408s ago: executing program 6 (id=247): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0x1, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK]}, {0x0, 0x6, "609d77d519c4e5ac9b58e4f78793df910598389a5ae77377607f9c54e07d942f87ae98bec8962fb45c18574f11dcd3c41435cbb6fb62a9c970"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd_index=0x7, 0x2, 0x0, 0x0, 0x4}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0xa002a008}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1) socket$netlink(0x10, 0x3, 0x10) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 10.489991318s ago: executing program 2 (id=248): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xf, 0x8041) msgctl$IPC_STAT(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 9.353978876s ago: executing program 2 (id=249): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.397848712s ago: executing program 0 (id=250): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffffffffffae, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000000080)=0xffffffffffffffb9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 5.214415295s ago: executing program 34 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x1000, 0x0, 0x0, r2}) 5.192014404s ago: executing program 0 (id=252): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x9fc) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40005}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, 0x0, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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") 5.037755636s ago: executing program 5 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x84}}, 0x0) 4.515043509s ago: executing program 6 (id=254): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) close(r4) r5 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653f, 0x0, 0x1, 0xd4}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r6 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940), 0x0, 0xfffffffffffffffe) 4.514312009s ago: executing program 5 (id=255): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"c80ebaeae43800cb07b466e4"}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0xff}, @control}, {0x0, 0x0, 0xc4, 0x0, @tick=0x4, {0x0, 0x4}, {0x0, 0x7}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x4426, 0x4e07}}], 0xc4) r2 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0) 4.333284951s ago: executing program 0 (id=256): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x1e9a, &(0x7f0000000140)={0x0, 0xbcb5, 0x1000, 0x5, 0x1000}, &(0x7f0000000200), &(0x7f0000000300)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xa) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$netlink(0x10, 0x3, 0x1) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x8, 0x0, 'queue0\x00', 0x200000}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a0b040000000000000000020000004c000480480001880a000100696e6e65720000003800028008000240000000bb0800034000000007080004400000000f08000140000000a1ae7b02800e000100696d6d6564696174650000000000010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xfffffffffffffe01}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 3.466038627s ago: executing program 5 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 3.398456107s ago: executing program 6 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10040003}, 0x8000) 3.257299238s ago: executing program 6 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x500008b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x16, &(0x7f0000000380)=ANY=[], 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp6\x00') read$sequencer(r5, &(0x7f00000003c0)=""/130, 0x82) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) poll(&(0x7f00000014c0)=[{r2, 0x108}, {r1, 0x8042}, {r3, 0x4000}, {r4, 0x4000}], 0x4, 0xf4d8) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x2000c010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001440)) 3.205985468s ago: executing program 5 (id=260): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000cc0)="b0c650b7c71804200122f8fb5dd5c5538e7daadfceb2a401d44f21958799ad2fb12df6e1453fd2ae43c45039e56bde138fd2fa0b81c7bd88841f0ebbfdf4d9fb60c6b5e6e2a60d073aa9a539e6d1da52768d1f37bd5f372da58af5c9b4b7f01e56bee169a7bd08d55fb8cae8d71d0cb1995079af84248e5212da1699ad218612cbfb7a65c79c40bfa482187fffffffeb5fd617811de787dc0100ab762ec65bce7fdd5ec04ac1be2a8ef38410b1a3197af136a6868634bab7c0c6e4ffcaed7e07d017ea91c648705e1e903d", 0xcb, 0x4004000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.335301031s ago: executing program 6 (id=261): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x3, 0x7ffc1ffb}]}) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x5, 0x9, 0x2]}, &(0x7f0000000300)=0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x8001002, 0xffffffffffffffff, 0x0) 1.265333851s ago: executing program 0 (id=262): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000014c0)={0x5, 0xffffffff, 0x4013, 0x6, 0x19f, 0x0}) 1.097189253s ago: executing program 5 (id=263): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000726) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0xc0) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x21000244) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x1) 1.096437663s ago: executing program 6 (id=264): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) close(r3) r4 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653f, 0x0, 0x1, 0xd4}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080050) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x100}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) 1.005929113s ago: executing program 0 (id=265): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x9fc) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40005}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, 0x0, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14K3xUbSot1NGtsGkVpB9Kmg1vcYk00I2WRDdlObUDTFDyCIqOCTT74IfgBB+hFEKOi7aFFEW33wQTuysxPbtLtJJGnWu/n94HTOmTM7/3Om2bM7O4eZAE6tixFxOyKGIuJKRJSL9WmRZovU3u7Z0wfz7ZRElt39axJJsW53X+3ycESci4idiBiJiK99OeKbyetxm1vbK3P1em2jKFdbq+vV5tb21eXVuaXaUm1tenrqxszNmeszk1nhSP08HxG3vvjkh9/72Zdu/erT3/r97J8vf7vdrM99tNPuiJg/UoAeOvsu5cdiV/sYbbyJYH0wVPSn1O+GAABwKOMRcSkiPpF//y/HUP5tDgAAABgk2edH419JRAYAAAAMrDQiRiNJK8V839FI00qlM4f3I3E2rTearU8tNjbXFtp1EWNRSheX67XJYq7wWJSSdnkqz78oX3ulPB0R70bED8pn8nJlvlFf6PePHwAAAHBKnLuw9/z/H+U0zwMAAAADZqxnAQAAABgUTvkBAABg8Dn/BwAAgIH2lTt32inbfY73wr2tzZXGvasLteZKZXVzvjLf2FivLDUaS/k9+1YP2l+90Vj/TKxt3q+2as1Wtbm1Pbva2FxrzS7veQQ2AAAAcILevfDod0lE7Hz2TJ6iuA8gwB5/7HcDgOM01O8GAH0z3O8GAH1TOnALIwQMuuSA+p6Td359/G0BAADejImPvX79/62i7uDfBoAPMnN9AOD0cXUPTq+SGYBw6o13Fm/3qj/69f8s+58bBQAAHKvRPCVppbgWOBppWqlEvJM/FqCULC7Xa5MR8aGI+G259Ha7PJW/MjlwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADAQItI/5Tkd/OPmCiPj776+8BbyT/L8aQo/OTuj+7PtVobU+31fyvn9RHR+nGx/lrmkQAAAADwf6Bznl4sp/rdGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzbOnD+Z300nG/csXImKsW/zhGMmXI1GKiLN/T2L4pdclETF0DPF3HkbEe93iJ/E8y7KxohXd4p95w/HH8kPTPX4aEeeOIT6cZo/a48/tbu+/NC7my+7vv+EiHVXv8S/97/g31GP8eeeQMc4//kW1Z/yHEeeHu48/u/GTHvEvHTL+N76+vd2rLvtpxETXz59kT6xqa3W92tzavrq8OrdUW6qtTU9P3Zi5OXN9ZrK6uFyvFf92jfH9j//y+X79P9sj/tgB/R8/ZP///fj+0w93sqVu8S9f6v75+16P+Gnx2ffJIt+un9jN73TyL3v/5795f7/+L/To/0H//5cP2f8rX/3uHw65KQBwAppb2ytz9XptY5/MyCG2kZE5Sib7Tufv8Wj7OeLLX8tk/T4sfcz0e2QCAACO24sv/f1uCQAAAAAAAAAAAAAAAAAAAJxeJ3E7sVdj7vSnqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/pPAAAA//+e1d5O") 330.267798ms ago: executing program 2 (id=266): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x84}}, 0x0) 111.35652ms ago: executing program 5 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000080)) 49.95494ms ago: executing program 2 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl(r5, 0x8b01, &(0x7f0000000040)) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590", 0x8}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) openat$sequencer(0xffffff9c, &(0x7f0000000240), 0x141000, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r8, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) sendmsg$802154_dgram(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) 0s ago: executing program 0 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x12, 0x1, 0x0, 0x1, [@generic="753236e92b84ba232253f4eaa8af"]}]}, 0x2c}}, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. syzkaller login: [ 58.749109][ T4171] cgroup: Unknown subsys name 'net' [ 58.877937][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.350974][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.798027][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.882217][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.957948][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.987825][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.998211][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.008206][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.020623][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 62.050424][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.057696][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.065812][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.111814][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 62.171538][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.195065][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.202501][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.210291][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.217907][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.225200][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.233627][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.241238][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.248394][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.256449][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.265923][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.290433][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.297581][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.305864][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.313041][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.320113][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.328379][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.335438][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.342676][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.350611][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.392955][ T4191] team0: Port device team_slave_0 added [ 62.427998][ T4191] team0: Port device team_slave_1 added [ 62.435967][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.450357][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.462000][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.472718][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.491877][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.517711][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.564806][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.572124][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.598153][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.616153][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.627302][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.635589][ T4181] device bridge_slave_0 entered promiscuous mode [ 62.645891][ T4187] team0: Port device team_slave_0 added [ 62.660352][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.667721][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.694100][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.707853][ T4189] team0: Port device team_slave_0 added [ 62.718561][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.726074][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.734472][ T4181] device bridge_slave_1 entered promiscuous mode [ 62.743082][ T4187] team0: Port device team_slave_1 added [ 62.759055][ T4186] team0: Port device team_slave_0 added [ 62.766459][ T4189] team0: Port device team_slave_1 added [ 62.797102][ T4186] team0: Port device team_slave_1 added [ 62.834960][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.870226][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.877320][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.909288][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.923077][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.933152][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.940116][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.966288][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.978234][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.985485][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.011675][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.027029][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.034063][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.052162][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.059147][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.085257][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.106574][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.113693][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.139858][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.151536][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.158502][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.184925][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.235543][ T4181] team0: Port device team_slave_0 added [ 63.243552][ T4181] team0: Port device team_slave_1 added [ 63.302535][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.309322][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.316157][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.324188][ T4189] Cannot create hsr debugfs directory [ 63.352945][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.359665][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.366546][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.374262][ T4187] Cannot create hsr debugfs directory [ 63.392524][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.399496][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.425696][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.437898][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.444908][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.471872][ T4182] Bluetooth: hci1: command 0x0409 tx timeout [ 63.477248][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.478733][ T4182] Bluetooth: hci0: command 0x0409 tx timeout [ 63.510166][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.517006][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.523938][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.531970][ T4186] Cannot create hsr debugfs directory [ 63.541389][ T4182] Bluetooth: hci4: command 0x0409 tx timeout [ 63.547456][ T4182] Bluetooth: hci2: command 0x0409 tx timeout [ 63.611549][ T4182] Bluetooth: hci3: command 0x0409 tx timeout [ 63.711499][ T4181] device hsr_slave_0 entered promiscuous mode [ 63.718343][ T4181] device hsr_slave_1 entered promiscuous mode [ 63.725433][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.734121][ T4181] Cannot create hsr debugfs directory [ 63.886607][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.909728][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.923017][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.947624][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.976862][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.007331][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.016712][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.036672][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.092665][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.109497][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.130432][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.143600][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.168533][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.204611][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.232733][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.244072][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.253618][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.270048][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.278695][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.288596][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.304285][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.314299][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.323920][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.331246][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.340109][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.351158][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.360416][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.370483][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.383491][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.416784][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.427836][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.436799][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.444027][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.473578][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.482615][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.510027][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.520602][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.529656][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.541332][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.549969][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.559629][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.568307][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.579625][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.596998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.605689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.628369][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.646893][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.655502][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.672902][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.698938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.709156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.720153][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.727305][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.767833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.777812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.792683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.802559][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.809646][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.818594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.836816][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.857908][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.884955][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.893557][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.904773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.919510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.940516][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.957567][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.968426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.983987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.995188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.005953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.015437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.029623][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.041485][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.060580][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.068223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.077039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.087701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.096855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.105676][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.112825][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.122404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.145029][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.177283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.187057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.195596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.205610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.215124][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.222263][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.230480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.240398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.249305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.257273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.265270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.274450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.285158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.294603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.304293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.324079][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.352750][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.368008][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.388346][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.395955][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.409491][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.418385][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.428133][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.438892][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.447780][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.455006][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.463670][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.472509][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.481113][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.488200][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.496072][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.505381][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.514321][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.523406][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.531237][ T4244] Bluetooth: hci0: command 0x041b tx timeout [ 65.532491][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.545568][ T4244] Bluetooth: hci1: command 0x041b tx timeout [ 65.553093][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.564595][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.575983][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.584782][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.591904][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.600191][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.621177][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 65.627494][ T4244] Bluetooth: hci4: command 0x041b tx timeout [ 65.663719][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.677792][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.687078][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.695480][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 