last executing test programs: 4m52.259018951s ago: executing program 3 (id=39): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000003c0)='./file0\x00', 0x559002, 0x8) 4m51.308806057s ago: executing program 3 (id=43): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff0000000008000839125b1000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 4m50.340796074s ago: executing program 3 (id=46): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x2000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4m47.038712897s ago: executing program 3 (id=54): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000003c0)='./file0\x00', 0x559002, 0x8) 4m46.160195987s ago: executing program 3 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000180)) 4m44.696395543s ago: executing program 3 (id=58): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mkdir(0x0, 0x100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050", @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000008000000000efffffff85000000200000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0x0, 0xee01, 0x0) 4m29.664739481s ago: executing program 32 (id=58): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mkdir(0x0, 0x100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050", @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000008000000000efffffff85000000200000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0x0, 0xee01, 0x0) 14.460929735s ago: executing program 4 (id=715): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), 0x4) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x7}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x67, 0xfe, 0xe1, 0x4, 0x7, 0xd9, 0x0, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x1, 0xc, 0x57, 0x1}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2ac12e64, 0xfd7, 0x0, 0x20, 0x0, 0x0, 0x6c, 0x80000001, 0x8000000000000, 0x8000000400007e, 0x1, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019640)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='mpol=local,huge=within_size']) setsockopt(r0, 0x9, 0x7, &(0x7f0000000280)='l', 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 11.926094407s ago: executing program 4 (id=720): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x20, 0xf, 0xc, "df9d4784940677c61bdc4f90"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000100)=[{0xd0, 0x0, 0x0, 0x0}, {0xfc8, 0x200, 0x0, 0x0}], 0x2}) 11.710150524s ago: executing program 5 (id=721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff00"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 11.195949505s ago: executing program 5 (id=724): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), 0x4) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x7}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x67, 0xfe, 0xe1, 0x4, 0x7, 0xd9, 0x0, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x1, 0xc, 0x57, 0x1}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.673247406s ago: executing program 5 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 8.62275648s ago: executing program 0 (id=730): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="00000400000000000077"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.24159036s ago: executing program 4 (id=731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x0, 0x401, {0x0}, {0xee01}, 0x8, 0x7478}) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x3}) 7.841698192s ago: executing program 0 (id=732): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x36, 0x8001, 0xc445, 0x3, 0xfa, 0x4}, 0xc) 7.291538106s ago: executing program 5 (id=735): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff00"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 7.183870305s ago: executing program 0 (id=736): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.095977442s ago: executing program 4 (id=739): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018122000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97", 0x9}], 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0xfffffbfd, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x40041) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in=@empty, 0x4e24, 0x200, 0x8, 0xcd, 0xa, 0x20, 0x20, 0x3c, r6, r7}, {0x7, 0x29, 0x896e, 0x5, 0x0, 0x0, 0x1d, 0xb2f5}, {0x6f3c, 0x10, 0x6, 0x8000}, 0x9, 0x6e6bbf, 0x1, 0x0, 0x2, 0x2}, {{@in=@multicast1, 0x4d6, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x1, 0x2, 0x1, 0x3, 0x4, 0x1}}, 0xe8) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) read$snapshot(r4, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000000)={'pcl724\x00', [0x4, 0x6, 0x7, 0x3, 0xda8, 0x7, 0x7ab, 0x80000000, 0x1, 0x9, 0x7, 0x1, 0x8, 0x4, 0x6, 0xcb93, 0x94b, 0xfffffffb, 0x5017e2fe, 0x7, 0x1, 0x7ff, 0x6, 0x8, 0x80, 0x7fffffff, 0x8, 0x4, 0x5, 0xb3d1, 0x1, 0x8000]}) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r8, 0x800442d3, 0x0) 6.74379065s ago: executing program 2 (id=740): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) preadv2(r2, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1, 0x1004, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.542665645s ago: executing program 1 (id=741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FIONREAD(r4, 0x541b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r7, @ANYBLOB="040046000500340040000000080026006c0900002c0051802891"], 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.365610859s ago: executing program 4 (id=742): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="00000400000000000077"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.497318176s ago: executing program 1 (id=743): openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="1f", 0x1}], 0x1}}], 0x1, 0x4040000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r3, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.119629796s ago: executing program 2 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) accept$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) 3.588674707s ago: executing program 4 (id=745): sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40302, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) 3.586828667s ago: executing program 1 (id=755): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400000000e3ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500"], 0x3c}}, 0x2000c0d0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x15) r4 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, r4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140), &(0x7f0000000100)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r8 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000300)=r8, 0x1) 3.464102787s ago: executing program 5 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 2.743194015s ago: executing program 2 (id=747): syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x7) 2.659135141s ago: executing program 1 (id=748): socket$inet6_udp(0xa, 0x2, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) pipe(&(0x7f0000000280)) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c) syz_usbip_server_init(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_io_uring_setup(0x9e8, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x4259}, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x68, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000020, 0x1, {0x2}}) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x7, 0x5, 0xfc000000}) io_uring_enter(r2, 0x2219, 0xcf73, 0x73, 0x0, 0x0) 2.559914999s ago: executing program 0 (id=749): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="1000000061e2d97ffc9df05701000000", 0x10) 2.559569509s ago: executing program 2 (id=750): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x262) socket$igmp6(0xa, 0x3, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(r5, r8, 0xfffffffffffffc01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, 0x0, 0x41, 0x0, 0x1}, 0x28) tee(r5, r8, 0x60000000000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.354422155s ago: executing program 0 (id=751): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendfile(r0, r1, 0x0, 0x106f) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_GET_COALESCE(r4, 0x0, 0x4044880) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000306010100000000001a0000020000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 2.220270425s ago: executing program 5 (id=752): modify_ldt$write2(0x11, &(0x7f0000000240)={0x7ff, 0x20001000, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x4, 0x2a}, 0x0, &(0x7f0000000500)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="2c3a0000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r4, 0x1) 1.283734598s ago: executing program 2 (id=753): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, &(0x7f0000000240)) 1.066478044s ago: executing program 0 (id=754): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) write$dsp(r0, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$vcsu(0x0, 0x1, 0x20102) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)) ptrace$getregs(0xe, 0x0, 0xb2, &(0x7f0000000540)=""/4096) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x7f, 0x0, 0x10001}) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "835ae5da"}]}}, 0x0}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde9809c8814618e976832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada133b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631def9f126c25ba4f37caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d3130180613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd60200c1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) syz_usb_ep_write(r4, 0x81, 0xac, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2") io_uring_setup(0x5237, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 357.068541ms ago: executing program 1 (id=756): openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="1f", 0x1}], 0x1}}], 0x1, 0x4040000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r3, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 263.661489ms ago: executing program 2 (id=757): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) preadv2(r2, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1, 0x1004, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 80.038539][ T4254] cgroup: Unknown subsys name 'net' [ 80.181471][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.793474][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 