last executing test programs: 10.048072628s ago: executing program 4 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001cc0)=ANY=[@ANYBLOB="f9326ee172e58e6c5915a573ed6babd1e37f984b532cee07453e13f9494f2246689fa0d4355752c54422ba70d3ccf8b636e9eb4c9b7622967d", @ANYBLOB, @ANYRESDEC, @ANYRES16, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f00000008c0)={0x114020900, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280), {0x35}, &(0x7f0000000340)=""/245, 0xf5, &(0x7f0000000b00)=""/4096, &(0x7f0000000880)=[r0, r0, r0, r0, r0, r0, r0, 0x0, r0], 0x9}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 9.864606833s ago: executing program 0 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl(r3, 0x43, &(0x7f0000000300)="14027435e022792b904dff62fd363655f960edfd2d1938d07349d0370ce9d3e85f5d2d04648b52a66c61ca015f024cddfb4cebe746f7146a2ecc5720872b519d17faf9b9e46d23fbe220d052b1345a2c1dd625989d68d86eaa2e2ecc998b045cff28c401ce38d9f831bdd34d682ea197004c57f88458f11f207fffa2851175456cddeca45421e161fbcf98fe53ebc4dfe38484960f122a2810c0") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) io_setup(0x2, &(0x7f0000000180)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d000000090001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_usb_control_io$hid(r5, &(0x7f0000000500)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="40004f0000004f0ed1abc63f6e866bbc4d"], 0x0, 0x0, 0x0}, 0x0) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001400000014006ed15c3082000005000000030000000100000f040000000200000002f8db239ea122b30520f321104cb77f09b7073491851791fe16fccb69fe50a18bb5738710b76a3bb12a9b31a86e2a8c70b1e006a674980153fa2176b3a4d61574be2574c707519acd9ab072c2982d77e11c292d5f2bd59d6ce92cc503cec258e7eeeb353a563a5d9d90904da17f16c33447ef5d930a51ca477d78f830fa4f85813ee86994cbbebeee2b09f346"], &(0x7f0000002200)=""/4110, 0x31, 0x100e, 0x1}, 0x20) 6.273697507s ago: executing program 3 (id=683): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000280), 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr=0x3}}}}) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 5.61796502s ago: executing program 0 (id=686): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0xb, 0x1, @thr={&(0x7f0000000080)="3174678f5963cd1d809497dde0af6d40f35abf60b6a67e7c71d5408def", &(0x7f0000000100)}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047453, &(0x7f0000000300)=0x8281336) 5.38062509s ago: executing program 0 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84400, 0x0) 4.550477858s ago: executing program 3 (id=689): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64], 0x118) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 4.320724576s ago: executing program 3 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = signalfd4(r4, &(0x7f0000000040)={[0x7d1]}, 0x8, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) sendmsg$inet(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x1000}], 0x1, &(0x7f00000004c0)=[@ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x61, [@private=0xa010101]}, @ssrr={0x89, 0x17, 0xd3, [@broadcast, @private=0xa010102, @local, @broadcast, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x50}, 0x8021) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3fc00, 0x0, 0xf0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a"], 0x0}, 0x90) r9 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10) fstatfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r9, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000000000000"], 0x18}, 0x0) 4.235916554s ago: executing program 0 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000a926007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) futex(&(0x7f0000000300), 0x9, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x1) ioctl$UI_DEV_CREATE(r6, 0x5501) 3.958305136s ago: executing program 1 (id=695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220f0000000bf2856e020bf85edaca930000000839ffd901529db437c38685aa1648fc0b81b0fcf18725d4f0921205fdc0ef2014d01b70288a755ec0e15a98401546b0934778793500f9ca8fc4b03478b5b1c89e72f7dec4575c5c952b7e909c87f85f677dd789fc40b399c7487559f709048d69"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000003f00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x6, {0x6, 0x0, "392cdaab"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 3.958135376s ago: executing program 4 (id=696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x3, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "e9ce"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 3.899042281s ago: executing program 3 (id=697): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.897443251s ago: executing program 2 (id=698): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) write$FUSE_BMAP(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r7}}]}, {0xffffffffffffff35}, {0x6d}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 3.142140963s ago: executing program 3 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={[], [{@audit}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x10\x00'}]}, 0x1c}}, 0x0) 3.099738587s ago: executing program 0 (id=700): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r0) r1 = getpid() syz_pidfd_open(r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0xd5ba2080, 0x0, 0x0, 0x0, 0x0, 0x0) 3.098363957s ago: executing program 2 (id=701): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64], 0x118) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 2.974934476s ago: executing program 2 (id=702): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404c05f20d00000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, &(0x7f0000000200)={0x0, 0xf, 0x24, {0x24, 0x4, "7abc2647b8d0b77c9bc0c74afbadc9f8ed5fd3eb2d389f8fc617b955c67902a026bd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.155609044s ago: executing program 4 (id=703): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 2.153474194s ago: executing program 1 (id=704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pivot_root(&(0x7f0000000280)='.\x00', &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 2.092039189s ago: executing program 3 (id=705): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x30948ee, 0x0, 0xfc, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) 1.988966277s ago: executing program 1 (id=706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32=r2, @ANYBLOB="08000200ac1414"], 0x28}}, 0x0) 1.923240473s ago: executing program 1 (id=707): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\"\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.691983402s ago: executing program 0 (id=708): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 1.552905123s ago: executing program 2 (id=709): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.444639262s ago: executing program 2 (id=710): r0 = syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e01000006240400011005"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 1.22794062s ago: executing program 1 (id=711): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\"\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.192822822s ago: executing program 4 (id=712): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x0, r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x3000000c}) 1.090589501s ago: executing program 4 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, r6}) 89.807933ms ago: executing program 2 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xa8}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x1000, 0x8, 0x8, 0x224, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0xfffffc27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x401) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 87.585763ms ago: executing program 4 (id=715): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$eJzs3b1uHFUUAOAz653ZBYp1QYWQGAkKqihOS7MWSiSEKyIXQAGGJBLyrpBiyRI/YklFS0NBwRNQ8SA0iBdAokWiI0iRLprZmf1xJhstYRMg39f4+N5z5p67O7bHha/ff3F6eqOMW3c+/yWGwyx64xjH3Sz2oxetL2PN+OsAAP7L7qYUv6e5beqyiBjuri0AYIe2/vn/w85bAgB27Prb77x5eHR09a2yHMa16Vfnx9Vv9tXH+fzhrfgoJnEzLsco7kXUDwp51E8LVXgtpTTrl5X9eGU6Oz+uKqfv/dhc//C3iLr+IEaxXw8tnjbq+jeOrh6Ucyv1s6qPZ5v1x1X9lRjF84vitforHfVxXMSrL6/0fylG8dOH8XFM4kbdxLL+i4OyfD1988dn71btVfXZ7Px4UOctpb3H/NYAAAAAAAAAAAAAAAAAAAAAAPA/dqk5O2cQ9fk91VBz/s7eveqTPMrW/vr5PPP6rL3Q6vlAKaVZiu/a83Uul2WZmsRlfT9e6Ef/yewaAAAAAAAAAAAAAAAAAAAA/l3OPvn09GQyuXn7Hwna0wD6EfHn9Yi/e53xyshLsTl50Kx5Mpn0mnA9pz9YGYm9NieL2NhGtYnuqZStLtF79Nfwmft6boLvP8i3vODw4Tl591oXg/4j7Ku9u05Psu7XcBDtyLC5Sb4tIpY5RTxkifZdLx6Uk2Kb26/onBptvffiuTqYbciJbFNjr/0631czkl3cRVG/qp3leRNEHt1fMsMH3M/dwf3fKzKndQAAAAAAAAAAAAAAAAAAwE5liz/67Zi8s7G0lwY7awsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHquzxf//XwQ/5xGLkXxtqglmTXHH1MWgiNtnT3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAX+CgAA//8wK1Yb") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x13, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000500)='id_legacy\x00', 0x0, &(0x7f0000000380)='\n\xe2\x93)\x00\x11\x16\x97\x82\xca\xca\x92\xfb\xadl\xb5\xe0\xff\xec\xb6\xdd\vq/\x83\xea\x17\xc0U\xf1{!