last executing test programs: 6m51.925409884s ago: executing program 32 (id=2389): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x0) mount(&(0x7f0000002a40)=@nullb, &(0x7f0000002a80)='./file1\x00', &(0x7f0000002ac0)='squashfs\x00', 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6m50.397502689s ago: executing program 33 (id=2397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000002010101000000000000000002"], 0x24}}, 0x4000) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r4 = socket(0x28, 0x5, 0x0) listen(r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_genetlink_get_family_id$team(0x0, r4) sendmmsg$inet6(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="85", 0x1}, {&(0x7f0000000440)="a216c485b09810246e7a960a62884ad1af18", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000005bc0)="ef127fe16909d81c7364f70162ecb1752dfa530c8763844d62246c02d2c141102cedb338f8bea0b003177bb34f37e730874374cc65a51239f0ca2d0204c1ce53f4aa7c0184b8c67007691eb4220cf99650b5cf70ba1ac2a2359e029ab81818a6f03fa0258263d596d8a4715c4682693a0ec13aa0f2", 0x75}, {&(0x7f0000000800)="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", 0x1fe}, {&(0x7f00000005c0)}, {&(0x7f00000058c0)="88a3ce3975df7e35c162f50df8ce954c8d90f7a463aad3eab46c5e3ec50637351b95d1100aa00678b243a8543dce691a16f629b6566b9114683a741a2af57ae88d7b85a35c703189f444d05c241d1219bf61b207a8232da194c55ef47e0f49a694052eca37c9e3144cf93c829bd85adf0825f2dfdf8e41f9e8acc41b1e476509ad0878fe201c1508f06cd6f342e07f3e9d5d981ad5cabf05a827dcce37e6100e5018d6da585769d0f42e9d770570f3be3dd36a5171cada02e988a168664d35eb7387c23fb88a675307d4bcaaea73833a61572954344ff23ae70774d70acfefa5a682b987ff43ad5e384c5e4cbccf11fefe3da8f81b04c22883a40492013287ef460f9c80db6b5719837e714cd3a6b4c83b060ef595ba24be42668319e6b2c6fb9ae6ddd373381b10411a3e46bad4d426b91f63c4f05c9737a0c045f135aa4c08b5e078535601beede0dda2c70cbf6c9ed55de68c061ecd9c7d9f50ec7c42b04e05dc61988c30b42efd00ca231b873c2c3fac522f20ab64ab0950ff22bc2eabdc3c59d64b37042c4e6bff15ea42122a648dccac21bfa2a73c242a84fa6f0bea1280eaebf9a641bf82cae48cd272ed3b75184d7593a9405a928830470c97d6b7de102a9ba91509e9bea72aa88df7f40339a72cd9f07a4e9de28b45c8eaaa", 0x1dd}], 0x4}}], 0x2, 0xc880) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000003040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_le_read_def_data_len={{0xfc}, {0x1, 0x1}}}}, 0xb) 6m47.131112517s ago: executing program 34 (id=2408): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0, r1}}, 0x18) 6m40.949500264s ago: executing program 35 (id=2426): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x7, 0xfc, 0x7f}, {0x2, 0xc7}, {0x6, 0x0, 0x10}]}) 6m12.448232251s ago: executing program 36 (id=2482): r0 = io_uring_setup(0x30d5, &(0x7f00000001c0)) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m11.266934226s ago: executing program 6 (id=2490): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7b27, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x9b090b, 0x2b, '\x00', @value=0x4}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 6m10.566571074s ago: executing program 37 (id=2490): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7b27, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x9b090b, 0x2b, '\x00', @value=0x4}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 5m54.086430744s ago: executing program 38 (id=2534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 5m9.13548545s ago: executing program 39 (id=2651): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080005, 0xffffffd2) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x3, 0x502, [0x0, 0x20001400, 0x200015be, 0x200015ee], 0x0, &(0x7f0000000240), &(0x7f0000001400)=ANY=[@ANYBLOB="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"]}, 0x56f) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x3}}, 0x20) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) io_submit(r4, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 5m6.4826715s ago: executing program 40 (id=2662): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) 4m58.783883022s ago: executing program 41 (id=2681): syz_open_dev$usbmon(&(0x7f0000001a40), 0x81, 0x201) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m54.630747567s ago: executing program 42 (id=2690): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20010084) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) write(r1, &(0x7f0000000240)="240000001e005f1814fffffffffffff807000000010000000000000008000500c4cb0b02", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x48, &(0x7f0000000100)="c69a0124", 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @remote}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f8e746d6f64652d303030383030303030733d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000040)=r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/244, 0x45}, {0x0}], 0x2}, 0x5}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r6], 0x50}, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4m44.766543721s ago: executing program 7 (id=2704): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 4m43.717417668s ago: executing program 7 (id=2705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m43.220318036s ago: executing program 7 (id=2706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) ioperm(0x0, 0x6, 0x8000000000004) fchdir(0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x2, 0xf6, 0x2}) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) personality(0x5000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)=0x28) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40008d1}, 0x804) pipe2$9p(&(0x7f00000001c0), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @link_local, @broadcast}}}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 4m42.226599142s ago: executing program 7 (id=2707): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 4m42.061316821s ago: executing program 7 (id=2708): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '/dev/ttynull\x00'}}, {@directio}, {@posixacl}]}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) r3 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prlimit64(r3, 0xc, &(0x7f00000003c0)={0x2}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030000080000000000000000000000020001000000000010000007000000000200010000008a8c9e81bc04"], 0x30}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000340)="b90c060000b80000000066ba2000b8e1540000ef0f23d98fa878c30f9ec744240080ee3d00404044240200000000f2460f300f0114240f01c3400f225e0f20e035400000000f22e0c74424005d88f9fbc744240239000000c7442406000000000f011c248f8978c32b660fdea9be000000", 0x71}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m37.824194656s ago: executing program 7 (id=2709): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioperm(0x0, 0x7, 0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040120c300000000000000109028e8652bf7c3422917e0001"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) epoll_create(0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="bd838681401cc190000067f0ff00", @ANYBLOB], 0x30}}, 0x0) getpid() 4m37.261616653s ago: executing program 43 (id=2709): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioperm(0x0, 0x7, 0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040120c300000000000000109028e8652bf7c3422917e0001"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) epoll_create(0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="bd838681401cc190000067f0ff00", @ANYBLOB], 0x30}}, 0x0) getpid() 4m33.061192258s ago: executing program 3 (id=2713): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32], 0x44}}, 0x0) 4m32.810704757s ago: executing program 3 (id=2714): openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x0) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1000800, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) open(0x0, 0x0, 0x244) 4m31.820018614s ago: executing program 3 (id=2716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 4m29.803478867s ago: executing program 3 (id=2718): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 4m28.741068472s ago: executing program 3 (id=2721): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m28.344332391s ago: executing program 3 (id=2722): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32], 0x44}}, 0x0) 4m28.15099274s ago: executing program 44 (id=2722): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32], 0x44}}, 0x0) 4m28.14651628s ago: executing program 6 (id=2691): sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000003ce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) 4m25.30002745s ago: executing program 6 (id=2727): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 4m24.718563388s ago: executing program 6 (id=2729): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 4m24.378860806s ago: executing program 6 (id=2730): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m24.326974036s ago: executing program 2 (id=2731): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000100)) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x111, 0xc}}, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) 4m23.395576403s ago: executing program 6 (id=2733): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 4m23.350051503s ago: executing program 2 (id=2734): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x3, 0x2}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4m23.066472132s ago: executing program 45 (id=2733): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 4m23.042879062s ago: executing program 2 (id=2736): openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x0) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1000800, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(0x0, 0x0, 0x244) 4m20.831308584s ago: executing program 2 (id=2739): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 4m20.702405283s ago: executing program 2 (id=2740): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 4m17.783445593s ago: executing program 2 (id=2743): r0 = syz_io_uring_setup(0x301f, &(0x7f0000000000)={0x0, 0x26d9, 0x40, 0x1, 0x386}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000002f00)={&(0x7f0000002ec0)={&(0x7f0000002e00)="8b", 0x1, 0x1, 0x1, 0x10000}, 0x1}, 0x1) 4m16.805366369s ago: executing program 46 (id=2743): r0 = syz_io_uring_setup(0x301f, &(0x7f0000000000)={0x0, 0x26d9, 0x40, 0x1, 0x386}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000002f00)={&(0x7f0000002ec0)={&(0x7f0000002e00)="8b", 0x1, 0x1, 0x1, 0x10000}, 0x1}, 0x1) 1m21.515412008s ago: executing program 1 (id=3140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 1m20.165873902s ago: executing program 1 (id=3141): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x0) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1000800, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(0x0, 0x0, 0x244) 1m18.336496716s ago: executing program 1 (id=3147): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) 1m14.995258133s ago: executing program 1 (id=3153): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 1m13.262504156s ago: executing program 1 (id=3161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRESDEC], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) 1m12.421879612s ago: executing program 1 (id=3167): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1m11.175483857s ago: executing program 47 (id=3167): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 16.112148412s ago: executing program 8 (id=3336): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getuid() setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setresuid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, 0x0, 0x3) 14.969248978s ago: executing program 8 (id=3341): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c84", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6b", 0x2a}, {0x0}, {&(0x7f0000000400)="8d6fd146b562b7b5b985ef6126f70e3290f78940d9995accbdd4119850f0d1b42b5f4246552b7cf27ab2d677792e263a2d2fdc5798f22fce934e691ef9eebaff17c91c4905e2edb7152c799b1a55efbfc9e464bb555e681198a15e39d600f78a344cc502ee9a5ba37b2abc2a689489df5a5b75ccd95b8f32b5b6230ba04cb03f7fcdf61a777d80625ff2", 0x8a}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 13.942968094s ago: executing program 8 (id=3342): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = io_uring_setup(0x60f7, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0xffffffff, 0x3bd}) r2 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r1, r2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x8, 0x1, 0x10001, 0xabee, 0x2, 0x9, 0xd, 0x1, 0x8, 0x5, 0xcea, 0xff, 0x6784, 0x3, 0x81, 0x8001, [0xfffffffb, 0xa96f]}}) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pread64(r0, &(0x7f0000001240)=""/102385, 0x18ff1, 0x2000) 13.145260291s ago: executing program 8 (id=3347): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) 11.698652166s ago: executing program 8 (id=3352): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x268, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e0, 0xffffffff, 0xffffffff, 0x4e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @remote, [0xffffff00, 0xffffffff, 0xff000000, 0x80], [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 'pimreg\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x7, 0x88}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, [0x0, 0xff000000, 0xff, 0xffffffff], 0x4e24, 0x4e22, 0x4e24, 0x4e21, 0x4, 0x4, 0x200, 0x2, 0x40}}}, {{@ipv6={@local, @mcast1, [0x0, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x3c, 0x9e, 0x4, 0x7c}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x2, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xc0020000, 0xe7ffffff, 0x42, 0x54ed}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)=0x0) sched_setscheduler(r5, 0x5, &(0x7f0000001300)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10.632173621s ago: executing program 5 (id=3363): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x6d72a7c9) getdents(r6, 0x0, 0x0) sendto$inet(r5, &(0x7f00000001c0)="e1", 0x1, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) 10.36376698s ago: executing program 4 (id=3355): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000003c0)='/dev/i2c-#\x00', 0x0, 0xffffffffffffff9c) syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) futex(&(0x7f000000cffc), 0x4, 0x801, 0x0, &(0x7f0000000040)=0xfffffffd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f0000000280)={0xc1, 0x0, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009a805fd6f1caa9564831d37b65628b6e9207a4eb122743d967e3b61b507ae144c13c818be4c36af586450a23484503d52c14934197e8a963cd101a9b7b838de5d5b780a36e130a92d6a12de17a57ee8a0031ed29a69e5e0372673062a6fd7d0000000000000000dd69c0c9fb5ad313ce5a5dd76a7fe6a6dd44c1e34bc0874a2e"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 9.513096617s ago: executing program 0 (id=3356): syz_open_dev$usbmon(&(0x7f0000001a40), 0x81, 0x201) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.200132791s ago: executing program 0 (id=3357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001f40)={0x38, r1, 0x211, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x2000, 0x8001]}}]}]}]}, 0x38}}, 0x0) 7.980002351s ago: executing program 0 (id=3359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) 7.67536344s ago: executing program 5 (id=3361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = userfaultfd(0x801) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) dup3(0xffffffffffffffff, r4, 0x0) 7.526955289s ago: executing program 0 (id=3362): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 6.552968425s ago: executing program 5 (id=3365): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 6.316387554s ago: executing