last executing test programs: 3m38.592057218s ago: executing program 3 (id=4): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00', 0x0, [0x0, 0x0, 0x0, 0xfffffffc]}, &(0x7f0000003240)=0x54) 3m23.489499256s ago: executing program 32 (id=4): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00', 0x0, [0x0, 0x0, 0x0, 0xfffffffc]}, &(0x7f0000003240)=0x54) 3m5.292459997s ago: executing program 2 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0xed) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20000000}, &(0x7f0000000100)=0x108) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="050427bd70007edbdf250100000008000100", @ANYRES32, @ANYBLOB="f40002"], 0x110}, 0x1, 0x0, 0x0, 0x881}, 0x2004c0a4) 3m3.164755277s ago: executing program 2 (id=106): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40810) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) mmap(&(0x7f0000574000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0xdcec7000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x0, &(0x7f0000006680)=0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) sendmmsg$inet(r2, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private2, @in6=@mcast1}}, {{@in=@initdev}}}, &(0x7f0000000100)=0xe8) 3m0.866090227s ago: executing program 2 (id=112): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8845) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/276], 0x114}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES64=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000300), 0x4001) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000190a01020000"], 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}}, 0x0) 2m59.297293064s ago: executing program 2 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x533f}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x40, 0x4, [0x3, 0x8, 0x6ec7, 0x200]}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x18, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x7, @mcast1, 0x81}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r6, 0x4}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1f, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x0, 0x1, {0x3, 0x0, 0x1, 0xc, 0x8, [@mcast2, @mcast2, @mcast1, @private2, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @rand_addr=' \x01\x00']}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m57.050186664s ago: executing program 2 (id=123): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m56.836121135s ago: executing program 2 (id=125): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x80003, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\a\x00'/11, @ANYRES32, @ANYBLOB="5f74b60ca9a05ef29e44d5374e8da2a52095c5d25ca29e6b3c1fa39ab744620076d3d34d203062df2e52de94b83f7eede25fbce66e769c5719ad22818b1b4f5987b60f8352f972121330b5673c5eecb28e0080bf7e1cc62fe123d943047c8922bf39be", @ANYRES64=0x0], 0x10) r5 = io_uring_setup(0x3eab, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x40000}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r6, 0x0, 0x0, 0x3, 0xd4bd) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 2m41.715040723s ago: executing program 33 (id=125): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x80003, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\a\x00'/11, @ANYRES32, @ANYBLOB="5f74b60ca9a05ef29e44d5374e8da2a52095c5d25ca29e6b3c1fa39ab744620076d3d34d203062df2e52de94b83f7eede25fbce66e769c5719ad22818b1b4f5987b60f8352f972121330b5673c5eecb28e0080bf7e1cc62fe123d943047c8922bf39be", @ANYRES64=0x0], 0x10) r5 = io_uring_setup(0x3eab, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x40000}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r6, 0x0, 0x0, 0x3, 0xd4bd) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 16.608114426s ago: executing program 1 (id=567): ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'tunl0\x00', 0x600}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) read$msr(r4, &(0x7f000004b680)=""/102392, 0x18ff8) 12.547482314s ago: executing program 1 (id=579): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x8080) 10.786139542s ago: executing program 4 (id=583): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c, 0xfffffffffffffffc, &(0x7f0000000600)="fd026d6e8c7d4b8232398be4d8ab1fb3f7357c1094506013470098448866805968ba3387f5782010171d4f65cc2298be76206550a19ad6d473b591672b6e4b4c6745eb951dd39051188f50e6"}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 10.782000762s ago: executing program 1 (id=584): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x190, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xbe}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x3}}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x80000}}, 0x4, 0x0}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{}, "40aee8adfb121214", "6f75b33cd01fc916c06e4aea7aaaa6fb", "f43f1d41", "e98351f46f09de78"}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) 10.011163196s ago: executing program 4 (id=585): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x100, 0x10}, &(0x7f0000000240)=0x18) 9.834745616s ago: executing program 1 (id=586): io_setup(0xeb0, &(0x7f0000000140)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x1, 0x4, {0x4, 0x0, "a7ea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0xe, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, 0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x38, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x2, 0x72, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x840}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0xfb, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x5, 0x2, 0xe, 0xff, 0xd}, 0x7d, &(0x7f0000000200)={0x5, 0xf, 0x7d, 0x3, [@generic={0x67, 0x10, 0xb, "7eabad515bfb8fc1e348d178266475111b2db58c31b5482f8baec2eef4fd864efd508dd31f3caf397f729b4f1d9974e47119afafbcaf27ef0e345819a531d07d70a226c7f017d83e689fdeb3b687fe6cd543cff5db1242964a2d22be85933c1bfbda93dc"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x0, 0x5ba9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf8, 0x3, 0x2}]}}) 9.766287756s ago: executing program 4 (id=587): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "5a7a1bc5b841c5ba1167c75958d8aac13767c74ff5de81937ee6d3d8c10f15ef109655185f087c346bc4f5e961fb2c64d34e9150bdb16838008cd429fca2cb7db2091a0baf95113c1b4afa4cf3848c195e7042c85fd3a1efc8e4d10cb6feab81c3ec3a9ee5aa050601c1a807af6ebcd9eb387c7a27359bfe087a548994567d0c38e1e3c040d06288f1a23561904574465e2875637f43bc486b80f0c31c0ae69dfe763eb8eb4c7c5c42f92deb759525c5b7ca1800fe"}}}, 0x0) 9.633672538s ago: executing program 6 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='cq_drain_complete\x00', r3, 0x0, 0x9}, 0x18) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xb9, &(0x7f0000000440)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0088a81f00810048c5b6a687dcb21c29e2e849000004bcf0ff2487067c60334e88e21530fad73fde781c4c915110c7d566ecd458d44b01706c11cf77cf92a3e93f8228eb54f160b6a965a3174618647baa1ffb43ffa67a046ac70f94360c76b94a5c4474733f5c681e66ee26afc4c68e31a2234f35ec223fd3acd0ad89c7d2cc3b832c6db00630ed06907b9419286acec7bdeedebbb071e0520416f0cb2ee04b9df6d45c168921bd0ac847245880bb1a69aff0f0e89ea5bb85"], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x6}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 8.534105512s ago: executing program 6 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) getrlimit(0xc, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) sendmsg$rds(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0xc) setpriority(0x2, r2, 0x5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00'}) syz_open_dev$audion(&(0x7f0000000080), 0x6, 0x40000) 7.469838617s ago: executing program 0 (id=591): io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xae, "c52c340518529f3d157d6a47896491794cda238c57afe08040208c710472d16595f04ade9009f4ec4a1665f734c3899c592703ea5f0e5b3ad1df95ca7a3da52d73a6b06b500fa65b43a5927c279030758dd443181493be4afa5ad8834b304b1be663fbf4687055ec210c5379f0cccbaf322ca27b12c582680c9a7a30be6df3bb1b8a8056c112d76ea14625fb76a887d87547c066c993aacd2bc4d4a262003acd9e1a1d4f4b098f065dfba2c51d03"}, &(0x7f0000000380)=0xb6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 7.331234608s ago: executing program 6 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000040", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0xec0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='G\x00\x00'}]}, 0x18}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x800, 0x8, 0x401, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r5, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x80000001, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x2, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4c080}, 0x2000c004) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000005b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r11, 0x0, 0xffffffffffffffff) r12 = dup(r8) ioctl$KVM_SET_MSRS(r12, 0x4048aecb, &(0x7f0000000200)=ANY=[@ANYRES32=r4]) 6.682268321s ago: executing program 4 (id=594): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockname$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, 0x0, 0xfe3c) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) 5.150199698s ago: executing program 4 (id=597): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000000000000290000003900000000020201"], 0x40}, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x0, 0x2, r2}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x853, 0x146, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@remote, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, &(0x7f0000000180)={0x0, 0x1, [0x8c3, 0xe76, 0x500, 0xe75]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.995250888s ago: executing program 6 (id=599): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='attr/fscreate\x00') getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) 4.494442501s ago: executing program 5 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='cq_drain_complete\x00', r3, 0x0, 0x9}, 0x18) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xb9, &(0x7f0000000440)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0088a81f00810048c5b6a687dcb21c29e2e849000004bcf0ff2487067c60334e88e21530fad73fde781c4c915110c7d566ecd458d44b01706c11cf77cf92a3e93f8228eb54f160b6a965a3174618647baa1ffb43ffa67a046ac70f94360c76b94a5c4474733f5c681e66ee26afc4c68e31a2234f35ec223fd3acd0ad89c7d2cc3b832c6db00630ed06907b9419286acec7bdeedebbb071e0520416f0cb2ee04b9df6d45c168921bd0ac847245880bb1a69aff0f0e89ea5bb85"], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x6}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 3.640765014s ago: executing program 1 (id=601): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_gettime(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x20000005, 0xa2300) preadv2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/109, 0x6d}], 0x1, 0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r4 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000240)=@usbdevfs_disconnect={0x7}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x6, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) unshare(0x2c020400) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xc) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x97, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0xc4, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xc5, 0x8, 0x51}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0xa, 0x4, 0x8, 0x8, 0x7}, 0x12, &(0x7f00000002c0)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x7, 0xc6, 0x5}]}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x43f}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x2, "a1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') 3.608266694s ago: executing program 5 (id=602): ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'tunl0\x00', 0x600}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3.595119804s ago: executing program 0 (id=603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="86", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)='p', 0x1}], 0x1}}], 0x2, 0xc001) 3.485949995s ago: executing program 5 (id=604): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000005140102"], 0x20}}, 0x800) 3.402280845s ago: executing program 5 (id=605): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bc6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.645520819s ago: executing program 0 (id=606): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044014) 2.606911329s ago: executing program 5 (id=607): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 2.591296989s ago: executing program 0 (id=608): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x190, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xbe}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x3}}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x80000}}, 0x4, 0x0}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{}, "40aee8adfb121214", "6f75b33cd01fc916c06e4aea7aaaa6fb", "f43f1d41", "e98351f46f09de78"}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.210132991s ago: executing program 5 (id=609): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f00000006c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f00000e5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@\x00\x00\x00\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r4}, 0x38) 1.557818294s ago: executing program 0 (id=610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000008480)=[{{&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/6, 0x6}], 0x1, &(0x7f00000003c0)=""/19, 0x13}, 0x101}, {{&(0x7f0000000400)=@un=@abs, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000480)=""/27, 0x1b}], 0x3, &(0x7f0000001a40)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/228, 0xe4}], 0x1}, 0x9}, {{&(0x7f00000007c0)=@ieee802154, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000000940)=""/79, 0x4f}, {&(0x7f0000002a40)=""/221, 0xdd}, {&(0x7f0000002b40)=""/12, 0xc}, {&(0x7f0000002b80)=""/8, 0x8}], 0x5}, 0x6}, {{&(0x7f0000002c40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000002cc0)=""/213, 0xd5}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/138, 0x8a}, {&(0x7f0000004e80)=""/192, 0xc0}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)}], 0x7, &(0x7f0000006000)=""/182, 0xb6}, 0x1}, {{0x0, 0x0, &(0x7f00000083c0)=[{&(0x7f00000060c0)=""/4096, 0x1000}, {&(0x7f00000070c0)=""/1, 0x1}, {&(0x7f0000007100)=""/202, 0xca}, {&(0x7f0000007200)=""/57, 0x39}, {&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/136, 0x88}, {&(0x7f0000008300)=""/189, 0xbd}], 0x7, &(0x7f0000008440)=""/5, 0x5}, 0x8}], 0x6, 0x2000, &(0x7f0000008600)) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r4, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="62a6bc1c1cf447848057b9b89d6f8a2f"], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r7}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) 1.400233364s ago: executing program 6 (id=611): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) mkdirat(r4, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 69.33083ms ago: executing program 0 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='cq_drain_complete\x00', r3, 0x0, 0x9}, 