last executing test programs: 3m28.687254628s ago: executing program 3 (id=175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000bff601068670700000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 3m24.702479213s ago: executing program 3 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r8 = dup(r1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x200004, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_readahead}, {@cache_fscache}]}}) 3m23.157601025s ago: executing program 3 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f00000000c0)={0x5, 0x1, "046c27fc51413c5616e9e87697f39ccfb10afb28dabd5aa5", {0x8, 0x1ff}}) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r7, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r8 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) recvmmsg$unix(r8, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000001e00)=""/4110, 0x100e}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000001700)=""/194, 0xc2}], 0x5}}], 0x1, 0x0, 0x0) write(r8, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x2000, @loopback}}}, 0x90) 3m22.219522317s ago: executing program 3 (id=195): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000bff601068670700000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 3m17.372506995s ago: executing program 3 (id=206): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) mkdir(0x0, 0x0) 3m15.219524135s ago: executing program 3 (id=211): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 2m58.999293211s ago: executing program 32 (id=211): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 41.175536607s ago: executing program 0 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) poll(&(0x7f0000001480)=[{r1, 0x456}], 0x1, 0x7) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x4, 0x2, 0x4, 0x0, 0x0, {0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x3}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x104ea, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1, {0x0, r7}}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x8}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x4b, 0x2, {{'ecb(cipher_null)\x00'}, 0x18, "a2b4ad"}}, @replay_esn_val={0x1c}]}, 0x158}}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd_index=0x3, 0x2, 0x8, 0x7, 0x10, 0x1, {0x0, r8}}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES64=r3, @ANYRESOCT=r2], 0x40}, 0x1, 0x0, 0x0, 0x4c050}, 0x80) 40.169023921s ago: executing program 0 (id=658): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x47, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000e14800000000de646a9b62bf6aecc053f3c77dc385f213e6687ca758d2158f5cb034f1f965cf2aea5c35d0e72688b93ccc5824c59b70d8994184fb"], &(0x7f0000000480)={0x1, 0x2, [0xe98, 0x469, 0x3b0, 0x3d5]}) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r3 = socket(0x25, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240), 0x0) io_uring_enter(r4, 0xdb4, 0x11d76, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x230}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x20000000000000, {0x1, 0xf0}, 0xfe}, 0x18) syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000003c0)={0xea8000, 0x1ff, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9a090a, 0x2, '\x00', @p_u16=0x0}}) mount$9p_rdma(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 38.531411984s ago: executing program 0 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x7c, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0x5, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0x5, 0x7, '\x00', 0x4}, {0xb3, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0x7}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="12010000c7ce360863078020abd00102030109021200010000"], 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x1) semop(0x0, &(0x7f0000000340)=[{0x7, 0xec7b, 0x1000}, {0x2, 0x4a7}, {0x2, 0x1a12, 0x1000}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 35.133118611s ago: executing program 0 (id=675): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 33.982333657s ago: executing program 0 (id=678): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000bff601068670700000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 31.519817092s ago: executing program 0 (id=685): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) umount2(0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x90000004}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000196c0)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x4) unshare(0x22020600) fallocate(0xffffffffffffffff, 0x48, 0xfea000, 0x2000402) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000400)='ns/uts\x00') r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xcd34, 0x1, 0x0, 0x34}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x2a, {0xffff, 0x1}, 0xae}, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, 0x0, &(0x7f0000000380)=r6}, 0x20) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000000c0)={0x41, 0x800000, 0x4, 0x5, 0x4000000, 0x8100}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) 15.460443725s ago: executing program 33 (id=685): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) umount2(0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x90000004}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000196c0)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x4) unshare(0x22020600) fallocate(0xffffffffffffffff, 0x48, 0xfea000, 0x2000402) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000400)='ns/uts\x00') r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xcd34, 0x1, 0x0, 0x34}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x2a, {0xffff, 0x1}, 0xae}, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, 0x0, &(0x7f0000000380)=r6}, 0x20) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000000c0)={0x41, 0x800000, 0x4, 0x5, 0x4000000, 0x8100}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) 14.37322305s ago: executing program 2 (id=720): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa", 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x2c}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12.003060073s ago: executing program 2 (id=724): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x5}, &(0x7f0000000040)=0x8) 10.809106519s ago: executing program 2 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r8 = dup(r1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x200004, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_readahead}, {@cache_fscache}]}}) 9.929711402s ago: executing program 5 (id=731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x5872a4d6c3edc95e, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) tee(r3, r6, 0x4e, 0x0) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb) 9.299108991s ago: executing program 2 (id=733): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000080) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup3(r2, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010080000500050001000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 9.141942193s ago: executing program 1 (id=734): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r5, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=""/163, &(0x7f0000000040)=0xa3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'macvlan1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x8}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7f}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.818356825s ago: executing program 2 (id=737): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) mkdir(0x0, 0x0) 6.810767085s ago: executing program 5 (id=738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$msr(r6, 0x0, 0x600) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='1\x00'/12, @ANYRES32=0x0, @ANYBLOB='w'], 0x20) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) 4.904740342s ago: executing program 2 (id=739): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.903210312s ago: executing program 1 (id=748): shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) unshare(0x400) r0 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 4.849357742s ago: executing program 4 (id=740): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x82) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000010000)=0x3) 4.829381173s ago: executing program 5 (id=741): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x8, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x20008080) socket$inet_udp(0x2, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@xino_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) 4.749158524s ago: executing program 4 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xd, &(0x7f00000007c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r3, @ANYBLOB="04000000000000000000000000000000008603630a61870af3e8a4444ccce951c8b1bbcbfc2554c9d78a5d8c08c71c6a329da8c91d9cdb313d42b4d333c1695213d3192fc7e007b071b9dc834c26d5f202c474ce1b1055c3f1ed42ed9927a8204d8509e3c7ce7cd5b67ca53be40ba974169d9fde8a5c544f01641bc8c2329603561df44f69010d10871fa3975215fb532cfb3b3f7a4c4e4c732e69ade033eba32356c38955f0cd794651cabf8f09d27180ea74a9d2a040634c65e5628335ff6b2617fd1bb9b8ea9908c6f570040948536feb30c8a74264cd9e96741816783ca0d240b8b0cf8f11088efdddcba0d70ecf1c852ea6c56b1b7b8917535a23715eab94d55ba72e4e1405ec8ad88f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x34, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r0], &(0x7f0000000840)='syzkaller\x00', 0x0, 0xffffff8a, 0x0, 0x41000, 0x7c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20002, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000380)="ad56b6c5820fae9d6dcd3292ea54c7beef0700564c90c200", 0xb) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r5, 0x0, 0x4000000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) recvmmsg(r5, &(0x7f0000000240), 0x0, 0x2040, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0xd}}, {{0xa, 0x0, 0x0, @local, 0x1}}}, 0x108) socket(0x14, 0x3, 0x5) 3.891693416s ago: executing program 4 (id=743): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x7, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x80) 3.741011228s ago: executing program 5 (id=744): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000bff601068670700000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 3.300846264s ago: executing program 1 (id=745): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x1) 2.961294989s ago: executing program 4 (id=746): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000080) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup3(r2, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010080000500050001000000080004000000000005000600000000000800030001000000"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 2.646433313s ago: executing program 1 (id=747): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0xc8}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c0002800500010000000000140002870500000000000000"], 0x58}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x33565348, 0x0, @discrete={0xfffffffa}}) 1.759875806s ago: executing program 4 (id=749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 1.555250608s ago: executing program 4 (id=750): syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) syz_io_uring_setup(0x6f10, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10, 0x4, 0x4}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) pipe(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.112655514s ago: executing program 5 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002280), 0xa200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000022c0)={0x8, 0x4, 0x0, 'queue1\x00', 0x7f}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r6 = dup(r3) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x0, 0x0, 0x0, r8, 0xee01, 0xc0, 0x3}, 0x0, 0x7b6, 0x0, 0x0, 0x0, 0x0, 0xa}) getgroups(0x3, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0xee01]) lchown(0x0, r8, r9) r10 = accept4(r4, 0x0, 0x0, 0x0) recvfrom(r10, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x10000000000000) sendfile(r10, r6, 0x0, 0x8a000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) socket(0x10, 0x2, 0x0) 1.067607525s ago: executing program 1 (id=752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) socket$netlink(0x10, 0x3, 0x15) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 40.083749ms ago: executing program 