83.804297][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.812259][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.820297][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.828558][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.836105][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.844956][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.853524][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.860387][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.860814][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.867843][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.875535][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.882218][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.889279][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.895657][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.909538][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.911209][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.925033][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.926261][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.932623][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.940488][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.946932][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.953516][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.960410][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.970312][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.986103][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.994551][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.001895][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.014881][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.019934][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.032163][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.384546][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 84.496263][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 84.632956][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 84.651188][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.659168][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.667396][ T4267] device bridge_slave_0 entered promiscuous mode [ 84.675649][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 84.702143][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.709848][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.717599][ T4278] device bridge_slave_0 entered promiscuous mode [ 84.725084][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.732342][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.740393][ T4267] device bridge_slave_1 entered promiscuous mode [ 84.759756][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 84.775347][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.782467][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.790811][ T4278] device bridge_slave_1 entered promiscuous mode [ 84.823153][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.860119][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.884620][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.916383][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.923714][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.931571][ T4279] device bridge_slave_0 entered promiscuous mode [ 84.941471][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.967535][ T4267] team0: Port device team_slave_0 added [ 84.973614][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.980909][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.989315][ T4279] device bridge_slave_1 entered promiscuous mode [ 85.015887][ T4267] team0: Port device team_slave_1 added [ 85.066933][ T4278] team0: Port device team_slave_0 added [ 85.080528][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.087653][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.095699][ T4264] device bridge_slave_0 entered promiscuous mode [ 85.113164][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.123706][ T4278] team0: Port device team_slave_1 added [ 85.129829][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.136909][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.144796][ T4272] device bridge_slave_0 entered promiscuous mode [ 85.152563][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.160018][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.168361][ T4264] device bridge_slave_1 entered promiscuous mode [ 85.175721][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.182955][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.208956][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.224740][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.241978][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.249166][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.256913][ T4272] device bridge_slave_1 entered promiscuous mode [ 85.271446][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.279718][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.305918][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.363207][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.370216][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.396218][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.418948][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.431220][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.442734][ T4279] team0: Port device team_slave_0 added [ 85.449312][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.456313][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.482890][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.499556][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.510456][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.520858][ T4279] team0: Port device team_slave_1 added [ 85.580639][ T4267] device hsr_slave_0 entered promiscuous mode [ 85.587398][ T4267] device hsr_slave_1 entered promiscuous mode [ 85.612683][ T4264] team0: Port device team_slave_0 added [ 85.636904][ T4272] team0: Port device team_slave_0 added [ 85.646444][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.653497][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.679417][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.692999][ T4264] team0: Port device team_slave_1 added [ 85.710445][ T4278] device hsr_slave_0 entered promiscuous mode [ 85.717171][ T4278] device hsr_slave_1 entered promiscuous mode [ 85.724197][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.732642][ T4278] Cannot create hsr debugfs directory [ 85.739754][ T4272] team0: Port device team_slave_1 added [ 85.746323][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.753829][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.779897][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.844060][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.851257][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.877701][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.890891][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.898337][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.924370][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.935841][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.942943][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.968944][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.000439][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.007393][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.034239][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 86.035514][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.040606][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 86.086361][ T4279] device hsr_slave_0 entered promiscuous mode [ 86.093183][ T4279] device hsr_slave_1 entered promiscuous mode [ 86.099917][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.107467][ T4279] Cannot create hsr debugfs directory [ 86.118212][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 86.124471][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 86.128470][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 86.207375][ T4272] device hsr_slave_0 entered promiscuous mode [ 86.214216][ T4272] device hsr_slave_1 entered promiscuous mode [ 86.221492][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.229153][ T4272] Cannot create hsr debugfs directory [ 86.243160][ T4264] device hsr_slave_0 entered promiscuous mode [ 86.250210][ T4264] device hsr_slave_1 entered promiscuous mode [ 86.256739][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.264365][ T4264] Cannot create hsr debugfs directory [ 86.519683][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.544926][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.556974][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.574207][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.614592][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.641004][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.651171][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.666406][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.719182][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.739765][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.750299][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.773745][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.849953][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.863831][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.873578][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.914566][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.925456][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.961804][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.971685][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.989358][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.003366][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.015852][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.030986][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.044369][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.057949][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.073349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.081995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.111244][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.124994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.134731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.144217][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.151494][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.163461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.172252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.181499][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.188649][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.196761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.207528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.216564][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.223669][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.231556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.240471][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.274513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.284011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.293191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.303037][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.310170][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.318639