program 9 (id=3367): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r5, 0xae7e, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 6.280088304s ago: executing program 0 (id=3368): syz_open_dev$usbmon(&(0x7f0000001a40), 0x81, 0x201) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.626233578s ago: executing program 9 (id=3369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07000514"], 0xa) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB], 0xc3) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 4.574606078s ago: executing program 4 (id=3370): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x42, 0x481e}, 0xe5e8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0xda2, 0x8169, 0x6, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c0001400000000000"], 0xdc}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)={r3}) setresuid(0xee00, 0xee00, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$kcm(0x29, 0x2, 0x0) 4.481926447s ago: executing program 5 (id=3371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001f40)={0x38, r1, 0x211, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x2000, 0x8001]}}]}]}]}, 0x38}}, 0x0) 4.404073477s ago: executing program 0 (id=3372): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x6d72a7c9) getdents(r6, 0x0, 0x0) sendto$inet(r5, &(0x7f00000001c0)="e1", 0x1, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) 4.335066067s ago: executing program 4 (id=3373): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x0) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1000800, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(0x0, 0x0, 0x244) 4.263910656s ago: executing program 9 (id=3374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) 4.238481826s ago: executing program 5 (id=3375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = userfaultfd(0x801) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) dup3(0xffffffffffffffff, r5, 0x0) 3.504569453s ago: executing program 9 (id=3376): syz_open_dev$media(0x0, 0x81, 0x100) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.359548283s ago: executing program 4 (id=3377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 3.119681002s ago: executing program 9 (id=3378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000002c0)={0x18, 0x0, {0x4, @multicast, 'veth0_macvtap\x00'}}, 0x1e) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 2.200157908s ago: executing program 4 (id=3379): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r5, 0xae7e, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 1.968474437s ago: executing program 9 (id=3380): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4040880) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r2, 0x42c0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() prlimit64(r3, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000001c0)={0x400, 0x301, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, {0x0, 0x0, 0x1}, {0x8000}, {0xf8}, {0x0, 0x1}, 0x3, 0x3f0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x2, 0xa}) 1.801851416s ago: executing program 5 (id=3381): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 661.612852ms ago: executing program 4 (id=3382): syz_open_dev$usbmon(&(0x7f0000001a40), 0x81, 0x201) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=3383): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x42, 0x481e}, 0xe5e8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0xda2, 0x8169, 0x6, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c0001400000000000"], 0xdc}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)={r3}) setresuid(0xee00, 0xee00, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): and 0x041b tx timeout [ 1191.581844][T14510] chnl_net:caif_netlink_parms(): no params data found [ 1191.951023][T14510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.970185][T14510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.003746][T14510] device bridge_slave_0 entered promiscuous mode [ 1192.100518][T14510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.132199][T14510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.152204][T14510] device bridge_slave_1 entered promiscuous mode [ 1192.169083][T14385] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1192.181694][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 1192.213977][T14385] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1192.259128][T14385] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1192.368390][T12556] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1192.429376][T14510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.439304][T14385] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1192.458588][T14510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.565529][T14355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1192.584132][T12556] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1192.600618][T12556] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.613394][T12556] usb 8-1: config 0 descriptor?? [ 1192.627650][T14510] team0: Port device team_slave_0 added [ 1192.635732][T12556] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1192.719754][T14355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1192.729563][T14355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1192.741539][T14510] team0: Port device team_slave_1 added [ 1192.915197][T14355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1193.065780][T14510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.073584][T12556] gp8psk: usb in 128 operation failed. [ 1193.080499][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.090904][T12556] gp8psk: usb in 137 operation failed. [ 1193.128447][T14510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.143407][T12556] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1193.163128][T12556] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1193.192244][T12556] usb 8-1: USB disconnect, device number 6 [ 1193.324248][T14510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.338961][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.372188][T14510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.659390][T14385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.722116][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 1193.842961][T14624] kvm: pic: non byte write [ 1193.847708][T14624] kvm: pic: non byte write [ 1193.852855][T14624] kvm: pic: non byte write [ 1193.857446][T14624] kvm: pic: non byte write [ 1193.878078][T14624] kvm: pic: non byte write [ 1193.908824][T14624] kvm: pic: non byte write [ 1193.913927][T14624] kvm: pic: non byte write [ 1193.990190][T14510] device hsr_slave_0 entered promiscuous mode [ 1194.014874][T14510] device hsr_slave_1 entered promiscuous mode [ 1194.058769][T14510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1194.080809][T14510] Cannot create hsr debugfs directory [ 1194.106024][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1194.146217][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1194.337195][T14385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.581885][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1194.639365][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1194.710630][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.718004][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.978078][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1195.157673][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1195.179756][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1195.190436][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.197639][ T7240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.236299][T14355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.295491][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1195.305739][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1195.325223][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2703'. [ 1195.381100][T14479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1195.399231][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1195.408575][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1195.632924][T14479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1195.646777][T14479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1195.658336][T14479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1195.673647][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1195.692156][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1195.704183][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1195.713622][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1195.731615][T14355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.777746][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1195.807046][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1195.815915][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1195.828493][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1195.838523][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1195.850329][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1195.860643][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1195.869337][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.876537][ T7240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.945001][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 1196.015780][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1196.036871][T14385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1196.094058][T13726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1196.108650][T13726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1196.133302][T13726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.140544][T13726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.331519][T13726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1196.345992][T13726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1196.417021][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1196.433831][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1196.443576][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1196.465853][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1196.477085][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1196.684492][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1196.704620][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1196.758726][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1196.767459][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1196.794547][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1196.880487][ T47] device hsr_slave_0 left promiscuous mode [ 1196.888335][ T47] device hsr_slave_1 left promiscuous mode [ 1196.894857][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.904444][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.912834][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.924864][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.934117][ T47] device macvlan1 left promiscuous mode [ 1196.940348][ T47] bridge0: port 3(macvlan1) entered disabled state [ 1196.948949][ T47] device bridge_slave_1 left promiscuous mode [ 1196.955994][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.971338][ T47] device bridge_slave_0 left promiscuous mode [ 1196.989492][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.037939][ T47] device hsr_slave_0 left promiscuous mode [ 1197.053933][ T47] device hsr_slave_1 left promiscuous mode [ 1197.079445][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.087884][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.101241][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.109529][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.125001][ T47] device bridge_slave_1 left promiscuous mode [ 1197.132516][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.216549][ T47] device bridge_slave_0 left promiscuous mode [ 1197.227870][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.551749][ T47] device hsr_slave_0 left promiscuous mode [ 1197.593242][ T47] device hsr_slave_1 left promiscuous mode [ 1197.600617][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.618105][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.628914][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.644034][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.654197][ T47] device bridge_slave_1 left promiscuous mode [ 1197.674351][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.685271][ T47] device bridge_slave_0 left promiscuous mode [ 1197.692015][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.777360][ T47] device veth1_macvtap left promiscuous mode [ 1197.790450][ T47] device veth0_macvtap left promiscuous mode [ 1197.801843][ T47] device veth1_vlan left promiscuous mode [ 1197.808276][ T47] device veth0_vlan left promiscuous mode [ 1197.822486][ T47] device veth1_macvtap left promiscuous mode [ 1197.830484][ T47] device veth0_macvtap left promiscuous mode [ 1197.841726][ T47] device veth1_vlan left promiscuous mode [ 1197.848111][ T47] device veth0_vlan left promiscuous mode [ 1197.856057][ T47] device veth1_macvtap left promiscuous mode [ 1197.872828][ T47] device veth0_macvtap left promiscuous mode [ 1197.879047][ T47] device veth1_vlan left promiscuous mode [ 1197.894990][ T47] device veth0_vlan left promiscuous mode [ 1198.798328][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1198.845949][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1198.894229][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.942675][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.489483][ T47] bond0 (unregistering): Released all slaves [ 1200.022992][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1200.079796][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1200.130257][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.182765][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.700422][ T47] bond0 (unregistering): Released all slaves [ 1201.252748][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1201.297463][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1201.342808][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.390096][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.961001][ T47] bond0 (unregistering): Released all slaves [ 1202.069820][T14479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.180519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1202.199768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1202.257540][T14385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.307239][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1202.319161][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1202.362853][T14479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.402117][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1202.411719][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1202.504134][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1202.517052][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1202.552049][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.559183][ T5690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.593905][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1202.622196][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1202.642728][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.649930][ T5690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.669657][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1202.714967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1202.737208][T14385] device veth0_vlan entered promiscuous mode [ 