5 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xd, &(0x7f00000007c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x34, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r0], &(0x7f0000000840)='syzkaller\x00', 0x0, 0xffffff8a, 0x0, 0x41000, 0x7c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20002, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000380)="ad56b6c5820fae9d6dcd3292ea54c7beef0700564c90c200", 0xb) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r5, 0x0, 0x4000000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) recvmmsg(r5, &(0x7f0000000240), 0x0, 0x2040, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0xd}}, {{0xa, 0x0, 0x0, @local, 0x1}}}, 0x108) socket(0x14, 0x3, 0x5) 0s ago: executing program 1 (id=754): openat$incfs(0xffffffffffffff9c, 0x0, 0x1812c1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = syz_open_dev$mouse(0x0, 0x0, 0x2042) read$msr(r4, 0x0, 0x600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x9, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x80071, 0x7, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x1, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0x7, 0x6, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x5fffffe, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x8, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x1, 0x80, 0x3, 0xfffffffe, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2e, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x2, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x5, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000004, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0xb1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x20) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.58' (ED25519) to the list of known hosts. [ 67.300444][ T4160] cgroup: Unknown subsys name 'net' [ 67.438409][ T4160] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.994386][ T4160] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.652163][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 70.669564][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 70.685404][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 70.782031][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 70.898421][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.907971][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.917610][ T4177] device bridge_slave_0 entered promiscuous mode [ 70.935614][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 70.957497][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.965757][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.974823][ T4177] device bridge_slave_1 entered promiscuous mode [ 70.984573][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.993580][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.005131][ T4176] device bridge_slave_0 entered promiscuous mode [ 71.026976][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.034578][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.043332][ T4184] device bridge_slave_0 entered promiscuous mode [ 71.059597][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.068345][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.078999][ T4176] device bridge_slave_1 entered promiscuous mode [ 71.100308][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.107643][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.117549][ T4184] device bridge_slave_1 entered promiscuous mode [ 71.150619][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.159189][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.168971][ T4171] device bridge_slave_0 entered promiscuous mode [ 71.192249][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.219137][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.227671][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.237490][ T4171] device bridge_slave_1 entered promiscuous mode [ 71.266053][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.278469][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.305849][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.318174][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.338380][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.357143][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.404914][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.414829][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.422840][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.431879][ T4170] device bridge_slave_0 entered promiscuous mode [ 71.445722][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.453884][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.464395][ T4177] team0: Port device team_slave_0 added [ 71.488889][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.497413][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.507148][ T4170] device bridge_slave_1 entered promiscuous mode [ 71.516889][ T4184] team0: Port device team_slave_0 added [ 71.525681][ T4177] team0: Port device team_slave_1 added [ 71.546270][ T4176] team0: Port device team_slave_0 added [ 71.576407][ T4184] team0: Port device team_slave_1 added [ 71.596030][ T4176] team0: Port device team_slave_1 added [ 71.606008][ T4171] team0: Port device team_slave_0 added [ 71.628675][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.637836][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.670543][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.693809][ T4171] team0: Port device team_slave_1 added [ 71.704172][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.724742][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.735820][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.774715][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.806466][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.818856][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.827811][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.866232][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.885400][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.894219][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.929582][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.964173][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.974021][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.007307][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.022513][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.029896][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.060683][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.076460][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.085133][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.119720][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.142357][ T4170] team0: Port device team_slave_0 added [ 72.165126][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.174148][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.207016][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.221660][ T4170] team0: Port device team_slave_1 added [ 72.239832][ T4177] device hsr_slave_0 entered promiscuous mode [ 72.249629][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 72.251074][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 72.259499][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 72.266102][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 72.281168][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 72.281722][ T4177] device hsr_slave_1 entered promiscuous mode [ 72.356998][ T4176] device hsr_slave_0 entered promiscuous mode [ 72.366409][ T4176] device hsr_slave_1 entered promiscuous mode [ 72.376812][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.387526][ T4176] Cannot create hsr debugfs directory [ 72.415665][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.424843][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.461551][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.516671][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.526355][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.560414][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.596471][ T4171] device hsr_slave_0 entered promiscuous mode [ 72.605801][ T4171] device hsr_slave_1 entered promiscuous mode [ 72.613813][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.622877][ T4171] Cannot create hsr debugfs directory [ 72.634754][ T4184] device hsr_slave_0 entered promiscuous mode [ 72.642708][ T4184] device hsr_slave_1 entered promiscuous mode [ 72.649499][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.658223][ T4184] Cannot create hsr debugfs directory [ 72.773744][ T4170] device hsr_slave_0 entered promiscuous mode [ 72.784273][ T4170] device hsr_slave_1 entered promiscuous mode [ 72.792547][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.800292][ T4170] Cannot create hsr debugfs directory [ 73.062346][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.076443][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.088315][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.104413][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.145776][ T4177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.156910][ T4177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.171409][ T4177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.187369][ T4177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.303508][ T4171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.320242][ T4171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.333343][ T4171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.377959][ T4171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.393950][ T4170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.426219][ T4170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.440034][ T4170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.458469][ T4170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.505634][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.523253][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.550021][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.564463][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.603808][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.613598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.625133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.636443][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.705996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.717460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.728012][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.736440][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.747875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.761532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.775527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.787526][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.797355][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.813957][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.836412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.879927][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.898574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.924278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.933718][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.960637][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.970534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.982360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.995559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.007143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.019247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.030375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.044181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.056643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.069249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.083275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.093761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.111465][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.129041][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.158677][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.176312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.188891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.201991][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.213038][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.224950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.238700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.250988][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.260591][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.273431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.286342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.298743][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.309068][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.319610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.332785][ T4223] Bluetooth: hci3: command 0x041b tx timeout [ 74.339636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.340573][ T4223] Bluetooth: hci0: command 0x041b tx timeout [ 74.350981][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 74.363752][ T4223] Bluetooth: hci2: command 0x041b tx timeout [ 74.374470][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.399114][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.412833][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 74.449654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.468734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.479682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.500473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.526152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.546155][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.565651][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.577714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.595775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.613093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.631665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.649527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.658554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.681673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.692986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.708209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.720004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.730491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.743268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.753358][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.761164][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.769453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.779728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.790593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.800665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.811658][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.819566][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.857873][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.867070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.879051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.889043][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.899770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.910556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.922865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.933601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.943034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.952285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.965606][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.977503][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.990905][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.009389][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.018578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.028804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.037965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.048107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.058951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.070833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.085210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.094159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.104916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.121533][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.157936][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.168277][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.184307][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.198980][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.212632][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.220351][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.234142][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.246224][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.256343][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.268143][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.279046][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.287946][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.297741][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.306623][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.317159][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.333110][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.352163][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.390028][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.437738][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.474552][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.503298][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.527042][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.582462][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.590317][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.603248][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.614220][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.626514][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.638385][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.650004][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.661144][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.678052][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.705311][ T4176] device veth0_vlan entered promiscuous mode [ 75.719761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.730229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.745583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.756491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.768066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.778370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.789250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.800305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.824866][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.839121][ T4176] device veth1_vlan entered promiscuous mode [ 75.850085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.860173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.891555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.900024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.910501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.920241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.939491][ T4177] device veth0_vlan entered promiscuous mode [ 75.959675][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.998060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.015533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.055460][ T4177] device veth1_vlan entered promiscuous mode [ 76.082629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.104016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.127307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.147874][ T4176] device veth0_macvtap entered promiscuous mode [ 76.187447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.196586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.208474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.219581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.276949][ T4177] device veth0_macvtap entered promiscuous mode [ 76.292785][ T4176] device veth1_macvtap entered promiscuous mode [ 76.308876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.319581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.335349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.346710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.355817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.372457][ T4177] device veth1_macvtap entered promiscuous mode [ 76.387799][ T4171] device veth0_vlan entered promiscuous mode [ 76.401778][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 76.408997][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 76.409135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.427329][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 76.434644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.445846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.457416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.475940][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.485184][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 76.498247][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.510776][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 76.521759][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.542595][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.573891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.585947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.597668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.610416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.622988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.635443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.646835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.656951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.669439][ T4171] device veth1_vlan entered promiscuous mode [ 76.683111][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.702577][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.715089][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.732309][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.742174][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.752182][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.762428][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.781787][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.792568][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.812292][ T4177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.823836][ T4177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.836739][ T4177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.849983][ T4177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.879892][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.898375][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.909717][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.922151][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.940895][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.009114][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.028862][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.039238][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.048758][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.067837][ T4184] device veth0_vlan entered promiscuous mode [ 77.096014][ T4184] device veth1_vlan entered promiscuous mode [ 77.109925][ T4171] device veth0_macvtap entered promiscuous mode [ 77.126125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.136504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.147742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.158821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.189587][ T4171] device veth1_macvtap entered promiscuous mode [ 77.259734][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.272064][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.283561][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.294910][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.306532][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.314811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.323297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.336989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.346412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.355621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.365567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.382437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.393486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.425691][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.439924][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.455949][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.471907][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.486806][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.499829][ T4184] device veth0_macvtap entered promiscuous mode [ 77.523665][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.536942][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.544374][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.556521][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.559116][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.579592][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.591465][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.605479][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.618128][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.630688][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.646536][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.660681][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.671718][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.704254][ T4184] device veth1_macvtap entered promiscuous mode [ 77.755089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.762493][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.777079][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.777752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.797396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.808353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.825338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.834394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.849823][ T4170] device veth0_vlan entered promiscuous mode [ 77.874079][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.891575][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.913235][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.937512][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.950835][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.963179][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.975672][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.991163][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.007837][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.020197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.030168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.039955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.060552][ T4170] device veth1_vlan entered promiscuous mode [ 78.083621][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.127239][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.140452][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.154428][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.167381][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.182230][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.210744][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.220983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.231824][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.244731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 78.256076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.287451][ T4264] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.437387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.481862][ T4219] Bluetooth: hci3: command 0x0419 tx timeout [ 78.513457][ T4219] Bluetooth: hci0: command 0x0419 tx timeout [ 78.545991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.562677][ T4220] Bluetooth: hci2: command 0x0419 tx timeout [ 78.638259][ T4219] Bluetooth: hci1: command 0x0419 tx timeout [ 78.660152][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.715236][ T4219] Bluetooth: hci4: command 0x0419 tx timeout [ 78.762521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.255918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.281678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.339033][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.364066][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.376618][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.386541][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.418250][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.432720][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.449124][ T4170] device veth0_macvtap entered promiscuous mode [ 79.456985][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.459012][ T4221] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.469322][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.497443][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.514440][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.540909][ T4170] device veth1_macvtap entered promiscuous mode [ 79.642679][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.658346][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.669004][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.680141][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.692513][ T4220] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.693317][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.712803][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.727984][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.741921][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.752463][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.766885][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.780062][ T4221] usb 2-1: Using ep0 maxpacket: 32 [ 79.788012][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.805624][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.820338][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.830254][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.833714][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.852263][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.863054][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.875801][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.887099][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.900654][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.914227][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.927574][ T4221] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 79.936921][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.941524][ T4220] usb 3-1: Using ep0 maxpacket: 16 [ 79.947466][ T4221] usb 2-1: config 0 has no interface number 0 [ 79.960883][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.974190][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.986534][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.001665][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.014641][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.023809][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.033573][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.044779][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.052775][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.062810][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.083729][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.102401][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.112353][ T4221] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 80.127150][ T4221] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 80.135794][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.151586][ T4221] usb 2-1: Product: syz [ 80.156065][ T4221] usb 2-1: Manufacturer: syz [ 80.184458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.185678][ T4274] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 80.203499][ T4221] usb 2-1: config 0 descriptor?? [ 80.218848][ T4275] netlink: 'syz.3.4': attribute type 13 has an invalid length. [ 80.239074][ T4220] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 80.249207][ T4220] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 80.273868][ T4220] usb 3-1: Product: syz [ 80.278266][ T4220] usb 3-1: Manufacturer: syz [ 80.283747][ T4220] usb 3-1: SerialNumber: syz [ 80.292545][ T4220] usb 3-1: config 0 descriptor?? [ 80.502707][ T4221] usb 2-1: USB disconnect, device number 2 [ 80.590828][ T4260] usb 3-1: USB disconnect, device number 2 [ 80.890960][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.899375][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.254707][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.287817][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.391090][ T1111] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 83.838543][ T4275] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.851616][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.857338][ T4275] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.876250][ T4275] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.889423][ T4275] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.908949][ T1111] usb 3-1: not running at top speed; connect to a high speed hub [ 83.991528][ T1111] usb 3-1: config 7 has an invalid interface number: 68 but max is 0 [ 84.007385][ T1111] usb 3-1: config 7 has no interface number 0 [ 84.017289][ T1111] usb 3-1: config 7 interface 68 has no altsetting 0 [ 84.095196][ T4275] syz.3.4 (4275) used greatest stack depth: 20384 bytes left [ 84.181418][ T1111] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=9d.96 [ 84.198856][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.208512][ T1111] usb 3-1: Product: syz [ 84.219660][ T1111] usb 3-1: Manufacturer: syz [ 84.225680][ T1111] usb 3-1: SerialNumber: syz [ 84.359203][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.383300][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.449273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.483489][ T4312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 84.510137][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.522684][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.550235][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.581319][ T1111] usb 3-1: USB disconnect, device number 3 [ 84.603454][ T4218] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 84.997010][ T4321] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.009949][ T4321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.445028][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.460981][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.979652][ T4218] usb 2-1: No LPM exit latency info found, disabling LPM. [ 86.087671][ T4218] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.110168][ T4218] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 86.124826][ T4329] netlink: 84 bytes leftover after parsing attributes in process `syz.2.17'. [ 86.211075][ T4218] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.299261][ T4218] usb 2-1: config 1 interface 0 has no altsetting 0 [ 86.662147][ T4342] netlink: 'syz.2.22': attribute type 4 has an invalid length. [ 86.671858][ T4218] usb 2-1: string descriptor 0 read error: -22 [ 86.678957][ T4218] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 86.695900][ T4342] netlink: 17 bytes leftover after parsing attributes in process `syz.2.22'. [ 86.728935][ T4218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.822982][ T13] cfg80211: failed to load regulatory.db [ 87.581865][ T4218] usb 2-1: can't set config #1, error -71 [ 87.661311][ T4218] usb 2-1: USB disconnect, device number 3 [ 87.871514][ T4296] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.572444][ T4296] usb 3-1: unable to read config index 0 descriptor/all [ 90.591597][ T4296] usb 3-1: can't read configurations, error -71 [ 90.622319][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.651704][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 91.117052][ T4339] delete_channel: no stack [ 91.391083][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 91.511195][ T13] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 91.530295][ T13] usb 1-1: config 0 has no interface number 0 [ 91.731326][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=fa.5a [ 91.756778][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.794004][ T13] usb 