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.327213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.337193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.345999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.354917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.372027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.383378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.393324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.415197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.425027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.451719][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.468231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.476117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.485344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.494531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.503439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.512771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.521224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.530234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.539263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.549095][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.580030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.588080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.595775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.606284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.618223][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.627339][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.636273][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.645509][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.652777][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.663811][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.674012][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.701013][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.762123][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.778768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.799804][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.806910][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.831012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.845724][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.868707][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.899746][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.928058][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.937543][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.980032][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.995007][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.009292][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.056287][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.080460][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.091972][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.108016][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 88.112649][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 88.123394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.158693][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.165849][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.188216][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 88.194276][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 88.200479][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 88.211675][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.220759][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.229449][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.236762][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.245035][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.283793][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.293795][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.314896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.323777][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.332322][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.340998][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.349426][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.375276][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.386942][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.408868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.420847][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.435912][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.447296][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.461661][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.472946][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.486986][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.496310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.505344][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.524278][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.559002][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.567499][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.577225][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.588567][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.595688][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.605222][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.613156][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.622105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.629832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.637643][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.657143][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.681278][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.701582][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.713100][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.742676][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.749887][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.763576][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.795452][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.846570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.861193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.889536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.899598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.912593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.922129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.932983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.942646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.952120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.974031][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.984897][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.030150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.043732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.056987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.066669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.076155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.113187][ T4267] device veth0_vlan entered promiscuous mode [ 89.129757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.159026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.198831][ T4267] device veth1_vlan entered promiscuous mode [ 89.253883][ T4278] device veth0_vlan entered promiscuous mode [ 89.269297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.288935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.299833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.319052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.331088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.359430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.392828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.402891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.425755][ T4278] device veth1_vlan entered promiscuous mode [ 89.445058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.454949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.475558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.523245][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.536820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.560159][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.574171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.585162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.599817][ T4267] device veth0_macvtap entered promiscuous mode [ 89.624785][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.670674][ T4267] device veth1_macvtap entered promiscuous mode [ 89.682772][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.691990][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.701737][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.712130][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.730587][ T4278] device veth0_macvtap entered promiscuous mode [ 89.760734][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.773631][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.787462][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.807496][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.819283][ T4278] device veth1_macvtap entered promiscuous mode [ 89.837705][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.854764][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.866310][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.896703][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.913459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.923755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.941321][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.957381][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.967540][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.983654][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.012043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.021667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.035703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.044310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.060345][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.077662][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.090783][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.099269][ T4272] device veth0_vlan entered promiscuous mode [ 90.121511][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.135735][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.160726][ T4272] device veth1_vlan entered promiscuous mode [ 90.170049][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.188387][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 90.196035][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.206245][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 90.214390][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.222404][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.231322][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.238985][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.246442][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.255293][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.269289][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 