\x9e$\x94\x9e\xa1\xd0?G\x10\xd4\xbe\xd8\xaaQ(\x1e\xf0\x00'/62, 0x0) 0s ago: executing program 1 (id=716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x4}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [], [0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 34.411309][ T4288] cgroup: Unknown subsys name 'net' [ 34.726513][ T4288] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.061049][ T4288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.574001][ T4301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.587717][ T4306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.590414][ T4306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.593117][ T4306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.595217][ T4306] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.597635][ T4306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.600060][ T4303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.603347][ T4306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.605323][ T4306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.607526][ T4306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.609824][ T4303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.613229][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.631352][ T4311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.633935][ T4311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.648637][ T4311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.650910][ T4311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.653542][ T4311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.655959][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.658780][ T4311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.661887][ T4311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.663927][ T4311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.666119][ T4311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.667317][ T4301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.668690][ T4311] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.672505][ T4301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.672709][ T4311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.675539][ T4301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.678636][ T4301] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.681253][ T4301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.688128][ T4311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.876262][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 36.910872][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 36.952768][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 36.980597][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.982719][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.985230][ T4300] device bridge_slave_0 entered promiscuous mode [ 36.990157][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.992524][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.995128][ T4300] device bridge_slave_1 entered promiscuous mode [ 37.003657][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 37.039519][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.041558][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.044022][ T4304] device bridge_slave_0 entered promiscuous mode [ 37.049056][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.051936][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.054427][ T4304] device bridge_slave_1 entered promiscuous mode [ 37.073842][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.087474][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.094519][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.117518][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.119978][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.122085][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.124445][ T4308] device bridge_slave_0 entered promiscuous mode [ 37.147051][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.148909][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.151383][ T4308] device bridge_slave_1 entered promiscuous mode [ 37.163275][ T4300] team0: Port device team_slave_0 added [ 37.167752][ T4300] team0: Port device team_slave_1 added [ 37.181055][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.182886][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.185397][ T4307] device bridge_slave_0 entered promiscuous mode [ 37.222865][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.224822][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.227644][ T4307] device bridge_slave_1 entered promiscuous mode [ 37.231699][ T4304] team0: Port device team_slave_0 added [ 37.234916][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.238159][ T4304] team0: Port device team_slave_1 added [ 37.241742][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.243649][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.250900][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.256758][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.258561][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.265978][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.284369][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.314829][ T4308] team0: Port device team_slave_0 added [ 37.326322][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.328050][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.335692][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.340201][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.344184][ T4308] team0: Port device team_slave_1 added [ 37.412256][ T4300] device hsr_slave_0 entered promiscuous mode [ 37.450724][ T4300] device hsr_slave_1 entered promiscuous mode [ 37.501060][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.502803][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.509264][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.513889][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.516391][ T4309] chnl_net:caif_netlink_parms(): no params data found [ 37.521401][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.523166][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.529465][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.557897][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.559646][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.566899][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.586811][ T4307] team0: Port device team_slave_0 added [ 37.616906][ T4307] team0: Port device team_slave_1 added [ 37.652204][ T4304] device hsr_slave_0 entered promiscuous mode [ 37.690713][ T4304] device hsr_slave_1 entered promiscuous mode [ 37.730468][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.732625][ T4304] Cannot create hsr debugfs directory [ 37.812065][ T4308] device hsr_slave_0 entered promiscuous mode [ 37.850739][ T4308] device hsr_slave_1 entered promiscuous mode [ 37.890537][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.892584][ T4308] Cannot create hsr debugfs directory [ 37.939642][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.941847][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.948157][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.968538][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.970544][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.976983][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.008068][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.010046][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.012925][ T4309] device bridge_slave_0 entered promiscuous mode [ 38.072914][ T4307] device hsr_slave_0 entered promiscuous mode [ 38.110816][ T4307] device hsr_slave_1 entered promiscuous mode [ 38.150547][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.152618][ T4307] Cannot create hsr debugfs directory [ 38.154257][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.156172][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.158673][ T4309] device bridge_slave_1 entered promiscuous mode [ 38.201985][ T4309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.208915][ T4309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.249337][ T4309] team0: Port device team_slave_0 added [ 38.254265][ T4309] team0: Port device team_slave_1 added [ 38.274143][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.319027][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.364221][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.412499][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.414268][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.421272][ T4309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.429902][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.482561][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.484380][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.491389][ T4309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.526563][ T4304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.564664][ T4304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.602947][ T4304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.661305][ T47] Bluetooth: hci0: command tx timeout [ 38.661313][ T4314] Bluetooth: hci1: command tx timeout [ 38.682363][ T4309] device hsr_slave_0 entered promiscuous mode [ 38.740445][ T47] Bluetooth: hci2: command tx timeout [ 38.740895][ T4309] device hsr_slave_1 entered promiscuous mode [ 38.741927][ T47] Bluetooth: hci3: command tx timeout [ 38.743837][ T4306] Bluetooth: hci4: command tx timeout [ 38.790481][ T4309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.792421][ T4309] Cannot create hsr debugfs directory [ 38.806028][ T4304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.918186][ T4308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.952252][ T4308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.993816][ T4308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.055818][ T4308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.125836][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.163931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.167708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.172838][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.174791][ T4307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.212234][ T4307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.271214][ T4307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.302180][ T4307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.352295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.354916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.357484][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.359400][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.362658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.366956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.369310][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.371201][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.373492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.389861][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.400981][ T4309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.434625][ T4309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.485663][ T4309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.522244][ T4309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.562335][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.565165][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.567958][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.571080][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.574202][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.588168][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.593183][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.596203][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.598792][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.602269][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.604759][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.607484][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.613883][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.619754][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.623050][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.644679][ T4300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.647996][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.660655][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.665038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.667693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.670569][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.672338][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.678096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.680805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.683169][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.684919][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.687266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.689900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.696018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.698653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.701834][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.704054][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.706630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.709302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.744456][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.747482][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.750186][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.762035][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.764655][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.766654][ T1745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.768884][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.779894][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.783441][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.795051][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.809054][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.816483][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.819061][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.824923][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.828046][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.831728][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.834274][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.836862][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.838809][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.841511][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.843799][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.846122][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.851007][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.857250][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.859875][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.865352][ T1745] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.867343][ T1745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.869561][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.873235][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.875772][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.877716][ T1745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.899716][ T4304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.903423][ T4304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.907515][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.910130][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.914094][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.917232][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.919845][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.923248][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.925770][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.928437][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.931117][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.933571][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.936384][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.946080][ T4308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.948746][ T4308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.961180][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.963684][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.966222][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.968943][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.973566][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.976219][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.978970][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.985751][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.994512][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.996997][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.999501][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.018491][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.032005][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.049086][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.056956][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.069479][ T4309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.073747][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.086410][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.088814][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.107061][ T4300] device veth0_vlan entered promiscuous mode [ 40.113097][ T4309] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.124966][ T4300] device veth1_vlan entered promiscuous mode [ 40.129250][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.132735][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.135240][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.137588][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.140082][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.145234][ T1745] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.147124][ T1745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.149631][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.154027][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.156587][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.158296][ T1745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.163061][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.165432][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.167936][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.204201][ T4300] device veth0_macvtap entered promiscuous mode [ 40.206926][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.209414][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.217263][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.220107][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.224106][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.226789][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.229423][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.234189][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.236744][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.246544][ T4309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.249296][ T4309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.256578][ T4300] device veth1_macvtap entered promiscuous mode [ 40.267318][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.269720][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.275117][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.277988][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.281024][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.283656][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.286073][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.288647][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.306782][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.312589][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.323936][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.326605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.329181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.340878][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.342823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.345357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.351437][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353914][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.356034][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.358172][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.372925][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.396832][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.399201][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.401622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.417429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.421269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.431542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.433570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.438243][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.450221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.454260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.495801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.498710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.514202][ T4304] device veth0_vlan entered promiscuous mode [ 40.523316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.533432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.536177][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.538867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.542261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.544587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.546902][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.549230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.555045][ T4307] device veth0_vlan entered promiscuous mode [ 40.558040][ T4308] device veth0_vlan entered promiscuous mode [ 40.571232][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.576500][ T4304] device veth1_vlan entered promiscuous mode [ 40.591951][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.598120][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.606577][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.609149][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.613467][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.615410][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.622807][ T4307] device veth1_vlan entered promiscuous mode [ 40.643436][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.645964][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.648624][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.652864][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.657151][ T4308] device veth1_vlan entered promiscuous mode [ 40.678416][ T4304] device veth0_macvtap entered promiscuous mode [ 40.680578][ T1745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.682613][ T1745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.700042][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.704269][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.706769][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.709255][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.712442][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.716341][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.721876][ T4304] device veth1_macvtap entered promiscuous mode [ 40.735323][ T4307] device veth0_macvtap entered promiscuous mode [ 40.740986][ T47] Bluetooth: hci1: command tx timeout [ 40.742483][ T47] Bluetooth: hci0: command tx timeout [ 40.748702][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.751054][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.755516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.758320][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.763418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.766143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.768872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.779556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.784337][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.787129][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.796811][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.800741][ T4307] device veth1_macvtap entered promiscuous mode [ 40.821176][ T47] Bluetooth: hci3: command tx timeout [ 40.822814][ T47] Bluetooth: hci2: command tx timeout [ 40.824159][ T47] Bluetooth: hci4: command tx timeout [ 40.828422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.831687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.834138][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.836723][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.839587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.843402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.845910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.848402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.853208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.855619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.858531][ T4308] device veth0_macvtap entered promiscuous mode [ 40.869503][ T4308] device veth1_macvtap entered promiscuous mode [ 40.881868][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.884798][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.888475][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.893277][ T4309] device veth0_vlan entered promiscuous mode [ 40.898981][ T4309] device veth1_vlan entered promiscuous mode [ 40.911925][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.914648][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.917041][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.921196][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.927693][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.938690][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.942413][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.944853][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.947447][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.957693][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.964864][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.967496][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.970042][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.973258][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.976909][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.982019][ T4307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.984454][ T4307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.986912][ T4307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.989294][ T4307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.031691][ T4304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.033884][ T4304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.036002][ T4304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.038107][ T4304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.049054][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.059188][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.098159][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.101757][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.105985][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.108710][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.112025][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.114632][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.832070][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.834779][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.837204][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.839750][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.842848][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.845438][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.849069][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.869234][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.873203][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.886965][ T4309] device veth0_macvtap entered promiscuous mode [ 41.891463][ T4309] device veth1_macvtap entered promiscuous mode [ 41.900085][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.912182][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.914706][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.917226][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.919566][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.935758][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.938362][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.942050][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.946304][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.949336][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.955503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.958605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.961626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.964324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.967019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.969581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.972773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.985327][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.988208][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.991859][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.994575][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.997095][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.999845][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.007071][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.010557][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.013183][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.015679][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.023920][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.026591][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.029338][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.032904][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.035725][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.039408][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.042622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.045191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.048002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.054027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.056847][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.073611][ T4308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.076070][ T4308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.078299][ T4308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.081637][ T4308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.093561][ T4309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.095879][ T4309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.098247][ T4309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.124905][ T4309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.148088][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.150197][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.180192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.200549][ T1515] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.236714][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.239671][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.258580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.286921][ T1745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.289061][ T1745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.300191][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.303200][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.322604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.330978][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.350843][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.353023][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.363074][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.385908][ T1745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.388015][ T1745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.397145][ T1745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.440464][ T1515] usb 1-1: Using ep0 maxpacket: 32 [ 42.517756][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.560475][ T1515] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.563151][ T1515] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 42.565865][ T1515] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 42.578995][ T1515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 42.602495][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.613961][ T1515] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 42.626676][ T1515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.646900][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.655465][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.682368][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.682974][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.901071][ T4306] Bluetooth: hci0: command tx timeout [ 42.903018][ T4306] Bluetooth: hci1: command tx timeout [ 42.904706][ T4306] Bluetooth: hci4: command tx timeout [ 42.906421][ T4306] Bluetooth: hci2: command tx timeout [ 42.908107][ T4306] Bluetooth: hci3: command tx timeout [ 43.450568][ T1515] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 43.452975][ T1515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.455093][ T1515] usb 1-1: Product: syz [ 43.476752][ T1515] usb 1-1: Manufacturer: syz [ 43.478041][ T1515] usb 1-1: SerialNumber: syz [ 43.498638][ T1515] usb 1-1: config 0 descriptor?? [ 43.521140][ T4382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.568380][ T4406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.620955][ T4406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.660679][ T4414] loop3: detected capacity change from 0 to 1764 [ 43.747743][ T4416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.781181][ T1515] cxacru 1-1:0.0: cxacru_bind: interface has incorrect endpoints [ 43.783572][ T4416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.783704][ T1515] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 43.797405][ T1515] usb 1-1: USB disconnect, device number 2 [ 43.877706][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 43.886144][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 43.987815][ T4423] loop4: detected capacity change from 0 to 256 [ 44.012604][ T4383] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.171566][ T4426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.200741][ T4426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.811014][ T4434] loop1: detected capacity change from 0 to 512 [ 44.836811][ T4434] EXT4-fs: Ignoring removed i_version option [ 44.838455][ T4434] EXT4-fs: Ignoring removed nobh option [ 44.848270][ T4434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.851775][ T4434] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.926962][ T4434] EXT4-fs (loop1): 1 truncate cleaned up [ 44.928564][ T4434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.990601][ T47] Bluetooth: hci3: command tx timeout [ 44.992079][ T47] Bluetooth: hci2: command tx timeout [ 44.993453][ T47] Bluetooth: hci4: command tx timeout [ 44.994837][ T47] Bluetooth: hci1: command tx timeout [ 44.996346][ T47] Bluetooth: hci0: command tx timeout [ 45.029521][ T4443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.070757][ T4443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.127554][ T4438] loop4: detected capacity change from 0 to 1024 [ 45.978592][ T4308] EXT4-fs (loop1): unmounting filesystem. [ 46.000785][ T4448] loop2: detected capacity change from 0 to 764 [ 46.047201][ T4448] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.737206][ T4461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.773145][ T4461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.896679][ T4487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35'. [ 50.072955][ T4494] Zero length message leads to an empty skb [ 50.105276][ T4478] loop4: detected capacity change from 0 to 32768 [ 50.117705][ T4478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.29 (4478) [ 50.140518][ T4478] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.147749][ T4478] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 50.149902][ T4478] BTRFS info (device loop4): using free space tree [ 50.396170][ T4478] BTRFS info (device loop4): enabling ssd optimizations [ 51.144890][ T4309] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.319690][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 51.328849][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 51.376758][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.390478][ T4347] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.701956][ T4347] usb 1-1: Using ep0 maxpacket: 8 [ 51.712502][ T4538] device bridge_slave_0 left promiscuous mode [ 52.234433][ T4550] loop4: detected capacity change from 0 to 8192 [ 52.415489][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.430524][ T4347] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 52.432871][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.446399][ T4347] usb 1-1: config 0 descriptor?? [ 52.448124][ T4549] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 52.450511][ T4549] FAT-fs (loop4): Filesystem has been set read-only [ 52.478415][ T4548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.47'. [ 52.636448][ T4556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.663601][ T4556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.958507][ T4575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.59'. [ 52.992990][ T4577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'. [ 53.025396][ T4579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 53.114123][ T4563] loop3: detected capacity change from 0 to 32768 [ 53.127584][ T4563] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.54 (4563) [ 53.139222][ T4563] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.143330][ T4563] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 53.145446][ T4563] BTRFS info (device loop3): using free space tree [ 53.379377][ T4563] BTRFS info (device loop3): enabling ssd optimizations [ 53.380574][ T4347] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 53.383751][ T4347] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 53.409979][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.413878][ T4347] asix: probe of 1-1:0.0 failed with error -71 [ 53.420009][ T4347] usb 1-1: USB disconnect, device number 3 [ 53.521536][ T4620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.71'. [ 53.541130][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.572509][ T4304] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.585253][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 53.799511][ T4635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.840530][ T4635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.097553][ T4651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.84'. [ 54.466959][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.582363][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.291118][ T4679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.98'. [ 55.730768][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 55.791613][ T4707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.110'. [ 55.836959][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 56.879862][ T4724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 56.892512][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.931661][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.101821][ T4733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.121'. [ 57.921437][ T4740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.986698][ T4731] loop3: detected capacity change from 0 to 32768 [ 57.993974][ T4743] netlink: 'syz.4.126': attribute type 21 has an invalid length. [ 57.995915][ T4743] netlink: 128 bytes leftover