last executing test programs: 1m0.91258805s ago: executing program 2 (id=3280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x4}]}]}, 0x28}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="140500100000000009000000010000005889e346afbcedf10000000025d1d8b128a927a809feabd136f2e15ef923286d4b046627a06b262a2abc791d4aaa5f5473aa4403a31c0b6e2a405c25ce8260172e1f25e5bd70808f6cc3842fa1e1b293ce09"], 0x18}}], 0x1, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB=' \"'], 0xb0) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}]}}}]}, 0x38}}, 0x0) 58.41772513s ago: executing program 2 (id=3296): io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1515d9b6d056ea11, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000001080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) pread64(r2, &(0x7f0000000040)=""/238, 0xee, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00 \x00\x00\x00\x00\x00\x00\b\x00)\x00\x00\x00\x00\x00\b\x00(\x00\x00\x00\x00\x00'], 0x58}}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x8000000003c) connect$inet6(r4, 0x0, 0x0) ioperm(0x0, 0x2, 0x2) ioprio_set$pid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x5d5d, 0x0) 54.829475496s ago: executing program 2 (id=3297): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) migrate_pages(r0, 0xd, &(0x7f0000000040)=0x80000000, &(0x7f0000000300)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000010080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12) syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000077, 0x511383) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="82", 0x1}], 0x1}}], 0x1, 0x4000c000) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1a00000007"], 0xd) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 53.819175745s ago: executing program 2 (id=3300): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000240)=""/64, 0x40}, {0x0}], 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r3 = semget(0x1, 0x5, 0x100) semop(r3, 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = socket(0x1e, 0x0, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f00000012c0)=ANY=[], 0x2000011a) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 50.049427586s ago: executing program 2 (id=3304): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getdents64(0xffffffffffffffff, 0x0, 0x2e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r4 = fsopen(0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup2(r5, r4) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4e868757) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 48.743536036s ago: executing program 2 (id=3306): io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1515d9b6d056ea11, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000001080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) pread64(r2, &(0x7f0000000040)=""/238, 0xee, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00 \x00\x00\x00\x00\x00\x00\b\x00)\x00\x00\x00\x00\x00\b\x00(\x00\x00\x00\x00\x00'], 0x58}}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x8000000003c) connect$inet6(r4, 0x0, 0x0) ioperm(0x0, 0x2, 0x2) ioprio_set$pid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x5d5d, 0x0) 26.51561087s ago: executing program 1 (id=3335): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80000001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) userfaultfd(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x138, 0x4c, 0x1a, 0x0, 0x73, 0x218, 0x258, 0x258, 0x218, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000140)={0x7}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2f39f9a321771e200800200000aa2bc0000de00000080004d37fb3d5c58ca989165283017d0da72835cc92adf54e2921c", 0xe) accept$alg(r6, 0x0, 0x0) 21.974440808s ago: executing program 1 (id=3338): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x4c) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x738, 0x4, 0x0, 0xfffffffffffffdac}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x32) 21.935603272s ago: executing program 4 (id=3339): r0 = socket$can_raw(0x1d, 0x3, 0x1) close(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r1, 0x0, r0) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_io_uring_setup(0x4c37, &(0x7f0000000200)={0x0, 0x3faa, 0x10100, 0x0, 0x10, 0x0, r2}, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x170b6, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd_index, 0x0, 0x0}) r8 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x1fa, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "408100008b20aaf0"}, 0x10}}, 0x0) 20.039758251s ago: executing program 4 (id=3343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f80), r1) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x120}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x96}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000800000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x40000004}) write$char_usb(r6, &(0x7f00000002c0), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19.078982667s ago: executing program 0 (id=3345): r0 = syz_open_procfs(0x0, &(0x7f0000001180)='net/dev_snmp6\x00') getdents64(r0, &(0x7f0000000100)=""/4014, 0xfae) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x6, r8, r7}) sendmmsg(r5, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 18.073759495s ago: executing program 3 (id=3346): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec278ac0e901d7d12a1c4688b80e72824458c10770526462c19f2f4f15d40ed7f552fb65936b21d340fd96774fa221d537757e7e140e5897a634fedaf0632d", @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32, @ANYBLOB="1800508014000400ec4b8736747e49e1d75df69d59e35ced"], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r6, &(0x7f00000001c0)=ANY=[], 0x1a8, 0x0) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(0x0, &(0x7f0000001280)={0x1}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 17.078737533s ago: executing program 0 (id=3347): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b00010062"], 0x6c}}, 0x0) mremap(&(0x7f0000e0f000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "27425b895f17386bce0052d063e6179d13f019e300"}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x1}, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x98, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 14.853585574s ago: executing program 4 (id=3348): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r1 = getpid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r8, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)=""/245, 0xf5}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"}) socket$nl_route(0x10, 0x3, 0x0) 14.776795507s ago: executing program 3 (id=3349): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = syz_open_dev$loop(0x0, 0x3, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x401}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) socket(0x1, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xfffffffffffffe95) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010100000000000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="24002f80080001000000000031ab020000000000000000000c0003800800010003000000"], 0x40}}, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0205647, &(0x7f0000000080)={0x0, 0x500, 0x0, '\x00', 0x0}) r8 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r8, &(0x7f0000fee000/0x4000)=nil, 0x6000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) shmctl$IPC_RMID(r8, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/213, 0xd5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010007f383f50af015c600000000000004635dc384c212ceb9a3c2ee51b367747f4dfa358f772a2db97376df4771ef387e1c606870b862dda7ccc", @ANYRES64=r5], 0x3c}}, 0x20004804) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 13.563806746s ago: executing program 4 (id=3350): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@s}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000001780)="b93f00076003ed04800008f086dd116f220dc94af96dcce08289fd4bbb9eb731080d18ab0c377a3c7e0abd4aba04ee9da1052ae23060", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r6, r7, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fdatasync(r8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000000500)={0x1, &(0x7f0000000380)=[{0x3ff, 0xe, &(0x7f00000002c0)="152c6bce1c2b1e5b0012c35137c2", 0x1}]}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) sendmsg$key(r5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13.51293692s ago: executing program 0 (id=3351): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000640)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000000040)) bind$vsock_stream(r1, &(0x7f0000000380), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x3e5101, 0x1d6) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) socket(0x9, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffed6}}, 0x24000000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2841) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 13.460314596s ago: executing program 1 (id=3352): unshare(0x26020480) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x3, 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x1000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x622503, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) pipe2$watch_queue(0x0, 0x80) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) 10.431231469s ago: executing program 3 (id=3353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000080)=0xfffffffa, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100201, @dev, 0x4}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000000)) 10.420332465s ago: executing program 0 (id=3354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r0, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x35, 0x19, 0x30, 0x40, 0x1645, 0x8, 0xcf36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf4, 0xfa, 0xdc}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x1, 0x0, @val=@perf_event}, 0x40) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000), 0x10) mount(0x0, 0x0, &(0x7f0000df9000)='nfs4\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2e00}}, 0x1c}}, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x2d, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.413530271s ago: executing program 4 (id=3355): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b00010062"], 0x6c}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000e0f000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "27425b895f17386bce0052d063e6179d13f019e300"}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x1}, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x98, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb9, 0xb6, 0x60, 0x40, 0x5ac, 0xb301, 0xe400, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x1}}]}}]}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 9.343713302s ago: executing program 3 (id=3356): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x4b, [0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8fca], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$inet(0x2, 0x80001, 0x84) 9.203720356s ago: executing program 1 (id=3357): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[]) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x128200}}, 0x50) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="759065ec1daa57376b1de4e1170019aa36e4ee722e001ab36ae0"], 0x0, 0x0, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) lchown(0x0, 0x0, 0x0) r5 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r5, &(0x7f0000313000/0x1000)=nil, 0x4000) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x0, 0x2, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030100", 0x43564548}) r6 = socket(0x2, 0x80805, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r7) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000027c0), 0x8) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) 7.223460397s ago: executing program 1 (id=3358): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec278ac0e901d7d12a1c4688b80e72824458c10770526462c19f2f4f15d40ed7f552fb65936b21d340fd96774fa221d537757e7e140e5897a634fedaf0632d", @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32, @ANYBLOB="1800508014000400ec4b8736747e49e1d75df69d59e35ced"], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r6, &(0x7f00000001c0)=ANY=[], 0x1a8, 0x0) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(0x0, &(0x7f0000001280)={0x1}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 7.209185299s ago: executing program 3 (id=3359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="dc7114ee44ebf4d9d913fb5a149b82e1592a5ec768fba3abe1520c9aeb32747197fa09165878360e0bc87a725c0ccf90b55ac1dd01015d25afebc059a3ad7c6de283b75cfe4551d008a71c4cb8212d34102bc364ba195883c85aa2f8e548173f", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800030002000000"], 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xcc71) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000003600)=""/102371, 0x18fe3}], 0x1, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x3c020000) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000500)={0x40000000, 0x0, "0a1f511f900700427ff44fba1abc61019d30fd87819aba0a3fb25f2167d30b0e"}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB], 0x2c}}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0xfffeffff}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x2}], 0x1}) syz_open_procfs$namespace(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.083788954s ago: executing program 4 (id=3360): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b00010062"], 0x6c}}, 0x0) mremap(&(0x7f0000e0f000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "27425b895f17386bce0052d063e6179d13f019e300"}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x1}, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x98, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 7.011742973s ago: executing program 0 (id=3361): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', 0x7f}) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=""/89) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001580)=""/4096, 0x1000, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0xdc, 0xa42) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x19, 0x0, 0xfcd8) sendmmsg$alg(r3, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000280)="4abb1d8fb9ec59d06d02cc053ce6ac1168d484bfc91789aaedda7f345881d8e3299cca7bf6eb1730423b84df251adc5a6a3df5fbcdaba7541a96a745211d458ecbd25f7adabff10c56381424f96521b18ab8e2a5f92b0fc2997ff7102298726aff76f6", 0x63}], 0x1}], 0x1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x745a8712, 0x0, 0xffffffffffffd104}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0x874, 0x0, 0x1}, {0x264, 0x0, 0x4}, {0xa5b, 0x0, 0x7fffffff}, {0x251, 0x0, 0x200}, {0x2f5, 0x0, 0x6}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) setreuid(0xee00, 0x0) 1.147605579s ago: executing program 0 (id=3362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003080), 0x0, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xfffffffffffffe04) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0x0, 0x5, 0x0, &(0x7f0000000100)=""/5, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x40, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(0xffffffffffffffff) 883.36198ms ago: executing program 3 (id=3363): r0 = socket$packet(0x11, 0x1, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x5b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = dup(r4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) socket$kcm(0x29, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x89ffc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x6e}]}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) clock_gettime(0xfffffffffffffffb, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r8 = syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r8, 0x410, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendto$packet(r7, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140), 0x14) 0s ago: executing program 1 (id=3364): bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f3, 0x200, 0x70bd28, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4884) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x3816060, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x5, 0x0, 0x6, 0x0, 0x1}, 0x14) connect$unix(0xffffffffffffffff, 0x0, 0x0) write(r3, &(0x7f0000000340)="09000000010000", 0x7) sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x6404c011, &(0x7f00000000c0)=@in6={0xa, 0x4e1e, 0x80000000, @private2, 0x7f}, 0x80) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0xa, &(0x7f0000000140)) kernel console output (not intermixed with test programs): terface: batadv_slave_1 [ 2062.175291][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2062.203614][T13244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2062.233679][T13378] team0: Port device team_slave_1 added [ 2062.379147][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2062.388067][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2062.418884][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2062.499275][T13244] hsr_slave_0: entered promiscuous mode [ 2062.507415][T13244] hsr_slave_1: entered promiscuous mode [ 2062.514799][T13244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2062.524429][T13244] Cannot create hsr debugfs directory [ 2062.556984][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2062.569158][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2062.596384][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2062.789472][T13378] hsr_slave_0: entered promiscuous mode [ 2062.799931][T13378] hsr_slave_1: entered promiscuous mode [ 2062.808005][T13378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2062.815958][T13378] Cannot create hsr debugfs directory [ 2063.115020][T12792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2063.127734][T12792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2063.140155][T12792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2063.154365][T12792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2063.464583][T12866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2063.535325][T12866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2063.558078][T12866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2063.617450][T12866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2063.776194][T26169] bridge_slave_1: left allmulticast mode [ 2063.789228][T26169] bridge_slave_1: left promiscuous mode [ 2063.795781][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.806034][T26169] bridge_slave_0: left allmulticast mode [ 2063.812878][T26169] bridge_slave_0: left promiscuous mode [ 2063.819024][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.844333][T26169] bridge_slave_1: left allmulticast mode [ 2063.850197][T26169] bridge_slave_1: left promiscuous mode [ 2063.856343][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.873331][T26169] bridge_slave_0: left allmulticast mode [ 2063.879034][T26169] bridge_slave_0: left promiscuous mode [ 2063.886162][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.897858][T26169] bridge_slave_1: left allmulticast mode [ 2063.904859][T26169] bridge_slave_1: left promiscuous mode [ 2063.911229][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.922648][T26169] bridge_slave_0: left allmulticast mode [ 2063.928725][T26169] bridge_slave_0: left promiscuous mode [ 2063.936417][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.948560][T26169] bridge_slave_1: left allmulticast mode [ 2063.956115][T26169] bridge_slave_1: left promiscuous mode [ 2063.963133][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.984249][T26169] bridge_slave_0: left allmulticast mode [ 2063.989956][T26169] bridge_slave_0: left promiscuous mode [ 2063.995937][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.007074][T26169] bridge_slave_1: left allmulticast mode [ 2064.013017][T26169] bridge_slave_1: left promiscuous mode [ 2064.018835][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2064.029398][T26169] bridge_slave_0: left allmulticast mode [ 2064.035506][T26169] bridge_slave_0: left promiscuous mode [ 2064.041774][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.928317][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2064.941131][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2064.958991][T26169] bond0 (unregistering): Released all slaves [ 2065.300010][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2065.321810][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2065.344098][T26169] bond0 (unregistering): Released all slaves [ 2065.361319][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2065.379057][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2065.399276][T26169] bond0 (unregistering): Released all slaves [ 2065.414297][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2065.426721][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2065.438286][T26169] bond0 (unregistering): Released all slaves [ 2065.467296][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2065.484954][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2065.504724][T26169] bond0 (unregistering): Released all slaves [ 2065.576596][T12782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2065.629286][T13244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2065.744454][T13244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2065.777740][T13244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2065.826174][T13244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2065.905471][T12782] 8021q: adding VLAN 0 to HW filter on device team0 [ 2066.244286][T11101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.252925][T11101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2066.275713][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.282968][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2066.326574][T12792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2066.358299][T26169] hsr_slave_0: left promiscuous mode [ 2066.365623][T26169] hsr_slave_1: left promiscuous mode [ 2066.373007][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.383858][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.396797][T26169] hsr_slave_0: left promiscuous mode [ 2066.403951][T26169] hsr_slave_1: left promiscuous mode [ 2066.410202][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.422190][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.437099][T26169] hsr_slave_0: left promiscuous mode [ 2066.443534][T26169] hsr_slave_1: left promiscuous mode [ 2066.449753][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.458512][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.470637][T26169] hsr_slave_0: left promiscuous mode [ 2066.481613][T26169] hsr_slave_1: left promiscuous mode [ 2066.487967][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.496291][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.510138][T26169] hsr_slave_0: left promiscuous mode [ 2066.518629][T26169] hsr_slave_1: left promiscuous mode [ 2066.528628][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.537498][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.888049][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2066.938419][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2067.506041][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2067.583612][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2068.589492][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2068.650212][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2069.207271][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2069.264127][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2069.807485][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2069.874528][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2070.251632][T12792] 8021q: adding VLAN 0 to HW filter on device team0 [ 2070.349898][T12866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2070.380155][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.387379][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2070.503809][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.511097][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2070.668747][T12866] 8021q: adding VLAN 0 to HW filter on device team0 [ 2070.702413][T13378] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2070.715496][T13378] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2070.757595][T13244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2070.790796][T12782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2070.811165][T13378] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2070.937453][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.944703][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2070.965358][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.972604][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2071.051126][T13378] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2071.098545][T13244] 8021q: adding VLAN 0 to HW filter on device team0 [ 2071.166485][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2071.173742][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2071.184785][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2071.192021][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2071.550374][T12782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2071.808623][T12792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2071.829508][T13378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2071.879970][T12782] veth0_vlan: entered promiscuous mode [ 2072.015332][T13378] 8021q: adding VLAN 0 to HW filter on device team0 [ 2072.114939][T12782] veth1_vlan: entered promiscuous mode [ 2072.157380][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.164651][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2072.216041][T12792] veth0_vlan: entered promiscuous mode [ 2072.303951][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.311271][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2072.385053][T13244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2072.447337][T12792] veth1_vlan: entered promiscuous mode [ 2072.517709][T12866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2072.598191][T12782] veth0_macvtap: entered promiscuous mode [ 2072.626142][T12792] veth0_macvtap: entered promiscuous mode [ 2072.654720][T12782] veth1_macvtap: entered promiscuous mode [ 2072.729020][T12792] veth1_macvtap: entered promiscuous mode [ 2072.787736][T13244] veth0_vlan: entered promiscuous mode [ 2072.843930][T12782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.867518][T12782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.878022][T12782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.896247][T12782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.908626][T12782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2072.924357][T12782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.936655][T12782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.949765][T12782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.960552][T12782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.972892][T12782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2072.987612][T12866] veth0_vlan: entered promiscuous mode [ 2073.001903][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.015750][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.025940][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.037073][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.048637][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.059302][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.071480][T12792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2073.082317][T12782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.092377][T12782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.102090][T12782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.112290][T12782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.134846][T13244] veth1_vlan: entered promiscuous mode [ 2073.172108][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.183458][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.194692][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.205413][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.215760][T12792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.226731][T12792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.239563][T12792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2073.260521][T12866] veth1_vlan: entered promiscuous mode [ 2073.296736][T12792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.316474][T12792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.325966][T12792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.344597][T12792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.371367][T13244] veth0_macvtap: entered promiscuous mode [ 2073.439250][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2073.454083][T13244] veth1_macvtap: entered promiscuous mode [ 2073.540218][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.564213][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.593605][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.617281][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.630424][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.641399][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.653289][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.663962][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.675347][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.686150][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.697579][T13244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2073.724406][T12866] veth0_macvtap: entered promiscuous mode [ 2073.774549][T12866] veth1_macvtap: entered promiscuous mode [ 