0x18) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xb9, &(0x7f0000000440)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0088a81f00810048c5b6a687dcb21c29e2e849000004bcf0ff2487067c60334e88e21530fad73fde781c4c915110c7d566ecd458d44b01706c11cf77cf92a3e93f8228eb54f160b6a965a3174618647baa1ffb43ffa67a046ac70f94360c76b94a5c4474733f5c681e66ee26afc4c68e31a2234f35ec223fd3acd0ad89c7d2cc3b832c6db00630ed06907b9419286acec7bdeedebbb071e0520416f0cb2ee04b9df6d45c168921bd0ac847245880bb1a69aff0f0e89ea5bb85"], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x6}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 69.20458ms ago: executing program 6 (id=613): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 65.69245ms ago: executing program 4 (id=614): io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xae, "c52c340518529f3d157d6a47896491794cda238c57afe08040208c710472d16595f04ade9009f4ec4a1665f734c3899c592703ea5f0e5b3ad1df95ca7a3da52d73a6b06b500fa65b43a5927c279030758dd443181493be4afa5ad8834b304b1be663fbf4687055ec210c5379f0cccbaf322ca27b12c582680c9a7a30be6df3bb1b8a8056c112d76ea14625fb76a887d87547c066c993aacd2bc4d4a262003acd9e1a1d4f4b098f065dfba2c51d03"}, &(0x7f0000000380)=0xb6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 0s ago: executing program 1 (id=615): ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'tunl0\x00', 0x600}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) kernel console output (not intermixed with test programs): ansport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.134847][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.156059][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.181143][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.188209][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.214221][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.235463][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.269264][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.276350][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.302632][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.327223][ T4173] team0: Port device team_slave_0 added [ 61.341391][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.348409][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.374524][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.387493][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.394444][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.420550][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.432840][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.440116][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.467241][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.483908][ T4173] team0: Port device team_slave_1 added [ 61.492483][ T4178] team0: Port device team_slave_0 added [ 61.519994][ T4178] team0: Port device team_slave_1 added [ 61.588969][ T4171] device hsr_slave_0 entered promiscuous mode [ 61.596068][ T4171] device hsr_slave_1 entered promiscuous mode [ 61.603273][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.610505][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.636676][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.648353][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.655558][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.681890][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.697208][ T4167] device hsr_slave_0 entered promiscuous mode [ 61.704069][ T4167] device hsr_slave_1 entered promiscuous mode [ 61.711011][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.719291][ T4167] Cannot create hsr debugfs directory [ 61.728076][ T4175] device hsr_slave_0 entered promiscuous mode [ 61.735554][ T4175] device hsr_slave_1 entered promiscuous mode [ 61.742221][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.749974][ T4175] Cannot create hsr debugfs directory [ 61.757150][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.764111][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.790372][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.802063][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.809283][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.835254][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.845982][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 61.925690][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 61.931846][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 61.935067][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 61.966000][ T4178] device hsr_slave_0 entered promiscuous mode [ 61.972793][ T4178] device hsr_slave_1 entered promiscuous mode [ 61.979578][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.987473][ T4178] Cannot create hsr debugfs directory [ 62.005114][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 62.016506][ T4173] device hsr_slave_0 entered promiscuous mode [ 62.023503][ T4173] device hsr_slave_1 entered promiscuous mode [ 62.030341][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.038038][ T4173] Cannot create hsr debugfs directory [ 62.307065][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.321212][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.335086][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.347575][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.406802][ T4175] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.416825][ T4175] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.432338][ T4175] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.441217][ T4175] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.484228][ T4171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.494376][ T4171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.512163][ T4171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.522519][ T4171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.611121][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.627604][ T4178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.662735][ T4178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.672296][ T4178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.687233][ T4178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.702283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.711926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.733001][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.745710][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.761900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.770914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.780788][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.788195][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.797608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.807293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.816116][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.823158][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.849862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.859763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.875438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.883409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.908452][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.917670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.956442][ T4173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.967301][ T4173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.977575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.988188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.997299][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.004375][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.012719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.028487][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.057169][ T4173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.067561][ T4173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.078840][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.088224][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.097498][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.106892][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.115528][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.123810][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.133110][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.142282][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.151508][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.158616][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.166494][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.175368][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.208803][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.220356][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.230588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.242682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.251382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.260613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.269499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.278273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.286617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.294565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.304180][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.313353][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.325789][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.336836][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.367521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.379170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.401354][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.413838][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.426583][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.436749][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.447290][ T709] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.454363][ T709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.462533][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.472610][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.481439][ T709] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.488665][ T709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.496567][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.506728][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.545251][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.561805][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.572571][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.595842][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.620719][ T4171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.637564][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.650375][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.659139][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.667217][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.676659][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.686832][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.697519][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.707647][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.716451][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.726139][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.734509][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.754211][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.770426][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.783189][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.806808][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.814487][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.824444][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.833993][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.849341][ T709] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.856498][ T709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.888666][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.902612][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.913125][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.923182][ T709] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.930313][ T709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.938466][ T4208] Bluetooth: hci0: command 0x041b tx timeout [ 63.949086][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.958018][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.967525][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.976469][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.985231][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.005099][ T4208] Bluetooth: hci3: command 0x041b tx timeout [ 64.012799][ T4208] Bluetooth: hci1: command 0x041b tx timeout [ 64.024365][ T4208] Bluetooth: hci2: command 0x041b tx timeout [ 64.027339][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.051389][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.060368][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.069141][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.077329][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.084725][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.085475][ T4208] Bluetooth: hci4: command 0x041b tx timeout [ 64.094850][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.109908][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.139754][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.147619][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.155502][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.163740][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.175971][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.183764][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.201516][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.218051][ T4167] device veth0_vlan entered promiscuous mode [ 64.226465][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.236222][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.244460][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.253570][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.263697][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.272220][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.282181][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.291061][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.312946][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.321548][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.332218][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.341944][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.350871][ T709] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.357985][ T709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.371865][ T4167] device veth1_vlan entered promiscuous mode [ 64.390579][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.400453][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.413827][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.426137][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.434707][ T709] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.441831][ T709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.464810][ T4175] device veth0_vlan entered promiscuous mode [ 