1202.805296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1202.824433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1202.852888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1202.873481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1202.894121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1202.975257][T14355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.999734][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1203.023814][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1203.040815][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1203.075602][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1203.094121][T14385] device veth1_vlan entered promiscuous mode [ 1203.150217][T14479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1203.169709][T14479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1203.203885][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1203.212179][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1203.245419][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1203.255883][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1203.273383][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1203.286253][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1203.301583][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1203.310150][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1203.328445][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1203.347863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1203.372583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1203.451599][T14510] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1203.490549][T14385] device veth0_macvtap entered promiscuous mode [ 1203.504918][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1203.519471][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1203.540500][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1203.569377][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1203.582186][T10803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1203.593248][T10803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1203.602852][T10803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1203.612583][T10803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1203.613262][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1203.631660][T10803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1203.638945][T10803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1203.639492][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1203.664379][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1203.681065][T14355] device veth0_vlan entered promiscuous mode [ 1203.689395][T14510] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1203.710391][T14385] device veth1_macvtap entered promiscuous mode [ 1203.738158][T14510] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1203.776517][T14355] device veth1_vlan entered promiscuous mode [ 1203.811691][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.855612][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.865485][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.887901][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.913464][T14385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.932053][T14510] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1203.984822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1204.002889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1204.012631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1204.027991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1204.036920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1204.075351][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.096135][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.107335][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.118771][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.130540][T14385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.160019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1204.184221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1204.222664][T14385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.236209][T14385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.248866][T14385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.266242][T14385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.304120][T14479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.324837][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1204.336498][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1204.371729][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1204.398238][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1204.478961][T14355] device veth0_macvtap entered promiscuous mode [ 1204.543643][T14355] device veth1_macvtap entered promiscuous mode [ 1204.604588][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1204.626676][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1204.640987][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1204.658263][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1204.735722][T14479] device veth0_vlan entered promiscuous mode [ 1204.748015][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1204.769159][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.781879][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1204.797526][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.816278][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1204.830315][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.842753][T14355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.860286][T14510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.868895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1204.877710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1204.886659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1204.896946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1204.906154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1204.914106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1204.940667][T14479] device veth1_vlan entered promiscuous mode [ 1204.958041][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.978873][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.993408][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.003994][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.014029][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.024748][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.036882][T14355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.052516][T14355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.061523][T14355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.073909][T14355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.084723][T14355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.114409][T14735] chnl_net:caif_netlink_parms(): no params data found [ 1205.136790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1205.154830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1205.164001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1205.184145][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.194280][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.224035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1205.232711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1205.250529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1205.263348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1205.271820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1205.282580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1205.297826][T14510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.332900][T14479] device veth0_macvtap entered promiscuous mode [ 1205.387777][T14479] device veth1_macvtap entered promiscuous mode [ 1205.399178][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1205.408318][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1205.446044][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1205.448631][ T5690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.455579][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1205.470722][ T5690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.472181][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.485140][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.494352][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1205.503427][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1205.511794][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.518919][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.527676][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1205.542798][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1205.598401][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1205.662668][T14735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.669767][T14735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.682249][T14735] device bridge_slave_0 entered promiscuous mode [ 1205.692196][T14735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.700323][T14735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.708857][T14735] device bridge_slave_1 entered promiscuous mode [ 1205.717951][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1205.731852][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1205.741713][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1205.758911][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1205.767261][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1205.776828][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1205.786653][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1205.796116][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1205.836617][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.885206][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.915703][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 1205.920221][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.932395][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.988684][T14735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.999177][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.011002][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.021554][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.048690][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.065639][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.076748][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.093322][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.104230][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.116165][T14479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.135752][T14510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1206.169962][T14510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1206.213650][ T4344] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.228304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1206.237523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1206.247217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1206.256305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1206.265387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1206.275231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1206.288362][T14735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.313240][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.324466][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.334919][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.346126][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.356286][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.379261][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.389109][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.401390][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.413010][T14479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.455470][ T4344] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.499691][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1206.530607][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1206.559498][T14479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.572532][T14479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.595260][T14479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.608883][T14479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.627129][T14735] team0: Port device team_slave_0 added [ 1206.677535][ T4344] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.701635][T14735] team0: Port device team_slave_1 added [ 1206.856043][ T4344] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.882849][T14735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.889845][T14735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1206.919392][T14735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.952624][T14510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.960729][T14735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.973652][T14735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.010291][T14735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.028613][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.036579][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1207.056155][ T5690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.071806][ T5690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.111767][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1207.208025][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.256481][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.258305][T14735] device hsr_slave_0 entered promiscuous mode [ 1207.271495][T14735] device hsr_slave_1 entered promiscuous mode [ 1207.338302][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1207.488252][ T4344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.091472][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 1208.166904][ T4344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.384897][ T4344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.488441][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1208.517717][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1208.596955][ T4344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.695816][T14510] device veth0_vlan entered promiscuous mode [ 1208.738549][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1208.777752][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1208.845437][T14510] device veth1_vlan entered promiscuous mode [ 1208.864886][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1208.882789][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1208.915790][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1209.062037][ T4298] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1209.197453][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1209.219116][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1209.257192][T14510] device veth0_macvtap entered promiscuous mode [ 1209.267614][ T4298] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1209.300789][T14510] device veth1_macvtap entered promiscuous mode [ 1209.309203][ T4298] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1209.358433][ T4298] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1209.376433][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.384920][ T4298] usb 4-1: Product: syz [ 1209.389397][ T4298] usb 4-1: Manufacturer: syz [ 1209.394496][ T4298] usb 4-1: SerialNumber: syz [ 1209.410519][ T4298] usb 4-1: config 0 descriptor?? [ 