2073.782235][T11101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.803219][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.814625][T11101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.843585][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.857289][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.868292][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.879155][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.890336][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.902072][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.912954][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.925045][T13244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2073.953709][T13244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.966067][T13244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.980632][T13244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.001039][T13244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.094435][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.128943][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.166727][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2074.178762][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.188907][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2074.199839][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.209962][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2074.232149][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.251025][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2074.268635][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.279108][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2074.292240][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.306729][T12866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2074.365103][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2074.365135][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.365151][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2074.365169][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.365186][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2074.365209][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.365223][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2074.365239][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.365263][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2074.365280][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.385095][T12866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2074.417618][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.417645][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.424401][T12866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.554755][T12866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.563611][T12866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.574220][T12866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.678589][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.691834][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.788140][T13378] veth0_vlan: entered promiscuous mode [ 2074.815547][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.849093][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.885084][T13378] veth1_vlan: entered promiscuous mode [ 2074.926652][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.940217][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.991153][ T8] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2075.059359][T13378] veth0_macvtap: entered promiscuous mode [ 2075.090484][T26169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2075.106472][T13378] veth1_macvtap: entered promiscuous mode [ 2075.120742][T26169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2075.201079][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 2075.208849][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2075.250162][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2075.290064][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2075.300616][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2075.315917][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2075.321673][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2075.381236][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2075.381461][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2075.428932][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2075.473037][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2075.480091][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2075.509436][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.524744][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2075.559655][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2075.588260][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2075.618228][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2075.654743][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2075.711695][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2075.765236][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 2075.786945][T13378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2075.824877][ T8] usbtmc 2-1:16.0: can't read capabilities [ 2075.909159][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2075.953559][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2075.989995][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2076.012989][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.029568][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2076.061168][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.118628][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2076.120449][ T8] usb 2-1: USB disconnect, device number 59 [ 2076.141459][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.166966][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2076.196778][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.217833][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2076.239128][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2076.305539][T13378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2076.395762][T13378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2076.408683][T13378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2076.418341][T13378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2076.474440][T13378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2076.641228][ T25] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2076.909006][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 2076.946916][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.006045][ T25] usb 3-1: Product: syz [ 2077.009538][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2077.041224][ T25] usb 3-1: Manufacturer: syz [ 2077.058257][ T25] usb 3-1: SerialNumber: syz [ 2077.095344][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2077.098955][ T25] usb 3-1: config 0 descriptor?? [ 2077.299262][T11101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2077.355236][T11101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2077.648685][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 2079.078173][ T8818] usb 3-1: USB disconnect, device number 49 [ 2079.566049][ T5287] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2079.761314][ T5287] usb 4-1: Using ep0 maxpacket: 32 [ 2079.785659][ T5287] usb 4-1: config 0 has an invalid interface number: 155 but max is 0 [ 2079.821109][ T5287] usb 4-1: config 0 has no interface number 0 [ 2079.848617][ T5287] usb 4-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2079.918120][ T5287] usb 4-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2079.981256][ T586] Bluetooth: hci3: command tx timeout [ 2080.006838][ T5287] usb 4-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 2080.238200][ T5287] usb 4-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 2081.109108][ T5287] usb 4-1: Product: syz [ 2081.114400][ T5287] usb 4-1: Manufacturer: syz [ 2081.122130][ T5287] usb 4-1: SerialNumber: syz [ 2081.156407][ T5287] usb 4-1: config 0 descriptor?? [ 2081.256230][ T5287] ftdi_sio 4-1:0.155: FTDI USB Serial Device converter detected [ 2081.292853][ T5287] ftdi_sio ttyUSB0: unknown device type: 0xc561 [ 2081.459143][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2081.459218][ T29] audit: type=1804 audit(1725152776.710:478): pid=14790 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3159" name="/newroot/5/bus/bus" dev="overlay" ino=52 res=1 errno=0 [ 2081.561581][ T5287] usb 4-1: USB disconnect, device number 102 [ 2081.571673][ T5287] ftdi_sio 4-1:0.155: device disconnected [ 2082.099253][ T1173] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2088.611568][ T1173] usb 5-1: device descriptor read/64, error -110 [ 2090.386230][T22265] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2090.650986][T22265] usb 2-1: Using ep0 maxpacket: 32 [ 2090.730026][T22265] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2091.082346][T22265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2091.118561][T22265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2092.092837][T22265] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2092.105095][T22265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.124719][T22265] usb 2-1: config 0 descriptor?? [ 2092.130707][T14824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2092.228388][T22265] hub 2-1:0.0: USB hub found [ 2092.428330][T22265] hub 2-1:0.0: 2 ports detected [ 2092.668367][T14846] syz.2.3169: attempt to access beyond end of device [ 2092.668367][T14846] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 2093.257732][T22184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2093.279865][T22184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2093.290193][T22184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2093.320513][T22184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2093.333869][T22184] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2093.341500][T22184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2093.524406][ T6790] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2093.754691][ T6790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2093.789115][ T6790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.799834][ T6790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2093.814211][ T6790] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2093.823644][ T6790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.835795][ T6790] usb 4-1: config 0 descriptor?? [ 2094.448462][T22265] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 2094.951158][T22265] usb 2-1: device descriptor read/64, error -32 [ 2095.423694][T22184] Bluetooth: hci1: command tx timeout [ 2095.623454][T14853] chnl_net:caif_netlink_parms(): no params data found [ 2096.056389][T22265] hub 2-1:0.0: set hub depth failed [ 2096.063379][ T1173] usb 2-1: USB disconnect, device number 60 [ 2096.660691][T14905] delete_channel: no stack [ 2096.674563][ T6790] usbhid 4-1:0.0: can't add hid device: -71 [ 2096.683464][ T6790] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2096.683722][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2096.694574][ T6790] usb 4-1: USB disconnect, device number 103 [ 2097.623580][T22184] Bluetooth: hci1: command tx timeout [ 2098.869640][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2099.103663][T15054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3180'. [ 2099.176039][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.651096][T22184] Bluetooth: hci1: command tx timeout [ 2099.673125][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.171710][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.408351][T14853] bridge0: port 1(bridge_slave_0) entered blocking state [ 2100.570402][ T6790] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2101.141279][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.148704][T14853] bridge_slave_0: entered allmulticast mode [ 2101.189545][T14853] bridge_slave_0: entered promiscuous mode [ 2101.261580][T14853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.268779][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.291345][T14853] bridge_slave_1: entered allmulticast mode [ 2101.311618][T14853] bridge_slave_1: entered promiscuous mode [ 2101.341113][ T6790] usb 2-1: Using ep0 maxpacket: 32 [ 2101.372422][ T6790] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2101.418906][ T6790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.468745][ T6790] usb 2-1: config 0 descriptor?? [ 2101.501796][ T6790] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2101.524616][T14853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2101.594499][T14853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2101.747531][T22184] Bluetooth: hci1: command tx timeout [ 2102.007031][T14853] team0: Port device team_slave_0 added [ 2102.078377][T15083] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3183'. [ 2102.099657][T14853] team0: Port device team_slave_1 added [ 2102.315726][T14853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2102.345326][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2102.440350][T14853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2102.513886][ T11] bridge_slave_1: left allmulticast mode [ 2102.554770][ T11] bridge_slave_1: left promiscuous mode [ 2102.581356][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.628300][ T11] bridge_slave_0: left allmulticast mode [ 2102.651105][ T11] bridge_slave_0: left promiscuous mode [ 2102.659263][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.762735][ T6790] gspca_nw80x: reg_w err -71 [ 2102.767423][ T6790] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 2102.811855][ T6790] usb 2-1: USB disconnect, device number 61 [ 2110.640368][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2110.690307][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2110.745179][ T11] bond0 (unregistering): Released all slaves [ 2110.815446][T14853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2110.842054][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2110.901247][T14853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2111.062824][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3188'. [ 2111.564547][T14853] hsr_slave_0: entered promiscuous mode [ 2111.592576][T14853] hsr_slave_1: entered promiscuous mode [ 2111.649044][T14853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2111.679765][T14853] Cannot create hsr debugfs directory [ 2111.949557][ T11] hsr_slave_0: left promiscuous mode [ 2112.005435][T22184] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2112.049656][ T11] hsr_slave_1: left promiscuous mode [ 2112.055981][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2112.066143][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2112.095163][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2112.112966][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2112.298056][ T11] veth1_macvtap: left promiscuous mode [ 2112.305715][ T11] veth0_macvtap: left promiscuous mode [ 2112.341284][ T11] veth1_vlan: left promiscuous mode [ 2112.351114][ T11] veth0_vlan: left promiscuous mode [ 2112.550025][T15323] input: syz1 as /devices/virtual/input/input86 [ 2112.960961][T15333] smb3: Unknown parameter '*z' [ 2114.551253][ T8818] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2114.790186][ T8818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2114.801186][ T8818] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2114.843091][ T8818] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 2115.118184][ T8818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.126508][ T8818] usb 4-1: Product: syz [ 2115.130716][ T8818] usb 4-1: Manufacturer: syz [ 2115.135565][ T8818] usb 4-1: SerialNumber: syz [ 2115.146067][ T8818] usb 4-1: config 0 descriptor?? [ 2115.155321][ T8818] usb 4-1: ucan: probing device on interface #0 [ 2115.162311][ T8818] usb 4-1: ucan: invalid EP count (0) [ 2115.168023][ T8818] usb 4-1: ucan: probe failed; try to update the device firmware [ 2116.710852][T15357] overlayfs: failed to resolve './file1': -2 [ 2117.349315][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2117.464442][ T6790] usb 4-1: USB disconnect, device number 104 [ 2122.913937][T22184] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2122.923219][T22184] Bluetooth: hci5: Injecting HCI hardware error event [ 2122.936794][T22184] Bluetooth: hci5: hardware error 0x00 [ 2123.255784][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2124.443705][T15392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3209'. [ 2125.253966][T22184] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2126.667523][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 