64.474298][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.484023][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.502252][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.513024][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.527137][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.537402][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.548061][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.556417][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.564223][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.597959][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.607976][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.628814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.637421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.646550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.656310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.677350][ T4175] device veth1_vlan entered promiscuous mode [ 64.694342][ T4173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.705184][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.718395][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.728395][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.737089][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.746111][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.754421][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.762806][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.782965][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.793546][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.803212][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.819838][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.828726][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.837654][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.851565][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.860886][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.879609][ T4171] device veth0_vlan entered promiscuous mode [ 64.901027][ T4167] device veth0_macvtap entered promiscuous mode [ 64.921741][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.936669][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.948168][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.961348][ T4175] device veth0_macvtap entered promiscuous mode [ 64.971910][ T4171] device veth1_vlan entered promiscuous mode [ 64.988524][ T4167] device veth1_macvtap entered promiscuous mode [ 64.998754][ T4175] device veth1_macvtap entered promiscuous mode [ 65.036117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.046212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.054401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.066537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.074654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.082847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.092092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.113765][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.132881][ T4178] device veth0_vlan entered promiscuous mode [ 65.140554][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.150391][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.159795][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.169761][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.178425][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.186986][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.200285][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.211512][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.223575][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.233607][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.244508][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.254575][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.263602][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.272663][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.288048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.296697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.306628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.315764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.324366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.333247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.347636][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.358947][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.372501][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.388429][ T4171] device veth0_macvtap entered promiscuous mode [ 65.420137][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.428583][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.439601][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.449354][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.457505][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.469349][ T4178] device veth1_vlan entered promiscuous mode [ 65.479083][ T4175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.488077][ T4175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.497146][ T4175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.506156][ T4175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.519500][ T4171] device veth1_macvtap entered promiscuous mode [ 65.532922][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.622952][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.642376][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.652967][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.670356][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.681758][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.720253][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.729196][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.738702][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.749401][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.767109][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.778240][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.789191][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.799718][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.810848][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.832352][ T4178] device veth0_macvtap entered promiscuous mode [ 65.856697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.865031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.873696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.882631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.891773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.912500][ T4171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.921764][ T4171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.930961][ T4171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.940664][ T4171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.953044][ T4178] device veth1_macvtap entered promiscuous mode [ 65.978433][ T709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.998694][ T709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.006791][ T4209] Bluetooth: hci0: command 0x040f tx timeout [ 66.012912][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.024700][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.036158][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.046925][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.057718][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.068600][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.080311][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.088181][ T4209] Bluetooth: hci2: command 0x040f tx timeout [ 66.094695][ T4209] Bluetooth: hci1: command 0x040f tx timeout [ 66.102166][ T4209] Bluetooth: hci3: command 0x040f tx timeout [ 66.102546][ T4173] device veth0_vlan entered promiscuous mode [ 66.132309][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.140939][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.149641][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.158998][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.165701][ T4209] Bluetooth: hci4: command 0x040f tx timeout [ 66.169768][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.181552][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.208819][ T4173] device veth1_vlan entered promiscuous mode [ 66.225084][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.232969][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.241275][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.251774][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.266004][ T709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.273638][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.277175][ T709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.289822][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.301886][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.312953][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.323625][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.335760][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.349394][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.368019][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.381670][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.391665][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.402517][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.412935][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.423018][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.437531][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.446774][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.456926][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.466215][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.504420][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.518549][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.540257][ T4173] device veth0_macvtap entered promiscuous mode [ 66.566881][ T709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.585068][ T709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.595373][ T4173] device veth1_macvtap entered promiscuous mode [ 66.638727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.653234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.675637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.702488][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.719469][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.740791][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.743101][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.751844][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.768895][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.779008][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.790935][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.801019][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.813840][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.828009][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.848709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.857640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.866745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.886848][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.907106][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.932527][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.943201][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.953106][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.964030][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.974267][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.991645][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.012712][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.043251][ T709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.060416][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.105380][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.125973][ T709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.142121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.155985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.174057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.182168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.197711][ T4173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.209480][ T4173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.219092][ T4173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.228302][ T4173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.263229][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.284265][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.377536][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.454749][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.473078][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.509420][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.518193][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.391654][ T4210] Bluetooth: hci3: command 0x0419 tx timeout [ 68.400445][ T4210] Bluetooth: hci1: command 0x0419 tx timeout [ 68.736253][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.754302][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.762269][ T4210] Bluetooth: hci2: command 0x0419 tx timeout [ 68.917795][ T4207] Bluetooth: hci0: command 0x0419 tx timeout [ 68.925246][ T4209] Bluetooth: hci4: command 0x0419 tx timeout [ 69.125010][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.162077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.164815][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.184818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.184838][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.193716][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.202656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.211412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.220296][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.229067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.237954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.378563][ T4277] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.637950][ T4279] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 71.735846][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.742411][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.494047][ T4312] device team0 entered promiscuous mode [ 72.505560][ T4312] device team_slave_0 entered promiscuous mode [ 72.511981][ T4312] device team_slave_1 entered promiscuous mode [ 72.848438][ T4319] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 73.594051][ T4314] device team0 left promiscuous mode [ 73.605513][ T4314] device team_slave_0 left promiscuous mode [ 73.611876][ T4314] device team_slave_1 left promiscuous mode [ 73.814263][ T26] audit: type=1326 audit(1731645399.379:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4325 comm="syz.1.