after parsing attributes in process `syz.4.126'. [ 57.997836][ T4731] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.122 (4731) [ 58.006259][ T4743] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 58.008301][ T4743] netlink: 'syz.4.126': attribute type 5 has an invalid length. [ 58.010199][ T4743] netlink: 3 bytes leftover after parsing attributes in process `syz.4.126'. [ 58.011026][ T4740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.021334][ T4731] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.023991][ T4731] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 58.026098][ T4731] BTRFS info (device loop3): using free space tree [ 58.032007][ T4743] netlink: 'syz.4.126': attribute type 21 has an invalid length. [ 58.034009][ T4743] netlink: 128 bytes leftover after parsing attributes in process `syz.4.126'. [ 58.036244][ T4743] netlink: 'syz.4.126': attribute type 5 has an invalid length. [ 58.045337][ T4743] netlink: 3 bytes leftover after parsing attributes in process `syz.4.126'. [ 58.186311][ T4764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.226241][ T4764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.250346][ T4731] BTRFS info (device loop3): enabling ssd optimizations [ 58.386192][ T4304] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.465862][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.500737][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.898196][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.047226][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.022170][ T4845] process 'syz.1.165' launched '/dev/fd/3' with NULL argv: empty string added [ 61.035195][ T4843] __nla_validate_parse: 2 callbacks suppressed [ 61.035210][ T4843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.164'. [ 61.226935][ T4864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.169'. [ 61.242654][ T4864] device bridge_slave_1 left promiscuous mode [ 61.244615][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.329916][ T4864] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 61.360553][ T4386] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 61.467650][ T4877] loop4: detected capacity change from 0 to 128 [ 61.601762][ T4386] usb 1-1: Using ep0 maxpacket: 16 [ 61.720665][ T4386] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 61.722971][ T4386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.727724][ T4386] usb 1-1: config 0 descriptor?? [ 61.763763][ T4386] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 61.932753][ T4890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.183'. [ 62.481494][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.681480][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.716228][ T4888] loop1: detected capacity change from 0 to 32768 [ 62.718664][ T4888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.182 (4888) [ 62.734100][ T4888] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 62.736623][ T4888] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 62.738721][ T4888] BTRFS info (device loop1): using free space tree [ 62.893010][ T4888] BTRFS info (device loop1): enabling ssd optimizations [ 62.924547][ T4930] loop4: detected capacity change from 0 to 128 [ 62.949470][ T4308] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.106117][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.133158][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.303494][ T4937] device team0 entered promiscuous mode [ 63.319027][ T4937] device team_slave_0 entered promiscuous mode [ 63.322407][ T4937] device team_slave_1 entered promiscuous mode [ 63.340480][ T4386] gspca_sonixj: reg_w1 err -71 [ 63.342826][ T4941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.197'. [ 63.370502][ T4386] sonixj: probe of 1-1:0.0 failed with error -71 [ 63.374574][ T4386] usb 1-1: USB disconnect, device number 4 [ 64.375280][ T4933] device team0 left promiscuous mode [ 64.376821][ T4933] device team_slave_0 left promiscuous mode [ 64.378496][ T4933] device team_slave_1 left promiscuous mode [ 64.434853][ T4961] loop4: detected capacity change from 0 to 128 [ 64.531026][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.533215][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.767490][ T4977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.211'. [ 64.930443][ T1515] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 65.840338][ T1515] usb 1-1: Using ep0 maxpacket: 8 [ 65.873132][ T4959] loop3: detected capacity change from 0 to 32768 [ 65.878346][ T4999] loop2: detected capacity change from 0 to 128 [ 65.885232][ T4959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.203 (4959) [ 65.919818][ T4959] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.931546][ T4959] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 65.934235][ T4959] BTRFS info (device loop3): using free space tree [ 65.960850][ T1515] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 65.963197][ T1515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.967415][ T1515] usb 1-1: config 0 descriptor?? [ 66.004412][ T5006] batman_adv: batadv0: Adding interface: dummy0 [ 66.008144][ T5006] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.020480][ T5006] batman_adv: batadv0: Interface activated: dummy0 [ 66.039385][ T5006] batadv0: mtu less than device minimum [ 66.050196][ T5006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.056342][ T5006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.062310][ T5006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.067873][ T5006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.073587][ T5006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.079113][ T5006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.084849][ T5006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.090436][ T5006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 66.214063][ T5020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.226'. [ 66.250846][ T4959] BTRFS info (device loop3): enabling ssd optimizations [ 66.473805][ T4304] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 67.178691][ T1515] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 67.183033][ T1515] asix: probe of 1-1:0.0 failed with error -71 [ 67.187190][ T1515] usb 1-1: USB disconnect, device number 5 [ 67.274373][ T5041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'. [ 67.314102][ T5047] loop4: detected capacity change from 0 to 128 [ 67.532976][ T5061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.240'. [ 68.801596][ T5068] loop4: detected capacity change from 0 to 32768 [ 68.825802][ T5068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.243 (5068) [ 68.854652][ T5079] netlink: 'syz.2.247': attribute type 13 has an invalid length. [ 68.863258][ T5068] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.865836][ T5068] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 68.868121][ T5068] BTRFS info (device loop4): using free space tree [ 68.882536][ T5079] device veth0_macvtap left promiscuous mode [ 68.956077][ T5079] macvtap0: refused to change device tx_queue_len [ 69.197775][ T5068] BTRFS info (device loop4): enabling ssd optimizations [ 69.236603][ T5114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.254'. [ 69.288012][ T4309] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.243368][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.282967][ T5131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.287196][ T7] cfg80211: failed to load regulatory.db [ 70.308339][ T5129] loop1: detected capacity change from 0 to 128 [ 70.334416][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.470633][ T5131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.997849][ T5149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 71.040371][ T4529] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 71.204425][ T5143] loop3: detected capacity change from 0 to 32768 [ 71.245473][ T5143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.267 (5143) [ 71.261855][ T5143] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.264734][ T5143] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 71.266833][ T5143] BTRFS info (device loop3): using free space tree [ 71.281828][ T5154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'. [ 71.401457][ T4529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.404104][ T4529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.406626][ T4529] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 71.408919][ T4529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.452336][ T4529] usb 1-1: config 0 descriptor?? [ 71.857139][ T5143] BTRFS info (device loop3): enabling ssd optimizations [ 71.984529][ T4304] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 72.043006][ T4529] usbhid 1-1:0.0: can't add hid device: -71 [ 72.044685][ T4529] usbhid: probe of 1-1:0.0 failed with error -71 [ 72.047797][ T4529] usb 1-1: USB disconnect, device number 6 [ 72.268272][ T5184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.274'. [ 72.576545][ T5196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.635062][ T5202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.283'. [ 72.647859][ T5196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.996420][ T5215] device geneve2 entered promiscuous mode [ 73.977783][ T5233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.297'. [ 73.979909][ T5204] loop4: detected capacity change from 0 to 32768 [ 74.011203][ T5204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.285 (5204) [ 74.025727][ T5204] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.110444][ T5204] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 74.112634][ T5204] BTRFS info (device loop4): using free space tree [ 74.475909][ T5204] BTRFS info (device loop4): enabling ssd optimizations [ 75.192228][ T5272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.222683][ T4309] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.263428][ T5272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.312038][ T5273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.375169][ T4383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4383) [ 75.549662][ T5285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.311'. [ 75.855253][ T5292] block device autoloading is deprecated and will be removed. [ 77.063183][ T5295] loop1: detected capacity change from 0 to 32768 [ 77.085658][ T5295] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 77.116428][ T4383] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.205238][ T5319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.324'. [ 77.482238][ T5333] loop1: detected capacity change from 0 to 128 [ 78.488026][ T5360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.340'. [ 79.798213][ T5393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.354'. [ 81.241019][ T5433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.369'. [ 81.717267][ T5457] input: syz0 as /devices/virtual/input/input2 [ 82.584666][ T5467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'. [ 82.635225][ T5471] loop2: detected capacity change from 0 to 128 [ 83.595534][ T5451] loop1: detected capacity change from 0 to 32768 [ 83.598327][ T5451] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 83.666736][ T5487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.822039][ T5487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.708769][ T5504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.401'. [ 84.897777][ T5514] loop1: detected capacity change from 0 to 128 [ 86.334518][ T5543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.417'. [ 86.409676][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.490977][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.544529][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.587730][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.734875][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.760703][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.346417][ T5576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.432'. [ 88.453710][ T5581] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 88.662472][ T5591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.714604][ T5591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.188450][ T5612] loop2: detected capacity change from 0 to 128 [ 90.320993][ T5615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.447'. [ 90.693794][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.720605][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.744474][ T5629] device syzkaller1 entered promiscuous mode [ 92.059846][ T5637] loop1: detected capacity change from 0 to 32768 [ 92.063100][ T5653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 92.065525][ T5637] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 92.069414][ T5653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.462'. [ 92.139218][ T5655] xt_cgroup: invalid path, errno=-2 [ 92.341700][ T5663] device geneve2 entered promiscuous mode [ 92.422847][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.460625][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.481993][ T5672] device syzkaller1 entered promiscuous mode [ 93.445831][ T5686] xt_cgroup: invalid path, errno=-2 [ 93.477997][ T5688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.476'. [ 93.481237][ T5688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 94.108603][ T5692] loop4: detected capacity change from 0 to 32768 [ 94.173107][ T5710] usb usb7: usbfs: process 5710 (syz.3.486) did not claim interface 0 before use [ 94.195168][ T5692] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.197920][ T5692] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 94.200157][ T5692] BTRFS info (device loop4): using free space tree [ 94.941452][ T5727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.001307][ T5727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.032149][ T5738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'. [ 95.035116][ T5738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.492'. [ 95.058799][ T5692] BTRFS info (device loop4): enabling ssd optimizations [ 95.083342][ T5740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'. [ 95.173971][ T4309] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.277724][ T5753] loop2: detected capacity change from 0 to 128 [ 96.426038][ T5772] tipc: Started in network mode [ 96.427540][ T5772] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 96.429717][ T5772] tipc: Enabling of bearer rejected, failed to enable media [ 96.490158][ T5775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.505'. [ 96.493576][ T5775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.505'. [ 96.669403][ T27] audit: type=1326 audit(96.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.710860][ T27] audit: type=1326 audit(96.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.721163][ T27] audit: type=1326 audit(96.690:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.745549][ T27] audit: type=1326 audit(96.690:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.758732][ T27] audit: type=1326 audit(96.690:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.769933][ T27] audit: type=1326 audit(96.690:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.810407][ T27] audit: type=1326 audit(96.690:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.816036][ T27] audit: type=1326 audit(96.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.833389][ T27] audit: type=1326 audit(96.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.833540][ T5792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.838671][ T27] audit: type=1326 audit(96.690:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99345e68 code=0x7ffc0000 [ 96.900567][ T5792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.994971][ T5778] loop4: detected capacity change from 0 to 32768 [ 97.008721][ T5778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.506 (5778) [ 97.158988][ T5778] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.162933][ T5778] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 97.165097][ T5778] BTRFS info (device loop4): using free space tree [ 98.066182][ T5778] BTRFS info (device loop4): enabling ssd optimizations [ 98.180020][ T5829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'. [ 98.193202][ T4309] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.218268][ T5829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.519'. [ 98.292658][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.425871][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.454622][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.532053][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 98.694561][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.697007][ T7] usb 1-1: config 0 has no interface number 0 [ 98.698650][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.703808][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.708091][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.726956][ T7] usb 1-1: config 0 descriptor?? [ 98.777332][ T7] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 99.590527][ T5860] loop2: detected capacity change from 0 to 128 [ 99.674306][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 99.691201][ T5866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.533'. [ 99.709917][ T7] usb 1-1: USB disconnect, device number 7 [ 99.721341][ T5856] iowarrior 1-1:0.1: Error -19 while submitting URB [ 99.727412][ T7] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 100.209968][ T5864] loop1: detected capacity change from 0 to 32768 [ 100.226424][ T5864] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.532 (5864) [ 100.256923][ T5864] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.274140][ T5864] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 100.287039][ T5864] BTRFS info (device loop1): using free space tree [ 100.356107][ T5886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.623329][ T5886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.727936][ T5864] BTRFS info (device loop1): enabling ssd optimizations [ 100.828283][ T4308] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.886994][ T5916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.547'. [ 101.272544][ T5936] loop2: detected capacity change from 0 to 128 [ 101.514776][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.558'. [ 101.739053][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.788559][ T5941] loop3: detected capacity change from 0 to 32768 [ 102.009088][ T5941] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.556 (5941) [ 102.018311][ T5941] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.026446][ T5941] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 102.036490][ T5941] BTRFS info (device loop3): using free space tree [ 102.226965][ T5941] BTRFS info (device loop3): enabling ssd optimizations [ 102.266045][ T4304] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.298039][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.502839][ T5988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.570'. [ 102.765891][ T6006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.840914][ T6006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.867474][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.890796][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.602272][ T6023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.584'. [ 103.696053][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.747757][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 103.747770][ T27] audit: type=1326 audit(103.720:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d45e68 