2127.064871][T15326] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2127.157366][T15390] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2127.174731][T15390] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2127.279257][T15390] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2127.299092][T15390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2127.305249][T15390] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2127.350388][T15390] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2127.390652][T15390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2127.396914][T15390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2127.467467][T15390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2127.533782][T22184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2127.549961][T22184] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2127.561525][T22184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2127.569945][T22184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2127.589171][T22184] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2127.596873][T22184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2129.030258][T15489] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2129.061382][T15489] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 2129.117131][T15489] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2129.188775][T15489] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2129.411271][T22184] Bluetooth: hci1: command 0x0c1a tx timeout [ 2129.463866][T11098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.592223][T15396] chnl_net:caif_netlink_parms(): no params data found [ 2129.731376][T22184] Bluetooth: hci4: command tx timeout [ 2129.786829][T11098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.008601][T11098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.285652][T11098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.366637][T14853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2130.399295][T14853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2130.497219][T14853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2130.525314][T14853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2130.828564][T15489] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2130.864775][T15489] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2130.885870][T15489] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2130.896383][T15489] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2130.903861][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.950129][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.981390][T15396] bridge_slave_0: entered allmulticast mode [ 2131.022889][T15396] bridge_slave_0: entered promiscuous mode [ 2131.124878][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.166640][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.352104][T15396] bridge_slave_1: entered allmulticast mode [ 2131.359564][T15396] bridge_slave_1: entered promiscuous mode [ 2131.368488][ T6790] IPVS: starting estimator thread 0... [ 2131.732687][T15706] IPVS: using max 14 ests per chain, 33600 per kthread [ 2132.287132][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2132.336867][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2132.511102][ T6790] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2132.580169][T15396] team0: Port device team_slave_0 added [ 2132.618699][T11098] bridge_slave_1: left allmulticast mode [ 2132.644312][T11098] bridge_slave_1: left promiscuous mode [ 2132.661419][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 2132.690005][T11098] bridge_slave_0: left allmulticast mode [ 2132.707568][T11098] bridge_slave_0: left promiscuous mode [ 2132.720503][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 2132.721707][ T6790] usb 4-1: Using ep0 maxpacket: 32 [ 2132.765478][ T6790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.809686][ T6790] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2132.836872][ T6790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.847776][ T6790] usb 4-1: Product: syz [ 2132.854150][ T6790] usb 4-1: Manufacturer: syz [ 2132.868974][ T6790] usb 4-1: SerialNumber: syz [ 2132.897758][ T6790] usb 4-1: config 0 descriptor?? [ 2132.926914][ T6790] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2133.050648][ T6790] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2134.867023][T11098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2134.882215][T11098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2134.895567][T11098] bond0 (unregistering): Released all slaves [ 2134.912652][T15396] team0: Port device team_slave_1 added [ 2134.955277][T15789] netlink: 'syz.3.3221': attribute type 10 has an invalid length. [ 2134.983130][T15789] bond0: (slave wlan1): Opening slave failed [ 2135.003697][T15796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3224'. [ 2135.020353][ T8818] usb 4-1: USB disconnect, device number 105 [ 2135.134522][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2135.142594][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2135.188763][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2135.339165][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2135.347923][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2135.391363][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2135.600749][T15396] hsr_slave_0: entered promiscuous mode [ 2135.627658][T15396] hsr_slave_1: entered promiscuous mode [ 2135.674572][T11098] hsr_slave_0: left promiscuous mode [ 2135.685560][T11098] hsr_slave_1: left promiscuous mode [ 2135.693980][T11098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2135.702686][T11098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2135.710770][T11098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2135.718431][T11098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2136.192684][T11098] veth1_macvtap: left promiscuous mode [ 2136.198420][T11098] veth0_macvtap: left promiscuous mode [ 2136.722881][T11098] veth1_vlan: left promiscuous mode [ 2136.728288][T11098] veth0_vlan: left promiscuous mode [ 2137.631978][T20649] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2137.822984][T20649] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2137.876962][T20649] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 2137.923659][T20649] usb 2-1: config 0 interface 0 has no altsetting 1 [ 2137.938537][T20649] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2137.951085][T20649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.963235][T20649] usb 2-1: config 0 descriptor?? [ 2138.035837][T15890] vivid-000: ================= START STATUS ================= [ 2138.044089][T15890] vivid-000: Generate PTS: true [ 2138.050260][T15890] vivid-000: Generate SCR: true [ 2138.055582][T15890] tpg source WxH: 320x180 (Y'CbCr) [ 2138.060845][T15890] tpg field: 1 [ 2138.064424][T15890] tpg crop: 320x180@0x0 [ 2138.068786][T15890] tpg compose: 320x180@0x0 [ 2138.073518][T15890] tpg colorspace: 8 [ 2138.077523][T15890] tpg transfer function: 0/2 [ 2138.082566][T15890] tpg Y'CbCr encoding: 0/1 [ 2138.095330][T15890] tpg quantization: 0/2 [ 2138.099780][T15890] tpg RGB range: 0/2 [ 2138.103966][T15890] vivid-000: ================== END STATUS ================== [ 2141.002382][T11098] team0 (unregistering): Port device team_slave_1 removed [ 2141.018514][T20649] Bluetooth: Can't get state to change to load ram patch err [ 2141.026553][T20649] Bluetooth: Loading patch file failed [ 2141.116571][T20649] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 2141.127869][T20649] usb 2-1: USB disconnect, device number 62 [ 2141.219419][T11098] team0 (unregistering): Port device team_slave_0 removed [ 2141.254058][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 2142.165273][ C0] vkms_vblank_simulate: vblank timer overrun [ 2142.312066][T15908] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2142.364851][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 2142.374835][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 2142.891323][ T5236] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2143.767498][T15948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2144.288749][T14853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2144.538701][T14853] 8021q: adding VLAN 0 to HW filter on device team0 [ 2144.635298][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3235'. [ 2144.914343][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.921642][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2145.031038][ T5236] usb 2-1: Using ep0 maxpacket: 8 [ 2145.062617][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.069921][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2145.244768][ T5236] usb 2-1: device descriptor read/all, error -71 [ 2145.341330][ T8818] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 2145.554031][ T8818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2145.596225][ T8818] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2145.774661][ T8818] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2145.803089][ T8818] usb 5-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 2145.812710][ T8818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.820818][ T8818] usb 5-1: Product: syz [ 2145.825199][ T8818] usb 5-1: Manufacturer: syz [ 2147.249822][ T8818] usb 5-1: SerialNumber: syz [ 2147.273741][ T8818] usb 5-1: config 0 descriptor?? [ 2148.872368][ T8818] usb 5-1: can't set config #0, error -71 [ 2148.905986][ T8818] usb 5-1: USB disconnect, device number 82 [ 2148.962602][T16034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2149.776876][T14853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2150.067824][T16053] netlink: 'syz.3.3241': attribute type 10 has an invalid length. [ 2152.753097][ C1] vkms_vblank_simulate: vblank timer overrun [ 2153.561363][ T586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2153.577634][ T586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2153.586734][ T586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2153.595002][ T586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2153.606934][ T586] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2153.617254][ T586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2153.638478][T22184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2153.686836][T22184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2153.697244][T22184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2153.707373][T22184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2153.718872][T22184] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2153.743714][T22184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2153.884945][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 2154.060692][T15396] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2154.117482][T15396] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2154.342224][T15396] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2154.358904][T16146] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2154.478133][T15396] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2154.549842][T16164] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3248'. [ 2154.711818][ T8818] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2154.881074][ T9267] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2154.901043][ T8818] usb 4-1: Using ep0 maxpacket: 8 [ 2154.968001][ T8818] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2154.988058][ T8818] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2155.000532][ T8818] usb 4-1: Product: syz [ 2155.005099][ T8818] usb 4-1: Manufacturer: syz [ 2155.010081][ T8818] usb 4-1: SerialNumber: syz [ 2155.019992][ T8818] usb 4-1: config 0 descriptor?? [ 2155.029846][ T8818] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2155.121172][ T9267] usb 2-1: Using ep0 maxpacket: 16 [ 2155.134471][ T9267] usb 2-1: config index 0 descriptor too short (expected 64742, got 92) [ 2155.159638][ T9267] usb 2-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 2155.199593][ T9267] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.224250][ T9267] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2155.242074][ T9267] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2155.260068][ T9267] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2155.281646][ T9267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.291176][ T9267] usb 2-1: Product: syz [ 2155.295809][ T9267] usb 2-1: Manufacturer: syz [ 2155.301181][ T9267] usb 2-1: SerialNumber: syz [ 2155.319538][ T9267] cdc_ncm 2-1:1.0: skipping garbage [ 2155.334854][ T9267] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 2155.342198][ T9267] cdc_ncm 2-1:1.0: bind() failure [ 2155.512877][ T12] bridge_slave_1: left allmulticast mode [ 2155.518886][ T12] bridge_slave_1: left promiscuous mode [ 2155.797038][ T8818] gspca_zc3xx: reg_w_i err -71 [ 2155.801752][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.804585][T16164] fuse: Bad value for 'fd' [ 2155.821182][ T8818] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2155.822148][T22184] Bluetooth: hci1: command tx timeout [ 2156.421886][ T6790] usb 2-1: USB disconnect, device number 65 [ 2156.429594][ T8818] usb 4-1: USB disconnect, device number 106 [ 2156.439886][ T12] bridge_slave_0: left allmulticast mode [ 2156.449673][ T12] bridge_slave_0: left promiscuous mode [ 2156.455668][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2156.700130][ T29] audit: type=1326 audit(1725152851.980:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2157.520988][ T29] audit: type=1326 audit(1725152851.980:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2157.591192][ T29] audit: type=1326 audit(1725152851.980:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2157.722609][ T29] audit: type=1326 audit(1725152851.980:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2157.810159][ T29] audit: type=1326 audit(1725152851.990:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2157.881129][ T29] audit: type=1326 audit(1725152851.990:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2158.121443][T22184] Bluetooth: hci1: command tx timeout [ 2158.721132][ T29] audit: type=1326 audit(1725152851.990:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2158.790639][ T29] audit: type=1326 audit(1725152851.990:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2158.816856][ T29] audit: type=1326 audit(1725152851.990:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2158.881535][ T29] audit: type=1326 audit(1725152851.990:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16301 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febb2179eb9 code=0x7ffc0000 [ 2160.147261][T22184] Bluetooth: hci1: command tx timeout [ 2160.336144][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2160.368876][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2160.395235][ T12] bond0 (unregistering): Released all slaves [ 2160.621572][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.725368][ T12] hsr_slave_0: left promiscuous mode [ 2160.742279][ T12] hsr_slave_1: left promiscuous mode [ 2160.751143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2160.765702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2162.211944][T22184] Bluetooth: hci1: command tx timeout [ 2162.572060][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2162.713959][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2163.711032][ T5236] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2163.922555][ T5236] usb 4-1: Using ep0 maxpacket: 8 [ 2163.930255][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2163.980387][ T5236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2164.001279][ T5236] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 2164.016676][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.044673][T15396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2164.053537][T16100] chnl_net:caif_netlink_parms(): no params data found [ 