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c27496719 code=0x0 [ 75.241293][ T4271] Bluetooth: hci4: command 0x0405 tx timeout [ 75.464563][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.014974][ T23] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.055276][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.089607][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.122861][ T1107] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 76.217275][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.218780][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.225814][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.396664][ T4352] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 76.426935][ T1107] usb 5-1: config 0 descriptor?? [ 76.708146][ T1107] usbhid 5-1:0.0: can't add hid device: -71 [ 76.714366][ T1107] usbhid: probe of 5-1:0.0 failed with error -71 [ 77.697522][ T1107] usb 5-1: USB disconnect, device number 2 [ 79.457640][ T4268] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 79.924938][ T4268] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.219652][ T4268] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 80.321558][ T4268] usb 2-1: can't read configurations, error -71 [ 80.495688][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.679313][ T4386] Zero length message leads to an empty skb [ 81.800749][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 81.814413][ T1110] cfg80211: failed to load regulatory.db [ 81.867105][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.885275][ T23] usb 5-1: device descriptor read/all, error -71 [ 82.756265][ T4268] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.295055][ T4268] usb 1-1: Using ep0 maxpacket: 8 [ 83.436779][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.457056][ T4420] capability: warning: `syz.2.48' uses deprecated v2 capabilities in a way that may be insecure [ 83.530196][ T4268] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.559968][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.609404][ T4422] tmpfs: Bad value for 'mpol' [ 83.736584][ T4268] usb 1-1: config 0 descriptor?? [ 84.011452][ T4268] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 84.845743][ T4268] usb 1-1: USB disconnect, device number 2 [ 85.520854][ T4268] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 85.588337][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 87.589526][ T4411] chnl_net:caif_netlink_parms(): no params data found [ 87.613007][ T4271] Bluetooth: hci5: command 0x041b tx timeout [ 88.517638][ T4268] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.936813][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.186425][ T4268] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 89.195493][ T4268] usb 3-1: config 0 has no interface number 0 [ 89.201626][ T4268] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 4 [ 89.276706][ T4461] ODEBUG: Out of memory. ODEBUG disabled [ 89.335669][ T4466] ======================================================= [ 89.335669][ T4466] WARNING: The mand mount option has been deprecated and [ 89.335669][ T4466] and is ignored by this kernel. Remove the mand [ 89.335669][ T4466] option from the mount to silence this warning. [ 89.335669][ T4466] ======================================================= [ 89.615521][ T4466] syz.0.62 (4466): drop_caches: 2 [ 89.620642][ T4461] syz.0.62 (4461): drop_caches: 2 [ 89.626363][ T4461] syz.0.62 (4461): drop_caches: 2 [ 89.692676][ T4271] Bluetooth: hci5: command 0x040f tx timeout [ 89.730791][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.784563][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.795465][ T4268] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 89.804571][ T4268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.836128][ T4411] device bridge_slave_0 entered promiscuous mode [ 89.852661][ T4268] usb 3-1: Product: syz [ 89.874823][ T4268] usb 3-1: Manufacturer: syz [ 89.898049][ T4268] usb 3-1: SerialNumber: syz [ 89.925824][ T4268] usb 3-1: config 0 descriptor?? [ 89.954366][ T4468] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.956202][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.027771][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.044717][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.056731][ T4411] device bridge_slave_1 entered promiscuous mode [ 90.102836][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.234138][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.277875][ T4411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.369923][ T4411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.521264][ T4411] team0: Port device team_slave_0 added [ 90.883814][ T4411] team0: Port device team_slave_1 added [ 92.459281][ T1107] Bluetooth: hci5: command 0x0419 tx timeout [ 93.095959][ T4268] usb 3-1: MIDIStreaming interface descriptor not found [ 93.155268][ T4268] usb 3-1: USB disconnect, device number 2 [ 93.326669][ T4411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.404905][ T4515] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 93.557913][ T4411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.126415][ T4411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.210088][ T4411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.219560][ T4411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.246547][ T4411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.479307][ T4524] team0: No ports can be present during mode change [ 94.551189][ T4529] loop2: detected capacity change from 0 to 512 [ 94.688028][ T4511] udevd[4511]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.717295][ T4411] device hsr_slave_0 entered promiscuous mode [ 95.386464][ T4411] device hsr_slave_1 entered promiscuous mode [ 95.388001][ T4411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.388058][ T4411] Cannot create hsr debugfs directory [ 95.608580][ T4529] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.701616][ T4529] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.364773][ C0] sched: RT throttling activated [ 100.839342][ T4411] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.939833][ T4607] loop1: detected capacity change from 0 to 512 [ 100.940294][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.555298][ T4603] device batadv_slave_0 entered promiscuous mode [ 101.596693][ T4411] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.052130][ T4607] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.079142][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 102.095338][ T4411] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.104166][ T4607] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.111978][ T4411] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.311085][ T4411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.557248][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.875542][ T4411] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.882601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.935375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.100522][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.109843][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 103.287161][ T4644] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 103.295016][ T4644] overlayfs: failed to set xattr on upper [ 103.300809][ T4644] overlayfs: ...falling back to index=off,metacopy=off. [ 103.308209][ T4644] overlayfs: maximum fs stacking depth exceeded [ 103.325348][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.336473][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.343580][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.364901][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.475463][ T1107] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 103.490380][ T1107] usb 1-1: config 0 has no interface number 0 [ 103.776805][ T1107] usb 1-1: New USB device found, idVendor=0403, idProduct=8698, bcdDevice=3f.10 [ 103.944870][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.952916][ T1107] usb 1-1: Product: syz [ 103.957672][ T1107] usb 1-1: Manufacturer: syz [ 103.962717][ T1107] usb 1-1: SerialNumber: syz [ 103.963286][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.023019][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.033312][ T1107] usb 1-1: config 0 descriptor?? [ 104.039325][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.046494][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.087699][ T1107] ftdi_sio 1-1:0.12: FTDI USB Serial Device converter detected [ 104.103931][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.191214][ T1107] usb 1-1: Detected FT-X [ 104.219620][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.236635][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.502431][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.525753][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.526009][ T1107] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 104.535304][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.585674][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.645112][ T1107] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 104.652819][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.695832][ T1107] ftdi_sio 1-1:0.12: GPIO initialisation failed: -71 [ 104.706467][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.753510][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.762421][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.772438][ T1107] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 104.835264][ T1107] usb 1-1: USB disconnect, device number 3 [ 104.868861][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.913919][ T1107] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.960205][ T1107] ftdi_sio 1-1:0.12: device disconnected [ 105.186852][ T144] device hsr_slave_0 left promiscuous mode [ 106.278664][ T144] device hsr_slave_1 left promiscuous mode [ 106.292655][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.311461][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.349471][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.373893][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.404072][ T144] device bridge_slave_1 left promiscuous mode [ 106.416801][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.442783][ T144] device bridge_slave_0 left promiscuous mode [ 106.449380][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.894559][ T144] device veth1_macvtap left promiscuous mode [ 106.901261][ T144] device veth0_macvtap left promiscuous mode [ 106.915669][ T144] device veth1_vlan left promiscuous mode [ 106.921668][ T144] device veth0_vlan left promiscuous mode [ 107.273723][ T144] team0 (unregistering): Port device team_slave_1 removed [ 107.330179][ T144] team0 (unregistering): Port device team_slave_0 removed [ 107.393060][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.422923][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.560263][ T144] bond0 (unregistering): Released all slaves [ 108.174630][ T4675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.116'. [ 108.188717][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 108.198454][ T4675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.218561][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.281565][ T4677] device batadv_slave_0 entered promiscuous mode [ 108.308336][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 108.463782][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.472066][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.483751][ T4411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.612781][ T4702] netlink: 'syz.0.122': attribute type 21 has an invalid length. [ 108.642409][ T4702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.122'. [ 109.357255][ T4716] loop1: detected capacity change from 0 to 512 [ 110.155719][ T4716] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.168445][ T4716] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.561892][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.581302][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.642230][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.650196][ T4207] Bluetooth: hci0: command 0x0c20 tx timeout [ 110.664242][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.674949][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.697569][ T4411] device veth0_vlan entered promiscuous mode [ 110.715869][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.746317][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.770823][ T4411] device veth1_vlan entered promiscuous mode [ 110.848124][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.863937][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.893222][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.918362][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.926723][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 110.955569][ T4411] device veth0_macvtap entered promiscuous mode [ 110.974929][ T4411] device veth1_macvtap entered promiscuous mode [ 111.008976][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.038011][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.049784][ T1107] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 111.069895][ T1107] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 111.094892][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.114906][ T1107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 111.141806][ T1107] usb 1-1: config 1 has no interface number 0 [ 111.154880][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.180609][ T1107] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.203635][ T4411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.212024][ T1107] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 111.226879][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.245481][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.254885][ T1107] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 111.274258][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.283328][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.315745][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.348753][ T1107] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 111.364448][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.397355][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.427880][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.456608][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.494891][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.529502][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.550060][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.605237][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.645371][ T4411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.673968][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.702167][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.730122][ T4411] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.749432][ T4411] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.861698][ T4411] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.910000][ T4411] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.763363][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.835165][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.846062][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.852635][ T4730] batman_adv: batadv0: Adding interface: dummy0 [ 112.854142][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.871142][ T4730] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.914981][ T4730] batman_adv: batadv0: Interface activated: dummy0 [ 112.922817][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.955476][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 112.978269][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.027641][ T4730] batadv0: mtu less than device minimum [ 113.035736][ T4730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.048956][ T4730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.061667][ T4730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.074414][ T4730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.087175][ T4730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.099864][ T4730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.112513][ T4730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.125140][ T4730] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.634573][ T4790] netlink: 'syz.5.137': attribute type 21 has an invalid length. [ 114.642692][ T4790] netlink: 132 bytes leftover after parsing attributes in process `syz.5.137'. [ 114.745091][ T1107] snd_usb_pod 1-1:1.1: set_interface failed [ 114.752057][ T1107] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 114.809722][ T1107] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 114.868197][ T1107] usb 1-1: USB disconnect, device number 4 [ 117.378291][ T4835] loop0: detected capacity change from 0 to 512 [ 117.387814][ T4800] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 117.565775][ T4835] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.579052][ T4798] device geneve2 entered promiscuous mode [ 117.655331][ T4835] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.418895][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 122.291027][ T4901] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.085065][ T4389] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.531006][ T4389] usb 5-1: Using ep0 maxpacket: 16 [ 123.695741][ T4973] loop1: detected capacity change from 0 to 512 [ 123.745246][ T4389] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.798430][ T4389] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.848782][ T4389] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 123.914836][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.795617][ T4389] usb 5-1: config 0 descriptor?? [ 124.856654][ T4973] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.887522][ T4389] usb 5-1: can't set config #0, error -71 [ 124.970875][ T4389] usb 5-1: USB disconnect, device number 5 [ 124.977004][ T4973] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.087501][ T4986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.944108][ T4986] device batadv_slave_0 entered promiscuous mode [ 126.255526][ T4994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.165'. [ 126.789864][ T5013] netlink: 666 bytes leftover after parsing attributes in process `syz.1.168'. [ 126.830894][ T4339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.006983][ T4339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.364981][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 128.107799][ T5024] net_ratelimit: 11 callbacks suppressed [ 128.107819][ T5024] sctp: failed to load transform for md5: -2 [ 128.269781][ T4339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.381578][ T5051] loop5: detected capacity change from 0 to 512 [ 128.434257][ T4339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.619371][ T5051] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.425902][ T5051] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.468139][ T4993] chnl_net:caif_netlink_parms(): no params data found [ 129.604875][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 130.009271][ T5070] loop1: detected capacity change from 0 to 128 [ 130.034430][ T5064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 130.457045][ T5070] EXT4-fs (loop1): Test dummy encryption mode enabled [ 130.497846][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 130.576883][ T5070] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.715068][ T146] Bluetooth: hci2: ACL packet for unknown connection handle 2 [ 130.768212][ T5096] fuse: Bad value for 'fd' [ 131.685001][ T4206] Bluetooth: hci3: command 0x040f tx timeout [ 131.693548][ T4993] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.710079][ T4993] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.908522][ T4993] device bridge_slave_0 entered promiscuous mode [ 131.986303][ T4993] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.018193][ T4993] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.053778][ T4993] device bridge_slave_1 entered promiscuous mode [ 132.729945][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736597][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.181841][ T4993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.329609][ T5124] loop0: detected capacity change from 0 to 512 [ 133.361158][ T4993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.466409][ T5124] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.542997][ T5124] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.563494][ T4993] team0: Port device team_slave_0 added [ 133.638398][ T4993] team0: Port device team_slave_1 added [ 133.808372][ T3816] Bluetooth: hci3: command 0x0419 tx timeout [ 134.814976][ T146] Bluetooth: hci5: ACL packet for unknown connection handle 6 [ 134.873550][ T4993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.893418][ T4993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.919445][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.931604][ T5149] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 134.951106][ T4993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.000402][ T146] block nbd5: Receive control failed (result -107) [ 135.034596][ T5152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 135.048028][ T4993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.111069][ T4993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.138808][ T5159] nbd5: detected capacity change from 0 to 11778 [ 135.151755][ T150] block nbd5: Dead connection, failed to find a fallback [ 135.159266][ T150] block nbd5: shutting down sockets [ 135.165322][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.177181][ T150] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.186164][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.197047][ T150] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.205141][ T1091] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.206569][ T4993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.216661][ T1091] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.235406][ T1091] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.246245][ T1091] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.255009][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.269327][ T1091] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.280472][ T1091] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.295929][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.306860][ T150] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.315313][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.326354][ T150] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.334309][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.345147][ T150] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.353012][ T4412] ldm_validate_partition_table(): Disk read failed. [ 135.390664][ T1091] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.401643][ T1091] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.447590][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.458613][ T150] Buffer I/O error on dev nbd5, logical block 0, async page read [ 135.473233][ T4412] Dev nbd5: unable to read RDB block 0 [ 135.480587][ T4412] nbd5: unable to read partition table [ 135.606737][ T4412] ldm_validate_partition_table(): Disk read failed. [ 135.614465][ T4412] Dev nbd5: unable to read RDB block 0 [ 135.625416][ T4412] nbd5: unable to read partition table [ 135.642512][ T5161] ldm_validate_partition_table(): Disk read failed. [ 135.883269][ T4993] device hsr_slave_0 entered promiscuous mode [ 135.996103][ T4993] device hsr_slave_1 entered promiscuous mode [ 136.149929][ T4993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.324815][ T4993] Cannot create hsr debugfs directory [ 136.461956][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 136.466296][ T5161] Dev nbd5: unable to read RDB block 0 [ 136.488397][ T5161] nbd5: unable to read partition table [ 136.567492][ T5185] loop4: detected capacity change from 0 to 128 [ 136.593609][ T7] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 136.603551][ T7] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 136.615795][ T7] usb 1-1: config 0 has no interface number 0 [ 136.622017][ T7] usb 1-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 136.655145][ T5185] EXT4-fs (loop4): Test dummy encryption mode enabled [ 136.712364][ T5185] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 136.734178][ T5185] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.765083][ T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 136.778704][ T7] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 136.793158][ T7] usb 1-1: Product: syz [ 136.797575][ T7] usb 1-1: Manufacturer: syz [ 136.806697][ T7] usb 1-1: config 0 descriptor?? [ 136.873929][ T146] Bluetooth: Unknown BR/EDR signaling command 0xee [ 136.880789][ T146] Bluetooth: Wrong link type (-22) [ 136.886895][ T146] Bluetooth: hci5: link tx timeout [ 136.893167][ T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.907255][ T4339] device hsr_slave_0 left promiscuous mode [ 136.924157][ T4339] device hsr_slave_1 left promiscuous mode [ 136.941105][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.957296][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.964904][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.972753][ T4339] device bridge_slave_1 left promiscuous mode [ 136.979358][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.989986][ T4339] device bridge_slave_0 left promiscuous mode [ 136.999482][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.022794][ T4339] device veth1_macvtap left promiscuous mode [ 137.040053][ T4339] device veth0_macvtap left promiscuous mode [ 137.053186][ T4339] device veth1_vlan left promiscuous mode [ 137.065186][ T4339] device veth0_vlan left promiscuous mode [ 137.068756][ T3816] usb 1-1: USB disconnect, device number 5 [ 137.379880][ T5210] loop1: detected capacity change from 0 to 512 [ 137.412278][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 137.428713][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 137.444324][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.464037][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.541415][ T5210] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.560660][ T5210] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.596069][ T4339] bond0 (unregistering): Released all slaves [ 137.757190][ T4993] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.773611][ T4993] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.813494][ T5195] netlink: 'syz.5.206': attribute type 10 has an invalid length. [ 137.836196][ T5195] team0: Port device netdevsim0 added [ 137.851583][ T4993] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.188514][ T4993] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.527376][ T5223] input: syz1 as /devices/virtual/input/input6 [ 138.750248][ T4993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.885778][ T4993] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.935811][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.958237][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.965545][ T4207] Bluetooth: hci5: command 0x0406 tx timeout [ 139.016437][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.033191][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.177227][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.184348][ T4948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.194527][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.870725][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.921791][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.928952][ T4948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.947838][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.966079][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.005935][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.024294][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.063044][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.073997][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.121943][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.172491][ T5261] loop1: detected capacity change from 0 to 128 [ 140.657635][ T5226] IPv6: Can't replace route, no match found [ 140.992059][ T4993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.019697][ T4993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.036860][ T5265] loop4: detected capacity change from 0 to 512 [ 141.127817][ T5261] EXT4-fs (loop1): Test dummy encryption mode enabled [ 141.133739][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.143140][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.152226][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.162148][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.186056][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.218283][ T5265] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.230124][ T5265] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.230918][ T5261] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 141.271450][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.331099][ T5261] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.652846][ T1110] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 142.104830][ T1110] usb 6-1: Using ep0 maxpacket: 16 [ 142.255505][ T1110] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 142.371644][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.405282][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.439576][ T4993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.535055][ T1110] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 142.780898][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.790074][ T1110] usb 6-1: Product: syz [ 142.794457][ T1110] usb 6-1: Manufacturer: syz [ 142.799636][ T1110] usb 6-1: SerialNumber: syz [ 142.821580][ T1110] usb 6-1: config 0 descriptor?? [ 143.630079][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.682691][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.783625][ T4993] device veth0_vlan entered promiscuous mode [ 143.858921][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.881563][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.937055][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.957802][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.018390][ T4993] device veth1_vlan entered promiscuous mode [ 144.263480][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.284097][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.303339][ T1110] usb 6-1: USB disconnect, device number 2 [ 144.382253][ T5327] cgroup: No subsys list or none specified [ 144.752508][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.179599][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.201509][ T4993] device veth0_macvtap entered promiscuous mode [ 146.070536][ T5332] infiniband syz2: set active [ 146.075557][ T5332] infiniband syz2: added team_slave_1 [ 146.089257][ T5332] infiniband syz2: Couldn't open port 1 [ 146.098650][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.136062][ T5332] RDS/IB: syz2: added [ 146.140641][ T5332] smc: adding ib device syz2 with port count 1 [ 146.147072][ T5332] smc: ib device syz2 port 1 has pnetid [ 146.840873][ T4993] device veth1_macvtap entered promiscuous mode [ 147.960694][ T5349] loop5: detected capacity