90.275336][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 90.281539][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 90.291418][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.312519][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.322531][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.331380][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.350272][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.415932][ T4272] device veth0_macvtap entered promiscuous mode [ 90.431199][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.449422][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.459585][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.470459][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.490206][ T4272] device veth1_macvtap entered promiscuous mode [ 90.534744][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.551885][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.569697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.577640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.592684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.603772][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.614323][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.624418][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.636748][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.649290][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.675939][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.676809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.684069][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.703921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.712845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.740524][ T4264] device veth0_vlan entered promiscuous mode [ 90.747129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.764296][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.774050][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.785168][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.795566][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.806739][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.817749][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.833610][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.842435][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.851600][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.861629][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.885900][ T4264] device veth1_vlan entered promiscuous mode [ 90.892987][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.901210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.909885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.917834][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.926740][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.935970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.944811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.965367][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.978581][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.014101][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.024892][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.038453][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.047572][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.056885][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.064724][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.076619][ T4279] device veth0_vlan entered promiscuous mode [ 91.101363][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.111711][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.149988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.165764][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.195723][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.211237][ T4279] device veth1_vlan entered promiscuous mode [ 91.244347][ T4264] device veth0_macvtap entered promiscuous mode [ 91.309082][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.366977][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.479436][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.553067][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.727048][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.867004][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.930273][ T4264] device veth1_macvtap entered promiscuous mode [ 91.973945][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.982621][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.991578][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.005580][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.047548][ T4393] fuse: Bad value for 'fd' [ 92.082505][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.121403][ T4279] device veth0_macvtap entered promiscuous mode [ 92.135005][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.164447][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.188678][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.211634][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.221876][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.232852][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.378624][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.398599][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.408805][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 92.415138][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 92.422595][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 92.428282][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 92.435639][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 92.801540][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.812058][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.822693][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.832727][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.847636][ T24] cfg80211: failed to load regulatory.db [ 92.849254][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.867036][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.880690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.892280][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.903633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.914868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.924278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.940459][ T4279] device veth1_macvtap entered promiscuous mode [ 92.952680][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.964046][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.973144][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.982290][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.183880][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.215517][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.263973][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.298043][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.308616][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.319827][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.329841][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.340651][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.353453][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.364187][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.383410][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.397073][ T4408] IPVS: Error joining to the multicast group [ 93.409553][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.440951][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.473785][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.486991][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.497098][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.508704][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.518766][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.529477][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.548121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.555799][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.621864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 93.801225][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.828349][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.830462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.851250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.855224][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.872188][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.909954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.911302][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.948352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.957922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 93.967999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 94.282819][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.608675][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.616742][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.645273][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.674321][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.746713][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.844467][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.920921][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.996443][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.040134][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.127636][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.162931][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.311544][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.619031][ T4429] fuse: Bad value for 'fd' [ 97.369811][ T4450] fuse: Bad value for 'fd' [ 97.429751][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 97.687008][ T4456] IPVS: Error joining to the multicast group [ 98.517151][ T4459] syz.0.23 (4459): drop_caches: 2 [ 99.666802][ T4470] fuse: Invalid rootmode [ 103.470258][ T4495] fuse: Bad value for 'fd' [ 103.639074][ T4498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'. [ 104.721232][ T4505] syz.3.38 (4505): drop_caches: 2 [ 105.719069][ T4511] fuse: Invalid rootmode [ 106.404084][ T4520] IPVS: Error joining to the multicast group [ 107.693473][ T4536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.47'. [ 110.797381][ T4558] fuse: Invalid rootmode [ 112.168891][ T4568] IPVS: Error joining to the multicast group [ 113.623701][ T4582] syz.4.61 (4582): drop_caches: 2 [ 116.115224][ T4596] fuse: Bad value for 'rootmode' [ 119.196171][ T4611] IPVS: Error joining to the multicast group [ 124.338196][ T4644] syz.2.79 (4644): drop_caches: 2 [ 124.618626][ T4651] IPVS: Error joining to the multicast group [ 124.660493][ T4653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 