1209.452985][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.476343][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.497245][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.508313][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.523190][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.568067][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.582681][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.599477][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.615580][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.626691][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.656911][T14510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.690927][ T4298] mos7840 4-1:0.0: required endpoints missing [ 1209.697675][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1209.717012][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1209.731416][ T4298] usb 4-1: USB disconnect, device number 29 [ 1209.749522][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1209.774576][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1209.803115][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.840984][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.868071][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.885063][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.901671][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.912720][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.945656][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.993970][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.009384][T14510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1210.022544][T14510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.044466][T14510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.071234][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1210.082557][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1210.107903][T14510] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.124629][T14510] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.136637][T14510] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.157498][T14510] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.321035][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 1211.411805][T14735] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1211.457309][T14735] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1211.559334][T14735] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1211.632717][T14735] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1211.634362][ T5690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.662992][ T5690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.711473][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1211.759215][ T5690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.770777][ T5690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.814599][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1211.992591][T14735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.092289][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1212.112962][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1212.143676][T14735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.314667][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1212.355586][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1212.435954][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.443125][ T4821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.536815][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 1212.666679][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1212.681454][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1212.740792][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1212.758290][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.765522][ T4821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.786798][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1212.799462][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1212.810025][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1212.821438][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1212.829705][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1212.837555][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1212.990876][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1213.085082][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1213.238277][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1213.261181][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1213.274586][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1214.409182][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1215.016872][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 1215.106600][T14735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1215.128827][T14735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1215.158345][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1215.189922][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1215.205187][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1215.216382][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1215.227495][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1215.245346][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'. [ 1215.522393][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1216.764447][ T4344] device hsr_slave_0 left promiscuous mode [ 1216.778065][ T4344] device hsr_slave_1 left promiscuous mode [ 1216.787301][ T4344] batman_adv: batadv0: Interface deactivated: dummy0 [ 1216.800262][ T4344] batman_adv: batadv0: Removing interface: dummy0 [ 1216.838701][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.857325][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.900703][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.908184][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.916343][ T4344] device bridge_slave_1 left promiscuous mode [ 1216.922852][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.931733][ T4344] device bridge_slave_0 left promiscuous mode [ 1216.937957][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.974597][ T4344] device hsr_slave_0 left promiscuous mode [ 1216.997800][ T4344] device hsr_slave_1 left promiscuous mode [ 1217.011465][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.035695][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.046598][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.069350][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.156504][ T4344] device veth1_macvtap left promiscuous mode [ 1217.162694][ T4344] device veth0_macvtap left promiscuous mode [ 1217.169263][ T4344] device veth1_vlan left promiscuous mode [ 1217.175567][ T4344] device veth0_vlan left promiscuous mode [ 1217.184649][ T4344] device veth1_macvtap left promiscuous mode [ 1217.190892][ T4344] device veth0_macvtap left promiscuous mode [ 1217.197022][ T4344] device veth1_vlan left promiscuous mode [ 1217.203598][ T4344] device veth0_vlan left promiscuous mode [ 1217.240879][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 1218.241407][T14878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2737'. [ 1219.430019][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1219.441219][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1219.450692][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1219.459934][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1219.467378][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 1219.473949][T10803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1219.482546][T10803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1220.057202][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 1220.109078][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 1220.156890][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.202941][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.701554][ T4344] bond0 (unregistering): Released all slaves [ 1221.244967][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 1221.297708][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 1221.342396][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.387306][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.690895][T14887] Bluetooth: hci2: command 0x0409 tx timeout [ 1221.694016][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 1221.902425][ T4344] bond0 (unregistering): Released all slaves [ 1221.937922][T14735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.946703][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1221.954215][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1222.308757][T14839] chnl_net:caif_netlink_parms(): no params data found [ 1223.167611][T14839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.184314][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.203100][T14839] device bridge_slave_0 entered promiscuous mode [ 1223.239474][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.259254][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.267530][T14839] device bridge_slave_1 entered promiscuous mode [ 1223.291313][T14883] chnl_net:caif_netlink_parms(): no params data found [ 1223.417830][T14839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.444391][T14839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.507501][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1223.521841][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1223.651197][T14839] team0: Port device team_slave_0 added [ 1223.700790][T14735] device veth0_vlan entered promiscuous mode [ 1223.723282][T14839] team0: Port device team_slave_1 added [ 1223.769357][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1223.787646][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1223.852276][T14839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.872364][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.912549][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 1223.929798][T14839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.961663][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1223.990676][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1224.037402][T14735] device veth1_vlan entered promiscuous mode [ 1224.082020][T14883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.092728][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.110587][T14883] device bridge_slave_0 entered promiscuous mode [ 1224.136878][T14839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.152150][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.214807][T14839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.242451][T14883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.250847][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.260969][T14883] device bridge_slave_1 entered promiscuous mode [ 1224.278456][T14887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1224.289435][T14887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1224.299248][T14887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1224.310141][T14887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1224.318353][T14887] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1224.326993][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1224.335161][T14887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1224.357316][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1224.449218][T14883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.469499][T14883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.518020][T14839] device hsr_slave_0 entered promiscuous mode [ 1224.532665][T14839] device hsr_slave_1 entered promiscuous mode [ 1224.539526][T14839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1224.555122][T14839] Cannot create hsr debugfs directory [ 1224.622139][T14883] team0: Port device team_slave_0 added [ 1224.640151][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1224.649241][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1224.677339][T14735] device veth0_macvtap entered promiscuous mode [ 1224.691147][T14883] team0: Port device team_slave_1 added [ 1224.739465][T14735] device veth1_macvtap entered promiscuous mode [ 1224.764996][T14883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.772410][T14883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.806417][ T4297] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1224.814525][T14883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.863935][T14883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.881802][T14883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.909392][T14883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.944190][T14735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.958601][T14735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.968852][T14735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.986983][T14735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.997821][T14735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.008928][T14735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.018841][T14735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.033232][T14735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.034694][ T4297] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1225.049109][T14735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.070664][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.110710][ T4297] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1225.131273][ T4297] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1225.139321][ T4297] usb 1-1: Manufacturer: syz [ 1225.152321][ T4344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.197076][ T4297] usb 1-1: config 0 descriptor?? [ 1225.215264][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1225.238176][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1225.246486][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1225.290685][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1225.333239][ T4297] rc_core: IR keymap rc-hauppauge not found [ 1225.342225][ T4297] Registered IR keymap rc-empty [ 1225.355205][ T4297] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1225.393178][ T4297] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input146 [ 1225.447408][ T4344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.494541][T14735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.516755][T14735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.533422][T14735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.544221][T14735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.563338][T14735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.575318][T14735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.593496][T14735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.609303][T14735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.631662][T14735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.674874][ C1] igorplugusb 1-1:0.0: receive overflow, at least 9 lost [ 1225.695811][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1225.706672][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1225.729513][T14883] device hsr_slave_0 entered promiscuous mode [ 1225.743865][T14883] device hsr_slave_1 entered promiscuous mode [ 1225.755868][T14883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1225.764121][T14883] Cannot create hsr debugfs directory [ 1225.790515][ T4344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.817510][T14735] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.827082][T14735] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.837259][T14735] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.846012][T14735] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.906868][T14028] usb 1-1: USB disconnect, device number 33 [ 1225.964762][ T4344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.147114][T14887] Bluetooth: hci2: command 0x040f tx timeout [ 1226.214936][T14939] chnl_net:caif_netlink_parms(): no params data found [ 1226.326714][ T7367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.358457][ T7367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.438136][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1226.520051][ T5690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.570997][T14887] Bluetooth: hci0: command 0x0409 tx timeout [ 1226.597399][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.603589][ T5690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.612279][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.634490][T14939] device bridge_slave_0 entered promiscuous mode [ 1226.679671][ T4344] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.916196][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1227.202922][ T4344] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.363680][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.371155][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.392621][T14939] device bridge_slave_1 entered promiscuous mode [ 1227.626803][ T4344] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.655680][T14939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.776167][T14939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.038829][ T4344] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.354897][T14939] team0: Port device team_slave_0 added [ 1228.358712][T14887] Bluetooth: hci2: command 0x0419 tx timeout [ 1228.392416][T14939] team0: Port device team_slave_1 added [ 1228.497057][T14939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.513280][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.553684][T14939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.622294][T14939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.631398][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.658555][T14939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.796748][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 1228.814978][ T4344] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.835175][T14939] device hsr_slave_0 entered promiscuous mode [ 1228.842483][T14939] device hsr_slave_1 entered promiscuous mode [ 1228.850280][T14939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1228.857878][T14939] Cannot create hsr debugfs directory [ 1228.933304][ T4344] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.947949][T14883] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1229.018265][T14883] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1229.084727][ T4344] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.107437][T14883] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1229.119544][T14883] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1229.134137][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1229.180856][ T4344] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.316574][T14839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1229.369071][T14839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1229.445915][T14839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1229.589210][T14839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1230.634524][T14883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.809705][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1230.823149][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1230.845554][T14883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.040854][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 1231.055258][T15066] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2752'. [ 1231.104879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1231.136322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1231.181389][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.188544][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.205715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1232.959327][T14839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.978723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1232.993184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1233.003917][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.011105][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.036953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1233.048461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1233.146925][T14839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.236707][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 1233.377755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1233.444586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1233.754491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1233.776382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1233.833248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.850301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.989077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1233.997781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1234.010804][T14883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1234.022719][T14883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1235.157860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1235.169574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1235.191168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1235.199882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1235.209587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1235.218597][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.225865][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.252795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1235.262746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1235.274225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1235.287001][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.294109][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.911189][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1235.978602][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1236.013966][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1236.045926][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1236.058494][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1236.239309][T14939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1236.276882][T14939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1236.316219][T14839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1236.350010][T14839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1236.371802][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1236.381305][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1236.399177][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1236.407965][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1236.426853][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1236.436964][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1236.446287][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1236.483514][T15045] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1236.510745][T14939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1236.525771][T14939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1236.617551][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1236.629542][T13752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1236.674978][T14883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.681934][T15045] usb 1-1: Using ep0 maxpacket: 8 [ 1236.690686][T15045] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1236.703375][T15045] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1236.729560][T15045] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1236.752737][T15045] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1236.777801][T15045] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.804117][T15045] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1236.826782][T15045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.065743][T15045] usb 1-1: GET_CAPABILITIES returned 0 [ 1237.071803][T15045] usbtmc 1-1:16.0: can't read capabilities [ 1237.235085][T14939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.273796][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1237.296522][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1237.309773][T14839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.337386][T14939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.348635][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1237.366781][T15128] usbtmc 1-1:16.0: Unable to send data, error -71 [ 1237.416586][ T14] usb 1-1: USB disconnect, device number 34 [ 1237.562804][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1237.573317][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1237.590449][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1237.609491][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1237.619968][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.627116][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.635753][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1237.645072][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1237.655276][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.662459][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.679871][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1237.720918][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1237.731682][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1237.895413][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1237.904746][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1237.913908][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1237.929237][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1237.938297][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1237.947268][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1237.956772][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1237.978262][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1237.987342][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1238.004380][T14939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1238.026843][T14939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1238.064040][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1238.094418][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1238.277152][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1238.296644][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1238.327322][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1238.341864][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1238.354780][T14883] device veth0_vlan entered promiscuous mode [ 1238.437004][ T4344] device hsr_slave_0 left promiscuous mode [ 1238.452803][ T4344] device hsr_slave_1 left promiscuous mode [ 1238.477371][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.493440][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.514045][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.523921][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.544339][ T4344] device bridge_slave_1 left promiscuous mode [ 1238.585751][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.635521][ T4344] device bridge_slave_0 left promiscuous mode [ 1238.697460][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.087172][ T4344] device hsr_slave_0 left promiscuous mode [ 1239.207276][ T4344] device hsr_slave_1 left promiscuous mode [ 1239.322193][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.362310][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.386063][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.505369][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.542738][ T4344] device bridge_slave_1 left promiscuous mode [ 1239.549017][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.558951][ T4344] device bridge_slave_0 left promiscuous mode [ 1239.584016][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.590321][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.601071][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.667938][ T4344] device hsr_slave_0 left promiscuous mode [ 1240.407581][ T4344] device hsr_slave_1 left promiscuous mode [ 1240.591764][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.639993][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.654122][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.963323][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.007316][ T4344] device bridge_slave_1 left promiscuous mode [ 1241.035161][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.101566][ T4344] device bridge_slave_0 left promiscuous mode [ 1241.109026][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.463334][ T4344] device veth1_macvtap left promiscuous mode [ 1241.593479][ T4344] device veth0_macvtap left promiscuous mode [ 1241.600084][ T4344] device veth1_vlan left promiscuous mode [ 1241.606173][ T4344] device veth0_vlan left promiscuous mode [ 1241.636989][ T4344] device veth1_macvtap left promiscuous mode [ 1241.648905][ T4344] device veth0_macvtap left promiscuous mode [ 1241.655141][ T4344] device veth1_vlan left promiscuous mode [ 1241.687787][ T4344] device veth0_vlan left promiscuous mode [ 1241.723618][ T4344] device veth1_macvtap left promiscuous mode [ 1241.729701][ T4344] device veth0_macvtap left promiscuous mode [ 1241.825885][ T4344] device veth1_vlan left promiscuous mode [ 1241.831870][ T4344] device veth0_vlan left promiscuous mode [ 1242.470565][T15213] loop9: detected capacity change from 0 to 6 [ 1243.500424][T15222] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2771'. [ 1244.045617][T15229] usb usb8: usbfs: process 15229 (syz.8.2773) did not claim interface 0 before use [ 1245.590573][T15241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2778'. [ 1246.099802][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 1246.385448][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 1246.453046][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.548773][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.822161][ T4344] bond0 (unregistering): Released all slaves [ 1249.145835][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 1249.252524][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 1249.354391][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.535309][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.634215][ T4344] bond0 (unregistering): Released all slaves [ 1252.063854][T15292] binder: 15289:15292 ioctl c0306201 0 returned -14 [ 1252.142855][T15292] binder: 15289:15292 ioctl c0306201 0 returned -14 [ 1252.805556][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 1252.866509][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 1252.923546][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.970021][ T4298] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1252.995534][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.163243][ T4298] usb 1-1: Using ep0 maxpacket: 8 [ 1253.172854][ T4298] usb 1-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 1253.181963][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.190384][ T4298] usb 1-1: Product: syz [ 1253.195017][ T4298] usb 1-1: Manufacturer: syz [ 1253.200192][ T4298] usb 1-1: SerialNumber: syz [ 1253.229423][ T4298] usb 1-1: config 0 descriptor?? [ 1253.236973][ T4298] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1253.247383][ T4298] usb 1-1: Detected FT232A [ 1253.254272][ T4298] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1253.454958][ T4298] usb 1-1: USB disconnect, device number 35 [ 1253.501634][ T4298] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1253.513006][ T4298] ftdi_sio 1-1:0.0: device disconnected [ 1253.669446][ T4344] bond0 (unregistering): Released all slaves [ 1253.763152][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1253.773460][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1253.801938][T14883] device veth1_vlan entered promiscuous mode [ 1253.829799][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1253.844773][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1253.852510][T14887] Bluetooth: hci1: command 0x0409 tx timeout [ 1253.894318][T14939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.942843][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1253.952082][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1253.975123][T14839] device veth0_vlan entered promiscuous mode [ 1253.994808][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1254.012214][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1254.021366][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1254.030695][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1254.042244][T14883] device veth0_macvtap entered promiscuous mode [ 1254.071884][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1254.082465][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1254.099565][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1254.113535][T14883] device veth1_macvtap entered promiscuous mode [ 1254.121577][T14839] device veth1_vlan entered promiscuous mode [ 1254.223114][T14939] device veth0_vlan entered promiscuous mode [ 1254.238720][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1254.248308][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1254.258872][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1254.269689][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1254.279961][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1254.307728][T14839] device veth0_macvtap entered promiscuous mode [ 1254.325835][T14939] device veth1_vlan entered promiscuous mode [ 1254.345648][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.364498][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.378296][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.394861][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.409861][T14883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.430503][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1254.442563][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1254.455788][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1254.463989][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1254.478753][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1254.492745][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1254.503405][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1254.517637][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1254.543192][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.561933][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.579585][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.594571][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.617686][T14883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.643897][T14839] device veth1_macvtap entered promiscuous mode [ 1254.656481][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1254.669014][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1254.681605][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1254.705108][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1254.738069][T14883] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.758465][T14883] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.780339][T14883] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.796483][T14883] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.872110][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.915618][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.969291][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.020567][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.032140][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.052631][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.065491][T14839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.081247][T14939] device veth0_macvtap entered promiscuous mode [ 1255.160443][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1255.175437][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1255.225002][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1255.243475][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1255.272513][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1255.489810][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.520208][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.532018][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.556272][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.795683][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.943468][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.317143][T14839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.348980][T14939] device veth1_macvtap entered promiscuous mode [ 1256.365561][T14839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.399951][T14839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.419569][T14839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.441136][T14839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.454489][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1256.505564][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1256.521888][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1256.548842][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.620675][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.645860][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.694945][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.746298][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.777683][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.803810][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.823079][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.867875][T14939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.886256][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1256.917605][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1256.972492][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.004830][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.040340][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.066036][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.091508][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.113183][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.134779][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.156982][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.189762][T14939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.201121][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1257.223988][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1257.353603][T14939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.383210][T14939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.399217][T14939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.409481][T14939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.603112][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.650326][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.661120][ T7240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.686520][ T7240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.701742][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1257.719167][ T7240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.749243][ T7240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.758413][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1257.769141][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1257.845473][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.855535][ T5690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.877134][ T5690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.886240][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.928259][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1257.978912][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.988322][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1258.013621][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.060612][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1258.294261][T15350] kvm [15349]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8bfc [ 1258.341619][T15350] kvm [15349]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xecd4 [ 1258.392051][T15350] kvm [15349]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xe0e3, nop [ 1261.216628][T15388] ======================================================= [ 1261.216628][T15388] WARNING: The mand mount option has been deprecated and [ 1261.216628][T15388] and is ignored by this kernel. Remove the mand [ 1261.216628][T15388] option from the mount to silence this warning. [ 1261.216628][T15388] ======================================================= [ 1261.346739][T15390] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1266.428005][T14028] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1266.585782][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 1266.630869][T14028] usb 6-1: Using ep0 maxpacket: 8 [ 1266.635727][T15435] device bond1 entered promiscuous mode [ 1266.640353][T14028] usb 6-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 1266.652047][T14028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.660365][T14028] usb 6-1: Product: syz [ 1266.667409][T14028] usb 6-1: Manufacturer: syz [ 1266.672032][T14028] usb 6-1: SerialNumber: syz [ 1266.679158][T14028] usb 6-1: config 0 descriptor?? [ 1266.686838][T14028] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1266.695240][T14028] usb 6-1: Detected FT232A [ 1266.697623][T15435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1266.710921][T14028] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1266.839184][T15437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1266.889513][T15437] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1266.925893][T15437] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1266.972066][T14028] usb 6-1: USB disconnect, device number 2 [ 1266.991680][T14028] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1267.034451][T14028] ftdi_sio 6-1:0.0: device disconnected [ 1270.733403][T15484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2827'. [ 1271.249416][T15489] ubi0: attaching mtd0 [ 1271.275908][T15489] ubi0: scanning is finished [ 1272.166369][T15489] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1276.551751][ T4298] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1276.633569][T15531] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2836'. [ 1276.755393][ T4298] usb 10-1: Using ep0 maxpacket: 16 [ 1276.776725][ T4298] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.820207][ T4298] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.833614][ T4298] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1276.920805][ T4298] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1276.975476][ T4298] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.994577][ T4298] usb 10-1: config 0 descriptor?? [ 1277.450441][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1277.540127][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1277.604017][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1277.671681][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1277.681023][T15568] ubi0: attaching mtd0 [ 1277.716105][T15568] ubi0: scanning is finished [ 1277.734334][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1277.981340][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1277.997018][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1278.016643][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1278.150366][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1278.495010][ T4298] hid-generic 0003:0457:07DA.0003: unknown main item tag 0x0 [ 1278.690074][ T4298] hid-generic 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.9-1/input0 [ 1278.762980][ T4298] usb 10-1: USB disconnect, device number 4 [ 1278.839025][T15568] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1283.771445][T15641] ubi0: attaching mtd0 [ 1283.827018][T15645] loop9: detected capacity change from 0 to 6 [ 1284.018189][T15641] ubi0: scanning is finished [ 1284.971366][T15641] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1285.713760][T14028] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1285.942822][T14028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.963233][T14028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.973630][T14028] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1285.999636][T14028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.009648][T14028] usb 9-1: config 0 descriptor?? [ 1287.358606][T14028] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0004/input/input147 [ 1287.475212][T14028] uclogic 0003:256C:006D.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 1287.773130][T14028] usb 9-1: USB disconnect, device number 2 [ 1288.602454][T15045] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1288.960080][T15045] usb 6-1: Using ep0 maxpacket: 8 [ 1288.990096][T15045] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.067417][T15045] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1289.161526][T15045] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1289.204989][T15045] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.249380][T15045] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1289.432084][T15045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.299481][T15045] usb 6-1: GET_CAPABILITIES returned 0 [ 1290.307534][T15045] usbtmc 6-1:16.0: can't read capabilities [ 1292.909062][ T14] usb 6-1: USB disconnect, device number 3 [ 1300.195588][T15842] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1300.481719][ T4297] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1302.923326][ T4297] usb 10-1: device descriptor read/all, error -71 [ 1302.990264][T15860] kvm: pic: non byte write [ 1302.994912][T15860] kvm: pic: non byte write [ 1302.999501][T15860] kvm: pic: non byte write [ 1303.225229][T15860] kvm: pic: non byte write [ 1303.230813][T15860] kvm: pic: non byte write [ 1303.318172][T15878] 9pnet_fd: Insufficient options for proto=fd [ 1304.718332][T15898] netlink: 396 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1304.940777][T15902] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1305.861607][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.867992][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.034532][T15906] batman_adv: batadv0: Adding interface: dummy0 [ 1306.052205][T15906] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.802201][T15906] batman_adv: batadv0: Interface activated: dummy0 [ 1307.418743][T15918] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1307.425880][T15918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1307.434985][T15918] vhci_hcd vhci_hcd.0: Device attached [ 1307.445340][T15919] vhci_hcd: connection closed [ 1307.454069][ T5690] vhci_hcd: stop threads [ 1307.493454][ T5690] vhci_hcd: release socket [ 1307.498923][ T5690] vhci_hcd: disconnect device [ 1307.818810][T15932] ubi0: attaching mtd0 [ 1307.845997][T15932] ubi0: scanning is finished [ 1308.094942][T15935] netlink: 'syz.9.2924': attribute type 5 has an invalid length. [ 1309.548417][T15928] net_ratelimit: 10 callbacks suppressed [ 1309.548435][T15928] dccp_close: ABORT with 52 bytes unread [ 1309.830370][T15932] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1311.145122][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2935'. [ 1312.116937][T15978] sctp: failed to load transform for md5: -2 [ 1313.592364][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2943'. [ 1313.637610][T16024] netlink: 'syz.5.2943': attribute type 25 has an invalid length. [ 1313.746086][T16024] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.755529][T16024] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.764247][T16024] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1313.772987][T16024] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.158749][T16060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2948'. [ 1317.032166][T16056] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1317.044274][T16056] 0ªX¹¦À: renamed from caif0 [ 1317.069578][T16056] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1317.136909][T16067] tipc: Started in network mode [ 1317.141884][T16067] tipc: Node identity ac14140f, cluster identity 4711 [ 1317.149866][T16067] tipc: New replicast peer: 255.255.255.255 [ 1317.157295][T16067] tipc: Enabled bearer , priority 10 [ 1317.448896][T16063] device syzkaller0 entered promiscuous mode [ 1318.369639][ T26] tipc: Node number set to 2886997007 [ 1318.380941][T16083] sctp: failed to load transform for md5: -2 [ 1319.134245][T14887] Bluetooth: hci1: command 0x0406 tx timeout [ 1319.788209][ T26] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1319.998417][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 1320.005842][ T26] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1320.024031][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.052371][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1320.065631][ T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1320.075115][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.083247][ T26] usb 1-1: Product: syz [ 1320.089099][ T26] usb 1-1: Manufacturer: syz [ 1320.093897][ T26] usb 1-1: SerialNumber: syz [ 1320.563031][ T26] usb 1-1: 0:2 : does not exist [ 1320.792134][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1321.668755][ T26] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1321.728754][ T26] usb 1-1: USB disconnect, device number 36 [ 1322.024207][T14812] udevd[14812]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.206997][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2971'. [ 1324.091947][T16172] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2980'. [ 1326.319329][T16187] netlink: 596 bytes leftover after parsing attributes in process `syz.8.2984'. [ 1328.479030][T16214] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2989'. [ 1329.866880][T16220] sg_write: process 135 (syz.9.2991) changed security contexts after opening file descriptor, this is not allowed. [ 1330.994023][T16238] can0: slcan on ptm1. [ 1331.822728][T16231] can0 (unregistered): slcan off ptm1. [ 1332.052921][ T5226] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1332.078923][ T22] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1332.367424][ T5226] usb 6-1: Using ep0 maxpacket: 8 [ 1332.381528][ T5226] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1332.399604][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 1333.307951][ T22] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 1333.326954][ T22] usb 1-1: config 0 has no interface number 1 [ 1333.342335][ T22] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1333.355886][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1333.378535][ T5226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.380288][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1333.393063][T16256] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3000'. [ 1333.397558][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.415092][ T22] usb 1-1: Product: syz [ 1333.419404][ T22] usb 1-1: Manufacturer: syz [ 1333.424119][ T22] usb 1-1: SerialNumber: syz [ 1333.456114][ T22] usb 1-1: config 0 descriptor?? [ 1333.493160][ T22] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1333.543710][ T5226] usb 6-1: config 0 descriptor?? [ 1333.723468][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.774526][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.825399][ T22] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1333.825766][ T2308] pvrusb2: Invalid read control endpoint [ 1333.949098][ T2308] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1333.979666][ T2308] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1334.072078][ T22] usb 1-1: USB disconnect, device number 37 [ 1334.837132][T14887] Bluetooth: hci4: command 0x0406 tx timeout [ 1337.132974][ T5226] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1337.204900][ T5226] asix: probe of 6-1:0.0 failed with error -71 [ 1337.275814][ T5226] usb 6-1: USB disconnect, device number 4 [ 1338.602959][T16310] loop9: detected capacity change from 0 to 6 [ 1338.944745][T13213] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1339.213815][T13213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1339.251261][T13213] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1339.876725][T13213] usb 10-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=69.70 [ 1340.039520][T13213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.487418][T13213] usb 10-1: Product: syz [ 1340.491750][T13213] usb 10-1: Manufacturer: syz [ 1340.556904][T13213] usb 10-1: SerialNumber: syz [ 1340.580642][T13213] usb 10-1: config 0 descriptor?? [ 1340.730459][T13213] usb 10-1: can't set config #0, error -71 [ 1340.810787][T13213] usb 10-1: USB disconnect, device number 7 [ 1341.082635][T16337] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3017'. [ 1342.684274][T16352] ubi0: attaching mtd0 [ 1342.692839][T16352] ubi0: scanning is finished [ 1344.174049][T16352] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1345.784143][T14887] Bluetooth: hci3: command 0x0406 tx timeout [ 1346.602374][T16383] kvm [16382]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x3904 [ 1346.631868][T16383] kvm [16382]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8db [ 1346.656904][T16383] kvm [16382]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x904 [ 1346.678180][T16383] kvm [16382]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9da [ 1347.733608][T16413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3033'. [ 1350.551411][T16443] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1352.564170][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3047'. [ 1355.009966][T16467] sctp: failed to load transform for md5: -2 [ 1357.812794][T16523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3057'. [ 1361.539771][T16546] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3064'. [ 1367.896423][T16630] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3081'. [ 1370.235858][T16656] autofs4:pid:16656:autofs_fill_super: called with bogus options [ 1370.814602][T16638] sctp: failed to load transform for md5: -2 [ 1370.950230][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1370.956630][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.521227][T16683] loop9: detected capacity change from 0 to 6 [ 1376.525875][T16703] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3096'. [ 1378.498558][T16727] autofs4:pid:16727:autofs_fill_super: called with bogus options [ 1379.550985][T16748] device ip6tnl1 entered promiscuous mode [ 1381.523288][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 1381.523404][ T27] audit: type=1326 audit(1737695466.868:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1382.163225][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3106'. [ 1383.030239][ T27] audit: type=1326 audit(1737695466.868:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1383.265812][ T27] audit: type=1326 audit(1737695466.868:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1383.298252][ T27] audit: type=1326 audit(1737695466.868:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1383.365874][T16769] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 1384.308952][ T27] audit: type=1326 audit(1737695466.868:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1384.331583][ T27] audit: type=1326 audit(1737695466.868:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1384.354586][ T27] audit: type=1326 audit(1737695466.868:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1384.402939][ T27] audit: type=1326 audit(1737695466.868:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1384.484945][ T27] audit: type=1326 audit(1737695466.868:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1384.678238][ T27] audit: type=1326 audit(1737695466.878:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f9b8cd29 code=0x7ffc0000 [ 1385.907738][T16794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3112'. [ 1386.120180][T16777] sctp: failed to load transform for md5: -2 [ 1386.712522][T16809] autofs4:pid:16809:autofs_fill_super: called with bogus options [ 1391.090102][T16847] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3125'. [ 1393.507322][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3129'. [ 1393.516447][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3129'. [ 1395.379710][T16876] sctp: failed to load transform for md5: -2 [ 1395.667664][T16880] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1398.473674][ T2308] pvrusb2: request_firmware fatal error with code=-110 [ 1398.685108][ T2308] pvrusb2: Failure uploading firmware1 [ 1398.693040][ T2308] pvrusb2: Device initialization was not successful. [ 1398.701580][ T2308] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1398.756318][ T2308] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1398.789267][ T22] pvrusb2: Device being rendered inoperable [ 1398.816145][ T22] pvrusb2: Device being rendered inoperable [ 1400.688988][T16950] autofs4:pid:16950:autofs_fill_super: called with bogus options [ 1401.645337][T16954] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1404.575603][T16963] sctp: failed to load transform for md5: -2 [ 1406.551104][T17015] autofs4:pid:17015:autofs_fill_super: called with bogus options [ 1407.045746][T17019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1407.447025][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3160'. [ 1407.491003][T17026] netlink: 'syz.9.3160': attribute type 1 has an invalid length. [ 1407.544336][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3160'. [ 1408.538783][T17029] sctp: failed to load transform for md5: -2 [ 1408.799658][T12126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.926198][T12126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.162013][T12126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.426144][T12126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.949559][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1409.964545][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1409.975541][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1409.986603][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1409.994554][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1410.002218][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1410.270516][T12126] tipc: Disabling bearer [ 1410.276675][T12126] tipc: Left network mode [ 1411.672478][T17083] autofs4:pid:17083:autofs_fill_super: called with bogus options [ 1412.247972][T14887] Bluetooth: hci0: command 0x0409 tx timeout [ 1412.853256][T17067] chnl_net:caif_netlink_parms(): no params data found [ 1414.076694][T17116] sctp: failed to load transform for md5: -2 [ 1414.462002][T14887] Bluetooth: hci0: command 0x041b tx timeout [ 1414.587208][T17067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.624954][T17067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.666809][T17067] device bridge_slave_0 entered promiscuous mode [ 1414.913738][T17067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.932661][T17067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.946135][T17067] device bridge_slave_1 entered promiscuous mode [ 1415.083624][T12126] device hsr_slave_0 left promiscuous mode [ 1415.104816][T12126] device hsr_slave_1 left promiscuous mode [ 1415.156283][T12126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.163767][T12126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.261501][T12126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.301542][T12126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.462306][T12126] device bridge_slave_1 left promiscuous mode [ 1415.469303][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.491201][T12126] device bridge_slave_0 left promiscuous mode [ 1415.501429][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.169353][T12126] device veth1_macvtap left promiscuous mode [ 1416.180657][T12126] device veth0_macvtap left promiscuous mode [ 1416.191192][T12126] device veth1_vlan left promiscuous mode [ 1416.205637][T12126] device veth0_vlan left promiscuous mode [ 1416.714323][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 1417.114506][T17174] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1418.864928][T12126] team0 (unregistering): Port device team_slave_1 removed [ 1419.890601][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 1420.698837][T12126] team0 (unregistering): Port device team_slave_0 removed [ 1421.358692][T12126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.673276][T12126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.123052][T17221] ubi0: attaching mtd0 [ 1422.130503][T17221] ubi0: scanning is finished [ 1422.739804][T17221] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1422.748571][T17221] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1422.756411][T17221] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1422.764626][T17221] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1422.774381][T17221] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1422.787060][T17221] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1422.798960][T17221] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2169260186 [ 1422.959658][T17221] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1422.994272][T17232] ubi0: background thread "ubi_bgt0d" started, PID 17232 [ 1425.055167][ T14] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1425.203250][T12126] bond0 (unregistering): Released all slaves [ 1425.268843][ T14] usb 10-1: device descriptor read/64, error -71 [ 1425.462362][T17067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.553106][T17067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.621946][ T14] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1425.929075][T17067] team0: Port device team_slave_0 added [ 1425.964380][ T14] usb 10-1: device descriptor read/64, error -71 [ 1425.985501][T17067] team0: Port device team_slave_1 added [ 1426.096477][T17067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.104110][ T14] usb usb10-port1: attempt power cycle [ 1426.134715][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.175285][T17067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.217311][T17067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.237478][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.263401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.279050][T17067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.415343][T12556] kernel write not supported for file /amidi2 (pid: 12556 comm: kworker/1:2) [ 1426.489079][T17067] device hsr_slave_0 entered promiscuous mode [ 1426.525321][T17067] device hsr_slave_1 entered promiscuous mode [ 