change from 0 to 512 [ 148.001148][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.059797][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.108552][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.126662][ T5357] loop4: detected capacity change from 0 to 128 [ 148.151964][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.206637][ T4993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.233672][ T5357] EXT4-fs (loop4): Test dummy encryption mode enabled [ 148.242905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.283966][ T5349] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.303189][ T5357] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 148.319664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.345051][ T5357] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.355496][ T5349] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.430969][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.545810][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.215933][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.257373][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.308427][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.344981][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.400137][ T4993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.476704][ T4993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.574876][ T4993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.635307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.665217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.889715][ T4993] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.910375][ T4993] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.919732][ T4993] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.073063][ T4993] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.192176][ T5397] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 151.726639][ T5401] loop7: detected capacity change from 0 to 16384 [ 151.912149][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.990619][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.054046][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.064893][ T4206] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.074317][ T709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.104169][ T709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.219973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.451234][ T4206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.786549][ T26] audit: type=1326 audit(1731645479.359:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.4.243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e26bd0719 code=0x0 [ 153.786767][ T4206] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.994111][ T4206] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.003896][ T4206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.042028][ T4206] usb 2-1: config 0 descriptor?? [ 154.797052][ T4206] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 154.901391][ T4206] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 154.904650][ T5438] loop0: detected capacity change from 0 to 512 [ 154.943986][ T4206] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 155.992242][ T5438] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.025449][ T5438] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.361490][ T5460] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 157.448401][ T4208] usb 2-1: USB disconnect, device number 4 [ 158.858221][ T5476] loop1: detected capacity change from 0 to 128 [ 159.662610][ T5476] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.334929][ T26] audit: type=1326 audit(1731645485.879:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.0.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ffc97719 code=0x0 [ 160.388172][ T5476] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 160.516092][ T5476] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.729420][ T5510] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 162.311250][ T5497] syz.6.258 (5497): drop_caches: 2 [ 162.322188][ T5497] syz.6.258 (5497): drop_caches: 2 [ 162.727017][ T5530] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 162.734901][ T5530] device ipvlan1 entered promiscuous mode [ 162.746729][ T5530] batman_adv: batadv0: Adding interface: ipvlan1 [ 162.753269][ T5530] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.778671][ T5530] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 165.134939][ T26] audit: type=1326 audit(1731645490.699:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.0.270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ffc97719 code=0x0 [ 167.419261][ T5576] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 171.661051][ T5630] tmpfs: Unknown parameter 'usrquota' [ 172.353510][ T1107] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.246147][ T5648] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 174.254104][ T5648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'. [ 174.263610][ T5648] device ipvlan1 entered promiscuous mode [ 174.270989][ T5648] bridge0: port 3(ipvlan1) entered blocking state [ 174.277499][ T5648] bridge0: port 3(ipvlan1) entered disabled state [ 174.286027][ T5648] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 174.557859][ T5657] rdma_rxe: already configured on team_slave_1 [ 176.441520][ T5678] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 176.448490][ T5678] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 176.617425][ T5678] vhci_hcd vhci_hcd.0: Device attached [ 176.646437][ T5681] vhci_hcd: connection closed [ 176.674243][ T709] vhci_hcd: stop threads [ 176.685550][ T709] vhci_hcd: release socket [ 176.701320][ T709] vhci_hcd: disconnect device [ 176.925498][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.528363][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.685287][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.140574][ T5714] rdma_rxe: rxe_register_device failed with error -23 [ 178.148738][ T5714] rdma_rxe: failed to add team_slave_1 [ 178.302659][ T7] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 178.315109][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.327809][ T7] usb 5-1: config 0 descriptor?? [ 178.565751][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 178.816280][ T5722] udc-core: couldn't find an available UDC or it's busy [ 178.823281][ T5722] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.224876][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 180.241222][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 180.315035][ T7] usb 5-1: USB disconnect, device number 6 [ 181.837974][ T1091] block nbd6: Attempted send on invalid socket [ 181.844276][ T1091] print_req_error: 40 callbacks suppressed [ 181.844291][ T1091] blk_update_request: I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 181.882518][ T5747] hfsplus: unable to find HFS+ superblock [ 183.954812][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.535262][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.664902][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.428804][ T7] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 185.438498][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.448791][ T7] usb 6-1: config 0 descriptor?? [ 185.975281][ T5805] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.273338][ T5805] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 186.376407][ T7] usb 6-1: can't set config #0, error -71 [ 186.386183][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 186.392342][ T1107] Bluetooth: hci0: command 0x0406 tx timeout [ 186.399720][ T7] usb 6-1: USB disconnect, device number 3 [ 186.445662][ T5479] Bluetooth: hci1: command 0x0406 tx timeout [ 187.342504][ T5840] rdma_rxe: rxe_register_device failed with error -23 [ 187.350660][ T5840] rdma_rxe: failed to add team_slave_1 [ 188.469259][ T4206] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.724945][ T4206] usb 2-1: Using ep0 maxpacket: 16 [ 188.845328][ T4206] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 188.893186][ T4206] usb 2-1: config 0 has no interface number 0 [ 188.987866][ T4206] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 189.355139][ T4206] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 189.399069][ T4206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.594406][ T4206] usb 2-1: Product: syz [ 189.599779][ T4206] usb 2-1: Manufacturer: syz [ 189.604575][ T4206] usb 2-1: SerialNumber: syz [ 189.615033][ T5350] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 189.624211][ T4206] usb 2-1: config 0 descriptor?? [ 189.645107][ T5833] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.825530][ T4206] asix: probe of 2-1:0.251 failed with error -22 [ 190.263556][ T5867] loop2: detected capacity change from 0 to 7 [ 190.441641][ T5867] Dev loop2: unable to read RDB block 7 [ 190.447655][ T5867] loop2: unable to read partition table [ 190.453425][ T5867] loop2: partition table beyond EOD, truncated [ 190.459654][ T5867] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.555171][ T5350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.566375][ T1110] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 190.604026][ T5350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.790075][ T5350] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 190.845003][ T1110] usb 7-1: Using ep0 maxpacket: 16 [ 190.876707][ T5350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.999727][ T1110] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 191.042286][ T1107] usb 2-1: USB disconnect, device number 5 [ 191.043230][ T5350] usb 6-1: config 0 descriptor?? [ 191.091142][ T1110] usb 7-1: config 0 has no interface number 0 [ 191.138715][ T1110] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 191.153102][ T1110] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 192.355252][ T5350] usbhid 6-1:0.0: can't add hid device: -71 [ 192.372204][ T5350] usbhid: probe of 6-1:0.0 failed with error -71 [ 192.410185][ T5350] usb 6-1: USB disconnect, device number 4 [ 192.435375][ T1110] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 192.877327][ T5899] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 192.938616][ T1110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.946926][ T1110] usb 7-1: Product: syz [ 192.951119][ T1110] usb 7-1: Manufacturer: syz [ 192.964474][ T1110] usb 7-1: config 0 descriptor?? [ 193.002434][ T5906] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.161442][ T1110] usb 7-1: can't set config #0, error -71 [ 193.315848][ T1110] usb 7-1: USB disconnect, device number 2 [ 193.329471][ T5906] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 193.347613][ T5906] bridge_slave_0: default FDB implementation only supports local addresses [ 194.390145][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.397234][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.924686][ T5930] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 194.975137][ T5479] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 195.925044][ T5479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.310841][ T5479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.322487][ T5479] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 196.333244][ T5479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.360981][ T5479] usb 5-1: config 0 descriptor?? [ 197.514345][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.361'. [ 197.961590][ T5957] rdma_rxe: rxe_register_device failed with error -23 [ 197.969700][ T5957] rdma_rxe: failed to add team_slave_1 [ 198.965766][ T5479] usbhid 5-1:0.0: can't add hid device: -71 [ 198.972424][ T5479] usbhid: probe of 5-1:0.0 failed with error -71 [ 199.035262][ T5479] usb 5-1: USB disconnect, device number 7 [ 199.199517][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 199.945037][ T4208] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.205103][ T4208] usb 5-1: Using ep0 maxpacket: 16 [ 200.546115][ T4208] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 200.643409][ T4208] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 200.664225][ T4208] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.865339][ T4208] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 200.940854][ T4208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.375961][ T3816] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 201.495242][ T4208] usb 5-1: Product: syz [ 201.499461][ T4208] usb 5-1: Manufacturer: syz [ 201.504088][ T4208] usb 5-1: SerialNumber: syz [ 201.513921][ T4208] usb 5-1: config 0 descriptor?? [ 201.656765][ T4208] appledisplay 5-1:0.0: Could not find int-in endpoint [ 201.666433][ T4208] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 201.734964][ T3816] usb 7-1: Using ep0 maxpacket: 8 [ 201.854861][ T1107] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 201.890656][ T7] usb 5-1: USB disconnect, device number 8 [ 201.905033][ T3816] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.944572][ T3816] usb 7-1: config 0 has no interface number 0 [ 201.974323][ T3816] usb 7-1: too many endpoints for config 0 interface 1 altsetting 0: 240, using maximum allowed: 30 [ 202.044853][ T3816] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 240 [ 202.225125][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.244879][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.260633][ T1107] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 202.269801][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.306937][ T1107] usb 6-1: config 0 descriptor?? [ 202.345118][ T3816] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 202.364886][ T3816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.372958][ T3816] usb 7-1: Product: syz [ 202.380337][ T3816] usb 7-1: Manufacturer: syz [ 202.462458][ T3816] usb 7-1: SerialNumber: syz [ 202.499564][ T3816] usb 7-1: config 0 descriptor?? [ 202.656584][ T3816] usb 7-1: selecting invalid altsetting 1 [ 203.328046][ T3816] dvb_ttusb_budget: ttusb_init_controller: error [ 203.334547][ T3816] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 203.644811][ T5479] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 203.706389][ T3816] DVB: Unable to find symbol stv0299_attach() [ 204.526000][ T3816] DVB: Unable to find symbol tda8083_attach() [ 204.557415][ T3816] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 204.575301][ T3816] usb 7-1: USB disconnect, device number 3 [ 204.614938][ T1107] usbhid 6-1:0.0: can't add hid device: -71 [ 204.624924][ T1107] usbhid: probe of 6-1:0.0 failed with error -71 [ 204.645824][ T5479] usb 1-1: Using ep0 maxpacket: 16 [ 204.666428][ T1107] usb 6-1: USB disconnect, device number 5 [ 205.754865][ T1107] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 205.907226][ T5479] usb 1-1: unable to read config index 0 descriptor/all [ 205.914643][ T5479] usb 1-1: can't read configurations, error -71 [ 207.031427][ T1107] usb 6-1: Using ep0 maxpacket: 8 [ 207.127902][ T4209] Bluetooth: hci5: command 0x0406 tx timeout [ 207.155027][ T1107] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 208.023973][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.394'. [ 208.103006][ T1107] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.593096][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.784923][ T1107] usb 6-1: can't