2164.078313][ T5236] usb 4-1: config 0 descriptor?? [ 2164.321846][ T5236] usbhid 4-1:0.0: can't add hid device: -71 [ 2164.327939][ T5236] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2164.367304][ T5236] usb 4-1: USB disconnect, device number 107 [ 2164.369360][T15396] 8021q: adding VLAN 0 to HW filter on device team0 [ 2164.504590][T11101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2164.511803][T11101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2164.595207][T16401] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2164.640597][T16100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2164.648449][T16100] bridge0: port 1(bridge_slave_0) entered disabled state [ 2164.656829][T16100] bridge_slave_0: entered allmulticast mode [ 2164.667156][T16100] bridge_slave_0: entered promiscuous mode [ 2164.679772][T16100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2164.687773][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 2164.695694][T16100] bridge_slave_1: entered allmulticast mode [ 2164.705466][T16100] bridge_slave_1: entered promiscuous mode [ 2164.726120][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2164.733346][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2164.847978][T16100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2164.872180][T16100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2164.891344][ T5236] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2165.031820][T16100] team0: Port device team_slave_0 added [ 2165.082967][ T5236] usb 5-1: Using ep0 maxpacket: 8 [ 2165.093233][T16100] team0: Port device team_slave_1 added [ 2165.116067][ T5236] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2165.153160][ T5236] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2165.168689][ T5236] usb 5-1: Product: syz [ 2165.182927][ T5236] usb 5-1: Manufacturer: syz [ 2165.196902][ T5236] usb 5-1: SerialNumber: syz [ 2165.229074][ T5236] usb 5-1: config 0 descriptor?? [ 2165.247455][T16100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2165.247478][T16100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2165.247510][T16100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2165.249917][ T5236] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2165.277885][T16100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2165.340401][T16100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2165.388177][T16100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2165.424310][T16555] syz.1.3262: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2165.430424][T16555] CPU: 1 UID: 0 PID: 16555 Comm: syz.1.3262 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 2165.430467][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2165.430488][T16555] Call Trace: [ 2165.430502][T16555] [ 2165.430514][T16555] dump_stack_lvl+0x241/0x360 [ 2165.430555][T16555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2165.430585][T16555] ? __pfx__printk+0x10/0x10 [ 2165.430620][T16555] ? __rcu_read_unlock+0xa1/0x110 [ 2165.430651][T16555] warn_alloc+0x278/0x410 [ 2165.430681][T16555] ? stack_depot_save_flags+0x29/0x830 [ 2165.430708][T16555] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 2165.430743][T16555] ? __pfx_warn_alloc+0x10/0x10 [ 2165.430773][T16555] ? kasan_save_track+0x3f/0x80 [ 2165.430798][T16555] ? __kasan_kmalloc+0x98/0xb0 [ 2165.430825][T16555] ? xsk_setsockopt+0x598/0x950 [ 2165.430860][T16555] ? do_sock_setsockopt+0x3af/0x720 [ 2165.430889][T16555] ? __sys_setsockopt+0x1ae/0x250 [ 2165.430917][T16555] ? __x64_sys_setsockopt+0xb5/0xd0 [ 2165.430947][T16555] ? do_syscall_64+0xf3/0x230 [ 2165.430970][T16555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.431009][T16555] __vmalloc_node_range_noprof+0x126/0x1400 [ 2165.431074][T16555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2165.431122][T16555] ? __kasan_kmalloc+0x98/0xb0 [ 2165.431151][T16555] ? xskq_create+0x54/0x170 [ 2165.431179][T16555] vmalloc_user_noprof+0x74/0x80 [ 2165.431218][T16555] ? xskq_create+0xb6/0x170 [ 2165.431238][T16555] xskq_create+0xb6/0x170 [ 2165.431261][T16555] xsk_init_queue+0xa1/0x100 [ 2165.431303][T16555] xsk_setsockopt+0x598/0x950 [ 2165.431344][T16555] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2165.431386][T16555] ? __pfx_lock_acquire+0x10/0x10 [ 2165.431420][T16555] ? __fget_files+0x29/0x470 [ 2165.431447][T16555] ? __pfx_lock_release+0x10/0x10 [ 2165.431477][T16555] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2165.431507][T16555] ? security_socket_setsockopt+0x87/0xb0 [ 2165.431531][T16555] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2165.431566][T16555] do_sock_setsockopt+0x3af/0x720 [ 2165.431607][T16555] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2165.431635][T16555] ? __fget_files+0x29/0x470 [ 2165.431655][T16555] ? __fget_files+0x3f6/0x470 [ 2165.431681][T16555] __sys_setsockopt+0x1ae/0x250 [ 2165.431719][T16555] __x64_sys_setsockopt+0xb5/0xd0 [ 2165.431755][T16555] do_syscall_64+0xf3/0x230 [ 2165.431782][T16555] ? clear_bhb_loop+0x35/0x90 [ 2165.431816][T16555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.431847][T16555] RIP: 0033:0x7f10b0b79eb9 [ 2165.431875][T16555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2165.431898][T16555] RSP: 002b:00007f10b193b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2165.431925][T16555] RAX: ffffffffffffffda RBX: 00007f10b0d16058 RCX: 00007f10b0b79eb9 [ 2165.431945][T16555] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 2165.431963][T16555] RBP: 00007f10b0be793e R08: 0000000000000020 R09: 0000000000000000 [ 2165.431980][T16555] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 2165.431997][T16555] R13: 0000000000000001 R14: 00007f10b0d16058 R15: 00007ffd7f8a9108 [ 2165.432036][T16555] [ 2165.497250][T16555] Mem-Info: [ 2165.497270][T16555] active_anon:260 inactive_anon:8064 isolated_anon:0 [ 2165.497270][T16555] active_file:19522 inactive_file:36754 isolated_file:0 [ 2165.497270][T16555] unevictable:768 dirty:119 writeback:0 [ 2165.497270][T16555] slab_reclaimable:7847 slab_unreclaimable:104518 [ 2165.497270][T16555] mapped:35103 shmem:4126 pagetables:763 [ 2165.497270][T16555] sec_pagetables:0 bounce:0 [ 2165.497270][T16555] kernel_misc_reclaimable:0 [ 2165.497270][T16555] free:1308697 free_pcp:419 free_cma:0 [ 2165.497597][T16555] Node 0 active_anon:1040kB inactive_anon:32256kB active_file:78020kB inactive_file:147016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140412kB dirty:476kB writeback:0kB shmem:14968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10580kB pagetables:3052kB sec_pagetables:0kB all_unreclaimable? no [ 2165.497666][T16555] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2165.497727][T16555] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2165.497977][T16555] lowmem_reserve[]: 0 2469 2470 0 0 [ 2165.498036][T16555] Node 0 DMA32 free:1270100kB boost:0kB min:34244kB low:42804kB high:51364kB reserved_highatomic:0KB active_anon:1036kB inactive_anon:32216kB active_file:77032kB inactive_file:146952kB unevictable:1536kB writepending:476kB present:3129332kB managed:2557028kB mlocked:0kB bounce:0kB free_pcp:1668kB local_pcp:1128kB free_cma:0kB [ 2165.498109][T16555] lowmem_reserve[]: 0 0 1 0 0 [ 2165.498623][T16555] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:988kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 2165.498699][T16555] lowmem_reserve[]: 0 0 0 0 0 [ 2165.498996][T16555] Node 1 Normal free:3949316kB boost:0kB min:55644kB low:69552kB high:83460kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2165.499067][T16555] lowmem_reserve[]: 0 0 0 0 0 [ 2165.499119][T16555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2165.502609][T16555] Node 0 DMA32: 2349*4kB (UME) 1301*8kB (UME) 2027*16kB (UME) 1139*32kB (UME) 720*64kB (UME) 171*128kB (UME) 59*256kB (UME) 17*512kB (UM) 16*1024kB (UM) 4*2048kB (UME) 260*4096kB (UM) = 1269996kB [ 2165.502875][T16555] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2165.503065][T16555] Node 1 Normal: 5*4kB (U) 2*8kB (U) 12*16kB (U) 9*32kB (U) 6*64kB (UM) 1*128kB (U) 1*256kB (M) 3*512kB (UM) 2*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3949316kB [ 2165.507483][T16555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.507510][T16555] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2165.507533][T16555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2165.507555][T16555] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2165.507605][T16555] 60411 total pagecache pages [ 2165.507618][T16555] 18 pages in swap cache [ 2165.507629][T16555] Free swap = 124508kB [ 2165.507640][T16555] Total swap = 124996kB [ 2165.507652][T16555] 2097051 pages RAM [ 2165.507663][T16555] 0 pages HighMem/MovableOnly [ 2165.507674][T16555] 426392 pages reserved [ 2165.507684][T16555] 0 pages cma reserved [ 2165.603842][T16100] hsr_slave_0: entered promiscuous mode [ 2165.637550][T16100] hsr_slave_1: entered promiscuous mode [ 2165.639252][T16100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2165.639282][T16100] Cannot create hsr debugfs directory [ 2165.864452][ T5236] gspca_zc3xx: reg_w_i err -71 [ 2165.864575][ T5236] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2165.875552][ T5236] usb 5-1: USB disconnect, device number 83 [ 2166.060777][T15396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2167.038522][T15396] veth0_vlan: entered promiscuous mode [ 2167.054172][T15396] veth1_vlan: entered promiscuous mode [ 2167.326369][T15396] veth0_macvtap: entered promiscuous mode [ 2167.340327][T15396] veth1_macvtap: entered promiscuous mode [ 2169.416079][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2169.416110][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.416126][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2169.416143][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.416157][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2169.416175][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.416191][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2169.416208][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.416221][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2169.416238][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.418010][T15396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2169.529991][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.530020][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.530033][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.530048][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.530061][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.530077][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.530090][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.530104][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.530117][T15396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2169.530131][T15396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2169.534631][T15396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2169.602075][T15396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.602110][T15396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.602134][T15396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.602157][T15396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2169.906349][T16100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2169.922638][T16100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2170.172141][T16100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2170.907799][T16100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2171.016703][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 2171.047892][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.047911][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.212038][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2171.264433][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2171.445122][T16100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2171.528353][T16100] 8021q: adding VLAN 0 to HW filter on device team0 [ 2171.549961][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2171.550066][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2171.574150][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 2171.574258][T11098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2173.401568][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3272'. [ 2173.465640][ T46] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2174.241121][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 2174.275806][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.346309][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2174.388382][ T46] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 2174.411963][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.471523][ T46] usb 4-1: config 0 descriptor?? [ 2174.725531][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 2174.751201][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2174.772582][ T46] usb 4-1: USB disconnect, device number 108 [ 2174.806221][T16100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2174.986685][T16818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2175.159420][T16100] veth0_vlan: entered promiscuous mode [ 2175.830285][T16100] veth1_vlan: entered promiscuous mode [ 2175.926753][T16100] veth0_macvtap: entered promiscuous mode [ 2175.974673][T16100] veth1_macvtap: entered promiscuous mode [ 2176.061054][ T46] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2176.210992][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2176.241142][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 2176.264595][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.275484][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2176.303629][ T46] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2176.331586][ T46] usb 2-1: Product: syz [ 2176.336390][ T46] usb 2-1: Manufacturer: syz [ 2176.342078][ T46] usb 2-1: SerialNumber: syz [ 2176.350626][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2176.363314][ T46] usb 2-1: config 0 descriptor?? [ 2176.374981][ T46] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2176.412903][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.431501][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2176.443288][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.462193][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2176.481261][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.492762][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2176.503672][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.514656][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2176.526591][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.580806][T16100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2176.607353][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2176.634199][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.665039][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2176.689613][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.702033][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2176.713122][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2176.723524][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2176.734995][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.027457][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2177.066652][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.090895][T16100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2177.120037][T16100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.147278][T16100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2177.223151][ T46] gspca_zc3xx: reg_w_i err -71 [ 2177.228203][ T46] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2177.247818][ T46] usb 2-1: USB disconnect, device number 66 [ 2177.341936][T16100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2177.368301][T16100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2177.390268][T16100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2177.399287][T16100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2177.610832][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2177.643888][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2177.681207][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2177.910901][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2198.710782][ T586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2198.762872][ T586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2198.791328][ T586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2198.895310][ T586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2198.911826][ T586] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2198.931694][ T586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2198.968974][ T7695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2198.984401][ T7695] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2198.996268][ T7695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2199.005760][ T7695] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2199.016584][ T7695] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2199.032560][ T7695] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2199.226092][ T586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2199.261424][ T586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2199.324124][ T586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2199.340106][ T586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2199.348826][ T586] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2199.364092][ T586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2199.468326][ T7695] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2199.492345][ T7695] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2199.563004][ T7695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2199.577140][ T7695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2199.592010][ T7695] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2199.599715][ T7695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2199.754708][T26169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.064676][T26169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.270374][T26169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.473620][T26169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.100116][ T586] Bluetooth: hci3: command tx timeout [ 2201.108822][ T586] Bluetooth: hci4: command tx timeout [ 2201.412507][ T586] Bluetooth: hci6: command tx timeout [ 2201.448875][T26169] bridge_slave_1: left allmulticast mode [ 2201.455107][T26169] bridge_slave_1: left promiscuous mode [ 2201.466333][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.479615][T26169] bridge_slave_0: left allmulticast mode [ 2201.493176][T26169] bridge_slave_0: left promiscuous mode [ 2201.499169][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.651238][ T586] Bluetooth: hci7: command tx timeout [ 2202.277947][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.290352][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.305551][T26169] bond0 (unregistering): Released all slaves [ 2202.520481][T16902] chnl_net:caif_netlink_parms(): no params data found [ 2202.718376][T16894] chnl_net:caif_netlink_parms(): no params data found [ 2202.987558][T16908] chnl_net:caif_netlink_parms(): no params data found [ 2203.000025][T16920] chnl_net:caif_netlink_parms(): no params data found [ 2203.049867][T26169] hsr_slave_0: left promiscuous mode [ 2203.056041][T26169] hsr_slave_1: left promiscuous mode [ 2203.067514][T26169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2203.075070][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2203.083980][T26169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2203.096411][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.124175][T26169] veth1_macvtap: left promiscuous mode [ 2203.129784][T26169] veth0_macvtap: left promiscuous mode [ 2203.135567][T26169] veth1_vlan: left promiscuous mode [ 2203.141192][T26169] veth0_vlan: left promiscuous mode [ 2203.171297][ T586] Bluetooth: hci4: command tx timeout [ 2203.176928][T22184] Bluetooth: hci3: command tx timeout [ 2203.506224][T22184] Bluetooth: hci6: command tx timeout [ 2203.734140][T22184] Bluetooth: hci7: command tx timeout [ 2204.097055][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2204.198393][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2205.252367][T22184] Bluetooth: hci4: command tx timeout [ 2205.252470][ T586] Bluetooth: hci3: command tx timeout [ 2205.335030][T16902] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.355125][T16902] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.362841][T16902] bridge_slave_0: entered allmulticast mode [ 2205.370399][T16902] bridge_slave_0: entered promiscuous mode [ 2205.379341][T16902] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.387086][T16902] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.394924][T16902] bridge_slave_1: entered allmulticast mode [ 2205.402611][T16902] bridge_slave_1: entered promiscuous mode [ 2205.585119][ T586] Bluetooth: hci6: command tx timeout [ 2205.595036][T16894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.602927][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.610285][T16894] bridge_slave_0: entered allmulticast mode [ 2205.617908][T16894] bridge_slave_0: entered promiscuous mode [ 2205.627300][T16894] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.636668][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.644080][T16894] bridge_slave_1: entered allmulticast mode [ 2205.654190][T16894] bridge_slave_1: entered promiscuous mode [ 2205.682967][T16920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.690197][T16920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.697927][T16920] bridge_slave_0: entered allmulticast mode [ 2205.707683][T16920] bridge_slave_0: entered promiscuous mode [ 2205.821786][ T586] Bluetooth: hci7: command tx timeout [ 2205.839425][T16920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.848058][T16920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.855584][T16920] bridge_slave_1: entered allmulticast mode [ 2205.863909][T16920] bridge_slave_1: entered promiscuous mode [ 2205.877567][T16902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.892196][T16902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.947241][T16894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.972398][T16908] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.979603][T16908] bridge0: port 1(bridge_slave_0) entered disabled state [ 2206.004622][T16908] bridge_slave_0: entered allmulticast mode [ 2206.012847][T16908] bridge_slave_0: entered promiscuous mode [ 2206.134488][T16894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2206.147873][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 2206.204274][T16908] bridge0: port 2(bridge_slave_1) entered blocking state [ 2206.235864][T16908] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.243668][T16908] bridge_slave_1: entered allmulticast mode [ 2206.254200][T16908] bridge_slave_1: entered promiscuous mode [ 2206.302869][T16920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2206.322610][T16920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2206.420283][T16902] team0: Port device team_slave_0 added [ 2206.439361][T16902] team0: Port device team_slave_1 added [ 2206.535404][T16894] team0: Port device team_slave_0 added [ 2206.547931][T16894] team0: Port device team_slave_1 added [ 2206.574893][T16902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2206.582103][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2206.609016][T16902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2206.625914][T16908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2206.641549][T16908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2206.719840][T16902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2206.727135][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2206.756188][T16902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2206.799330][T16920] team0: Port device team_slave_0 added [ 2206.835703][T16894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2206.850147][T16894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2206.877009][T16894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2206.910623][T16908] team0: Port device team_slave_0 added [ 2206.924591][T16920] team0: Port device team_slave_1 added [ 2206.936250][T16894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2206.943611][T16894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2206.970639][T16894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2206.998164][T16908] team0: Port device team_slave_1 added [ 2207.069796][T16920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2207.084351][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.111980][T16920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2207.237640][T26169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.263996][T16920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2207.271601][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.298172][T16920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2207.331919][ T586] Bluetooth: hci3: command tx timeout [ 2207.341683][ T586] Bluetooth: hci4: command tx timeout [ 2207.396182][T16908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2207.412970][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.440739][T16908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2207.502531][T26169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.527442][T16894] hsr_slave_0: entered promiscuous mode [ 2207.534541][T16894] hsr_slave_1: entered promiscuous mode [ 2207.541312][T16894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2207.549025][T16894] Cannot create hsr debugfs directory [ 2207.570640][T16902] hsr_slave_0: entered promiscuous mode [ 2207.580311][T16902] hsr_slave_1: entered promiscuous mode [ 2207.587159][T16902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2207.595078][T16902] Cannot create hsr debugfs directory [ 2207.602087][T16908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2207.609093][T16908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.636602][T16908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2207.652338][ T586] Bluetooth: hci6: command tx timeout [ 2207.716531][T26169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.855822][T26169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.901625][ T586] Bluetooth: hci7: command tx timeout [ 2208.003581][T16908] hsr_slave_0: entered promiscuous mode [ 2208.011869][T16908] hsr_slave_1: entered promiscuous mode [ 2208.018816][T16908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2208.029191][T16908] Cannot create hsr debugfs directory [ 2208.040129][T16920] hsr_slave_0: entered promiscuous mode [ 2208.048003][T16920] hsr_slave_1: entered promiscuous mode [ 2208.054915][T16920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2208.062874][T16920] Cannot create hsr debugfs directory [ 2208.664975][T26169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.824420][T26169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.912733][T26169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.013929][T26169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.198764][T26169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.328447][T26169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.474293][T26169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.605000][T26169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.728787][T26169] bridge_slave_1: left allmulticast mode [ 2209.735355][T26169] bridge_slave_1: left promiscuous mode [ 2209.741642][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.756069][T26169] bridge_slave_0: left allmulticast mode [ 2209.761964][T26169] bridge_slave_0: left promiscuous mode [ 2209.767709][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.785137][T26169] bridge_slave_1: left allmulticast mode [ 2209.790831][T26169] bridge_slave_1: left promiscuous mode [ 2209.798820][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.808460][T26169] bridge_slave_0: left allmulticast mode [ 2209.815622][T26169] bridge_slave_0: left promiscuous mode [ 2209.821531][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.834458][T26169] bridge_slave_1: left allmulticast mode [ 2209.840116][T26169] bridge_slave_1: left promiscuous mode [ 2209.846670][T26169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.857197][T26169] bridge_slave_0: left allmulticast mode [ 2209.863510][T26169] bridge_slave_0: left promiscuous mode [ 2209.869240][T26169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2211.402204][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2211.415013][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2211.426908][T26169] bond0 (unregistering): Released all slaves [ 2211.687079][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2211.699472][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2211.716908][T26169] bond0 (unregistering): Released all slaves [ 2211.987967][T26169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2212.004269][T26169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2212.017030][T26169] bond0 (unregistering): Released all slaves [ 2212.763178][T16902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2212.881536][T16902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2212.906159][T16902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2213.324308][T16902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2213.746800][T26169] hsr_slave_0: left promiscuous mode [ 2213.799198][T26169] hsr_slave_1: left promiscuous mode [ 2213.844954][T26169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2213.860966][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2213.871835][T26169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2213.879573][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2213.894956][T26169] hsr_slave_0: left promiscuous mode [ 2213.907887][T26169] hsr_slave_1: left promiscuous mode [ 2213.918719][T26169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2213.931599][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2213.939800][T26169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2213.948160][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2213.979804][T26169] hsr_slave_0: left promiscuous mode [ 2213.990824][T26169] hsr_slave_1: left promiscuous mode [ 2214.006974][T26169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2214.023916][T26169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2214.043343][T26169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2214.051841][T26169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2214.187331][T26169] veth1_macvtap: left promiscuous mode [ 2214.199442][T26169] veth0_macvtap: left promiscuous mode [ 2214.208255][T26169] veth1_vlan: left promiscuous mode [ 2214.221503][T26169] veth0_vlan: left promiscuous mode [ 2214.246331][T26169] veth1_vlan: left promiscuous mode [ 2214.260711][T26169] veth0_vlan: left promiscuous mode [ 2214.269139][T26169] veth1_macvtap: left promiscuous mode [ 2214.275215][T26169] veth0_macvtap: left promiscuous mode [ 2214.282556][T26169] veth1_vlan: left promiscuous mode [ 2214.288104][T26169] veth0_vlan: left promiscuous mode [ 2215.562711][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2215.651909][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2217.488314][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2217.609502][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2217.842167][T18408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2219.965753][T26169] team0 (unregistering): Port device team_slave_1 removed [ 2220.065554][T26169] team0 (unregistering): Port device team_slave_0 removed [ 2222.069204][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.521957][T16902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2224.006716][T16920] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2224.048323][T16920] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2224.086081][T16920] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2224.113504][T16902] 8021q: adding VLAN 0 to HW filter on device team0 [ 2224.125207][T16920] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2224.262205][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.269503][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.404739][T18441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3293'. [ 2224.417460][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.424715][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.443964][T18435] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2224.589253][T16894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2224.619661][T16894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2224.636372][T16894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2224.691685][T16894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2224.895307][T16902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2224.986513][T16908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2225.040284][T16908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2225.073595][T16908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2225.094274][T16908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2225.235020][T26169] IPVS: stop unused estimator thread 0... [ 2225.342980][T16920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2225.477501][T16920] 8021q: adding VLAN 0 to HW filter on device team0 [ 2225.501778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.509080][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2225.549574][T16902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2225.563581][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.571021][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2225.664709][T16894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2225.748862][T16894] 8021q: adding VLAN 0 to HW filter on device team0 [ 2225.800662][T16902] veth0_vlan: entered promiscuous mode [ 2225.827719][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.835224][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2225.922608][T16908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2225.955198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.962453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2226.021519][T16902] veth1_vlan: entered promiscuous mode [ 2226.051569][T16908] 8021q: adding VLAN 0 to HW filter on device team0 [ 2226.112752][T25278] bridge0: port 1(bridge_slave_0) entered blocking state [ 2226.119947][T25278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2226.154956][T25278] bridge0: port 2(bridge_slave_1) entered blocking state [ 2226.162180][T25278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2226.253730][T16902] veth0_macvtap: entered promiscuous mode [ 2226.286190][T16902] veth1_macvtap: entered promiscuous mode [ 2226.408465][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.429078][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.440459][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.452525][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.462490][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2226.474254][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.489506][T16902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2226.506116][T16920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2226.525936][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.561695][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.592979][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.626702][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.645798][T16902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.681121][T16902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.713756][T16902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2226.765569][T16902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.775661][T16902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.784770][T16902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.795906][T16902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.889838][T16894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2227.209921][T16908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2227.226262][T25278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.253515][T25278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.321279][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.329151][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.429125][T16894] veth0_vlan: entered promiscuous mode [ 2227.513066][T16920] veth0_vlan: entered promiscuous mode [ 2227.578529][T16920] veth1_vlan: entered promiscuous mode [ 2227.616517][T16894] veth1_vlan: entered promiscuous mode [ 2227.671245][T16908] veth0_vlan: entered promiscuous mode [ 2227.736015][T16908] veth1_vlan: entered promiscuous mode [ 2228.512957][T18531] ALSA: mixer_oss: invalid OSS volume 'D n*@\%΂`.%plÄ/Დ' [ 2228.707795][T16894] veth0_macvtap: entered promiscuous mode [ 2228.795836][T16920] veth0_macvtap: entered promiscuous mode [ 2228.982111][T16894] veth1_macvtap: entered promiscuous mode [ 2229.023779][T16920] veth1_macvtap: entered promiscuous mode [ 2229.036020][T16908] veth0_macvtap: entered promiscuous mode [ 2229.067930][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.089380][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.110543][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.152968][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.187967][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.198742][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.208933][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.219989][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.234886][T16894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2229.259886][T16908] veth1_macvtap: entered promiscuous mode [ 2229.324195][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.368317][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.391489][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.420982][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.452062][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.502818][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.512898][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.524988][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.535082][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.546742][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.568758][T16920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2229.584080][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.613463][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.623619][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.635668][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.646007][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.657237][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.667465][T16894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.679618][T16894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.699193][T16894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2229.744503][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.755425][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.768161][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.788469][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.799883][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.830985][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.860915][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.880919][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.890791][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2229.921096][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.937435][T16920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2229.968090][T16894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.986273][T16894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.995285][T16894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.006009][T16894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.039425][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.050424][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.064048][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.084661][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.102983][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.128174][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.140891][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.156257][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.174298][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.211503][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.260822][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.297568][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.322964][T16908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2230.356770][T16920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.422431][T16920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.448470][T16920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.521037][T16920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.821256][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.854954][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.889243][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.927859][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.956973][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.993182][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2231.006165][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2231.019612][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2231.029835][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2231.040757][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2231.052197][T16908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2231.064344][T16908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2231.077216][T16908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2231.159209][T16908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2231.169408][T16908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2231.183891][T16908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2231.196824][T16908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2231.454363][T26163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2231.465186][T26163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2231.562448][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2231.579065][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2231.595877][T26163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2231.610176][T26163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2231.683012][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2231.733591][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2231.851782][T25278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2231.892526][T25278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2233.672101][T25278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2233.821201][T25278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2235.875522][T18616] input: syz1 as /devices/virtual/input/input87 [ 2237.353397][T18636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3303'. [ 2237.674008][T18624] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2238.001015][ T46] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2238.192909][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 2238.274344][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2238.312053][ T46] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2238.328944][ T46] usb 5-1: Product: syz [ 2238.335589][ T46] usb 5-1: Manufacturer: syz [ 2238.340248][ T46] usb 5-1: SerialNumber: syz [ 2238.348100][ T46] usb 5-1: config 0 descriptor?? [ 2238.357818][ T46] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2238.437647][T18634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3301'. [ 2239.807656][ T46] gspca_zc3xx: reg_w_i err -71 [ 2239.985796][ T46] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2240.033730][ T46] usb 5-1: USB disconnect, device number 84 [ 2240.091177][T22265] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2240.217419][T22184] Bluetooth: hci5: sending frame failed (-49) [ 2240.227085][ T586] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2240.342629][T22265] usb 2-1: Using ep0 maxpacket: 8 [ 2240.356835][T22265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.368591][T22265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.396339][T22265] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 2240.406123][T22265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.433665][T22265] usb 2-1: Product: syz [ 2240.456368][T22265] usb 2-1: Manufacturer: syz [ 2240.492995][T22265] usb 2-1: SerialNumber: syz [ 2240.781096][T22265] usbhid 2-1:1.0: can't add hid device: -22 [ 2240.810104][T22265] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 2240.864366][T22265] usb 2-1: USB disconnect, device number 67 [ 2247.470699][T22184] Bluetooth: hci7: link tx timeout [ 2247.490179][T22184] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 2247.634152][ T586] Bluetooth: hci7: link tx timeout [ 2247.639342][ T586] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 2249.253785][ T6790] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2249.404610][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'. [ 2249.442388][ T6790] usb 5-1: Using ep0 maxpacket: 32 [ 2249.671106][ T586] Bluetooth: hci7: command 0x0406 tx timeout [ 2249.940326][T18748] binder: 18719:18748 ioctl c0306201 20000680 returned -14 [ 2251.195233][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 2251.195360][ T29] audit: type=1326 audit(1725152947.485:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684f579eb9 code=0x7ffc0000 [ 2252.141225][ T6790] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2252.151892][ T6790] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2252.159602][ T6790] usb 5-1: can't read configurations, error -71 [ 2252.231086][ T29] audit: type=1326 audit(1725152947.485:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684f579eb9 code=0x7ffc0000 [ 2252.254269][ T29] audit: type=1326 audit(1725152947.485:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f684f579eb9 code=0x7ffc0000 [ 2252.455530][ T29] audit: type=1326 audit(1725152947.495:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684f579eb9 code=0x7ffc0000 [ 2253.391548][ T29] audit: type=1326 audit(1725152947.495:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684f579eb9 code=0x7ffc0000 [ 2254.168331][ T29] audit: type=1326 audit(1725152947.495:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f684f579eb9 