1426.538384][T17067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1426.549810][T17067] Cannot create hsr debugfs directory [ 1426.594585][ T14] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1426.640963][ T14] usb 10-1: device descriptor read/8, error -71 [ 1427.011512][ T14] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1427.087359][ T14] usb 10-1: device descriptor read/8, error -71 [ 1427.225576][ T14] usb usb10-port1: unable to enumerate USB device [ 1427.438215][T17280] ubi: mtd0 is already attached to ubi0 [ 1429.837213][T17306] autofs4:pid:17306:autofs_fill_super: called with bogus options [ 1430.837279][T17319] Bluetooth: MGMT ver 1.22 [ 1431.532605][T17319] Illegal XDP return value 4294967262 on prog (id 538) dev N/A, expect packet loss! [ 1431.567999][T17067] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1431.804090][T17067] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1431.845978][T17067] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1431.945383][T17067] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1432.187950][T17330] ubi: mtd0 is already attached to ubi0 [ 1434.118853][T17067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.139731][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1434.169207][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1434.227084][T17067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.487421][T17345] autofs4:pid:17345:autofs_fill_super: called with bogus options [ 1434.567371][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1434.577664][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1434.591821][T16324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.598970][T16324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.610586][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1434.638646][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1434.668957][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1434.686056][T16324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.693275][T16324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.707454][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1434.753108][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1434.820398][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1434.860877][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1434.885704][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1434.916192][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1434.957538][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1434.975501][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1434.986101][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1435.734568][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1435.769035][T16324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1435.786501][T17067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1436.615951][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1436.625242][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1437.179795][T17378] ubi: mtd0 is already attached to ubi0 [ 1437.523885][T17381] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3254'. [ 1438.200696][T17395] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1438.263806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1438.304360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1438.351949][T17397] autofs4:pid:17397:autofs_fill_super: called with bogus options [ 1438.579922][T17067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.479046][T17412] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3258'. [ 1441.007337][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1441.018157][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1441.102329][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1441.117917][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1441.154237][T17067] device veth0_vlan entered promiscuous mode [ 1441.166125][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1441.190524][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1441.211289][T17067] device veth1_vlan entered promiscuous mode [ 1441.297525][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1441.359110][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1441.387723][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1441.410577][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1441.436807][T17067] device veth0_macvtap entered promiscuous mode [ 1441.472112][T17067] device veth1_macvtap entered promiscuous mode [ 1441.566191][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.603165][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.658714][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.717135][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.772218][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.785627][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.804079][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1441.848019][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.879314][T17067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.904188][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1441.925552][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1441.961102][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1442.008029][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1442.050495][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.066033][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.084504][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.112374][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.129487][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.148856][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.167071][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.189448][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.223183][T17067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1442.249699][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1442.276132][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1442.308192][T17067] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.327588][T17067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.351418][T17067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.378439][T17067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.671030][ T5230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.700379][ T5230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.800883][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1442.920347][ T7240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.964144][ T7240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.580887][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1443.637506][T17462] autofs4:pid:17462:autofs_fill_super: called with bogus options [ 1446.128111][T17490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1446.921997][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3277'. [ 1447.464247][T17510] ubi: mtd0 is already attached to ubi0 [ 1447.857712][T17512] autofs4:pid:17512:autofs_fill_super: called with bogus options [ 1448.262282][T17529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3285'. [ 1448.799002][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3289'. [ 1449.852407][T17557] 9pnet_fd: Insufficient options for proto=fd [ 1450.603180][T17572] ubi: mtd0 is already attached to ubi0 [ 1451.169366][T17580] autofs4:pid:17580:autofs_fill_super: called with bogus options [ 1452.690299][ T4267] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1452.699685][ T4267] Bluetooth: hci1: Injecting HCI hardware error event [ 1452.709165][T14887] Bluetooth: hci1: hardware error 0x00 [ 1454.914052][T14887] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1455.552174][T17625] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1456.988177][T17643] device syzkaller1 entered promiscuous mode [ 1457.735962][T17643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.743543][T17643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.673980][T17643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.814768][T17643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.833015][T17690] autofs4:pid:17690:autofs_fill_super: called with bogus options [ 1461.372121][T17691] input: syz0 as /devices/virtual/input/input148 [ 1461.920310][T17703] autofs4:pid:17703:autofs_fill_super: called with bogus options [ 1462.756230][T17710] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3329'. [ 1463.215148][T17643] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.224251][T17643] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.233553][T17643] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.242825][T17643] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.140449][T17659] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1464.487189][T17659] usb 1-1: no configurations [ 1464.492207][T17659] usb 1-1: can't read configurations, error -22 [ 1464.829082][T17740] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1465.134165][T17739] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3337'. [ 1465.251672][T17659] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1465.610175][T17659] usb 1-1: no configurations [ 1465.619988][T17659] usb 1-1: can't read configurations, error -22 [ 1465.931179][T17659] usb usb1-port1: attempt power cycle [ 1466.929448][T17766] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3344'. [ 1467.069369][T17659] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1467.122837][T17659] usb 1-1: device descriptor read/8, error -71 [ 1467.612241][T17663] kernel write not supported for file /amidi2 (pid: 17663 comm: kworker/0:17) [ 1467.715283][T17787] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1467.724363][T17787] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1470.814731][T17808] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3354'. [ 1472.440869][T17832] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1475.708571][T17878] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3369'. [ 1475.817226][T17882] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3370'. [ 1476.261558][T17897] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3374'. [ 1476.305301][T17901] autofs4:pid:17901:autofs_fill_super: called with bogus options [ 1476.902176][T17663] kernel write not supported for file /amidi2 (pid: 17663 comm: kworker/0:17) [ 1480.154575][T14887] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1480.168093][T14887] Bluetooth: hci2: Injecting HCI hardware error event [ 1480.178566][ T4267] Bluetooth: hci2: hardware error 0x00 [ 1480.264547][T17946] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3383'. [ 1480.356675][ T4267] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 1480.368430][ T4267] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1480.376844][ T4267] CPU: 0 PID: 4267 Comm: kworker/u5:9 Not tainted 6.1.127-syzkaller #0 [ 1480.385094][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1480.395229][ T4267] Workqueue: hci2 hci_error_reset [ 1480.400389][ T4267] RIP: 0010:klist_remove+0x1e2/0x460 [ 1480.405694][ T4267] Code: 80 3c 04 00 74 08 4c 89 ff e8 7a 85 3a f7 4d 8b 2f 49 83 e5 fe 49 8d 7d 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 53 85 3a f7 4d 8b 75 58 4c 89 ef e8 97 91 15 [ 1480.425425][ T4267] RSP: 0018:ffffc900043678c0 EFLAGS: 00010202 [ 1480.431526][ T4267] RAX: 000000000000000b RBX: ffffffff8e83dca8 RCX: dffffc0000000000 [ 1480.439586][ T4267] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1480.447558][ T4267] RBP: ffffc900043679a8 R08: dffffc0000000000 R09: fffffbfff1d07b89 [ 1480.455555][ T4267] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100615858c [ 1480.463528][ T4267] R13: 0000000000000000 R14: ffff88802aa61dc0 R15: ffff888030ac2c60 [ 1480.471510][ T4267] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1480.480442][ T4267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1480.487024][ T4267] CR2: 00007f970197fba8 CR3: 0000000031bc8000 CR4: 00000000003506f0 [ 1480.495000][ T4267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1480.502975][ T4267] DR3: 0000000000000600 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1480.510945][ T4267] Call Trace: [ 1480.514219][ T4267] [ 1480.517151][ T4267] ? __die_body+0x5e/0xa0 [ 1480.521502][ T4267] ? die_addr+0x95/0xc0 [ 1480.525665][ T4267] ? exc_general_protection+0x3ae/0x590 [ 1480.531229][ T4267] ? do_raw_spin_lock+0x14a/0x370 [ 1480.536269][ T4267] ? asm_exc_general_protection+0x22/0x30 [ 1480.542012][ T4267] ? klist_remove+0x1e2/0x460 [ 1480.546693][ T4267] ? klist_del+0x100/0x100 [ 1480.551132][ T4267] ? kobject_put+0x460/0x460 [ 1480.555726][ T4267] ? get_device_parent+0x295/0x400 [ 1480.560847][ T4267] device_move+0x1b0/0x700 [ 1480.565272][ T4267] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1480.571173][ T4267] hci_conn_del_sysfs+0xa8/0x150 [ 1480.576141][ T4267] hci_conn_cleanup+0x5a0/0x740 [ 1480.580997][ T4267] hci_conn_del+0x417/0x6c0 [ 1480.585506][ T4267] ? hci_conn_hash_flush+0x1fd/0x3f0 [ 1480.590797][ T4267] hci_conn_hash_flush+0x300/0x3f0 [ 1480.595916][ T4267] ? hci_conn_switch_role+0x210/0x210 [ 1480.601289][ T4267] ? _raw_spin_unlock_irq+0x2a/0x40 [ 1480.606515][ T4267] ? drain_workqueue+0x2c9/0x390 [ 1480.611451][ T4267] ? hci_inquiry_cache_flush+0x17d/0x220 [ 1480.617107][ T4267] ? hci_discovery_set_state+0x5c/0x1a0 [ 1480.622661][ T4267] hci_dev_close_sync+0x9a9/0xfc0 [ 1480.627710][ T4267] hci_error_reset+0x12c/0x3c0 [ 1480.632502][ T4267] ? process_one_work+0x7a9/0x11d0 [ 1480.637624][ T4267] process_one_work+0x8a9/0x11d0 [ 1480.642572][ T4267] ? worker_detach_from_pool+0x260/0x260 [ 1480.648213][ T4267] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1480.653770][ T4267] ? kthread_data+0x4e/0xc0 [ 1480.658286][ T4267] ? wq_worker_running+0x97/0x190 [ 1480.663329][ T4267] worker_thread+0xa47/0x1200 [ 1480.668009][ T4267] ? _raw_spin_unlock+0x40/0x40 [ 1480.672867][ T4267] ? release_firmware_map_entry+0x186/0x186 [ 1480.678765][ T4267] ? _raw_spin_unlock+0x40/0x40 [ 1480.683641][ T4267] kthread+0x28d/0x320 [ 1480.687706][ T4267] ? worker_clr_flags+0x190/0x190 [ 1480.692732][ T4267] ? kthread_blkcg+0xd0/0xd0 [ 1480.697324][ T4267] ret_from_fork+0x1f/0x30 [ 1480.701752][ T4267] [ 1480.704765][ T4267] Modules linked in: [ 1480.712237][ T4267] ---[ end trace 0000000000000000 ]--- [ 1480.718778][ T4267] RIP: 0010:klist_remove+0x1e2/0x460 [ 1480.724184][ T4267] Code: 80 3c 04 00 74 08 4c 89 ff e8 7a 85 3a f7 4d 8b 2f 49 83 e5 fe 49 8d 7d 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 53 85 3a f7 4d 8b 75 58 4c 89 ef e8 97 91 15 [ 1480.743937][ T4267] RSP: 0018:ffffc900043678c0 EFLAGS: 00010202 [ 1480.750073][ T4267] RAX: 000000000000000b RBX: ffffffff8e83dca8 RCX: dffffc0000000000 [ 1480.758198][ T4267] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1480.766328][ T4267] RBP: ffffc900043679a8 R08: dffffc0000000000 R09: fffffbfff1d07b89 [ 1480.774495][ T4267] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100615858c [ 1480.782538][ T4267] R13: 0000000000000000 R14: ffff88802aa61dc0 R15: ffff888030ac2c60 [ 1480.791020][ T4267] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1480.800042][ T4267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1480.806697][ T4267] CR2: 00007fdeb4825cfd CR3: 000000007d8e8000 CR4: 00000000003506f0 [ 1480.814719][ T4267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1480.822775][ T4267] DR3: 0000000000000600 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1480.830997][ T4267] Kernel panic - not syncing: Fatal exception [ 1480.837411][ T4267] Kernel Offset: disabled [ 1480.841739][ T4267] Rebooting in 86400 seconds..