set config #1, error -71 [ 209.685889][ T1107] usb 6-1: USB disconnect, device number 6 [ 209.764933][ T5479] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 210.384998][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.436552][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.477728][ T5479] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 210.518485][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.585690][ T5479] usb 1-1: config 0 descriptor?? [ 211.431072][ T6105] udc-core: couldn't find an available UDC or it's busy [ 211.438101][ T6105] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 211.787930][ T6153] overlayfs: failed to resolve './file0': -2 [ 212.145213][ T1110] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 212.517231][ T5479] usbhid 1-1:0.0: can't add hid device: -71 [ 212.544450][ T5479] usbhid: probe of 1-1:0.0 failed with error -71 [ 213.407044][ T5479] usb 1-1: USB disconnect, device number 8 [ 214.335001][ T1110] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.343643][ T1110] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.378764][ T1110] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.400421][ T1110] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.855532][ T6215] overlayfs: failed to resolve './file0': -2 [ 215.871031][ T1110] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.881507][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.934870][ T1110] usb 6-1: can't set config #1, error -71 [ 216.012243][ T1110] usb 6-1: USB disconnect, device number 7 [ 216.842253][ T3816] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 217.665326][ T3816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.837265][ T3816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.142199][ T3816] usb 7-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 218.239424][ T3816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.270620][ T3816] usb 7-1: config 0 descriptor?? [ 218.798727][ T6218] udc-core: couldn't find an available UDC or it's busy [ 218.805796][ T6218] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.914984][ T1110] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.215078][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 219.494894][ T1110] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.509457][ T1110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.742334][ T6265] infiniband syz0: set active [ 219.747112][ T6265] infiniband syz0: added veth0_vlan [ 219.755775][ T6265] infiniband syz0: Couldn't open port 1 [ 219.826094][ T6265] RDS/IB: syz0: added [ 219.830154][ T6265] smc: adding ib device syz0 with port count 1 [ 219.836397][ T6265] smc: ib device syz0 port 1 has pnetid [ 219.941501][ T1110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.951560][ T1110] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.964638][ T1110] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.433183][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.894939][ T1110] usb 5-1: GET_CAPABILITIES returned 0 [ 220.900520][ T1110] usbtmc 5-1:16.0: can't read capabilities [ 221.228842][ T1110] usb 5-1: USB disconnect, device number 9 [ 222.185414][ T6295] netlink: 'syz.6.440': attribute type 1 has an invalid length. [ 222.196312][ T3816] usbhid 7-1:0.0: can't add hid device: -71 [ 222.225325][ T3816] usbhid: probe of 7-1:0.0 failed with error -71 [ 222.269920][ T3816] usb 7-1: USB disconnect, device number 4 [ 223.195664][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 224.474819][ T1107] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 224.494990][ T1110] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 224.564856][ T4208] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 224.725031][ T1107] usb 6-1: Using ep0 maxpacket: 16 [ 224.774800][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 224.805511][ T4208] usb 7-1: Using ep0 maxpacket: 32 [ 224.844960][ T1107] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 224.861229][ T1107] usb 6-1: config 0 has no interface number 0 [ 224.894869][ T1107] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 224.916346][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.925000][ T4208] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 224.943367][ T4208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.956725][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1792, setting to 1024 [ 224.973145][ T4208] usb 7-1: config 0 descriptor?? [ 225.021910][ T1110] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.033119][ T4208] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 225.072003][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.114981][ T1107] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 225.127319][ T1110] usb 2-1: config 0 descriptor?? [ 225.135092][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.145330][ T6320] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.177420][ T1107] usb 6-1: Product: syz [ 225.199760][ T1107] usb 6-1: Manufacturer: syz [ 225.229893][ T1107] usb 6-1: SerialNumber: syz [ 225.280956][ T1107] usb 6-1: config 0 descriptor?? [ 225.325197][ T6318] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.365858][ T1107] asix: probe of 6-1:0.251 failed with error -22 [ 225.380290][ T1110] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 225.694950][ T4208] gspca_vc032x: reg_w err -71 [ 225.699686][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.761374][ T4170] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 225.784903][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.790606][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.797130][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.802673][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.808509][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.813933][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.819787][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.825667][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.831088][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.837777][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 225.843210][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.034967][ T5479] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 226.515837][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.599773][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.634832][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.640166][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.641012][ T5479] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 226.654919][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.670407][ T5479] usb 1-1: config 0 descriptor?? [ 226.694219][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.707540][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.718851][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.724284][ T4208] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.734411][ T4208] gspca_vc032x: Unknown sensor... [ 226.749518][ T4208] vc032x: probe of 7-1:0.0 failed with error -22 [ 226.777783][ T4208] usb 7-1: USB disconnect, device number 5 [ 226.836493][ T1107] usb 2-1: USB disconnect, device number 6 [ 226.862162][ T1107] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 227.053239][ T6364] udc-core: couldn't find an available UDC or it's busy [ 227.064837][ T6364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.322900][ T4389] usb 6-1: USB disconnect, device number 8 [ 228.735444][ T5479] usbhid 1-1:0.0: can't add hid device: -71 [ 228.755316][ T5479] usbhid: probe of 1-1:0.0 failed with error -71 [ 228.790325][ T5479] usb 1-1: USB disconnect, device number 9 [ 230.789540][ T1107] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 230.818408][ T1107] Bluetooth: hci0: Injecting HCI hardware error event [ 230.864955][ T4170] Bluetooth: hci0: hardware error 0x00 [ 232.320549][ T1110] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.534910][ T5479] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 232.595119][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 232.745532][ T1110] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 232.778398][ T1110] usb 2-1: config 0 has no interface number 0 [ 232.840992][ T1110] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 232.976257][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.033148][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.105130][ T5479] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 233.123251][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.134846][ T1110] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 233.152882][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.164036][ T1110] usb 2-1: Product: syz [ 233.168919][ T1110] usb 2-1: Manufacturer: syz [ 233.173941][ T1110] usb 2-1: SerialNumber: syz [ 233.196198][ T5479] usb 1-1: config 0 descriptor?? [ 234.039689][ T1110] usb 2-1: config 0 descriptor?? [ 234.075208][ T6421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.334657][ T1110] asix: probe of 2-1:0.251 failed with error -22 [ 234.441482][ T6448] udc-core: couldn't find an available UDC or it's busy [ 234.448593][ T6448] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 235.806245][ T5479] usbhid 1-1:0.0: can't add hid device: -71 [ 235.814427][ T5479] usbhid: probe of 1-1:0.0 failed with error -71 [ 235.849589][ T5479] usb 1-1: USB disconnect, device number 10 [ 236.272850][ T4209] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 237.368042][ T4208] usb 2-1: USB disconnect, device number 7 [ 237.934829][ T4209] usb 7-1: Using ep0 maxpacket: 8 [ 238.089820][ T6482] rdma_rxe: rxe_register_device failed with error -23 [ 238.097694][ T6482] rdma_rxe: failed to add team_slave_1 [ 238.255145][ T4209] usb 7-1: device descriptor read/all, error -71 [ 238.314845][ T4208] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 239.407047][ T4208] usb 2-1: Using ep0 maxpacket: 8 [ 240.661143][ T4208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 241.245254][ T4208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.255058][ T4208] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.264772][ T4208] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30 [ 241.274829][ T4208] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 241.283883][ T4208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.315731][ T4208] usb 2-1: config 0 descriptor?? [ 241.355943][ T4208] usb 2-1: can't set config #0, error -71 [ 241.418252][ T4208] usb 2-1: USB disconnect, device number 8 [ 242.391305][ T1110] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 243.624883][ T4237] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 244.209864][ T6531] netlink: 44 bytes leftover after parsing attributes in process `syz.4.493'. [ 244.825074][ T1110] usb 7-1: device descriptor read/all, error -71 [ 244.915378][ T4237] usb 6-1: Using ep0 maxpacket: 16 [ 245.075355][ T4237] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 245.092056][ T4237] usb 6-1: config 0 has no interface number 0 [ 245.102183][ T4237] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 245.484871][ T4237] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 245.493954][ T4237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.441143][ T4237] usb 6-1: Product: syz [ 246.451264][ T4237] usb 6-1: Manufacturer: syz [ 246.476347][ T4237] usb 6-1: config 0 descriptor?? [ 246.524916][ T4237] usb 6-1: can't set config #0, error -71 [ 246.531869][ T4237] usb 6-1: USB disconnect, device number 9 [ 246.855200][ T4271] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 247.255769][ T4271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.403400][ T4271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.368901][ T4271] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 248.959339][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.011495][ T4271] usb 2-1: config 0 descriptor?? [ 249.097213][ T26] audit: type=1326 audit(1731645574.669:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.6.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea06662719 code=0x0 [ 249.511840][ T6601] udc-core: couldn't find an available UDC or it's busy [ 249.519018][ T6601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.584862][ T4271] usbhid 2-1:0.0: can't add hid device: -71 [ 251.007418][ T4271] usbhid: probe of 2-1:0.0 failed with error -71 [ 251.258255][ T4271] usb 2-1: USB disconnect, device number 9 [ 252.625298][ T4271] Bluetooth: hci3: command 0x0405 tx timeout [ 254.235103][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 255.433622][ T4208] Bluetooth: hci3: command 0x0405 tx timeout [ 255.620277][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.685704][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.085773][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.195278][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 256.230726][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 256.252420][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.079388][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.134915][ T7] usb 5-1: can't set config #27, error -71 [ 257.154937][ T7] usb 5-1: USB disconnect, device number 10 [ 258.598152][ T4208] Bluetooth: hci3: command 0x0405 tx timeout [ 268.760150][ T6839] netlink: 'syz.4.565': attribute type 11 has an invalid length. [ 268.941777][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.563'. [ 268.951159][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.563'. [ 269.046068][ T5479] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 269.345103][ T5479] usb 7-1: Using ep0 maxpacket: 16 [ 269.645025][ T5479] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 269.664134][ T5479] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 269.699936][ T5479] usb 7-1: Product: syz [ 269.707699][ T5479] usb 7-1: Manufacturer: syz [ 269.712355][ T5479] usb 7-1: SerialNumber: syz [ 269.745933][ T5479] usb 7-1: config 0 descriptor?? [ 270.715585][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 271.007928][ T5479] usb 7-1: USB disconnect, device number 10 [ 271.865344][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.955593][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 271.981950][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.107071][ T6870] binder: 6859:6870 ioctl 4018620d 0 returned -22 [ 272.182669][ T7] usb 1-1: Product: syz [ 272.291382][ T7] usb 1-1: config 0 descriptor?? [ 272.724931][ T7] usb 1-1: can't set config #0, error -71 [ 272.738394][ T7] usb 1-1: USB disconnect, device number 11 [ 274.195005][ T1110] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 275.594991][ T1110] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.603648][ T1110] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.634863][ T5479] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 275.716153][ T1110] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.735707][ T1110] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.865342][ T1110] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.874954][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.882998][ T1110] usb 6-1: Product: syz [ 275.887765][ T1110] usb 6-1: Manufacturer: syz [ 275.995098][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.995365][ T5479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.995704][ T5479] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 