130.306599][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.326714][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.334602][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.344651][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.352516][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 130.472949][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.616529][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.643761][ T4677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.89'. [ 132.017110][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.728887][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 132.740255][ T4685] fuse: Bad value for 'rootmode' [ 132.764726][ T4686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.91'. [ 132.952311][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.792411][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.799184][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.759202][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 135.024654][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.257111][ T4670] chnl_net:caif_netlink_parms(): no params data found [ 137.207326][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 137.210198][ T4707] pty pty23: ldisc open failed (-12), clearing slot 23 [ 137.270316][ T4729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'. [ 137.695276][ T4742] fuse: Unknown parameter 'use00000000000000000000' [ 138.376798][ T4743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'. [ 138.728183][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.765898][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.862435][ T4670] device bridge_slave_0 entered promiscuous mode [ 139.046969][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.080670][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.206456][ T4670] device bridge_slave_1 entered promiscuous mode [ 139.228820][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 139.900813][ T4670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.964591][ T4670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.120951][ T4670] team0: Port device team_slave_0 added [ 140.196047][ T4670] team0: Port device team_slave_1 added [ 140.327177][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.357939][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.475942][ T4670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.504138][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.538544][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.619592][ T4670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.661890][ T4670] device hsr_slave_0 entered promiscuous mode [ 141.688579][ T4670] device hsr_slave_1 entered promiscuous mode [ 141.726822][ T4670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.760984][ T4670] Cannot create hsr debugfs directory [ 141.825687][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 142.411501][ T4780] device bpq0 entered promiscuous mode [ 142.991159][ T4785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.114'. [ 144.238307][ T4797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.115'. [ 144.634193][ T46] device hsr_slave_0 left promiscuous mode [ 144.696519][ T46] device hsr_slave_1 left promiscuous mode [ 144.774193][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.796234][ T4792] netlink: 84 bytes leftover after parsing attributes in process `syz.4.117'. [ 144.806021][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.880120][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.887597][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.948632][ T46] device bridge_slave_1 left promiscuous mode [ 144.956076][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.003567][ T46] device bridge_slave_0 left promiscuous mode [ 145.018224][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.146840][ T46] device veth1_macvtap left promiscuous mode [ 145.166899][ T46] device veth0_macvtap left promiscuous mode [ 145.186140][ T46] device veth1_vlan left promiscuous mode [ 145.192522][ T46] device veth0_vlan left promiscuous mode [ 146.997956][ T4285] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 147.006607][ T4285] Bluetooth: hci4: Injecting HCI hardware error event [ 147.015871][ T4282] Bluetooth: hci4: hardware error 0x00 [ 147.758440][ T46] team0 (unregistering): Port device team_slave_1 removed [ 147.790513][ T46] team0 (unregistering): Port device team_slave_0 removed [ 147.821899][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.854319][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.160773][ T46] bond0 (unregistering): Released all slaves [ 148.238696][ T4820] device bpq0 left promiscuous mode [ 148.244313][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 148.262082][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 149.220317][ T4853] netlink: 32 bytes leftover after parsing attributes in process `syz.1.128'. [ 149.472335][ T4282] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 149.723471][ T4868] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 149.884841][ T4670] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.945348][ T4670] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.528205][ T4670] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.604171][ T4670] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.109359][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.207976][ T4670] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.229866][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.240983][ T4899] sctp: [Deprecated]: syz.4.139 (pid 4899) Use of int in max_burst socket option deprecated. [ 152.240983][ T4899] Use struct sctp_assoc_value instead [ 152.330945][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.894516][ T4908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.140'. [ 152.931333][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 153.130014][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.161142][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.204533][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.211754][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.281619][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.305655][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.338582][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.381288][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.388521][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.934404][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.000150][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.096365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.123312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.161242][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.179014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.190060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.229068][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.260354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.339132][ T4670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.364069][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.375924][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.798105][ T4948] tmpfs: Unknown parameter 'usrquota' [ 156.893434][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 157.663125][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.897394][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.917120][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.302535][ T4967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.152'. [ 160.889484][ T4990] netlink: 128 bytes leftover after parsing attributes in process `syz.4.157'. [ 161.434876][ T4989] fuse: Unknown parameter 'user_i00000000000000000000' [ 162.701709][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.332592][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.845290][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 163.994962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.038977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.070804][ T4670] device veth0_vlan entered promiscuous mode [ 164.079088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.230557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.256862][ T4670] device veth1_vlan entered promiscuous mode [ 164.959851][ T5025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.163'. [ 165.232514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.248970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.270586][ T4670] device veth0_macvtap entered promiscuous mode [ 165.325737][ T4670] device veth1_macvtap entered promiscuous mode [ 165.399867][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.426374][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.452016][ T5036] syz.1.167 (5036): drop_caches: 2 [ 165.496148][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.524122][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.567660][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.597902][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.607751][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.648511][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.714768][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.849675][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.859091][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.868901][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.877783][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.969292][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.998563][ T5046] fuse: Unknown parameter 'user_i00000000000000000000' [ 167.001801][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.031476][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.066493][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.941898][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.954315][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.987931][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.018214][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.046699][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.128017][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 168.188272][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.619177][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.829121][ T4670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.933325][ T4670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.084988][ T4670] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.206654][ T4670] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.285089][ T5064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.174'. [ 172.166161][ T5069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.176'. [ 