1-1: Product: syz [ 91.809786][ T13] usb 1-1: Manufacturer: syz [ 91.820042][ T13] usb 1-1: SerialNumber: syz [ 91.843073][ T13] usb 1-1: config 0 descriptor?? [ 91.899708][ T13] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 92.104261][ T4375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 93.358138][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 94.042204][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 95.878178][ T13] usb 1-1: USB disconnect, device number 2 [ 95.906831][ T4451] capability: warning: `syz.3.54' uses deprecated v2 capabilities in a way that may be insecure [ 99.722286][ T4293] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.785735][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.848912][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.940078][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.001162][ T4293] usb 2-1: Using ep0 maxpacket: 8 [ 100.331556][ T4293] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 100.369873][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.730528][ T4293] usb 2-1: Product: syz [ 100.758792][ T4293] usb 2-1: Manufacturer: syz [ 101.191057][ T4293] usb 2-1: SerialNumber: syz [ 101.218054][ T4293] usb 2-1: config 0 descriptor?? [ 101.371237][ T4293] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 101.444658][ T4293] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 101.481047][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.504679][ T4293] usb 2-1: USB disconnect, device number 4 [ 101.811107][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 102.071091][ T1108] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.153810][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 102.831326][ T1108] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.842837][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.850526][ T1108] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 102.860170][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.880833][ T1108] usb 1-1: config 0 descriptor?? [ 103.309703][ T4532] binder: 4528:4532 ioctl 400c620e 200000000380 returned -22 [ 103.378713][ T1108] viewsonic 0003:2133:0018.0001: unknown main item tag 0x0 [ 103.421711][ T1108] viewsonic 0003:2133:0018.0001: unknown main item tag 0x0 [ 103.467001][ T1108] viewsonic 0003:2133:0018.0001: hidraw0: USB HID v0.03 Device [HID 2133:0018] on usb-dummy_hcd.0-1/input0 [ 104.038555][ T4553] netlink: 'syz.3.88': attribute type 21 has an invalid length. [ 104.050073][ T4553] netlink: 'syz.3.88': attribute type 6 has an invalid length. [ 104.059108][ T4553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.88'. [ 104.386412][ T4555] process 'syz.3.88' launched '/dev/fd/6' with NULL argv: empty string added [ 104.662138][ T13] usb 1-1: USB disconnect, device number 3 [ 107.852791][ T4599] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 108.832404][ T4608] trusted_key: encrypted_key: insufficient parameters specified [ 111.701614][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.233199][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 112.381230][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.751662][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 112.784315][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.827037][ T23] usb 1-1: Product: syz [ 112.855563][ T23] usb 1-1: Manufacturer: syz [ 112.865628][ T23] usb 1-1: SerialNumber: syz [ 112.873787][ T4669] syz.3.121 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.898041][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 114.035131][ T4644] input: syz0 as /devices/virtual/input/input5 [ 115.381228][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 115.405778][ T23] r8152-cfgselector 1-1: bad CDC descriptors [ 115.648669][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 115.659506][ T23] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 116.457186][ T4710] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 118.458563][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 118.528672][ T4729] device vcan0 entered promiscuous mode [ 118.746875][ T4731] device syzkaller1 entered promiscuous mode [ 120.872216][ T4219] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 120.883164][ T4219] Bluetooth: hci2: Injecting HCI hardware error event [ 120.901556][ T4181] Bluetooth: hci2: hardware error 0x00 [ 121.095368][ T4767] netlink: 48 bytes leftover after parsing attributes in process `syz.4.150'. [ 122.601428][ T4775] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 123.051524][ T4788] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 123.561428][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.072532][ T1108] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 125.359876][ T4810] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 126.302003][ T1108] usb 2-1: unable to read config index 5 descriptor/all [ 126.375054][ T1108] usb 2-1: can't read configurations, error -71 [ 126.977056][ T26] audit: type=1326 audit(1747495487.157:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27256d6969 code=0x7ffc0000 [ 126.994523][ T4826] block nbd0: NBD_DISCONNECT [ 127.094878][ T26] audit: type=1326 audit(1747495487.157:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27256d6969 code=0x7ffc0000 [ 127.151154][ T4223] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.230632][ T26] audit: type=1326 audit(1747495487.197:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f27256d6969 code=0x7ffc0000 [ 127.272177][ T26] audit: type=1326 audit(1747495487.197:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27256d6969 code=0x7ffc0000 [ 127.309535][ T26] audit: type=1326 audit(1747495487.197:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4825 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27256d6969 code=0x7ffc0000 [ 127.454341][ T4836] 9pnet_virtio: no channels available for device syz [ 127.594114][ T4223] usb 3-1: Using ep0 maxpacket: 16 [ 128.311215][ T4223] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 128.338791][ T4223] usb 3-1: config 0 has no interface number 0 [ 128.356257][ T4223] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.501318][ T4223] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 131.467576][ T4223] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 131.477761][ T4223] usb 3-1: Product: syz [ 131.488637][ T4223] usb 3-1: SerialNumber: syz [ 131.616472][ T4223] usb 3-1: config 0 descriptor?? [ 132.245338][ T4223] usb 3-1: can't set config #0, error -71 [ 132.385659][ T4223] usb 3-1: USB disconnect, device number 6 [ 132.542945][ T4875] 9p: Unknown Cache mode readahead [ 132.894635][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.904873][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.083024][ T4904] tmpfs: Unknown parameter 'usrquota' [ 135.520156][ T4911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.198'. [ 135.549728][ T4913] capability: warning: `syz.4.200' uses 32-bit capabilities (legacy support in use) [ 135.581319][ T4911] unsupported nlmsg_type 40 [ 135.627300][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 135.912477][ T4925] 9pnet: Unknown protocol version 9p20\++} [ 137.688142][ T4931] device ip6tnl1 entered promiscuous mode [ 137.697780][ T4931] team0: Device ip6tnl1 is of different type [ 140.486539][ T4937] UBIFS error (pid: 4937): cannot open "./file0", error -22 [ 140.498865][ T4937] ======================================================= [ 140.498865][ T4937] WARNING: The mand mount option has been deprecated and [ 140.498865][ T4937] and is ignored by this kernel. Remove the mand [ 140.498865][ T4937] option from the mount to silence this warning. [ 140.498865][ T4937] ======================================================= [ 140.788136][ T4958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 145.491230][ T4218] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.911116][ T4218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.930434][ T4218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.067196][ T4218] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.101623][ T4218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.112491][ T4218] usb 5-1: SerialNumber: syz [ 146.271035][ T4223] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 146.388961][ T4998] cgroup2: Unknown parameter 'pids_localevents' [ 147.058681][ T4218] usb 5-1: 0:2 : does not exist [ 147.070868][ T4218] usb 5-1: unit 5: unexpected type 0x0c [ 147.123287][ T4218] usb 5-1: USB disconnect, device number 2 [ 147.541364][ T4223] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.562355][ T4543] udevd[4543]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.688734][ T4223] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 147.918164][ T4223] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 148.347447][ T4223] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 148.453490][ T4223] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.640362][ T4223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.569203][ T4223] usb 1-1: SerialNumber: syz [ 149.591250][ T4223] usb 1-1: can't set config #1, error -71 [ 149.662140][ T4223] usb 1-1: USB disconnect, device number 5 [ 154.436962][ T5051] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 154.618328][ T5069] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.251'. [ 154.778992][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 154.827859][ T5078] 9pnet: Unknown protocol version 9p20\++} [ 155.979517][ T5085] device ip6tnl1 entered promiscuous mode [ 155.996723][ T5085] team0: Device ip6tnl1 is of different type [ 156.761181][ T4229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.231386][ T4229] usb 3-1: device descriptor read/64, error -71 [ 158.041761][ T4229] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.278843][ T5119] vivid-000: disconnect [ 160.089273][ T5115] vivid-000: reconnect [ 160.651223][ T4218] Bluetooth: hci1: command 0x0409 tx timeout [ 162.153578][ T5141] Zero length message leads to an empty skb [ 162.257799][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 162.731198][ T4219] Bluetooth: hci1: command 0x041b tx timeout [ 164.640030][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.679259][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.731855][ T5102] device bridge_slave_0 entered promiscuous mode [ 164.783015][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.821201][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.858086][ T5102] device bridge_slave_1 entered promiscuous mode [ 164.881635][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 165.031851][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.104936][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.176379][ T5177] syz.0.284 uses obsolete (PF_INET,SOCK_PACKET) [ 165.206244][ T5174] netlink: set zone limit has 8 unknown bytes [ 166.971353][ T4219] Bluetooth: hci1: command 0x0419 tx timeout [ 167.826792][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.836732][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.342822][ T5174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.401541][ T5174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.906007][ T5174] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.916383][ T5174] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.928379][ T5174] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.939503][ T5174] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.169245][ T5102] team0: Port device team_slave_0 added [ 169.302329][ T5203] netlink: 'syz.1.292': attribute type 4 has an invalid length. [ 169.368779][ T5197] netlink: 'syz.4.290': attribute type 7 has an invalid length. [ 169.381205][ T5197] netlink: 'syz.4.290': attribute type 8 has an invalid length. [ 169.511495][ T5102] team0: Port device team_slave_1 added [ 170.316033][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.351234][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.440568][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.511725][ T5215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.576911][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.620269][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.871229][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.362242][ T5102] device hsr_slave_0 entered promiscuous mode [ 171.436203][ T5102] device hsr_slave_1 