275.995786][ T5479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.027107][ T1110] usb 6-1: can't set config #1, error -71 [ 276.044941][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 276.053233][ T1110] usb 6-1: USB disconnect, device number 10 [ 276.081974][ T5479] usb 1-1: config 0 descriptor?? [ 276.285043][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 276.713311][ T6921] udc-core: couldn't find an available UDC or it's busy [ 276.713385][ T6921] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 276.745337][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.745468][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.745635][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 276.745715][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.763303][ T21] usb 2-1: config 0 descriptor?? [ 276.916347][ T4389] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 276.937867][ T6925] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 277.886062][ T4389] usb 5-1: Using ep0 maxpacket: 16 [ 277.898977][ T21] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0002/input/input7 [ 278.045254][ T4389] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.064846][ T5479] usbhid 1-1:0.0: can't add hid device: -71 [ 278.164317][ T5479] usbhid: probe of 1-1:0.0 failed with error -71 [ 278.196686][ T4389] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.512824][ T5479] usb 1-1: USB disconnect, device number 12 [ 278.581286][ T21] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 278.795264][ T4389] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.815897][ T4389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.824339][ T4389] usb 5-1: Product: syz [ 278.928673][ T4389] usb 5-1: can't set config #1, error -71 [ 278.942154][ T4389] usb 5-1: USB disconnect, device number 11 [ 279.265016][ T5479] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 279.409453][ T6938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.520288][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.593'. [ 281.094886][ T4208] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 281.094939][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 281.991856][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.604'. [ 282.064827][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 282.226063][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.253748][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.302191][ T7] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 282.334942][ T5479] usb 2-1: device descriptor read/64, error -71 [ 282.342209][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.351155][ T4208] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.375748][ T4208] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.505745][ T7] usb 5-1: config 0 descriptor?? [ 282.526013][ T4208] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.604802][ T5479] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 282.620835][ T4208] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.646220][ T5479] usb 2-1: device reset changed ep0 maxpacket size! [ 282.672715][ T4389] usb 2-1: USB disconnect, device number 10 [ 282.778670][ T4208] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.796439][ T4208] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.808340][ T4208] usb 7-1: Product: syz [ 282.812578][ T4208] usb 7-1: Manufacturer: syz [ 282.890639][ T4170] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 282.900724][ T4170] CPU: 1 PID: 4170 Comm: kworker/u5:2 Not tainted 5.15.172-syzkaller #0 [ 282.907266][ T4208] cdc_wdm 7-1:1.0: skipping garbage [ 282.909075][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.914277][ T4208] cdc_wdm 7-1:1.0: skipping garbage [ 282.924325][ T4170] Workqueue: hci5 hci_rx_work [ 282.924356][ T4170] Call Trace: [ 282.924364][ T4170] [ 282.924374][ T4170] dump_stack_lvl+0x1e3/0x2d0 [ 282.924404][ T4170] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 282.950770][ T4170] ? panic+0x860/0x860 [ 282.954873][ T4170] ? sysfs_create_dir_ns+0x282/0x390 [ 282.960194][ T4170] sysfs_create_dir_ns+0x2c6/0x390 [ 282.965328][ T4170] ? sysfs_warn_dup+0xa0/0xa0 [ 282.970014][ T4170] ? do_raw_spin_unlock+0x137/0x8b0 [ 282.975217][ T4170] kobject_add_internal+0x6e0/0xe00 [ 282.980425][ T4170] kobject_add+0x14e/0x210 [ 282.984841][ T4170] ? device_add+0x3c2/0xfd0 [ 282.989344][ T4170] ? kobject_init+0x1d0/0x1d0 [ 282.994018][ T4170] ? __raw_spin_lock_init+0x41/0x100 [ 282.999304][ T4170] ? get_device_parent+0x128/0x400 [ 283.004417][ T4170] device_add+0x476/0xfd0 [ 283.008763][ T4170] hci_conn_add_sysfs+0xe4/0x1f0 [ 283.013788][ T4170] le_conn_complete_evt+0xc15/0x1500 [ 283.019082][ T4170] ? cs_le_create_conn+0x5f0/0x5f0 [ 283.024204][ T4170] hci_le_meta_evt+0x28c/0x3f50 [ 283.029056][ T4170] ? __lock_acquire+0x1ff0/0x1ff0 [ 283.034084][ T4170] ? __mutex_lock_common+0x444/0x25a0 [ 283.039464][ T4170] ? hci_remote_host_features_evt+0x280/0x280 [ 283.045557][ T4170] ? __mutex_unlock_slowpath+0x218/0x750 [ 283.051189][ T4170] ? hci_event_packet+0x3b4/0x1550 [ 283.056304][ T4170] ? mutex_unlock+0x10/0x10 [ 283.060809][ T4170] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 283.066788][ T4170] ? print_irqtrace_events+0x210/0x210 [ 283.072254][ T4170] hci_event_packet+0xc41/0x1550 [ 283.077199][ T4170] ? rcu_lock_release+0x20/0x20 [ 283.082056][ T4170] ? hci_send_to_monitor+0x99/0x4d0 [ 283.087254][ T4170] hci_rx_work+0x232/0x990 [ 283.091777][ T4170] process_one_work+0x8a1/0x10c0 [ 283.096728][ T4170] ? worker_detach_from_pool+0x260/0x260 [ 283.102362][ T4170] ? _raw_spin_lock_irqsave+0x120/0x120 [ 283.107908][ T4170] ? kthread_data+0x4e/0xc0 [ 283.112410][ T4170] ? wq_worker_running+0x97/0x170 [ 283.117436][ T4170] worker_thread+0xaca/0x1280 [ 283.122134][ T4170] kthread+0x3f6/0x4f0 [ 283.126202][ T4170] ? rcu_lock_release+0x20/0x20 [ 283.131064][ T4170] ? kthread_blkcg+0xd0/0xd0 [ 283.135653][ T4170] ret_from_fork+0x1f/0x30 [ 283.140093][ T4170] [ 283.146479][ T4170] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 283.159908][ T4170] Bluetooth: hci5: failed to register connection device [ 283.164581][ T4208] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 283.167149][ T4170] Bluetooth: hci5: link tx timeout [ 283.177820][ T7] hid-generic 0003:0853:0146.0003: item fetching failed at offset 5/7 [ 283.178608][ T4170] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 283.194392][ T4170] Bluetooth: hci5: link tx timeout [ 283.210980][ T4170] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.219967][ T4389] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 283.665328][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.875382][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.896366][ T4208] usb 7-1: USB disconnect, device number 11 [ 283.905310][ T7] hid-generic: probe of 0003:0853:0146.0003 failed with error -22 [ 283.908121][ T4389] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 283.930402][ T4389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.953186][ T4389] usb 2-1: config 0 descriptor?? [ 284.132948][ T4210] usb 5-1: USB disconnect, device number 12 [ 284.565903][ T7005] udc-core: couldn't find an available UDC or it's busy [ 284.573178][ T7005] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 285.497416][ T4170] ================================================================== [ 285.506024][ T4170] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 285.513857][ T4170] Read of size 1 at addr ffff8881463f4c0a by task kworker/u5:2/4170 [ 285.521838][ T4170] [ 285.524158][ T4170] CPU: 1 PID: 4170 Comm: kworker/u5:2 Not tainted 5.15.172-syzkaller #0 [ 285.532481][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.542544][ T4170] Workqueue: hci3 hci_rx_work [ 285.547241][ T4170] Call Trace: [ 285.550603][ T4170] [ 285.553553][ T4170] dump_stack_lvl+0x1e3/0x2d0 [ 285.558246][ T4170] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 285.563892][ T4170] ? _printk+0xd1/0x120 [ 285.568068][ T4170] ? __wake_up_klogd+0xcc/0x100 [ 285.572923][ T4170] ? panic+0x860/0x860 [ 285.577000][ T4170] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 285.582473][ T4170] print_address_description+0x63/0x3b0 [ 285.588030][ T4170] ? hci_le_meta_evt+0x11d6/0x3f50 [ 285.593144][ T4170] kasan_report+0x16b/0x1c0 [ 285.597649][ T4170] ? hci_le_meta_evt+0x11d6/0x3f50 [ 285.602766][ T4170] hci_le_meta_evt+0x11d6/0x3f50 [ 285.607720][ T4170] ? __lock_acquire+0x1ff0/0x1ff0 [ 285.612761][ T4170] ? hci_remote_host_features_evt+0x280/0x280 [ 285.618823][ T4170] ? __mutex_unlock_slowpath+0x218/0x750 [ 285.624471][ T4170] ? hci_event_packet+0x3b4/0x1550 [ 285.629586][ T4170] ? mutex_unlock+0x10/0x10 [ 285.634093][ T4170] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 285.640073][ T4170] ? print_irqtrace_events+0x210/0x210 [ 285.645534][ T4170] hci_event_packet+0xc41/0x1550 [ 285.650477][ T4170] ? rcu_lock_release+0x20/0x20 [ 285.655337][ T4170] ? hci_send_to_monitor+0x99/0x4d0 [ 285.660539][ T4170] hci_rx_work+0x232/0x990 [ 285.664968][ T4170] process_one_work+0x8a1/0x10c0 [ 285.669906][ T4170] ? print_irqtrace_events+0x210/0x210 [ 285.675371][ T4170] ? worker_detach_from_pool+0x260/0x260 [ 285.681004][ T4170] ? _raw_spin_lock_irqsave+0x120/0x120 [ 285.686551][ T4170] ? kthread_data+0x4e/0xc0 [ 285.691052][ T4170] ? wq_worker_running+0x97/0x170 [ 285.696072][ T4170] worker_thread+0xaca/0x1280 [ 285.700769][ T4170] kthread+0x3f6/0x4f0 [ 285.704841][ T4170] ? rcu_lock_release+0x20/0x20 [ 285.709697][ T4170] ? kthread_blkcg+0xd0/0xd0 [ 285.714381][ T4170] ret_from_fork+0x1f/0x30 [ 285.718814][ T4170] [ 285.721829][ T4170] [ 285.724145][ T4170] Allocated by task 7011: [ 285.728466][ T4170] ____kasan_kmalloc+0xba/0xf0 [ 285.733225][ T4170] __kmalloc_node_track_caller+0x195/0x390 [ 285.739029][ T4170] __alloc_skb+0x12c/0x590 [ 285.743448][ T4170] vhci_write+0xbc/0x430 [ 285.747688][ T4170] vfs_write+0xacd/0xe50 [ 285.751937][ T4170] ksys_write+0x1a2/0x2c0 [ 285.756264][ T4170] do_syscall_64+0x3b/0xb0 [ 285.760681][ T4170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.766572][ T4170] [ 285.768890][ T4170] The buggy address belongs to the object at ffff8881463f4800 [ 285.768890][ T4170] which belongs to the cache kmalloc-1k of size 1024 [ 285.782932][ T4170] The buggy address is located 10 bytes to the right of [ 285.782932][ T4170] 1024-byte region [ffff8881463f4800, ffff8881463f4c00) [ 285.796720][ T4170] The buggy address belongs to the page: [ 285.802353][ T4170] page:ffffea000518fc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1463f0 [ 285.812597][ T4170] head:ffffea000518fc00 order:3 compound_mapcount:0 compound_pincount:0 [ 285.820914][ T4170] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 285.828999][ T4170] raw: 057ff00000010200 0000000000000000 0000000300000001 ffff888017041dc0 [ 285.837578][ T4170] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 285.846148][ T4170] page dumped because: kasan: bad access detected [ 285.852565][ T4170] page_owner tracks the page as allocated [ 285.858271][ T4170] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 7350783201, free_ts 0 [ 285.876232][ T4170] get_page_from_freelist+0x3b78/0x3d40 [ 285.881780][ T4170] __alloc_pages+0x272/0x700 [ 285.886363][ T4170] alloc_page_interleave+0x22/0x1c0 [ 285.891556][ T4170] new_slab+0xbb/0x4b0 [ 285.895621][ T4170] ___slab_alloc+0x6f6/0xe10 [ 285.900217][ T4170] __kmalloc+0x1c9/0x300 [ 285.904452][ T4170] alloc_workqueue+0x197/0x1460 [ 285.909329][ T4170] z_erofs_init_zip_subsystem+0x201/0x260 [ 285.915041][ T4170] erofs_module_init+0x72/0xd0 [ 285.919794][ T4170] do_one_initcall+0x22b/0x7a0 [ 285.924554][ T4170] do_initcall_level+0x157/0x210 [ 285.929486][ T4170] do_initcalls+0x49/0x90 [ 285.933805][ T4170] kernel_init_freeable+0x425/0x5c0 [ 285.938992][ T4170] kernel_init+0x19/0x290 [ 285.943320][ T4170] ret_from_fork+0x1f/0x30 [ 285.947737][ T4170] page_owner free stack trace missing [ 285.953096][ T4170] [ 285.955419][ T4170] Memory state around the buggy address: [ 285.961037][ T4170] ffff8881463f4b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 285.969092][ T4170] ffff8881463f4b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 285.977144][ T4170] >ffff8881463f4c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 285.985281][ T4170] ^ [ 285.989599][ T4170] ffff8881463f4c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 285.997654][ T4170] ffff8881463f4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 286.005707][ T4170] ================================================================== [ 286.013755][ T4170] Disabling lock debugging due to kernel taint [ 286.022564][ T4170] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 286.029775][ T4170] CPU: 0 PID: 4170 Comm: kworker/u5:2 Tainted: G B 5.15.172-syzkaller #0 [ 286.034868][ T4389] usbhid 2-1:0.0: can't add hid device: -71 [ 286.039500][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.055632][ T4170] Workqueue: hci3 hci_rx_work [ 286.060378][ T4170] Call Trace: [ 286.063672][ T4170] [ 286.066612][ T4170] dump_stack_lvl+0x1e3/0x2d0 [ 286.071324][ T4170] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 286.076980][ T4170] ? panic+0x860/0x860 [ 286.081067][ T4170] ? rcu_is_watching+0x11/0xa0 [ 286.085568][ T4389] usbhid: probe of 2-1:0.0 failed with error -71 [ 286.085847][ T4170] ? preempt_schedule_common+0xa6/0xd0 [ 286.097628][ T4170] panic+0x318/0x860 [ 286.101551][ T4170] ? asm_sysvec_call_function_single+0x16/0x20 [ 286.107729][ T4170] ? check_panic_on_warn+0x1d/0xa0 [ 286.112865][ T4170] ? fb_is_primary_device+0xd0/0xd0 [ 286.118090][ T4170] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 286.124106][ T4170] ? _raw_spin_unlock+0x40/0x40 [ 286.124976][ T4389] usb 2-1: USB disconnect, device number 11 [ 286.128973][ T4170] check_panic_on_warn+0x7e/0xa0 [ 286.129003][ T4170] ? hci_le_meta_evt+0x11d6/0x3f50 [ 286.144911][ T4170] end_report+0x6d/0xf0 [ 286.149082][ T4170] kasan_report+0x18e/0x1c0 [ 286.153601][ T4170] ? hci_le_meta_evt+0x11d6/0x3f50 [ 286.158739][ T4170] hci_le_meta_evt+0x11d6/0x3f50 [ 286.163694][ T4170] ? __lock_acquire+0x1ff0/0x1ff0 [ 286.168739][ T4170] ? hci_remote_host_features_evt+0x280/0x280 [ 286.174826][ T4170] ? __mutex_unlock_slowpath+0x218/0x750 [ 286.180475][ T4170] ? hci_event_packet+0x3b4/0x1550 [ 286.185604][ T4170] ? mutex_unlock+0x10/0x10 [ 286.190124][ T4170] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 286.196145][ T4170] ? print_irqtrace_events+0x210/0x210 [ 286.201620][ T4170] hci_event_packet+0xc41/0x1550 [ 286.206585][ T4170] ? rcu_lock_release+0x20/0x20 [ 286.211459][ T4170] ? hci_send_to_monitor+0x99/0x4d0 [ 286.216672][ T4170] hci_rx_work+0x232/0x990 [ 286.221111][ T4170] process_one_work+0x8a1/0x10c0 [ 286.226078][ T4170] ? print_irqtrace_events+0x210/0x210 [ 286.231561][ T4170] ? worker_detach_from_pool+0x260/0x260 [ 286.237227][ T4170] ? _raw_spin_lock_irqsave+0x120/0x120 [ 286.242883][ T4170] ? kthread_data+0x4e/0xc0 [ 286.247423][ T4170] ? wq_worker_running+0x97/0x170 [ 286.252464][ T4170] worker_thread+0xaca/0x1280 [ 286.257168][ T4170] kthread+0x3f6/0x4f0 [ 286.261255][ T4170] ? rcu_lock_release+0x20/0x20 [ 286.266124][ T4170] ? kthread_blkcg+0xd0/0xd0 [ 286.270740][ T4170] ret_from_fork+0x1f/0x30 [ 286.275182][ T4170] [ 286.278320][ T4170] Kernel Offset: disabled [ 286.282658][ T4170] Rebooting in 86400 seconds..