172.916853][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.948360][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.007131][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.107255][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.134794][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.194883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.055512][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.85'. [ 175.157676][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 176.476419][ T5103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.185'. [ 179.611974][ T5129] netlink: 'syz.1.191': attribute type 12 has an invalid length. [ 179.620063][ T5129] netlink: 'syz.1.191': attribute type 29 has an invalid length. [ 179.627918][ T5129] netlink: 148 bytes leftover after parsing attributes in process `syz.1.191'. [ 179.637006][ T5129] netlink: 59 bytes leftover after parsing attributes in process `syz.1.191'. [ 179.646936][ T5129] Zero length message leads to an empty skb [ 181.197847][ C0] sched: RT throttling activated [ 183.032967][ T5164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.198'. [ 185.449195][ T5188] netlink: 'syz.5.205': attribute type 12 has an invalid length. [ 185.457189][ T5188] netlink: 'syz.5.205': attribute type 29 has an invalid length. [ 185.465036][ T5188] netlink: 148 bytes leftover after parsing attributes in process `syz.5.205'. [ 185.474220][ T5188] netlink: 59 bytes leftover after parsing attributes in process `syz.5.205'. [ 185.637328][ T5199] ======================================================= [ 185.637328][ T5199] WARNING: The mand mount option has been deprecated and [ 185.637328][ T5199] and is ignored by this kernel. Remove the mand [ 185.637328][ T5199] option from the mount to silence this warning. [ 185.637328][ T5199] ======================================================= [ 185.711971][ T5199] overlayfs: failed to resolve './file1': -2 [ 186.989563][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 188.033225][ T5217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.212'. [ 191.927074][ T5250] netlink: 'syz.4.220': attribute type 12 has an invalid length. [ 191.934901][ T5250] netlink: 'syz.4.220': attribute type 29 has an invalid length. [ 191.942987][ T5250] netlink: 148 bytes leftover after parsing attributes in process `syz.4.220'. [ 191.951999][ T5250] netlink: 59 bytes leftover after parsing attributes in process `syz.4.220'. [ 193.756963][ T5254] process 'syz.5.223' launched './file0' with NULL argv: empty string added [ 195.241124][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.247471][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.496949][ T5273] netlink: 32 bytes leftover after parsing attributes in process `syz.5.225'. [ 196.453736][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.228'. [ 200.481362][ T5297] overlayfs: failed to resolve './file1': -2 [ 200.718836][ T5310] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 200.825211][ T5310] device bond1 entered promiscuous mode [ 200.831224][ T5310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.632926][ T5313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.685595][ T5313] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 201.697558][ T5313] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 202.232401][ T5313] bond1: (slave vcan1): making interface the new active one [ 202.240060][ T5313] device vcan1 entered promiscuous mode [ 202.256361][ T5313] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 202.265794][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 202.992813][ T5330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.242'. [ 203.823932][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 207.535684][ T5366] overlayfs: failed to resolve './file1': -2 [ 207.737705][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 207.744238][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 207.761483][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 209.575940][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'. [ 210.737085][ T5397] syz.5.259 (5397): drop_caches: 2 [ 211.347527][ T5398] fuse: Unknown parameter '0xffffffffffffffff' [ 215.198096][ T4338] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 215.307293][ T5449] syz.0.272 (5449): drop_caches: 2 [ 216.161240][ T4338] usb 6-1: Using ep0 maxpacket: 8 [ 216.323115][ T5446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 216.355612][ T4338] usb 6-1: config 0 has no interfaces? [ 216.441136][ T4338] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.496386][ T4338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.551206][ T4338] usb 6-1: config 0 descriptor?? [ 216.575595][ T5453] fuse: Unknown parameter '0x0000000000000003' [ 216.958345][ T4338] usb 6-1: USB disconnect, device number 2 [ 220.291520][ T5495] lo speed is unknown, defaulting to 1000 [ 220.297704][ T5495] lo speed is unknown, defaulting to 1000 [ 220.305743][ T5495] lo speed is unknown, defaulting to 1000 [ 220.317919][ T5495] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 220.331767][ T5495] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 220.369115][ T5495] lo speed is unknown, defaulting to 1000 [ 220.376975][ T5495] lo speed is unknown, defaulting to 1000 [ 220.384514][ T5495] lo speed is unknown, defaulting to 1000 [ 220.392235][ T5495] lo speed is unknown, defaulting to 1000 [ 220.398880][ T5495] lo speed is unknown, defaulting to 1000 [ 220.728090][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 220.966830][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.155874][ T5506] syz.4.285 (5506): drop_caches: 2 [ 221.832496][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.842972][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.859353][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.873817][ T5500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.416310][ T27] audit: type=1326 audit(1755013947.989:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 222.438407][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.464404][ T5518] fuse: Unknown parameter '0x0000000000000003' [ 222.475875][ T27] audit: type=1326 audit(1755013948.019:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 223.448987][ T27] audit: type=1326 audit(1755013948.019:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 223.498109][ T27] audit: type=1326 audit(1755013948.019:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 223.520163][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.527262][ T27] audit: type=1326 audit(1755013948.029:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 224.549960][ T27] audit: type=1326 audit(1755013948.029:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 224.668385][ T27] audit: type=1326 audit(1755013948.029:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 224.690560][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.886959][ T27] audit: type=1326 audit(1755013948.029:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 225.092579][ T27] audit: type=1326 audit(1755013948.029:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 225.123710][ T27] audit: type=1326 audit(1755013948.029:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5496 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578ef8ebe9 code=0x7ffc0000 [ 230.731354][ T5569] fuse: Unknown parameter '0x0000000000000003' [ 231.086479][ T5575] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 231.769645][ T4338] usb 3-1: USB disconnect, device number 2 [ 232.698375][ T5575] device bond1 entered promiscuous mode [ 232.719098][ T5575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.131366][ T5578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.138645][ T5578] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 233.149223][ T5578] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 233.284404][ T5578] bond1: (slave vcan1): making interface the new active one [ 233.295515][ T5578] device vcan1 entered promiscuous mode [ 233.316527][ T5578] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 233.341286][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.306'. [ 233.396254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 237.215191][ T5640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.318'. [ 238.899819][ T5679] siw: device registration error -23 [ 241.971363][ T5707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 243.592851][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.778454][ T5795] fuse: Unknown parameter 'fd0x0000000000000003' [ 243.940340][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 243.954508][ T24] usb 2-1: config 0 has no interfaces? [ 244.007993][ T5799] siw: device registration error -23 [ 244.015165][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.088935][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.111891][ T24] usb 2-1: config 0 descriptor?? [ 244.379114][ T4799] usb 2-1: USB disconnect, device number 2 [ 245.121547][ T5817] block device autoloading is deprecated and will be removed. [ 245.178001][ T5819] syz.4.345 (5819): drop_caches: 2 [ 246.071452][ T5818] block device autoloading is deprecated and will be removed. [ 249.298002][ T4331] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 249.612989][ T4331] usb 6-1: Using ep0 maxpacket: 16 [ 249.639899][ T4331] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 249.681226][ T5862] siw: device registration error -23 [ 249.696302][ T4331] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.706996][ T4331] usb 6-1: config 0 has no interface number 0 [ 249.724222][ T4331] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 249.740327][ T4331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.748812][ T4331] usb 6-1: Product: syz [ 249.753116][ T4331] usb 6-1: Manufacturer: syz [ 249.758093][ T4331] usb 6-1: SerialNumber: syz [ 249.772984][ T4331] usb 6-1: config 0 descriptor?? [ 249.794284][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 249.807647][ T4331] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 249.826164][ T4331] usb 6-1: No valid video chain found. [ 250.013141][ T5866] capability: warning: `syz.2.357' uses deprecated v2 capabilities in a way that may be insecure [ 250.106343][ T4331] usb 6-1: USB disconnect, device number 3 [ 251.717937][ T4338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 252.725269][ T5884] syz.2.360 (5884): drop_caches: 2 [ 252.927939][ T4338] usb 5-1: Using ep0 maxpacket: 8 [ 252.934891][ T4338] usb 5-1: config 0 has no interfaces? [ 252.966243][ T4338] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.975410][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.986373][ T4338] usb 5-1: config 0 descriptor?? [ 253.320926][ T5557] usb 5-1: USB disconnect, device number 2 [ 253.383004][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.368'. [ 253.628011][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 253.706976][ T5911] siw: device registration error -23 [ 254.803416][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.372'. [ 254.875853][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 256.154115][ T5937] syz.2.376 (5937): drop_caches: 2 [ 256.670231][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.676654][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.813713][ T5958] siw: device registration error -23 [ 258.791829][ T5966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.382'. [ 261.545352][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 263.014502][ T6001] autofs4:pid:6001:autofs_fill_super: called with bogus options [ 263.964638][ T6005] siw: device registration error -23 [ 264.082949][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.395'. [ 269.105383][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.405'. [ 270.334049][ T6125] fuse: Bad value for 'group_id' [ 270.645764][ T6131] siw: device registration error -23 [ 273.513336][ T6158] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 274.567164][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 274.577482][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 275.862569][ T6179] fuse: Bad value for 'group_id' [ 276.285075][ T6188] siw: device registration error -23 [ 276.644525][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 278.419613][ T6213] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 278.451616][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.5.426'. [ 278.503421][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.5.426'. [ 278.864534][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 281.191537][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 285.015542][ T6255] siw: device registration error -23 [ 285.937236][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 286.156415][ T6269] autofs4:pid:6269:autofs_fill_super: called with bogus options [ 287.877124][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 288.053508][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.443'. [ 289.227473][ T6293] siw: device registration error -23 [ 289.492980][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 289.537029][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 293.116909][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 293.141234][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'. [ 294.062190][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 294.537427][ T6352] siw: device registration error -23 [ 297.665531][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 297.686589][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 298.627243][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 299.772653][ T6391] siw: device registration error -23 [ 299.919919][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 301.490786][ T6398] device bpq0 entered promiscuous mode [ 305.232310][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 305.557654][ T6416] netlink: 84 bytes leftover after parsing attributes in process `syz.1.481'. [ 307.176870][ T6445] netlink: 84 bytes leftover after parsing attributes in process `syz.0.497'. [ 309.632499][ T6455] mmap: syz.5.489 (6455) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 312.476032][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 313.938243][ T4338] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 314.148024][ T4338] usb 6-1: Using ep0 maxpacket: 16 [ 314.196988][ T4338] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 314.359399][ T4338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.381641][ T4338] usb 6-1: Product: syz [ 314.386240][ T4338] usb 6-1: Manufacturer: syz [ 314.394858][ T4338] usb 6-1: SerialNumber: syz [ 314.427289][ T4338] r8152-cfgselector 6-1: config 0 descriptor?? [ 314.861925][ T4338] r8152-cfgselector 6-1: Unknown version 0x0000 [ 314.913835][ T4338] r8152-cfgselector 6-1: bad CDC descriptors [ 315.152558][ T4338] r8152-cfgselector 6-1: Unknown version 0x0000 [ 315.317556][ T4338] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 318.110968][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.117310][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.033049][ T6547] fuse: Unknown parameter 'grou00000000000000000000' [ 325.398438][ T6598] fuse: Unknown parameter 'grou00000000000000000000' [ 325.558998][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 330.057973][ T6641] fuse: Unknown parameter 'grou00000000000000000000' [ 331.632643][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 331.655135][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'. [ 331.685026][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 332.928995][ T6678] netlink: 128 bytes leftover after parsing attributes in process `syz.0.552'. [ 337.806164][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.565'. [ 339.808339][ T4338] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 340.102435][ T4338] usb 6-1: too many configurations: 68, using maximum allowed: 8 [ 340.222382][ T4338] usb 6-1: config index 0 descriptor too short (expected 72, got 56) [ 340.312567][ T4338] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 340.367888][ T4338] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 340.461220][ T4338] usb 6-1: config index 1 descriptor too short (expected 72, got 56) [ 340.494440][ T4338] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 340.515235][ T4338] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 340.555370][ T4338] usb 6-1: config index 2 descriptor too short (expected 72, got 56) [ 340.573920][ T4338] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 340.626000][ T4338] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 340.674173][ T4338] usb 6-1: config index 3 descriptor too short (expected 72, got 56) [ 340.679745][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'. [ 340.705740][ T4338] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 340.732035][ T4338] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 340.804167][ T4338] usb 6-1: config index 4 descriptor too short (expected 72, got 56) [ 340.864268][ T4338] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 340.898075][ T4338] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 340.925149][ T4338] usb 6-1: config index 5 descriptor too short (expected 72, got 56) [ 340.951076][ T4338] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 340.994854][ T4338] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 341.190188][ T6755] IPVS: Error joining to the multicast group [ 341.894721][ T4338] usb 6-1: config index 6 descriptor too short (expected 72, got 56) [ 341.903174][ T4338] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 341.913537][ T4338] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 341.937720][ T4338] usb 6-1: config index 7 descriptor too short (expected 72, got 56) [ 341.957483][ T4338] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 341.974147][ T4338] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 342.003633][ T4338] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 342.016499][ T4338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.024974][ T4338] usb 6-1: Product: syz [ 342.037931][ T4338] usb 6-1: Manufacturer: syz [ 342.045325][ T4338] usb 6-1: SerialNumber: syz [ 342.059133][ T4338] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.085811][ T6764] device bpq0 left promiscuous mode [ 342.093000][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 342.137041][ T4338] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.281349][ T6767] netlink: 128 bytes leftover after parsing attributes in process `syz.1.584'. [ 342.625115][ T14] usb 6-1: USB disconnect, device number 5 [ 343.316267][ T4338] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 343.331099][ T4338] ath9k_htc: Failed to initialize the device [ 343.340053][ T14] usb 6-1: ath9k_htc: USB layer deinitialized [ 343.476362][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 344.121336][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 345.050027][ T6819] netlink: 128 bytes leftover after parsing attributes in process `syz.2.600'. [ 346.720021][ T6827] sctp: [Deprecated]: syz.2.603 (pid 6827) Use of int in max_burst socket option deprecated. [ 346.720021][ T6827] Use struct sctp_assoc_value instead [ 346.987115][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 348.195219][ T6844] IPVS: Error joining to the multicast group [ 348.296450][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.610'. [ 349.150563][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.5.613'. [ 349.256943][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.613'. [ 349.572865][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 352.990427][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 356.363991][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 358.145371][ T6978] netlink: 128 bytes leftover after parsing attributes in process `syz.1.651'. [ 362.664333][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 363.967220][ T7019] netlink: 128 bytes leftover after parsing attributes in process `syz.5.663'. [ 365.329532][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 367.988413][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 368.401180][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 369.465544][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 373.500479][ T7109] sctp: [Deprecated]: syz.5.693 (pid 7109) Use of int in max_burst socket option deprecated. [ 373.500479][ T7109] Use struct sctp_assoc_value instead [ 373.527560][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 373.993392][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.696'. [ 375.933666][ T7137] sctp: [Deprecated]: syz.2.701 (pid 7137) Use of int in max_burst socket option deprecated. [ 375.933666][ T7137] Use struct sctp_assoc_value instead [ 379.561691][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.568112][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.289421][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 380.370680][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 380.617279][ T7163] sctp: [Deprecated]: syz.2.709 (pid 7163) Use of int in max_burst socket option deprecated. [ 380.617279][ T7163] Use struct sctp_assoc_value instead [ 380.695519][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 381.125573][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.711'. [ 382.623956][ T7184] sctp: [Deprecated]: syz.4.715 (pid 7184) Use of int in max_burst socket option deprecated. [ 382.623956][ T7184] Use struct sctp_assoc_value instead [ 385.487552][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.5.721'. [ 385.564898][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.5.721'. [ 385.641699][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 385.837877][ T4338] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 386.027515][ T7213] sctp: [Deprecated]: syz.5.724 (pid 7213) Use of int in max_burst socket option deprecated. [ 386.027515][ T7213] Use struct sctp_assoc_value instead [ 386.048180][ T4338] usb 5-1: Using ep0 maxpacket: 32 [ 386.065191][ T4338] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 