entered promiscuous mode [ 171.559076][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.639910][ T5102] Cannot create hsr debugfs directory [ 172.911754][ T5239] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.964454][ T5242] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 172.984358][ T5243] netlink: 88 bytes leftover after parsing attributes in process `syz.2.303'. [ 173.014568][ T5242] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 173.972540][ T5102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.165977][ T5102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.237882][ T5102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.802565][ T5102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.823935][ T5262] netlink: 892 bytes leftover after parsing attributes in process `syz.4.309'. [ 177.094400][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.152859][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.259808][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.321302][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.383027][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.460839][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.527061][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.563945][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.572845][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.669669][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.693024][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.724959][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.769590][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.777213][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.893307][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.972478][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.991620][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 178.028388][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.062092][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.080935][ T1111] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.085294][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.092988][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.113402][ T1111] usb 5-1: config 0 descriptor?? [ 178.184406][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.194111][ T1111] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 178.195038][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.092667][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.102644][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.112641][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.135386][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.152128][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.187960][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.232734][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.307559][ T1111] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 179.745051][ T5304] mmap: syz.0.320 (5304) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 180.941428][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.091072][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.099857][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.110366][ T1108] usb 5-1: USB disconnect, device number 3 [ 181.142897][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.163209][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.209648][ T1111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.289292][ T1111] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.311726][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.369893][ T1111] usb 3-1: config 0 descriptor?? [ 181.411069][ T1111] usb 3-1: can't set config #0, error -71 [ 181.436034][ T1111] usb 3-1: USB disconnect, device number 9 [ 184.810988][ T4219] Bluetooth: hci1: command 0x0405 tx timeout [ 184.872670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.894591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.022291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.047773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.077016][ T5102] device veth0_vlan entered promiscuous mode [ 185.212047][ T4295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.228409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.242924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.266956][ T5102] device veth1_vlan entered promiscuous mode [ 185.729908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.749013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.764694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.780494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.816780][ T5102] device veth0_macvtap entered promiscuous mode [ 185.853060][ T5102] device veth1_macvtap entered promiscuous mode [ 185.883472][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.899122][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.921490][ T4295] usb 5-1: Using ep0 maxpacket: 32 [ 186.011453][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.041144][ T4295] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 186.056599][ T4295] usb 5-1: config 0 has no interface number 0 [ 186.063823][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.064435][ T4295] usb 5-1: config 0 interface 89 has no altsetting 0 [ 186.100407][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.112382][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.124064][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.156715][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.190849][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.199575][ T4218] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.214599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.250317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.251250][ T4295] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 186.265967][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.314680][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.325929][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.338917][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.359807][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.386441][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.389471][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.426552][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.441172][ T4218] usb 2-1: Using ep0 maxpacket: 32 [ 186.452602][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.466989][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.480609][ T5102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.492534][ T5102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.504604][ T5102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.515657][ T5102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.581247][ T4218] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 186.614985][ T4295] usb 5-1: Product: syz [ 186.636290][ T4295] usb 5-1: Manufacturer: syz [ 186.659401][ T4295] usb 5-1: SerialNumber: syz [ 186.680174][ T4295] usb 5-1: config 0 descriptor?? [ 186.733074][ T4295] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 186.754088][ T4295] em28xx 5-1:0.89: Video interface 89 found: bulk [ 186.962004][ T4218] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 187.011564][ T4218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.022835][ T4218] usb 2-1: Product: syz [ 187.028199][ T4218] usb 2-1: Manufacturer: syz [ 187.037113][ T4218] usb 2-1: SerialNumber: syz [ 187.086891][ T4218] usb 2-1: config 0 descriptor?? [ 187.137426][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.176975][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.221847][ T4295] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 187.243635][ T4218] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 187.274205][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.342546][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.351112][ T4240] usb 2-1: Failed to submit usb control message: -71 [ 187.360067][ T4218] usb 2-1: USB disconnect, device number 7 [ 187.366027][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.367231][ T4240] usb 2-1: unable to send the bmi data to the device: -71 [ 187.389297][ T4240] usb 2-1: unable to get target info from device [ 187.408793][ T4295] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 187.418638][ T4240] usb 2-1: could not get target info (-71) [ 187.419857][ T4295] em28xx 5-1:0.89: board has no eeprom [ 187.431938][ T4240] usb 2-1: could not probe fw (-71) [ 187.483566][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.541681][ T4295] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 187.591241][ T4295] em28xx 5-1:0.89: analog set to bulk mode. [ 187.678969][ T4295] usb 5-1: USB disconnect, device number 4 [ 187.706827][ T4295] em28xx 5-1:0.89: Disconnecting em28xx [ 187.753964][ T4229] em28xx 5-1:0.89: Registering V4L2 extension [ 187.991445][ T4229] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 187.999990][ T4229] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 188.653265][ T4229] em28xx 5-1:0.89: No AC97 audio processor [ 188.678237][ T4229] usb 5-1: Decoder not found [ 188.692158][ T4229] em28xx 5-1:0.89: failed to create media graph [ 188.716776][ T4229] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 188.835311][ T4229] em28xx 5-1:0.89: Registering snapshot button... [ 188.944219][ T4229] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input7 [ 189.067362][ T4229] em28xx 5-1:0.89: Remote control support is not available for this card. [ 189.116163][ T4295] em28xx 5-1:0.89: Closing input extension [ 189.128489][ T4295] em28xx 5-1:0.89: Deregistering snapshot button [ 189.482632][ T4295] em28xx 5-1:0.89: Freeing device [ 189.859091][ T5410] bridge0: port 3(batadv1) entered blocking state [ 189.866824][ T5410] bridge0: port 3(batadv1) entered disabled state [ 189.884080][ T5410] device batadv1 entered promiscuous mode [ 190.164223][ T13] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 190.271009][ T13] Bluetooth: hci3: Injecting HCI hardware error event [ 190.302682][ T4181] Bluetooth: hci3: hardware error 0x00 [ 190.528470][ T154] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 190.541573][ T154] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 190.607061][ T5419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.391227][ T4219] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 191.892627][ T4219] usb 3-1: Using ep0 maxpacket: 8 [ 192.701109][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 193.101244][ T4219] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 193.132011][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.142817][ T4219] usb 3-1: Product: syz [ 193.161026][ T4219] usb 3-1: Manufacturer: syz [ 193.166994][ T4219] usb 3-1: SerialNumber: syz [ 193.204711][ T5438] tipc: Started in network mode [ 193.217874][ T4219] usb 3-1: config 0 descriptor?? [ 193.273414][ T5438] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 193.331464][ T4219] usb 3-1: can't set config #0, error -71 [ 193.334490][ T5438] tipc: Enabling of bearer rejected, failed to enable media [ 193.453381][ T4219] usb 3-1: USB disconnect, device number 10 [ 194.319796][ T26] audit: type=1326 audit(1747495554.497:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b90b72969 code=0x0 [ 194.348818][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.356968][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.874245][ T5467] kvm [5459]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 [ 196.445338][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 197.782599][ T5486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.730910][ C0] sched: RT throttling activated [ 201.630556][ T5518] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 201.867809][ T5518] team0: Port device wlan1 added [ 203.021132][ T5541] program syz.5.