code=0x7ffc0000 [ 103.755356][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.764619][ T27] audit: type=1326 audit(103.740:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff81d45e68 code=0x7ffc0000 [ 103.780175][ T27] audit: type=1326 audit(103.740:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81d45e68 code=0x7ffc0000 [ 103.846880][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.996458][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.155919][ T6046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.893268][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.037810][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.600'. [ 105.041860][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.831785][ T6064] loop2: detected capacity change from 0 to 512 [ 105.891144][ T6064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.747732][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.840452][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.867354][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 107.037516][ T6053] loop3: detected capacity change from 0 to 40427 [ 107.042560][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.049964][ T6053] ======================================================= [ 107.049964][ T6053] WARNING: The mand mount option has been deprecated and [ 107.049964][ T6053] and is ignored by this kernel. Remove the mand [ 107.049964][ T6053] option from the mount to silence this warning. [ 107.049964][ T6053] ======================================================= [ 107.077309][ T6053] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 107.079405][ T6053] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 107.082613][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.094226][ T6086] loop2: detected capacity change from 0 to 512 [ 107.108120][ T6053] F2FS-fs (loop3): invalid crc value [ 107.135834][ T6086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.147308][ T6053] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.197399][ T6053] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 107.199395][ T6053] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.235905][ T6095] loop1: detected capacity change from 0 to 512 [ 107.330160][ T6095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.575047][ T6103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.611'. [ 108.248356][ T4308] EXT4-fs (loop1): unmounting filesystem. [ 108.353107][ T6110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.613'. [ 108.883657][ T6122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.285992][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.338473][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 109.341387][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.405947][ T6135] ptrace attach of "./syz-executor exec"[4309] was attempted by "./syz-executor exec"[6135] [ 109.460061][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.530787][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.626481][ T6143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.626'. [ 110.146684][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 110.214942][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.633'. [ 110.353521][ T6164] overlayfs: statfs failed on './file0' [ 110.379091][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.470943][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.661016][ T6173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.963254][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.639'. [ 111.149605][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.212111][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.288427][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 111.377096][ T6188] vhci_hcd: invalid port number 157 [ 111.378427][ T6188] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 111.482874][ T6196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.649'. [ 111.657133][ T6203] loop2: detected capacity change from 0 to 128 [ 111.708681][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.653'. [ 111.737482][ T4383] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.819917][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'. [ 112.744377][ T6226] loop2: detected capacity change from 0 to 128 [ 113.089199][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.667'. [ 113.167665][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.668'. [ 114.694589][ T6259] netlink: 48 bytes leftover after parsing attributes in process `syz.1.658'. [ 114.720535][ T4344] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.190865][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.193773][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.280534][ T4344] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 115.284104][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 115.286158][ T4344] usb 1-1: Product: syz [ 115.383347][ T4344] usb 1-1: config 0 descriptor?? [ 117.319042][ T4344] konepure 0003:1E7D:2DB4.0001: item fetching failed at offset 10/11 [ 117.321841][ T4344] konepure 0003:1E7D:2DB4.0001: parse failed [ 117.323410][ T4344] konepure: probe of 0003:1E7D:2DB4.0001 failed with error -22 [ 117.435904][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.480493][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.504151][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 117.613597][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.682'. [ 118.167497][ T1515] usb 1-1: USB disconnect, device number 8 [ 118.751110][ T6303] overlayfs: failed to resolve './file2': -2 [ 119.803576][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 119.873390][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.694'. [ 120.050135][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.074558][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.184702][ T6329] input: syz1 as /devices/virtual/input/input3 [ 120.371054][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.376262][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.838278][ T6331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'. [ 120.840906][ T6331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'. [ 120.853206][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.920905][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.041784][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.120754][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.015679][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 122.069173][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.171391][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.554641][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.590735][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.814041][ T6370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.855645][ T6370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.938510][ T6377] loop4: detected capacity change from 0 to 256 [ 123.949344][ T6377] FAT-fs (loop4): Unrecognized mount option "shoŠtname=mixed" or missing value [ 124.108257][ T6383] ------------[ cut here ]------------ [ 124.109786][ T6383] WARNING: CPU: 0 PID: 6383 at mm/page_alloc.c:5534 __alloc_pages+0x32c/0x730 [ 124.112054][ T6383] Modules linked in: [ 124.113084][ T6383] CPU: 0 PID: 6383 Comm: syz.1.716 Not tainted 6.1.106-syzkaller #0 [ 124.115121][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 124.117742][ T6383] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 124.119817][ T6383] pc : __alloc_pages+0x32c/0x730 [ 124.121103][ T6383] lr : __alloc_pages+0xc8/0x730 [ 124.122420][ T6383] sp : ffff80001e7c78c0 [ 124.123472][ T6383] x29: ffff80001e7c79a0 x28: ffff80001e7c78e0 x27: dfff800000000000 [ 124.125627][ T6383] x26: ffff700003cf8f1c x25: 0000000000000000 x24: ffff80001e7c7900 [ 124.127705][ T6383] x23: 0000000000000000 x22: 0000000000040dc0 x21: 1ffff00003cf8f20 [ 124.129782][ T6383] x20: ffff80001e7c7920 x19: 000000000000001a x18: 1ffff00003cf8efc [ 124.131917][ T6383] x17: 0000000000000000 x16: ffff8000121d8480 x15: 0000000000000002 [ 124.133998][ T6383] x14: 00000000c06855c8 x13: ffff0000d0a70000 x12: 0000000000000005 [ 124.136107][ T6383] x11: 1ffff00003cf8f24 x10: 0000000000000000 x9 : 0000000000000001 [ 124.138224][ T6383] x8 : ffff80001832d000 x7 : 0000000000000000 x6 : 0000000000000000 [ 124.140344][ T6383] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 124.142477][ T6383] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff80001e7c7920 [ 124.144558][ T6383] Call trace: [ 124.145369][ T6383] __alloc_pages+0x32c/0x730 [ 124.146554][ T6383] __kmalloc_large_node+0xbc/0x21c [ 124.147947][ T6383] __kmalloc+0x130/0x1c4 [ 124.149156][ T6383] input_mt_init_slots+0xc0/0x818 [ 124.150561][ T6383] uinput_create_device+0x3d0/0x528 [ 124.152037][ T6383] uinput_ioctl_handler+0x8b0/0x16c0 [ 124.153421][ T6383] uinput_ioctl+0x38/0x4c [ 124.154596][ T6383] __arm64_sys_ioctl+0x14c/0x1c8 [ 124.155971][ T6383] invoke_syscall+0x98/0x2c0 [ 124.157191][ T6383] el0_svc_common+0x138/0x258 [ 124.158479][ T6383] do_el0_svc+0x64/0x218 [ 124.159659][ T6383] el0_svc+0x58/0x168 [ 124.160700][ T6383] el0t_64_sync_handler+0x84/0xf0 [ 124.162144][ T6383] el0t_64_sync+0x18c/0x190 [ 124.163400][ T6383] irq event stamp: 362 [ 124.164463][ T6383] hardirqs last enabled at (361): [] kasan_quarantine_put+0xdc/0x204 [ 124.167233][ T6383] hardirqs last disabled at (362): [] el1_dbg+0x24/0x80 [ 124.169424][ T6383] softirqs last enabled at (344): [] local_bh_enable+0x10/0x34 [ 124.171881][ T6383] softirqs last disabled at (342): [] local_bh_disable+0x10/0x34 [ 124.174360][ T6383] ---[ end trace 0000000000000000 ]--- [ 124.327314][ T6386] netlink: 165 bytes leftover after parsing attributes in process `syz.4.715'. [ 125.942151][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.943912][ T2062] ieee802154 phy1 wpan1: encryption failed: -22