386.093015][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.103784][ T4338] usb 5-1: config 0 descriptor?? [ 386.284728][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 387.053763][ T4338] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 387.111158][ T4338] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.161574][ T4338] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 387.178591][ T4338] usb 5-1: media controller created [ 387.289061][ T4338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.442364][ T4338] az6027: usb out operation failed. (-71) [ 387.466285][ T4338] az6027: usb out operation failed. (-71) [ 387.487155][ T4338] stb0899_attach: Driver disabled by Kconfig [ 387.525749][ T4338] az6027: no front-end attached [ 387.525749][ T4338] [ 388.506636][ T4338] az6027: usb out operation failed. (-71) [ 388.512930][ T4338] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 388.532016][ T4338] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 388.642556][ T4338] dvb-usb: schedule remote query interval to 400 msecs. [ 388.757894][ T4338] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 388.794090][ T4338] usb 5-1: USB disconnect, device number 3 [ 389.151048][ T4338] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 390.071600][ T7267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 392.902809][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.5.735'. [ 392.930142][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.5.735'. [ 393.532251][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 394.498931][ T7306] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 394.505799][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 394.548470][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 394.555074][ T7313] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.581068][ T7306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.623502][ T7306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.633249][ T7306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.667670][ T7306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.736698][ T7306] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(19) [ 394.743351][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 394.758864][ T951] vhci_hcd: vhci_device speed not set [ 394.779237][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 394.788095][ T7306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.837931][ T951] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 394.936206][ T7313] vhci_hcd vhci_hcd.0: port 0 already used [ 395.144990][ T7316] vhci_hcd: connection closed [ 395.147303][ T5802] vhci_hcd: stop threads [ 395.164530][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'. [ 395.216300][ T7307] vhci_hcd: connection reset by peer [ 395.219390][ T5802] vhci_hcd: release socket [ 395.285869][ T5802] vhci_hcd: disconnect device [ 395.341678][ T5802] vhci_hcd: stop threads [ 395.663497][ T5802] vhci_hcd: release socket [ 395.668480][ T5802] vhci_hcd: disconnect device [ 396.928012][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 397.129047][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.167444][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.270094][ T22] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 397.306807][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.343882][ T22] usb 1-1: config 0 descriptor?? [ 397.357024][ T22] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 397.751052][ T7341] [ 397.753483][ T7341] ====================================================== [ 397.760507][ T7341] WARNING: possible circular locking dependency detected [ 397.767539][ T7341] 6.1.147-syzkaller #0 Not tainted [ 397.772657][ T7341] ------------------------------------------------------ [ 397.779665][ T7341] syz.1.758/7341 is trying to acquire lock: [ 397.785542][ T7341] ffff88805b6e1450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd4/0xa60 [ 397.797008][ T7341] [ 397.797008][ T7341] but task is already holding lock: [ 397.804360][ T7341] ffff888018aa22f0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 397.813354][ T7341] [ 397.813354][ T7341] which lock already depends on the new lock. [ 397.813354][ T7341] [ 397.823754][ T7341] [ 397.823754][ T7341] the existing dependency chain (in reverse order) is: [ 397.832773][ T7341] [ 397.832773][ T7341] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 397.840498][ T7341] lock_sock_nested+0x44/0x100 [ 397.845817][ T7341] smc_listen_out+0x109/0x3d0 [ 397.851010][ T7341] process_one_work+0x898/0x1160 [ 397.856467][ T7341] worker_thread+0xaa2/0x1250 [ 397.861670][ T7341] kthread+0x29d/0x330 [ 397.866259][ T7341] ret_from_fork+0x1f/0x30 [ 397.871207][ T7341] [ 397.871207][ T7341] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 397.881355][ T7341] __lock_acquire+0x2cf8/0x7c50 [ 397.886761][ T7341] lock_acquire+0x1b4/0x490 [ 397.891783][ T7341] __flush_work+0xed/0xa60 [ 397.896737][ T7341] __cancel_work_timer+0x3ac/0x520 [ 397.902365][ T7341] smc_clcsock_release+0x5c/0xe0 [ 397.907822][ T7341] __smc_release+0x661/0x7d0 [ 397.912933][ T7341] smc_close_non_accepted+0xd1/0x1f0 [ 397.918734][ T7341] smc_close_active+0xb00/0xea0 [ 397.924100][ T7341] __smc_release+0x8d/0x7d0 [ 397.929154][ T7341] smc_release+0x2ca/0x530 [ 397.934093][ T7341] sock_close+0xd5/0x240 [ 397.938862][ T7341] __fput+0x22c/0x920 [ 397.943389][ T7341] task_work_run+0x1ca/0x250 [ 397.948491][ T7341] exit_to_user_mode_loop+0xe6/0x110 [ 397.954313][ T7341] exit_to_user_mode_prepare+0xb1/0x140 [ 397.961523][ T7341] syscall_exit_to_user_mode+0x16/0x40 [ 397.967612][ T7341] do_syscall_64+0x58/0xa0 [ 397.972543][ T7341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.978975][ T7341] [ 397.978975][ T7341] other info that might help us debug this: [ 397.978975][ T7341] [ 397.989201][ T7341] Possible unsafe locking scenario: [ 397.989201][ T7341] [ 397.996645][ T7341] CPU0 CPU1 [ 398.001998][ T7341] ---- ---- [ 398.007352][ T7341] lock(sk_lock-AF_SMC/1); [ 398.011854][ T7341] lock((work_completion)(&new_smc->smc_listen_work)); [ 398.021299][ T7341] lock(sk_lock-AF_SMC/1); [ 398.028318][ T7341] lock((work_completion)(&new_smc->smc_listen_work)); [ 398.035248][ T7341] [ 398.035248][ T7341] *** DEADLOCK *** [ 398.035248][ T7341] [ 398.043381][ T7341] 2 locks held by syz.1.758/7341: [ 398.048388][ T7341] #0: ffff8880713c7410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 398.058583][ T7341] #1: ffff888018aa22f0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 398.068001][ T7341] [ 398.068001][ T7341] stack backtrace: [ 398.073946][ T7341] CPU: 1 PID: 7341 Comm: syz.1.758 Not tainted 6.1.147-syzkaller #0 [ 398.081919][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.092050][ T7341] Call Trace: [ 398.095389][ T7341] [ 398.098329][ T7341] dump_stack_lvl+0x168/0x22e [ 398.103014][ T7341] ? load_image+0x3b0/0x3b0 [ 398.107530][ T7341] ? show_regs_print_info+0x12/0x12 [ 398.112727][ T7341] ? print_circular_bug+0x12b/0x1a0 [ 398.117931][ T7341] check_noncircular+0x274/0x310 [ 398.122878][ T7341] ? add_chain_block+0x940/0x940 [ 398.127820][ T7341] ? lockdep_lock+0xdc/0x1e0 [ 398.132427][ T7341] ? rcu_is_watching+0x11/0xa0 [ 398.137213][ T7341] ? lock_release+0xd4/0x910 [ 398.141830][ T7341] ? _find_first_zero_bit+0xcf/0x100 [ 398.147143][ T7341] __lock_acquire+0x2cf8/0x7c50 [ 398.151998][ T7341] ? __lock_acquire+0x7c50/0x7c50 [ 398.157036][ T7341] ? is_bpf_text_address+0x28b/0x2a0 [ 398.162355][ T7341] ? hlock_conflict+0x59/0x1f0 [ 398.167117][ T7341] ? verify_lock_unused+0x140/0x140 [ 398.172326][ T7341] ? __bfs+0x2a3/0x5c0 [ 398.176389][ T7341] ? check_path+0x40/0x40 [ 398.180713][ T7341] ? mark_lock+0x94/0x320 [ 398.185042][ T7341] ? __lock_acquire+0x13c0/0x7c50 [ 398.190084][ T7341] ? add_chain_block+0x940/0x940 [ 398.195044][ T7341] lock_acquire+0x1b4/0x490 [ 398.199549][ T7341] ? __flush_work+0xd4/0xa60 [ 398.204145][ T7341] ? __lock_acquire+0x13c0/0x7c50 [ 398.209166][ T7341] ? read_lock_is_recursive+0x10/0x10 [ 398.214538][ T7341] ? verify_lock_unused+0x140/0x140 [ 398.219736][ T7341] ? __flush_work+0xd4/0xa60 [ 398.224350][ T7341] __flush_work+0xed/0xa60 [ 398.228766][ T7341] ? __flush_work+0xd4/0xa60 [ 398.233365][ T7341] ? verify_lock_unused+0x140/0x140 [ 398.238563][ T7341] ? flush_work+0x20/0x20 [ 398.242891][ T7341] ? try_to_grab_pending+0xf1/0x840 [ 398.248094][ T7341] ? lockdep_hardirqs_off+0x70/0x100 [ 398.253387][ T7341] ? mark_lock+0x94/0x320 [ 398.257713][ T7341] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 398.263703][ T7341] ? lock_chain_count+0x20/0x20 [ 398.268555][ T7341] ? __cancel_work_timer+0x331/0x520 [ 398.273856][ T7341] __cancel_work_timer+0x3ac/0x520 [ 398.278980][ T7341] ? cancel_work_sync+0x20/0x20 [ 398.283837][ T7341] ? __smc_release+0x659/0x7d0 [ 398.288598][ T7341] ? __local_bh_enable_ip+0x12a/0x1b0 [ 398.294000][ T7341] ? lockdep_hardirqs_on+0x94/0x140 [ 398.299198][ T7341] ? __local_bh_enable_ip+0x12a/0x1b0 [ 398.304596][ T7341] ? _local_bh_enable+0xa0/0xa0 [ 398.309472][ T7341] smc_clcsock_release+0x5c/0xe0 [ 398.314419][ T7341] __smc_release+0x661/0x7d0 [ 398.319008][ T7341] ? do_raw_spin_unlock+0x11d/0x230 [ 398.324215][ T7341] smc_close_non_accepted+0xd1/0x1f0 [ 398.329505][ T7341] smc_close_active+0xb00/0xea0 [ 398.334357][ T7341] ? sock_no_sendpage_locked+0x160/0x160 [ 398.339997][ T7341] __smc_release+0x8d/0x7d0 [ 398.344500][ T7341] ? do_raw_spin_unlock+0x11d/0x230 [ 398.349734][ T7341] smc_release+0x2ca/0x530 [ 398.354155][ T7341] sock_close+0xd5/0x240 [ 398.358406][ T7341] ? sock_mmap+0x90/0x90 [ 398.362646][ T7341] __fput+0x22c/0x920 [ 398.366641][ T7341] task_work_run+0x1ca/0x250 [ 398.371235][ T7341] ? task_work_cancel+0x230/0x230 [ 398.376269][ T7341] ? __close_range+0x1c5/0x730 [ 398.381048][ T7341] ? exit_to_user_mode_loop+0x3b/0x110 [ 398.386602][ T7341] exit_to_user_mode_loop+0xe6/0x110 [ 398.391906][ T7341] exit_to_user_mode_prepare+0xb1/0x140 [ 398.397512][ T7341] syscall_exit_to_user_mode+0x16/0x40 [ 398.403021][ T7341] do_syscall_64+0x58/0xa0 [ 398.407455][ T7341] ? clear_bhb_loop+0x60/0xb0 [ 398.412129][ T7341] ? clear_bhb_loop+0x60/0xb0 [ 398.416804][ T7341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.422703][ T7341] RIP: 0033:0x7f9c4998ebe9 [ 398.427127][ T7341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.446758][ T7341] RSP: 002b:00007ffcf063ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 398.455170][ T7341] RAX: 0000000000000000 RBX: 00007f9c49bb7da0 RCX: 00007f9c4998ebe9 [ 398.463140][ T7341] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 398.471116][ T7341] RBP: 00007f9c49bb7da0 R08: 00000000000005dc R09: 00000019f063f14f [ 398.479090][ T7341] R10: 00000000003ff800 R11: 0000000000000246 R12: 0000000000061240 [ 398.487059][ T7341] R13: 00007f9c49bb6180 R14: ffffffffffffffff R15: 00007ffcf063ef70 [ 398.495032][ T7341] [ 399.948280][ T951] vhci_hcd: vhci_device speed not set [ 400.303197][ T7349] usb 1-1: USB disconnect, device number 2