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.246206][ T5548] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 204.023786][ T13] Bluetooth: hci1: command 0x0405 tx timeout [ 204.363058][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 204.797388][ T5557] affs: No valid root block on device nullb0 [ 204.906912][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 205.141393][ T13] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.155588][ T13] usb 6-1: config 0 has no interface number 0 [ 205.341424][ T13] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 206.106443][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.115400][ T13] usb 6-1: Product: syz [ 206.120386][ T13] usb 6-1: Manufacturer: syz [ 206.125930][ T13] usb 6-1: SerialNumber: syz [ 206.245614][ T13] usb 6-1: config 0 descriptor?? [ 206.262935][ T26] audit: type=1326 audit(1747495566.447:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.0.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43223cb969 code=0x0 [ 206.864370][ T13] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 207.386575][ T13] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 207.541234][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 207.563224][ T13] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 207.587638][ T13] usb 6-1: USB disconnect, device number 2 [ 207.612326][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 208.398055][ T5591] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 208.731419][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 208.732286][ T13] quatech2 6-1:0.51: device disconnected [ 212.962173][ T4289] wlan1: Trigger new scan to find an IBSS to join [ 213.491150][ T5636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 216.208320][ T5661] netlink: 84 bytes leftover after parsing attributes in process `syz.5.431'. [ 217.359596][ T4289] wlan1: Trigger new scan to find an IBSS to join [ 218.668176][ T154] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 218.916283][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.093318][ T5714] netlink: 180 bytes leftover after parsing attributes in process `syz.1.451'. [ 221.627040][ T4237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.544651][ T4237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.180837][ T4237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.945540][ T4237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.464101][ T5743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 227.645472][ T5737] chnl_net:caif_netlink_parms(): no params data found [ 228.302531][ T5784] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 228.321220][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 228.390594][ T5784] team0: Port device syz_tun added [ 228.411045][ T4259] Bluetooth: hci0: command 0x0409 tx timeout [ 228.451919][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.461848][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.501202][ T5737] device bridge_slave_0 entered promiscuous mode [ 228.540419][ T5784] syz.1.468 (5784) used greatest stack depth: 19840 bytes left [ 228.551956][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.575694][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.611323][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 228.622636][ T5737] device bridge_slave_1 entered promiscuous mode [ 228.742722][ T21] usb 5-1: config 0 has no interfaces? [ 228.795460][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.825832][ T5794] input: syz1 as /devices/virtual/input/input10 [ 228.873611][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.911368][ T21] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 228.933335][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.964205][ T21] usb 5-1: Product: syz [ 228.973583][ T21] usb 5-1: Manufacturer: syz [ 229.010289][ T21] usb 5-1: SerialNumber: syz [ 229.052451][ T21] usb 5-1: config 0 descriptor?? [ 229.083510][ T5737] team0: Port device team_slave_0 added [ 229.158498][ T5737] team0: Port device team_slave_1 added [ 229.290115][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.301119][ T4218] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 229.319903][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.353527][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.402635][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 229.432836][ T5772] device dummy0 entered promiscuous mode [ 229.443131][ T5772] device macvtap1 entered promiscuous mode [ 229.454158][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.477471][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.511631][ T13] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.530457][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.555486][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 229.568022][ T5813] device dummy0 left promiscuous mode [ 229.585189][ T5818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 229.604253][ T5818] device dummy0 entered promiscuous mode [ 229.610447][ T5818] device macvtap1 left promiscuous mode [ 229.683469][ T4259] usb 5-1: USB disconnect, device number 5 [ 229.701356][ T4218] usb 2-1: config 9 has an invalid interface number: 32 but max is 0 [ 229.716250][ T4218] usb 2-1: config 9 has no interface number 0 [ 229.726311][ T4218] usb 2-1: config 9 interface 32 has no altsetting 0 [ 229.747391][ T5737] device hsr_slave_0 entered promiscuous mode [ 229.759280][ T5737] device hsr_slave_1 entered promiscuous mode [ 229.775868][ T5737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.786815][ T5737] Cannot create hsr debugfs directory [ 229.891335][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.903391][ T4218] usb 2-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 229.921760][ T4218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.940977][ T13] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.960728][ T4218] usb 2-1: Product: syz [ 229.966941][ T13] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 229.977950][ T4218] usb 2-1: Manufacturer: syz [ 229.990952][ T4218] usb 2-1: SerialNumber: syz [ 230.050181][ T4237] team0: Port device wlan1 removed [ 230.151430][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 230.209809][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.306899][ T13] usb 3-1: Product: syz [ 230.466063][ T4218] usb 2-1: USB disconnect, device number 8 [ 230.552261][ T13] usb 3-1: Manufacturer: syz [ 230.703582][ T13] usb 3-1: SerialNumber: syz [ 230.911548][ T5807] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 230.974536][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 231.119726][ T4237] device hsr_slave_0 left promiscuous mode [ 231.174758][ T13] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 231.199029][ T4237] device hsr_slave_1 left promiscuous mode [ 231.250365][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.265424][ T5851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.482'. [ 231.273304][ T5850] netlink: 'syz.5.483': attribute type 3 has an invalid length. [ 231.293852][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.350736][ T4237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.370128][ T4237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.482421][ T4237] device batadv1 left promiscuous mode [ 231.500441][ T4237] bridge0: port 3(batadv1) entered disabled state [ 231.829173][ T4237] device bridge_slave_1 left promiscuous mode [ 231.844086][ T4259] usb 3-1: USB disconnect, device number 11 [ 231.911894][ T4259] usblp0: removed [ 231.994745][ T4289] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 232.005374][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.131880][ T4237] device bridge_slave_0 left promiscuous mode [ 232.158477][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.285391][ T4237] device veth1_macvtap left promiscuous mode [ 232.306347][ T4237] device veth0_macvtap left promiscuous mode [ 232.335232][ T4237] device veth1_vlan left promiscuous mode [ 232.355785][ T4237] device veth0_vlan left promiscuous mode [ 233.218016][ T4289] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 233.261394][ T4259] Bluetooth: hci0: command 0x040f tx timeout [ 234.340252][ T4237] team0 (unregistering): Port device team_slave_1 removed [ 234.628235][ T4237] team0 (unregistering): Port device team_slave_0 removed [ 234.652933][ T4237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.823678][ T4237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.695679][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 236.967379][ T5905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 237.026126][ T4237] bond0 (unregistering): Released all slaves [ 238.557747][ T4225] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 240.001020][ T4225] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.018018][ T4225] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.371848][ T4225] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.394938][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.591394][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.663594][ T4225] usb 2-1: Product: syz [ 240.668932][ T4225] usb 2-1: Manufacturer: syz [ 240.715326][ T4225] usb 2-1: SerialNumber: syz [ 240.789518][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.859789][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.953265][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.142087][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 241.248161][ T4225] usb 2-1: 0:2 : does not exist [ 241.356551][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.464197][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.482620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.510385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.656164][ T13] usb 2-1: USB disconnect, device number 9 [ 241.743696][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.757910][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.203150][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.212263][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.629557][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.663097][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.718603][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.729824][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.744374][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.803725][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.974621][ T5737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.478630][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.643578][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 243.705420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.820533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.872449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.925677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.949188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.968166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.003247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.053556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.109326][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.216563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.272168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.291283][ T13] usb 6-1: config 9 has an invalid interface number: 32 but max is 0 [ 244.351784][ T13] usb 6-1: config 9 has no interface number 0 [ 244.402943][ T13] usb 6-1: config 9 interface 32 has no altsetting 0 [ 244.424904][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 244.681056][ T13] usb 6-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 244.697396][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.751179][ T13] usb 6-1: Product: syz [ 244.766096][ T13] usb 6-1: Manufacturer: syz [ 244.781028][ T13] usb 6-1: SerialNumber: syz [ 244.843335][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.861415][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.897401][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.989143][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.009363][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.138415][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.211174][ T13] usb 6-1: USB disconnect, device number 3 [ 245.243071][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.301908][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.345079][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.383742][ T5737] device veth0_vlan entered promiscuous mode [ 245.481277][ T4223] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 245.841264][ T4223] usb 3-1: Using ep0 maxpacket: 32 [ 245.971157][ T4223] usb 3-1: config index 0 descriptor too short (expected 530, got 18) [ 246.000921][ T4223] usb 3-1: config 64 has