65.702976][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.713481][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.722040][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.730563][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.739132][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.747879][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.756551][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.763646][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.774197][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.782718][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.791128][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.799974][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.822870][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.841848][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.854103][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.864158][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.878978][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.890487][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.905439][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.917919][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.927065][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.936174][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.944963][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.954168][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.963516][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.999251][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.015254][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.026910][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.036128][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.053570][ T4191] device veth0_vlan entered promiscuous mode [ 66.076073][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.086842][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.100490][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.111474][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.120282][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.128160][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.135957][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.146055][ T1413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.169335][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.181781][ T4191] device veth1_vlan entered promiscuous mode [ 66.202184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.215761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.225024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.242228][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.259232][ T4189] device veth0_vlan entered promiscuous mode [ 66.268696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.277881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.286341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.304892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.318351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.355448][ T4189] device veth1_vlan entered promiscuous mode [ 66.377268][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.400103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.409594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.430235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.453268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.460829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.469214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.480193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.503737][ T4186] device veth0_vlan entered promiscuous mode [ 66.518823][ T4191] device veth0_macvtap entered promiscuous mode [ 66.530279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.540611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.548810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.557756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.575037][ T4186] device veth1_vlan entered promiscuous mode [ 66.590529][ T4191] device veth1_macvtap entered promiscuous mode [ 66.601597][ T4189] device veth0_macvtap entered promiscuous mode [ 66.609638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.619309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.628706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.638053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.658839][ T4189] device veth1_macvtap entered promiscuous mode [ 66.691775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.703572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.712932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.721608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.729140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.737730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.746686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.762540][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.772560][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.782163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.792650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.808458][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.830338][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.843147][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.851489][ T4186] device veth0_macvtap entered promiscuous mode [ 66.880037][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.887999][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.897188][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.908364][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.917499][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.927187][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.937068][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.946085][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.957520][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.968732][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.981632][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.008015][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.017518][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.026659][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.035721][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.069722][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.079367][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.090305][ T4186] device veth1_macvtap entered promiscuous mode [ 67.102265][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.111603][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.120595][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.130114][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.157260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.166328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.178102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.186946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.195886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.204123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.232706][ T4181] device veth0_vlan entered promiscuous mode [ 67.275770][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.290414][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.301237][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.312940][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.324234][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.342350][ T4181] device veth1_vlan entered promiscuous mode [ 67.351708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.360312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.369566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.382017][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.395378][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.405341][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.416058][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.427768][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.470517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.479017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.488635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.502345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.511958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.521064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.529035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.546206][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.556137][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.566184][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.575239][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.586582][ T4187] device veth0_vlan entered promiscuous mode [ 67.612920][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 67.622101][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 67.647447][ T4187] device veth1_vlan entered promiscuous mode [ 67.685105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.693612][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 67.694047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.708176][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 67.712024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.735986][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.757185][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.765523][ T4181] device veth0_macvtap entered promiscuous mode [ 67.778249][ T4244] Bluetooth: hci3: command 0x040f tx timeout [ 67.806773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.809070][ T1413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.821029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.833477][ T1413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.834919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.850337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.861806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.870356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.885191][ T4181] device veth1_macvtap entered promiscuous mode [ 67.900735][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.902105][ T4187] device veth0_macvtap entered promiscuous mode [ 67.921685][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.950211][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.958694][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.967536][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.978099][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.989250][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.999419][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.010457][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.025220][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.035732][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.046950][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.064974][ T4187] device veth1_macvtap entered promiscuous mode [ 68.076121][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.086244][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.095991][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.113775][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.115257][ T1413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.136702][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.143145][ T1413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.147535][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.164776][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.178211][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.188951][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.207714][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.251948][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.259941][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.267737][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.285593][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.325909][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.354286][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.407751][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.470143][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.505741][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.528816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.585837][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.672599][ T1413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.736583][ T1413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.788073][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.860488][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.906157][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.938571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.966275][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.005551][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.026152][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.041115][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #c2!!! [ 69.051092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.060195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.069277][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.078447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.087512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.097483][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.106554][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.163251][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.198375][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.324621][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.420666][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.431366][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.441440][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.452550][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.462668][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.473352][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.483506][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.494280][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.507217][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.515170][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.523822][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.534021][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.543807][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.552795][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.606308][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.633883][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.643266][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.652313][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.696131][ T4192] Bluetooth: hci0: command 0x0419 tx timeout [ 69.703210][ T4192] Bluetooth: hci1: command 0x0419 tx timeout [ 69.882689][ T4192] Bluetooth: hci2: command 0x0419 tx timeout [ 69.891769][ T4192] Bluetooth: hci4: command 0x0419 tx timeout [ 69.919768][ T4192] Bluetooth: hci3: command 0x0419 tx timeout [ 69.953557][ T4301] Zero length message leads to an empty skb [ 70.823366][ T4302] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 70.830217][ T4302] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.838936][ T4302] vhci_hcd vhci_hcd.0: Device attached [ 71.296593][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.306800][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.319037][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.283607][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.310490][ T4298] sched: RT throttling activated [ 73.532149][ T4305] vhci_hcd: connection closed [ 73.533992][ T4291] vhci_hcd: stop threads [ 73.621577][ T4284] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 73.936618][ T4291] vhci_hcd: release socket [ 74.311508][ T4291] vhci_hcd: disconnect device [ 74.324220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.333555][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.375058][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.409250][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.431048][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.464387][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.496497][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.550537][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.567718][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.586020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.981340][ T4244] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.702920][ T4329] device syzkaller0 entered promiscuous mode [ 75.851678][ T4244] usb 3-1: Using ep0 maxpacket: 32 [ 76.061116][ T4244] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 77.375708][ T4244] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 78.100993][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.109039][ T4244] usb 3-1: Product: syz [ 78.113820][ T4244] usb 3-1: Manufacturer: syz [ 78.118450][ T4244] usb 3-1: SerialNumber: syz [ 78.139009][ T4244] usb 3-1: config 0 descriptor?? [ 78.199747][ T4343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14'. [ 78.209422][ T4244] usb 3-1: can't set config #0, error -71 [ 78.219069][ T4343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14'. [ 78.232218][ T4343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14'. [ 78.245493][ T4345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.271042][ T4244] usb 3-1: USB disconnect, device number 2 [ 78.449823][ T4345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.480615][ T4345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.581450][ T4345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.724981][ T4364] binder: 4350:4364 ioctl 40047459 200000000100 returned -22 [ 79.131349][ T4284] vhci_hcd: vhci_device speed not set [ 79.424900][ T4376] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.592121][ T4418] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 84.981471][ T4421] syz.2.29 (4421) used greatest stack depth: 20544 bytes left [ 87.148074][ T7] cfg80211: failed to load regulatory.db [ 87.826566][ T4191] syz-executor (4191) used greatest stack depth: 20096 bytes left [ 88.251034][ T4227] Bluetooth: hci5: command 0x0409 tx timeout [ 88.266559][ T4294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.311148][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.349442][ T4427] chnl_net:caif_netlink_parms(): no params data found [ 88.381468][ T4294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.484726][ T4294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.591165][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 88.623496][ T4294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.697064][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.705157][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.743647][ T4427] device bridge_slave_0 entered promiscuous mode [ 88.761082][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 88.794095][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.814068][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.844056][ T4427] device bridge_slave_1 entered promiscuous mode [ 88.965394][ T4427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.974805][ T7] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 88.991983][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.040847][ T7] usb 5-1: Product: syz [ 89.045425][ T7] usb 5-1: Manufacturer: syz [ 89.055578][ T4427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.091578][ T7] usb 5-1: SerialNumber: syz [ 89.122151][ T7] usb 5-1: config 0 descriptor?? [ 89.171613][ T4459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.246649][ T4427] team0: Port device team_slave_0 added [ 89.253360][ T7] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 89.282758][ T4427] team0: Port device team_slave_1 added [ 89.693965][ T4509] 9pnet_virtio: no channels available for device syz [ 89.750306][ T4192] usb 5-1: USB disconnect, device number 2 [ 89.760948][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 89.971144][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.978439][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.004511][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.132529][ T4427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.152782][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.175796][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.231597][ T4427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.331212][ T4241] Bluetooth: hci5: command 0x041b tx timeout [ 90.428824][ T4427] device hsr_slave_0 entered promiscuous mode [ 90.459490][ T4427] device hsr_slave_1 entered promiscuous mode [ 90.490995][ T4427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.521135][ T4427] Cannot create hsr debugfs directory [ 91.415216][ T4427] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.436208][ T4543] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.547839][ T4427] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.608411][ T4427] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.643747][ T4427] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.753827][ T4294] device hsr_slave_0 left promiscuous mode [ 91.773220][ T4294] device hsr_slave_1 left promiscuous mode [ 91.793030][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.814551][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.848000][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.869882][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.893569][ T4294] device bridge_slave_1 left promiscuous mode [ 91.914686][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.996552][ T4294] device bridge_slave_0 left promiscuous mode [ 92.041583][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.134538][ T4294] device veth1_macvtap left promiscuous mode [ 92.415978][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 92.506989][ T4294] device veth0_macvtap left promiscuous mode [ 92.553863][ T4294] device veth1_vlan left promiscuous mode [ 92.570296][ T4294] device veth0_vlan left promiscuous mode [ 92.861085][ T4227] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.920315][ T4294] team0 (unregistering): Port device team_slave_1 removed [ 92.945954][ T4294] team0 (unregistering): Port device team_slave_0 removed [ 93.035935][ T4294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.101111][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 93.186279][ T4294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.231202][ T4227] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.247789][ T4227] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.267253][ T4227] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.287903][ T4227] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.316969][ T4227] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.326464][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.415234][ T4569] netlink: 68 bytes leftover after parsing attributes in process `syz.4.52'. [ 93.568511][ T4294] bond0 (unregistering): Released all slaves [ 93.651289][ T4227] usb 2-1: GET_CAPABILITIES returned 0 [ 93.657236][ T4227] usbtmc 2-1:16.0: can't read capabilities [ 93.804168][ T4578] process 'syz.0.54' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.871025][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.968393][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.977479][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.986546][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.995613][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.004672][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.013725][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.022775][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.031818][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.040861][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.049928][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.058994][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.068051][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.077107][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.086164][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.095218][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.115622][ T4241] usb 2-1: USB disconnect, device number 2 [ 94.491056][ T1108] Bluetooth: hci5: command 0x0419 tx timeout [ 94.667031][ T4427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.730241][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.848054][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.910612][ T4427] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.987181][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 95.089360][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.127254][ T4598] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET) [ 95.169810][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.207614][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.214771][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.308570][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.378644][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.398158][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.436470][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.443632][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.626295][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.296154][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.418093][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.581817][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.614173][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.667144][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.990176][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.000656][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.022043][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.280242][ T4427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.344450][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.437941][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.488193][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.890605][ T4636] raw_sendmsg: syz.2.66 forgot to set AF_INET. Fix it! [ 99.079974][ T4646] 9pnet_virtio: no channels available for device syz [ 99.182128][ T26] audit: type=1326 audit(1761946456.808:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce78bbfc9 code=0x7ffc0000 [ 99.348963][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.360942][ T26] audit: type=1326 audit(1761946456.838:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0ce78bbfc9 code=0x7ffc0000 [ 99.395495][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.512843][ T26] audit: type=1326 audit(1761946456.848:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce78bbfc9 code=0x7ffc0000 [ 99.512992][ T4427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.656384][ T26] audit: type=1326 audit(1761946456.908:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce78bbfc9 code=0x7ffc0000 [ 99.901036][ T26] audit: type=1326 audit(1761946456.908:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ce78bbfc9 code=0x7ffc0000 [ 99.922952][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.973097][ T4676] 9pnet_virtio: no channels available for device syz [ 100.031433][ T26] audit: type=1326 audit(1761946457.048:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce78bbfc9 code=0x7ffc0000 [ 100.168039][ T26] audit: type=1326 audit(1761946457.048:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce78bbfc9 code=0x7ffc0000 [ 100.190047][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.781625][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.825261][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.024632][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.043427][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.103761][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.155432][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.264462][ T4427] device veth0_vlan entered promiscuous mode [ 101.319599][ T4427] device veth1_vlan entered promiscuous mode [ 101.530050][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.556617][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.641512][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.721841][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.800728][ T4427] device veth0_macvtap entered promiscuous mode [ 101.832378][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.908737][ T4427] device veth1_macvtap entered promiscuous mode [ 102.064676][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.156618][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.197170][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.250978][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.292310][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.353706][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.404585][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.461056][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.589162][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.628349][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.659878][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.723252][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.756629][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.784935][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.831022][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.863004][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.904225][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.938320][ T4427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.017715][ T4427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.049584][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.080147][ T4427] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.109034][ T4427] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.129157][ T4427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.163395][ T4427] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.193441][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.215263][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.554630][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.590134][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.637715][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.663341][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.675654][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.756846][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.027314][ T4725] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 104.313492][ T7] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 104.353018][ T4714] infiniband syz1: set active [ 104.358075][ T4714] infiniband syz1: added syz_tun [ 104.413928][ T4714] infiniband syz1: Couldn't open port 1 [ 104.518368][ T4714] RDS/IB: syz1: added [ 104.532114][ T4714] smc: adding ib device syz1 with port count 1 [ 104.549795][ T4714] smc: ib device syz1 port 1 has pnetid [ 104.691166][ T7] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.732875][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 104.941365][ T7] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.981177][ T7] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.989597][ T7] usb 6-1: Product: syz [ 105.010654][ T7] usb 6-1: Manufacturer: syz [ 105.031338][ T7] usb 6-1: SerialNumber: syz [ 105.077768][ T7] usb 6-1: config 0 descriptor?? [ 105.145421][ T7] usb 6-1: selecting invalid altsetting 0 [ 105.346086][ T4724] udc-core: couldn't find an available UDC or it's busy [ 105.381095][ T4724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.426420][ T4724] usb 6-1: selecting invalid altsetting 0 [ 105.446415][ T4724] usb 6-1: 0:0: usb_set_interface failed (-22) [ 105.463971][ T4724] usb 6-1: selecting invalid altsetting 0 [ 105.470838][ T4724] usb 6-1: 0:0: usb_set_interface failed (-22) [ 105.488393][ T4723] usb 6-1: selecting invalid altsetting 0 [ 105.521050][ T4723] usb 6-1: 0:0: usb_set_interface failed (-22) [ 105.561216][ T4723] usb 6-1: selecting invalid altsetting 0 [ 105.568501][ T4723] usb 6-1: 0:0: usb_set_interface failed (-22) [ 105.602524][ T4723] usb 6-1: selecting invalid altsetting 0 [ 106.461331][ T4723] usb 6-1: 0:0: usb_set_interface failed (-22) [ 106.469397][ T4244] usb 6-1: USB disconnect, device number 2 [ 107.018992][ T4773] overlayfs: failed to resolve './file0': -2 [ 109.897058][ T4822] input: syz0 as /devices/virtual/input/input7 [ 110.662819][ T26] audit: type=1326 audit(1761946468.278:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 110.830011][ T26] audit: type=1326 audit(1761946468.318:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 110.887394][ T26] audit: type=1326 audit(1761946468.348:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 111.007771][ T26] audit: type=1326 audit(1761946468.358:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 111.167940][ T26] audit: type=1326 audit(1761946468.368:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 111.200541][ T26] audit: type=1326 audit(1761946468.368:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 111.314125][ T26] audit: type=1326 audit(1761946468.368:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 111.491847][ T4847] syz.2.104[4847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.491920][ T4847] syz.2.104[4847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.530979][ T26] audit: type=1326 audit(1761946468.368:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 111.615188][ T26] audit: type=1326 audit(1761946468.368:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 111.758314][ T26] audit: type=1326 audit(1761946468.368:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9108039099 code=0x7ffc0000 [ 114.530690][ T4883] netlink: 'syz.2.111': attribute type 13 has an invalid length. [ 115.552027][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.596677][ T4883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.293195][ T4903] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 117.852732][ T4919] tipc: Started in network mode [ 117.870320][ T4919] tipc: Node identity 864b1b49f2c9, cluster identity 4711 [ 117.907322][ T4919] tipc: Enabled bearer , priority 0 [ 117.944313][ T4921] device syzkaller0 entered promiscuous mode [ 118.061101][ T4919] tipc: Resetting bearer [ 118.093039][ T4918] tipc: Resetting bearer [ 118.140480][ T4918] tipc: Disabling bearer [ 120.608736][ T4952] netlink: 108 bytes leftover after parsing attributes in process `syz.0.127'. [ 120.694810][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 120.768081][ T4952] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 120.799837][ T4952] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 120.842553][ T4952] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 120.859857][ T4952] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 120.879235][ T4952] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 121.000986][ T4929] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.360951][ T4929] usb 6-1: Using ep0 maxpacket: 8 [ 121.571700][ T4929] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 121.707954][ T4929] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.859052][ T4929] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.114781][ T4929] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.148511][ T4929] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.173419][ T4929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.401477][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.661210][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 122.781444][ T7] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.820297][ T7] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 123.041253][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 123.060134][ T4929] usb 6-1: GET_CAPABILITIES returned 0 [ 123.086353][ T4929] usbtmc 6-1:16.0: can't read capabilities [ 123.229356][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.372796][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.453887][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.510528][ T4244] usb 6-1: USB disconnect, device number 3 [ 123.561104][ T7] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 123.632024][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.668394][ T7] usb 3-1: config 0 descriptor?? [ 123.830832][ T5008] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 123.956231][ T7] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.025362][ T7] usb 3-1: USB disconnect, device number 3 [ 124.065385][ T7] usblp0: removed [ 124.494890][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.584456][ T4351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.688743][ T4351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.760957][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 124.879358][ T4351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.891090][ T7] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.899432][ T7] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.934426][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.952975][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.980989][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.010962][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.034348][ T7] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.067414][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.111648][ T7] usb 3-1: config 0 descriptor?? [ 125.185063][ T5025] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 125.220620][ T4351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.271014][ T7] usb 3-1: can't set config #0, error -71 [ 125.288716][ T7] usb 3-1: USB disconnect, device number 4 [ 125.445738][ T5006] chnl_net:caif_netlink_parms(): no params data found [ 125.781102][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 125.981909][ T5006] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.021090][ T5006] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.071075][ T5006] device bridge_slave_0 entered promiscuous mode [ 126.136374][ T5006] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.167596][ T5006] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.226598][ T5006] device bridge_slave_1 entered promiscuous mode [ 126.313477][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 126.383890][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 126.401355][ T5045] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.489351][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 126.664653][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 126.838829][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 126.913068][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 126.996790][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 127.075564][ T5047] netlink: 'syz.2.145': attribute type 10 has an invalid length. [ 127.173816][ T5047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.184540][ T5006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.229341][ T5043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.263120][ T5006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.480172][ T5058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.590589][ T5006] team0: Port device team_slave_0 added [ 127.669329][ T5006] team0: Port device team_slave_1 added [ 127.938584][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 128.262578][ T5058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.005701][ T5058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.519950][ T5058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.638476][ T5006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.646525][ T5006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.680528][ T5006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.760421][ T5006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.768758][ T5006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.795665][ T5006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.969183][ T4194] Bluetooth: Frame is too long (len 18, expected len 4) [ 130.035421][ T5058] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.175281][ T5058] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.207273][ T5006] device hsr_slave_0 entered promiscuous mode [ 130.240483][ T5006] device hsr_slave_1 entered promiscuous mode [ 130.280728][ T4351] device hsr_slave_0 left promiscuous mode [ 130.301735][ T4351] device hsr_slave_1 left promiscuous mode [ 130.310305][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.329926][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.361855][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.369451][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.377790][ T4351] device bridge_slave_1 left promiscuous mode [ 130.385313][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.394704][ T4351] device bridge_slave_0 left promiscuous mode [ 130.401469][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.415887][ T4351] device veth1_macvtap left promiscuous mode [ 130.429460][ T4351] device veth0_macvtap left promiscuous mode [ 130.436345][ T4351] device veth1_vlan left promiscuous mode [ 130.449346][ T4351] device veth0_vlan left promiscuous mode [ 130.733312][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 130.775028][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 130.797553][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.820103][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.979062][ T4351] bond0 (unregistering): Released all slaves [ 131.161357][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 131.219786][ T5058] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.244087][ T5058] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.735031][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742064][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.739087][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 135.781148][ T4182] Bluetooth: hci4: command 0x0405 tx timeout [ 136.241518][ T4236] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.521211][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 136.671289][ T4236] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 136.706905][ T4236] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.928323][ T5006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.080602][ T4236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.109917][ T4236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.137642][ T4236] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.196742][ T4236] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.246613][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.307223][ T5006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.338102][ T5006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.541173][ T4236] usb 2-1: GET_CAPABILITIES returned 0 [ 137.546968][ T4236] usbtmc 2-1:16.0: can't read capabilities [ 137.584836][ T5129] kthread_run failed with err -4 [ 137.591090][ T5006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.772423][ T4236] usb 2-1: USB disconnect, device number 3 [ 140.347716][ T5154] binder: 5152:5154 unknown command 0 [ 140.432639][ T5154] binder: 5152:5154 ioctl c0306201 200000000080 returned -22 [ 140.537717][ T5006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.661632][ T5156] binder: 5152:5156 ioctl c0306201 2000000003c0 returned -14 [ 140.936885][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.986107][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.117453][ T5006] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.371583][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.437982][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.476795][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.483930][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.559293][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.583592][ T5166] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 141.625955][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.669717][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.695632][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.702828][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.739347][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.793467][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.831504][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.872461][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.929257][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.972874][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.029078][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.058151][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.114587][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.139603][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.158536][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.212242][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.425319][ T5185] autofs4:pid:5185:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(951.8), cmd(0xc018937e) [ 142.484341][ T5185] autofs4:pid:5185:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 143.801002][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.461386][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.478058][ T5006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.054057][ T5232] infiniband syz2: set down [ 148.058606][ T5232] infiniband syz2: added ipvlan0 [ 148.182244][ T5232] infiniband syz2: Couldn't open port 1 [ 148.198152][ T5232] RDS/IB: syz2: added [ 148.202240][ T5232] smc: adding ib device syz2 with port count 1 [ 148.208403][ T5232] smc: ib device syz2 port 1 has pnetid [ 150.643908][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.687647][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.908944][ T5263] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 152.086788][ T5283] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 152.093458][ T5283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.103567][ T5283] vhci_hcd vhci_hcd.0: Device attached [ 152.401036][ T4236] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 152.939254][ T5284] vhci_hcd: connection reset by peer [ 152.952261][ T4294] vhci_hcd: stop threads [ 152.956649][ T4294] vhci_hcd: release socket [ 153.453704][ T4294] vhci_hcd: disconnect device [ 153.497241][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.552004][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.664435][ T5006] device veth0_vlan entered promiscuous mode [ 153.690954][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.748478][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.777203][ T5006] device veth1_vlan entered promiscuous mode [ 153.899789][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.051395][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.072963][ T5006] device veth0_macvtap entered promiscuous mode [ 154.103992][ T5006] device veth1_macvtap entered promiscuous mode [ 154.133480][ T5301] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 154.192054][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.230945][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.271020][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.296374][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.316776][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.335334][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.382880][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.432361][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.516668][ T5006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.546037][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.578835][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.628025][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.667401][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.698634][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.719449][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.758149][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.799579][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.844888][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.889787][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.937429][ T5006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.001057][ T5006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.068252][ T5297] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 155.081593][ T5006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.121562][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.145234][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.231173][ T5006] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.270635][ T5006] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.354591][ T5006] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.398490][ T5006] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.445979][ T5320] 9pnet: Insufficient options for proto=fd [ 155.630082][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.663686][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.729495][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.794805][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.816501][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.871903][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.188859][ T4236] vhci_hcd: vhci_device speed not set [ 158.472208][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 158.481174][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 158.490142][ T5370] netlink: 'syz.2.209': attribute type 20 has an invalid length. [ 163.590939][ T4258] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 163.961077][ T4258] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 163.980131][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.261442][ T4929] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 164.611179][ T4258] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 164.630481][ T4258] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 164.652823][ T5449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.693556][ T4258] usb 6-1: Manufacturer: syz [ 164.734090][ T4258] usb 6-1: config 0 descriptor?? [ 164.779500][ T5449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.901156][ T4929] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.920976][ T4929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.947025][ T5449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.006465][ T4258] rc_core: IR keymap rc-hauppauge not found [ 165.018583][ T4258] Registered IR keymap rc-empty [ 165.047287][ T4258] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 165.081516][ T5449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.102947][ T4258] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 165.141383][ T4929] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.157801][ T4929] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.164620][ T4258] usb 6-1: USB disconnect, device number 4 [ 165.189496][ T4929] usb 3-1: Product: syz [ 165.199108][ T4929] usb 3-1: Manufacturer: syz [ 165.203913][ T4929] usb 3-1: SerialNumber: syz [ 165.255784][ T5449] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.269431][ T5449] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.281989][ T5449] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.294889][ T5449] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.317503][ T4929] usb 3-1: config 0 descriptor?? [ 165.473878][ T4929] usb 3-1: selecting invalid altsetting 0 [ 165.587625][ T5444] udc-core: couldn't find an available UDC or it's busy [ 165.688624][ T5444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 165.896332][ T5444] usb 3-1: selecting invalid altsetting 0 [ 165.994487][ T5444] usb 3-1: 0:0: usb_set_interface failed (-22) [ 166.040707][ T5444] usb 3-1: selecting invalid altsetting 0 [ 166.046602][ T5444] usb 3-1: 0:0: usb_set_interface failed (-22) [ 166.058646][ T5442] usb 3-1: selecting invalid altsetting 0 [ 166.064512][ T5442] usb 3-1: 0:0: usb_set_interface failed (-22) [ 166.071239][ T5442] usb 3-1: selecting invalid altsetting 0 [ 166.077030][ T5442] usb 3-1: 0:0: usb_set_interface failed (-22) [ 166.083425][ T5442] usb 3-1: selecting invalid altsetting 0 [ 166.091344][ T5442] usb 3-1: 0:0: usb_set_interface failed (-22) [ 166.098606][ T4236] usb 3-1: USB disconnect, device number 5 [ 166.362342][ T4754] udevd[4754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.896299][ T5505] tmpfs: Unknown parameter 'usrquota' [ 166.981210][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 167.228610][ T5481] ODEBUG: Out of memory. ODEBUG disabled [ 167.391240][ T21] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.420578][ T21] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.460407][ T21] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.503601][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.561294][ T5494] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.805850][ T21] usb 7-1: USB disconnect, device number 2 [ 168.004597][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 169.440952][ T5552] 9pnet: Insufficient options for proto=fd [ 175.216772][ T5481] Set syz1 is full, maxelem 65536 reached [ 175.314923][ T5612] loop0: detected capacity change from 0 to 512 [ 175.327449][ T5612] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 175.513001][ T5612] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.252: couldn't read orphan inode 26 (err -116) [ 175.525631][ T5612] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.536950][ T5612] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.211774][ T5647] 9pnet: Insufficient options for proto=fd [ 179.050967][ T4236] Bluetooth: hci1: command 0x0409 tx timeout [ 179.185159][ T26] kauditd_printk_skb: 173 callbacks suppressed [ 179.185176][ T26] audit: type=1326 audit(1761946536.808:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 179.286775][ T26] audit: type=1326 audit(1761946536.868:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 179.579814][ T26] audit: type=1326 audit(1761946536.868:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 179.880949][ T5681] loop0: detected capacity change from 0 to 512 [ 180.116102][ T26] audit: type=1326 audit(1761946536.868:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 180.192346][ T26] audit: type=1326 audit(1761946536.868:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 180.215029][ T26] audit: type=1326 audit(1761946536.868:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 180.219572][ T5681] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.265: couldn't read orphan inode 26 (err -116) [ 180.237536][ T26] audit: type=1326 audit(1761946536.868:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 180.250669][ T5681] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.283580][ T5681] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.431445][ T26] audit: type=1326 audit(1761946536.868:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 180.509113][ T5695] [ 180.511494][ T5695] ====================================================== [ 180.518537][ T5695] WARNING: possible circular locking dependency detected [ 180.525594][ T5695] syzkaller #0 Not tainted [ 180.530114][ T5695] ------------------------------------------------------ [ 180.537154][ T5695] syz.2.268/5695 is trying to acquire lock: [ 180.543071][ T5695] ffff88807a39cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 180.554176][ T5695] [ 180.554176][ T5695] but task is already holding lock: [ 180.561567][ T5695] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 180.571715][ T5695] [ 180.571715][ T5695] which lock already depends on the new lock. [ 180.571715][ T5695] [ 180.582329][ T5695] [ 180.582329][ T5695] the existing dependency chain (in reverse order) is: [ 180.591367][ T5695] [ 180.591367][ T5695] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 180.599394][ T5695] __mutex_lock_common+0x1eb/0x2390 [ 180.605146][ T5695] mutex_lock_nested+0x17/0x20 [ 180.610471][ T5695] rfkill_register+0x33/0x8a0 [ 180.615704][ T5695] hci_register_dev+0x452/0x970 [ 180.621107][ T5695] vhci_create_device+0x32c/0x5c0 [ 180.626680][ T5695] vhci_write+0x391/0x450 [ 180.631551][ T5695] vfs_write+0x712/0xd00 [ 180.636338][ T5695] ksys_write+0x14d/0x250 [ 180.641298][ T5695] do_syscall_64+0x4c/0xa0 [ 180.646263][ T5695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.652708][ T5695] [ 180.652708][ T5695] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 180.660557][ T5695] __mutex_lock_common+0x1eb/0x2390 [ 180.666302][ T5695] mutex_lock_nested+0x17/0x20 [ 180.671610][ T5695] vhci_send_frame+0x88/0x100 [ 180.676841][ T5695] hci_send_frame+0x1a9/0x2e0 [ 180.682059][ T5695] hci_tx_work+0x9f9/0x1710 [ 180.687105][ T5695] process_one_work+0x863/0x1000 [ 180.692583][ T5695] worker_thread+0xaa8/0x12a0 [ 180.697806][ T5695] kthread+0x436/0x520 [ 180.702414][ T5695] ret_from_fork+0x1f/0x30 [ 180.707375][ T5695] [ 180.707375][ T5695] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 180.716608][ T5695] __flush_work+0xdd/0x1b0 [ 180.721572][ T5695] hci_dev_do_close+0x1e7/0x1030 [ 180.727058][ T5695] hci_unregister_dev+0x2d7/0x580 [ 180.732626][ T5695] vhci_release+0x73/0xc0 [ 180.737500][ T5695] __fput+0x234/0x930 [ 180.742025][ T5695] task_work_run+0x125/0x1a0 [ 180.747163][ T5695] do_exit+0x61e/0x20a0 [ 180.751863][ T5695] do_group_exit+0x12e/0x300 [ 180.757009][ T5695] get_signal+0x6ca/0x12c0 [ 180.761971][ T5695] arch_do_signal_or_restart+0xc1/0x1300 [ 180.768154][ T5695] exit_to_user_mode_loop+0x9e/0x130 [ 180.773994][ T5695] exit_to_user_mode_prepare+0xee/0x180 [ 180.780090][ T5695] syscall_exit_to_user_mode+0x16/0x40 [ 180.786273][ T5695] do_syscall_64+0x58/0xa0 [ 180.791503][ T5695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.797972][ T5695] [ 180.797972][ T5695] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 180.805652][ T5695] __mutex_lock_common+0x1eb/0x2390 [ 180.811401][ T5695] mutex_lock_nested+0x17/0x20 [ 180.816721][ T5695] bg_scan_update+0x44/0x3b0 [ 180.821867][ T5695] process_one_work+0x863/0x1000 [ 180.827356][ T5695] worker_thread+0xaa8/0x12a0 [ 180.832580][ T5695] kthread+0x436/0x520 [ 180.837196][ T5695] ret_from_fork+0x1f/0x30 [ 180.842164][ T5695] [ 180.842164][ T5695] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 180.852015][ T5695] __lock_acquire+0x2c33/0x7c60 [ 180.857419][ T5695] lock_acquire+0x197/0x3f0 [ 180.862471][ T5695] __flush_work+0xdd/0x1b0 [ 180.867556][ T5695] __cancel_work_timer+0x3ac/0x520 [ 180.873232][ T5695] hci_request_cancel_all+0xcc/0x300 [ 180.879067][ T5695] hci_dev_do_close+0x4e/0x1030 [ 180.884590][ T5695] hci_rfkill_set_block+0x10a/0x190 [ 180.889019][ T5706] 9pnet: Insufficient options for proto=fd [ 180.890348][ T5695] rfkill_set_block+0x1c6/0x420 [ 180.890376][ T5695] rfkill_fop_write+0x458/0x560 [ 180.906979][ T5695] vfs_write+0x300/0xd00 [ 180.912117][ T5695] ksys_write+0x14d/0x250 [ 180.917090][ T5695] do_syscall_64+0x4c/0xa0 [ 180.922060][ T5695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.928500][ T5695] [ 180.928500][ T5695] other info that might help us debug this: [ 180.928500][ T5695] [ 180.938739][ T5695] Chain exists of: [ 180.938739][ T5695] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 180.938739][ T5695] [ 180.954494][ T5695] Possible unsafe locking scenario: [ 180.954494][ T5695] [ 180.961986][ T5695] CPU0 CPU1 [ 180.963422][ T26] audit: type=1326 audit(1761946536.868:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 180.967363][ T5695] ---- ---- [ 180.967370][ T5695] lock(rfkill_global_mutex); [ 180.967388][ T5695] lock(&data->open_mutex); [ 180.967403][ T5695] lock(rfkill_global_mutex); [ 180.967417][ T5695] lock((work_completion)(&hdev->bg_scan_update)); [ 180.967431][ T5695] [ 180.967431][ T5695] *** DEADLOCK *** [ 180.967431][ T5695] [ 180.967435][ T5695] 1 lock held by syz.2.268/5695: [ 180.967447][ T5695] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 180.967508][ T5695] [ 180.967508][ T5695] stack backtrace: [ 180.967516][ T5695] CPU: 1 PID: 5695 Comm: syz.2.268 Not tainted syzkaller #0 [ 180.967535][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.967565][ T5695] Call Trace: [ 180.967571][ T5695] [ 180.967580][ T5695] dump_stack_lvl+0x168/0x230 [ 180.967606][ T5695] ? load_image+0x3b0/0x3b0 [ 180.967629][ T5695] ? show_regs_print_info+0x20/0x20 [ 181.068058][ T26] audit: type=1326 audit(1761946536.868:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.6.