code=0x7ffc0000 [ 2254.305006][ T29] audit: type=1326 audit(1725152947.495:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684f579eb9 code=0x7ffc0000 [ 2254.482396][ T29] audit: type=1326 audit(1725152947.495:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684f579eb9 code=0x7ffc0000 [ 2254.504009][ C0] vkms_vblank_simulate: vblank timer overrun [ 2255.959123][ T586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2256.028687][ T586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2256.041845][ T586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2256.101273][ T586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2256.110094][ T586] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2256.117636][ T586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2256.829344][T11101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.731015][T22184] Bluetooth: hci3: command tx timeout [ 2259.083144][T11101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.221088][ T46] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2259.379529][T11101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.431166][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 2259.457603][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.480173][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2259.494291][ T46] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 2259.503429][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.541673][ T46] usb 2-1: config 0 descriptor?? [ 2259.780300][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 2259.787462][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2259.789443][T11101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.799557][ T46] usb 2-1: USB disconnect, device number 68 [ 2260.315637][T18952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'. [ 2260.421164][T18800] chnl_net:caif_netlink_parms(): no params data found [ 2260.473045][T11101] bridge_slave_1: left allmulticast mode [ 2260.478755][T11101] bridge_slave_1: left promiscuous mode [ 2260.551244][T11101] bridge0: port 2(bridge_slave_1) entered disabled state [ 2260.608872][T11101] bridge_slave_0: left allmulticast mode [ 2260.651266][T11101] bridge_slave_0: left promiscuous mode [ 2260.657164][T11101] bridge0: port 1(bridge_slave_0) entered disabled state [ 2260.771086][T22184] Bluetooth: hci3: command tx timeout [ 2261.159363][T18988] xt_policy: neither incoming nor outgoing policy selected [ 2261.276235][T18988] 9pnet_fd: p9_fd_create_tcp (18988): problem binding to privport [ 2261.323540][ T29] audit: type=1326 audit(1725152957.625:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.3.3333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa76cb79eb9 code=0x0 [ 2262.253261][T18995] futex_wake_op: syz.0.3334 tries to shift op by 35; fix this program [ 2262.953056][T22184] Bluetooth: hci3: command tx timeout [ 2265.873383][T22184] Bluetooth: hci3: command tx timeout [ 2266.035671][T11101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2266.079626][T11101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2266.096540][T11101] bond0 (unregistering): Released all slaves [ 2266.149919][T18975] veth0_vlan: entered allmulticast mode [ 2266.220520][T18978] veth0_vlan: left promiscuous mode [ 2266.272355][T18978] veth0_vlan: entered promiscuous mode [ 2266.325702][T18987] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3333'. [ 2268.529304][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3342'. [ 2268.655071][T18800] bridge0: port 1(bridge_slave_0) entered blocking state [ 2268.717602][T18800] bridge0: port 1(bridge_slave_0) entered disabled state [ 2268.746319][T18800] bridge_slave_0: entered allmulticast mode [ 2268.778842][T18800] bridge_slave_0: entered promiscuous mode [ 2268.821576][T18800] bridge0: port 2(bridge_slave_1) entered blocking state [ 2268.837919][T18800] bridge0: port 2(bridge_slave_1) entered disabled state [ 2268.851556][T18800] bridge_slave_1: entered allmulticast mode [ 2268.868779][T18800] bridge_slave_1: entered promiscuous mode [ 2268.915693][T11101] hsr_slave_0: left promiscuous mode [ 2268.943429][T11101] hsr_slave_1: left promiscuous mode [ 2268.960331][T11101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2268.977076][T11101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2269.010484][T11101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2269.028710][T11101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2269.114941][T11101] veth1_macvtap: left promiscuous mode [ 2269.132996][T11101] veth0_macvtap: left promiscuous mode [ 2269.141125][T11101] veth1_vlan: left promiscuous mode [ 2269.159179][T11101] veth0_vlan: left promiscuous mode [ 2269.211401][ T9267] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2269.572941][ T9267] usb 5-1: Using ep0 maxpacket: 32 [ 2269.598411][ T9267] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2269.610936][ T9267] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2269.623117][ T9267] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2269.634681][ T9267] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 2270.273944][ T9267] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2270.291427][ T9267] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2270.300521][ T9267] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2270.309260][ T9267] usb 5-1: Product: syz [ 2270.313634][ T9267] usb 5-1: Manufacturer: syz [ 2270.318413][ T9267] usb 5-1: SerialNumber: syz [ 2270.327947][ T9267] usb 5-1: config 0 descriptor?? [ 2270.573304][ T9267] ldusb 5-1:0.0: Interrupt in endpoint not found [ 2273.464097][ T9267] usb 5-1: USB disconnect, device number 87 [ 2274.541042][ T29] audit: type=1326 audit(1725152970.805:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19119 comm="syz.4.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06fc779eb9 code=0x7fc00000 [ 2275.124607][T19137] syz.4.3350[19137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2275.124736][T19137] syz.4.3350[19137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2276.266321][T11101] team0 (unregistering): Port device team_slave_1 removed [ 2276.454889][T11101] team0 (unregistering): Port device team_slave_0 removed [ 2277.985825][T18800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2278.021852][T18800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2278.252596][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3353'. [ 2279.049277][T18800] team0: Port device team_slave_0 added [ 2279.181643][T18800] team0: Port device team_slave_1 added [ 2281.012905][T20649] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2281.136874][ T7695] Bluetooth: hci1: command 0x0406 tx timeout [ 2281.513436][T20649] usb 5-1: device not accepting address 88, error -71 [ 2283.499825][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2287.141762][T18800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2287.165547][T18800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2287.243217][T18800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2287.283902][T18800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2287.324597][T18800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2287.440885][T18800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2288.261657][T19268] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2288.410549][T19268] vimc vimc.0: subdev_call error Scaler [ 2288.437044][T19268] ------------[ cut here ]------------ [ 2288.442662][T19268] WARNING: CPU: 0 PID: 19268 at drivers/media/v4l2-core/v4l2-subdev.c:455 call_s_stream+0x222/0x280 [ 2288.454346][T19268] Modules linked in: [ 2288.458305][T19268] CPU: 0 UID: 0 PID: 19268 Comm: syz.0.3362 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 2288.469754][T19268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2288.480129][T19268] RIP: 0010:call_s_stream+0x222/0x280 [ 2288.486091][T19268] Code: f1 25 fa 48 8b 7d 00 48 c7 c6 a0 60 aa 8c 89 da e8 23 a5 de 03 48 bd 00 00 00 00 00 fc ff df e9 06 ff ff ff e8 af ce c1 f9 90 <0f> 0b 90 e9 de fe ff ff 89 e9 80 e1 07 38 c1 0f 8c 09 fe ff ff 48 [ 2288.506011][T19268] RSP: 0000:ffffc9000982f980 EFLAGS: 00010287 [ 2288.512684][T19268] RAX: ffffffff87d1bd31 RBX: 0000000000000000 RCX: 0000000000040000 [ 2288.520711][T19268] RDX: ffffc90015d06000 RSI: 0000000000015071 RDI: 0000000000015072 [ 2288.529227][T19268] RBP: 0000000000000000 R08: ffffffff87d1bb78 R09: fffffbfff1cba0e0 [ 2288.537373][T19268] R10: dffffc0000000000 R11: ffffffff87d1bb10 R12: ffff88802a95c020 [ 2288.545478][T19268] R13: 0000000000000000 R14: 1ffff1100552b833 R15: 0000000000000000 [ 2288.554401][T19268] FS: 00007f68503ae6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 2288.564092][T19268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2288.570961][T19268] CR2: 00007fbb39b2e9d3 CR3: 0000000054472000 CR4: 00000000003506f0 [ 2288.578990][T19268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2288.587080][T19268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2288.595183][T19268] Call Trace: [ 2288.598495][T19268] [ 2288.601593][T19268] ? __warn+0x163/0x4e0 [ 2288.605768][T19268] ? call_s_stream+0x222/0x280 [ 2288.610593][T19268] ? report_bug+0x2b3/0x500 [ 2288.616236][T19268] ? call_s_stream+0x222/0x280 [ 2288.621140][T19268] ? handle_bug+0x3e/0x70 [ 2288.625533][T19268] ? exc_invalid_op+0x1a/0x50 [ 2288.630282][T19268] ? asm_exc_invalid_op+0x1a/0x20 [ 2288.635387][T19268] ? __pfx_call_s_stream+0x10/0x10 [ 2288.640652][T19268] ? call_s_stream+0x68/0x280 [ 2288.645426][T19268] ? call_s_stream+0x221/0x280 [ 2288.651034][T19268] ? call_s_stream+0x222/0x280 [ 2288.655870][T19268] ? __pfx_call_s_stream+0x10/0x10 [ 2288.661491][T19268] ? __pfx_call_s_stream+0x10/0x10 [ 2288.666633][T19268] vimc_streamer_pipeline_terminate+0x219/0x360 [ 2288.672946][T19268] vimc_streamer_s_stream+0x69f/0x800 [ 2288.678559][T19268] vimc_capture_start_streaming+0x230/0x440 [ 2288.684546][T19268] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 2288.691402][T19268] vb2_start_streaming+0x129/0x440 [ 2288.696693][T19268] vb2_core_streamon+0x2b5/0x4c0 [ 2288.701721][T19268] __video_do_ioctl+0xc26/0xde0 [ 2288.706604][T19268] ? __pfx___video_do_ioctl+0x10/0x10 [ 2288.712035][T19268] ? smack_log+0x123/0x540 [ 2288.716512][T19268] ? __might_fault+0xc6/0x120 [ 2288.721274][T19268] video_usercopy+0x89b/0x1180 [ 2288.726083][T19268] ? __pfx___video_do_ioctl+0x10/0x10 [ 2288.731609][T19268] ? __pfx_video_usercopy+0x10/0x10 [ 2288.736834][T19268] ? smack_file_ioctl+0x2a1/0x3a0 [ 2288.742010][T19268] ? __fget_files+0x3f6/0x470 [ 2288.746699][T19268] ? __fget_files+0x29/0x470 [ 2288.751413][T19268] v4l2_ioctl+0x18c/0x1e0 [ 2288.756630][T19268] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2288.761983][T19268] __se_sys_ioctl+0xfc/0x170 [ 2288.766605][T19268] do_syscall_64+0xf3/0x230 [ 2288.771207][T19268] ? clear_bhb_loop+0x35/0x90 [ 2288.776011][T19268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2288.782001][T19268] RIP: 0033:0x7f684f579eb9 [ 2288.786436][T19268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2288.806101][T19268] RSP: 002b:00007f68503ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2288.814575][T19268] RAX: ffffffffffffffda RBX: 00007f684f716208 RCX: 00007f684f579eb9 [ 2288.822615][T19268] RDX: 0000000020000080 RSI: 0000000040045612 RDI: 0000000000000006 [ 2288.830879][T19268] RBP: 00007f684f5e793e R08: 0000000000000000 R09: 0000000000000000 [ 2288.838897][T19268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2288.847018][T19268] R13: 0000000000000000 R14: 00007f684f716208 R15: 00007fff3e7cfe28 [ 2288.855745][T19268] [ 2288.858797][T19268] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2288.866104][T19268] CPU: 0 UID: 0 PID: 19268 Comm: syz.0.3362 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 2288.876973][T19268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2288.887046][T19268] Call Trace: [ 2288.890437][T19268] [ 2288.893455][T19268] dump_stack_lvl+0x241/0x360 [ 2288.898249][T19268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2288.903475][T19268] ? __pfx__printk+0x10/0x10 [ 2288.908123][T19268] ? vscnprintf+0x5d/0x90 [ 2288.912512][T19268] panic+0x349/0x860 [ 2288.916715][T19268] ? __warn+0x172/0x4e0 [ 2288.920908][T19268] ? __pfx_panic+0x10/0x10 [ 2288.925401][T19268] __warn+0x346/0x4e0 [ 2288.929420][T19268] ? call_s_stream+0x222/0x280 [ 2288.934211][T19268] report_bug+0x2b3/0x500 [ 2288.938566][T19268] ? call_s_stream+0x222/0x280 [ 2288.943442][T19268] handle_bug+0x3e/0x70 [ 2288.947612][T19268] exc_invalid_op+0x1a/0x50 [ 2288.952219][T19268] asm_exc_invalid_op+0x1a/0x20 [ 2288.957088][T19268] RIP: 0010:call_s_stream+0x222/0x280 [ 2288.962628][T19268] Code: f1 25 fa 48 8b 7d 00 48 c7 c6 a0 60 aa 8c 89 da e8 23 a5 de 03 48 bd 00 00 00 00 00 fc ff df e9 06 ff ff ff e8 af ce c1 f9 90 <0f> 0b 90 e9 de fe ff ff 89 e9 80 e1 07 38 c1 0f 8c 09 fe ff ff 48 [ 2288.982253][T19268] RSP: 0000:ffffc9000982f980 EFLAGS: 00010287 [ 2288.988359][T19268] RAX: ffffffff87d1bd31 RBX: 0000000000000000 RCX: 0000000000040000 [ 2288.996345][T19268] RDX: ffffc90015d06000 RSI: 0000000000015071 RDI: 0000000000015072 [ 2289.004328][T19268] RBP: 0000000000000000 R08: ffffffff87d1bb78 R09: fffffbfff1cba0e0 [ 2289.012323][T19268] R10: dffffc0000000000 R11: ffffffff87d1bb10 R12: ffff88802a95c020 [ 2289.020327][T19268] R13: 0000000000000000 R14: 1ffff1100552b833 R15: 0000000000000000 [ 2289.028335][T19268] ? __pfx_call_s_stream+0x10/0x10 [ 2289.033482][T19268] ? call_s_stream+0x68/0x280 [ 2289.038200][T19268] ? call_s_stream+0x221/0x280 [ 2289.042994][T19268] ? __pfx_call_s_stream+0x10/0x10 [ 2289.048126][T19268] ? __pfx_call_s_stream+0x10/0x10 [ 2289.053279][T19268] vimc_streamer_pipeline_terminate+0x219/0x360 [ 2289.059644][T19268] vimc_streamer_s_stream+0x69f/0x800 [ 2289.065061][T19268] vimc_capture_start_streaming+0x230/0x440 [ 2289.071035][T19268] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 2289.077573][T19268] vb2_start_streaming+0x129/0x440 [ 2289.082721][T19268] vb2_core_streamon+0x2b5/0x4c0 [ 2289.087691][T19268] __video_do_ioctl+0xc26/0xde0 [ 2289.092586][T19268] ? __pfx___video_do_ioctl+0x10/0x10 [ 2289.097973][T19268] ? smack_log+0x123/0x540 [ 2289.102420][T19268] ? __might_fault+0xc6/0x120 [ 2289.107121][T19268] video_usercopy+0x89b/0x1180 [ 2289.111935][T19268] ? __pfx___video_do_ioctl+0x10/0x10 [ 2289.117330][T19268] ? __pfx_video_usercopy+0x10/0x10 [ 2289.122544][T19268] ? smack_file_ioctl+0x2a1/0x3a0 [ 2289.127597][T19268] ? __fget_files+0x3f6/0x470 [ 2289.132283][T19268] ? __fget_files+0x29/0x470 [ 2289.136972][T19268] v4l2_ioctl+0x18c/0x1e0 [ 2289.141317][T19268] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2289.146206][T19268] __se_sys_ioctl+0xfc/0x170 [ 2289.150820][T19268] do_syscall_64+0xf3/0x230 [ 2289.155345][T19268] ? clear_bhb_loop+0x35/0x90 [ 2289.160045][T19268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2289.165961][T19268] RIP: 0033:0x7f684f579eb9 [ 2289.170394][T19268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2289.190104][T19268] RSP: 002b:00007f68503ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2289.198535][T19268] RAX: ffffffffffffffda RBX: 00007f684f716208 RCX: 00007f684f579eb9 [ 2289.206693][T19268] RDX: 0000000020000080 RSI: 0000000040045612 RDI: 0000000000000006 [ 2289.214676][T19268] RBP: 00007f684f5e793e R08: 0000000000000000 R09: 0000000000000000 [ 2289.222660][T19268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2289.230638][T19268] R13: 0000000000000000 R14: 00007f684f716208 R15: 00007fff3e7cfe28 [ 2289.238645][T19268] [ 2289.241947][T19268] Kernel Offset: disabled [ 2289.246431][T19268] Rebooting in 86400 seconds..