too many interfaces: 187, using maximum allowed: 32 [ 246.047878][ T4223] usb 3-1: config 64 has an invalid descriptor of length 189, skipping remainder of the config [ 246.089431][ T5737] device veth1_vlan entered promiscuous mode [ 246.150909][ T4223] usb 3-1: config 64 has 0 interfaces, different from the descriptor's value: 187 [ 246.236136][ T4223] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 246.282735][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.320660][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.338433][ T4223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.386957][ T5737] device veth0_macvtap entered promiscuous mode [ 246.458236][ T5737] device veth1_macvtap entered promiscuous mode [ 246.530784][ T26] audit: type=1804 audit(1747495606.707:9): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.528" name="/newroot/35/file1" dev="fuse" ino=1 res=1 errno=0 [ 246.560514][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.626873][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.641184][ T26] audit: type=1800 audit(1747495606.737:10): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.528" name="/" dev="fuse" ino=1 res=0 errno=0 [ 246.669325][ T6051] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 246.677782][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.701024][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.718032][ T26] audit: type=1804 audit(1747495606.737:11): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.528" name="/newroot/35/file1" dev="fuse" ino=1 res=1 errno=0 [ 246.764404][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.791224][ T26] audit: type=1800 audit(1747495606.737:12): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.528" name="/" dev="fuse" ino=1 res=0 errno=0 [ 246.829932][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.836617][ T6044] kvm: pic: non byte read [ 246.860558][ T6044] kvm: pic: level sensitive irq not supported [ 246.863721][ T6044] kvm: pic: non byte read [ 246.891771][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.893326][ T6044] kvm: pic: level sensitive irq not supported [ 246.918493][ T6044] kvm: pic: non byte read [ 246.939885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.968850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.989023][ T6044] kvm: pic: level sensitive irq not supported [ 246.989416][ T6044] kvm: pic: non byte read [ 247.020126][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.108547][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.126913][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.170790][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.220690][ T5737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.285075][ T5737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.487240][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.503026][ T5737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.512955][ T5737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.525106][ T5737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.916153][ T5737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.591056][ T4223] usb 3-1: string descriptor 0 read error: -71 [ 248.687204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.722929][ T4223] usb 3-1: USB disconnect, device number 12 [ 248.731962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.439801][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.470744][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.599511][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 251.647396][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.691319][ T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 251.909133][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.171615][ T13] usb 3-1: config 9 has an invalid interface number: 32 but max is 0 [ 252.263253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 252.280938][ T13] usb 3-1: config 9 has no interface number 0 [ 252.348610][ T13] usb 3-1: config 9 interface 32 has no altsetting 0 [ 252.571524][ T13] usb 3-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 252.601043][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.624726][ T13] usb 3-1: Product: syz [ 252.629154][ T13] usb 3-1: Manufacturer: syz [ 252.634858][ T13] usb 3-1: SerialNumber: syz [ 253.075760][ T13] usb 3-1: USB disconnect, device number 13 [ 253.274052][ T6142] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 255.764019][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773568][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.480028][ T6216] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.482690][ T6254] overlayfs: failed to decode file handle (len=12, type=196856, flags=0, err=-22) [ 275.311106][ T13] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 276.540967][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 276.649214][ T6352] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 276.661489][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.705720][ T6351] netlink: 'syz.4.602': attribute type 13 has an invalid length. [ 278.027602][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.465044][ T13] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 278.476805][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.488016][ T13] usb 6-1: config 0 descriptor?? [ 278.511046][ T13] usb 6-1: can't set config #0, error -71 [ 278.520798][ T13] usb 6-1: USB disconnect, device number 4 [ 278.789203][ T4218] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 279.730959][ T4218] usb 2-1: device not accepting address 10, error -71 [ 280.731461][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.740144][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.572830][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.902711][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.151090][ T4260] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 285.411119][ T4260] usb 6-1: Using ep0 maxpacket: 16 [ 285.828874][ T4260] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 285.851118][ T4260] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 285.879984][ T4260] usb 6-1: Product: syz [ 285.886742][ T4260] usb 6-1: Manufacturer: syz [ 285.907541][ T4260] usb 6-1: SerialNumber: syz [ 285.943099][ T4260] usb 6-1: config 0 descriptor?? [ 286.382280][ T6390] usb 6-1: USB disconnect, device number 5 [ 287.008386][ T6351] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.023758][ T6351] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.038138][ T6351] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.049668][ T6351] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.072369][ T6486] overlayfs: missing 'workdir' [ 290.940576][ T6501] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 292.732428][ T6511] netlink: 'syz.2.644': attribute type 13 has an invalid length. [ 292.792939][ T6509] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.460172][ T6551] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 295.660928][ T4272] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 296.661748][ T4272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 296.754850][ T4272] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 296.934616][ T4272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.176533][ T4272] usb 2-1: config 0 descriptor?? [ 297.231289][ T6549] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 297.361423][ T4272] rc_core: IR keymap rc-xbox-dvd not found [ 297.374866][ T4272] Registered IR keymap rc-empty [ 297.406800][ T4272] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 297.586329][ T4272] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 297.651951][ T4219] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 297.905865][ T4272] usb 2-1: USB disconnect, device number 12 [ 297.921009][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 297.931377][ T4219] usb 1-1: Using ep0 maxpacket: 8 [ 298.051279][ T4219] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.069385][ T4219] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.251217][ T4219] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 298.267210][ T4219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.290108][ T4219] usb 1-1: Product: syz [ 298.294948][ T4219] usb 1-1: Manufacturer: syz [ 298.299830][ T4219] usb 1-1: SerialNumber: syz [ 298.315274][ T4219] usb 1-1: config 0 descriptor?? [ 298.348711][ T6593] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 298.359217][ T6593] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 298.562813][ T6599] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 298.582356][ T4219] usb 1-1: USB disconnect, device number 6 [ 302.673861][ T6639] loop9: detected capacity change from 0 to 1 [ 302.792390][ T6639] Dev loop9: unable to read RDB block 1 [ 302.805592][ T6639] loop9: unable to read partition table [ 302.853390][ T6639] loop9: partition table beyond EOD, truncated [ 302.868132][ T6639] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 305.661111][ T4219] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 306.141259][ T4219] usb 6-1: unable to get BOS descriptor or descriptor too short [ 306.181137][ T4219] usb 6-1: not running at top speed; connect to a high speed hub [ 306.261105][ T4219] usb 6-1: config 7 has an invalid interface number: 68 but max is 0 [ 306.294364][ T4219] usb 6-1: config 7 has no interface number 0 [ 306.361004][ T4219] usb 6-1: config 7 interface 68 has no altsetting 0 [ 306.561241][ T4219] usb 6-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=9d.96 [ 306.588446][ T4219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.649774][ T4219] usb 6-1: Product: syz [ 307.654401][ T4219] usb 6-1: Manufacturer: syz [ 307.659647][ T4219] usb 6-1: SerialNumber: syz [ 307.945999][ T4219] usb 6-1: USB disconnect, device number 6 [ 309.155835][ T6703] netlink: 'syz.2.697': attribute type 21 has an invalid length. [ 309.167479][ T6703] netlink: 'syz.2.697': attribute type 6 has an invalid length. [ 309.176572][ T6703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.697'. Stopping sshd: stopped /usr/sbin/sshd (pid 3941) OK Stopping crond: [ 317.204349][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210889][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 stopped /usr/sbin/crond (pid 3916) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3838) [ 324.481225][ T6390] Bluetooth: hci1: command 0x0406 tx timeout Stopping network: [ 326.252696][ T4260] Bluetooth: hci5: command 0x0409 tx timeout [ 328.679462][ T4225] Bluetooth: hci5: command 0x041b tx timeout [ 329.010418][ T4240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.293253][ T6812] chnl_net:caif_netlink_parms(): no params data found [ 330.720978][ T4225] Bluetooth: hci5: command 0x040f tx timeout [ 330.936730][ T4240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.213540][ T6886] ptrace attach of "./syz-executor exec"[6887] was attempted by "./syz-executor exec"[6886] [ 332.083307][ T4240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.176835][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.199871][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.213856][ T6812] device bridge_slave_0 entered promiscuous mode [ 332.222681][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.229861][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.237963][ T6812] device bridge_slave_1 entered promiscuous mode [ 332.275869][ T4240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.325746][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.347740][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link OK [ 332.440706][ T6812] team0: Port device team_slave_0 added [ 332.509759][ T6812] team0: Port device team_slave_1 added Stopping iptables: OK [ 332.639547][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.652810][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.722435][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.802112][ T6390] Bluetooth: hci5: command 0x0419 tx timeout Stopping system message bus: [ 334.030253][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.747'. [ 334.391561][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.398708][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.550988][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active done serialport: VM disconnected.