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f2daa1acfc9 code=0x7ffc0000 [ 181.070521][ T5695] ? print_circular_bug+0x12b/0x1a0 [ 181.115273][ T5695] check_noncircular+0x274/0x310 [ 181.120224][ T5695] ? add_chain_block+0x940/0x940 [ 181.125164][ T5695] ? lockdep_lock+0xdc/0x1e0 [ 181.129760][ T5695] ? __lock_acquire+0x12d9/0x7c60 [ 181.134819][ T5695] ? lockdep_lock+0x1e0/0x1e0 [ 181.139501][ T5695] ? mark_lock+0x94/0x320 [ 181.143839][ T5695] __lock_acquire+0x2c33/0x7c60 [ 181.148701][ T5695] ? rcu_lock_release+0x5/0x20 [ 181.153557][ T5695] ? verify_lock_unused+0x140/0x140 [ 181.158777][ T5695] lock_acquire+0x197/0x3f0 [ 181.163286][ T5695] ? __flush_work+0xc1/0x1b0 [ 181.167899][ T5695] ? __lock_acquire+0x7c60/0x7c60 [ 181.172949][ T5695] ? read_lock_is_recursive+0x10/0x10 [ 181.178420][ T5695] ? start_flush_work+0x776/0x820 [ 181.183459][ T5695] __flush_work+0xdd/0x1b0 [ 181.187877][ T5695] ? __flush_work+0xc1/0x1b0 [ 181.192470][ T5695] ? flush_work+0x20/0x20 [ 181.196816][ T5695] ? try_to_grab_pending+0xf3/0x7e0 [ 181.202034][ T5695] ? lockdep_hardirqs_off+0x70/0x100 [ 181.207332][ T5695] ? mark_lock+0x94/0x320 [ 181.211675][ T5695] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 181.217688][ T5695] ? lock_chain_count+0x20/0x20 [ 181.222548][ T5695] ? mark_lock+0x94/0x320 [ 181.226934][ T5695] ? __cancel_work_timer+0x331/0x520 [ 181.232222][ T5695] __cancel_work_timer+0x3ac/0x520 [ 181.237425][ T5695] ? cancel_work_sync+0x20/0x20 [ 181.242274][ T5695] ? __cancel_work+0x1f4/0x2d0 [ 181.247127][ T5695] ? lockdep_hardirqs_on+0x94/0x140 [ 181.252326][ T5695] ? __cancel_work+0x26f/0x2d0 [ 181.257105][ T5695] ? cancel_work+0x20/0x20 [ 181.261519][ T5695] ? lock_chain_count+0x20/0x20 [ 181.266373][ T5695] hci_request_cancel_all+0xcc/0x300 [ 181.271665][ T5695] hci_dev_do_close+0x4e/0x1030 [ 181.276524][ T5695] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 181.282433][ T5695] ? _raw_spin_unlock+0x40/0x40 [ 181.287286][ T5695] hci_rfkill_set_block+0x10a/0x190 [ 181.292491][ T5695] ? rcu_lock_release+0x20/0x20 [ 181.297346][ T5695] rfkill_set_block+0x1c6/0x420 [ 181.302225][ T5695] rfkill_fop_write+0x458/0x560 [ 181.307081][ T5695] ? rfkill_fop_read+0x4b0/0x4b0 [ 181.312024][ T5695] ? common_file_perm+0x130/0x1c0 [ 181.317054][ T5695] ? fsnotify_perm+0x5d/0x560 [ 181.321729][ T5695] ? security_file_permission+0x75/0xa0 [ 181.327276][ T5695] ? rfkill_fop_read+0x4b0/0x4b0 [ 181.332215][ T5695] vfs_write+0x300/0xd00 [ 181.336459][ T5695] ? file_end_write+0x250/0x250 [ 181.341308][ T5695] ? __fget_files+0x40f/0x480 [ 181.346265][ T5695] ? __fdget_pos+0x1e2/0x370 [ 181.350863][ T5695] ? ksys_write+0x71/0x250 [ 181.355291][ T5695] ksys_write+0x14d/0x250 [ 181.359619][ T5695] ? __ia32_sys_read+0x80/0x80 [ 181.364385][ T5695] ? lockdep_hardirqs_on+0x94/0x140 [ 181.369585][ T5695] do_syscall_64+0x4c/0xa0 [ 181.373998][ T5695] ? clear_bhb_loop+0x30/0x80 [ 181.378678][ T5695] ? clear_bhb_loop+0x30/0x80 [ 181.383355][ T5695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.389263][ T5695] RIP: 0033:0x7f0ce78bbfc9 [ 181.393683][ T5695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.413288][ T5695] RSP: 002b:00007f0ce5b23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.421705][ T5695] RAX: ffffffffffffffda RBX: 00007f0ce7b12fa0 RCX: 00007f0ce78bbfc9 [ 181.429675][ T5695] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 181.437654][ T5695] RBP: 00007f0ce793ef91 R08: 0000000000000000 R09: 0000000000000000 [ 181.445623][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.453598][ T5695] R13: 00007f0ce7b13038 R14: 00007f0ce7b12fa0 R15: 00007fffbf25e938 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 181.461589][ T5695] [ 181.464862][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 182.176540][ T5392] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 182.184953][ T5392] infiniband syz1: set down [ 182.209617][ T4327] smc: removing ib device syz1 [ 182.242118][ T21] infiniband syz1: ib_query_port failed (-19) [ 182.786455][ T4286] bond0 (unregistering): Released all slaves [ 183.245819][ T4286] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.313358][ T4286] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.374378][ T4286] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.422708][ T4286] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.525805][ T4286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.567933][ T4286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.615347][ T4286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.654706][ T4286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.765598][ T4286] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.804783][ T4286] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.854706][ T4286] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.894725][ T4286] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.006703][ T4286] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.035108][ T4286] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.086882][ T4286] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.115387][ T4286] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.215613][ T4286] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.256096][ T4286] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.305984][ T4286] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.363420][ T4286] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.490011][ T4286] tipc: Left network mode [ 185.410723][ T4286] bond0: (slave wlan1): Releasing backup interface [ 186.134177][ T4286] device hsr_slave_0 left promiscuous mode [ 186.140528][ T4286] device hsr_slave_1 left promiscuous mode [ 186.147446][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.155083][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.163008][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.170435][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.178439][ T4286] device bridge_slave_1 left promiscuous mode [ 186.184885][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.194774][ T4286] device bridge_slave_0 left promiscuous mode [ 186.201424][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.213223][ T4286] device hsr_slave_0 left promiscuous mode [ 186.219504][ T4286] device hsr_slave_1 left promiscuous mode [ 186.228200][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.235983][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.244096][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.251665][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.259169][ T4286] device bridge_slave_1 left promiscuous mode [ 186.265536][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.273757][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.284479][ T4286] device hsr_slave_0 left promiscuous mode [ 186.290684][ T4286] device hsr_slave_1 left promiscuous mode [ 186.297115][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.304591][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.313314][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.320769][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.328473][ T4286] device bridge_slave_1 left promiscuous mode [ 186.334703][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.344483][ T4286] device bridge_slave_0 left promiscuous mode [ 186.350619][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.361515][ T4286] device hsr_slave_0 left promiscuous mode [ 186.367696][ T4286] device hsr_slave_1 left promiscuous mode [ 186.374166][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.381640][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.389158][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.396735][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.404269][ T4286] device bridge_slave_1 left promiscuous mode [ 186.410408][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.418439][ T4286] device bridge_slave_0 left promiscuous mode [ 186.426376][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.436594][ T4286] device hsr_slave_0 left promiscuous mode [ 186.442987][ T4286] device hsr_slave_1 left promiscuous mode [ 186.449231][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.457069][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.465097][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.472619][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.480147][ T4286] device bridge_slave_1 left promiscuous mode [ 186.486537][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.494984][ T4286] device bridge_slave_0 left promiscuous mode [ 186.501639][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.516039][ T4286] device veth1_macvtap left promiscuous mode [ 186.522126][ T4286] device veth0_macvtap left promiscuous mode [ 186.528148][ T4286] device veth1_vlan left promiscuous mode [ 186.534060][ T4286] device veth0_vlan left promiscuous mode [ 186.540258][ T4286] device veth1_macvtap left promiscuous mode [ 186.546314][ T4286] device veth0_macvtap left promiscuous mode [ 186.552590][ T4286] device veth1_vlan left promiscuous mode [ 186.558350][ T4286] device veth0_vlan left promiscuous mode [ 186.565176][ T4286] device veth1_macvtap left promiscuous mode [ 186.571335][ T4286] device veth0_macvtap left promiscuous mode [ 186.577368][ T4286] device veth1_vlan left promiscuous mode [ 186.583180][ T4286] device veth0_vlan left promiscuous mode [ 186.589453][ T4286] device veth1_macvtap left promiscuous mode [ 186.595701][ T4286] device veth0_macvtap left promiscuous mode [ 186.601832][ T4286] device veth1_vlan left promiscuous mode [ 186.607574][ T4286] device veth0_vlan left promiscuous mode [ 186.614346][ T4286] device veth1_macvtap left promiscuous mode [ 186.620488][ T4286] device veth0_macvtap left promiscuous mode [ 186.626812][ T4286] device veth1_vlan left promiscuous mode [ 186.632763][ T4286] device veth0_vlan left promiscuous mode [ 186.907236][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 186.919363][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 186.930056][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.942101][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.986636][ T4286] bond0 (unregistering): Released all slaves [ 187.035564][ T4286] bond1 (unregistering): Released all slaves [ 187.081574][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 187.092650][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 187.103384][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.117583][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.162568][ T4286] bond0 (unregistering): Released all slaves [ 187.284928][ T9] smc: removing ib device syz2 [ 187.341109][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 187.358952][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 187.372126][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.383808][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.426238][ T4286] bond0 (unregistering): Released all slaves [ 187.541062][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 187.552082][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 187.562629][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.574543][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.617093][ T4286] bond0 (unregistering): Released all slaves [ 187.683101][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 187.697185][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 187.708693][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.720559][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.763606][ T4286] bond0 (unregistering): Released all slaves