last executing test programs: 8.674835893s ago: executing program 0 (id=241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="510003000000", 0x6) 8.504072452s ago: executing program 0 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @local, 0x4}, 0x1b) 8.327895422s ago: executing program 0 (id=244): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000002600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, r5, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x40}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x1, [], [], [0x0, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000800)) 7.368424288s ago: executing program 2 (id=249): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65b5c8d9b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\x00', 0x16, 0x11, 0x0, @remote, @local, {[], {0x600, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x83}, "30b00afe4e70"}}}}}}}, 0x0) 7.225107877s ago: executing program 2 (id=251): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xb, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x4, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$netrom(r1, &(0x7f0000000340)="c17f6ad0a9c9ce39462248acf73fe14be89a0729d4803555a9c26b16445798ce5825575333bc4851209c6fa1e99cae593c2cf5023d5c24943476bd857bc1f69bd0e1fb0c778f73156026a796f28a6b84d4c047a711ec1638637528c2e9719118702e44dd7e8024b152e87c7502bec4bab520de62c652c52b791f9ced58f5d51eb034e8ee12fbd8b081980615b01344f0a03a422e293805f1c1d120e4a18b8e12e77c799c2d65bb75025dab0686", 0xad, 0x20000000, &(0x7f0000000180)={{0x3, @bcast, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = socket$nl_generic(0x11, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000), 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004140)=[{0x8dffffff, 0x0, 0x0}], 0x1, 0x0) r9 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x2, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.460431321s ago: executing program 3 (id=256): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) 5.16097603s ago: executing program 1 (id=258): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) read(r1, &(0x7f0000001500)=""/91, 0x5b) 4.821742708s ago: executing program 0 (id=259): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001300)="92", 0x2) 4.443133387s ago: executing program 2 (id=262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x4}, 0x4c) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100004fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='fd', &(0x7f00000000c0)='X', 0x1) keyctl$link(0x8, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x405}}}, 0x7) socket$inet_udp(0x2, 0x2, 0x0) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000180)=""/47, 0x2f}], 0x4b, 0x0, 0x0) keyctl$revoke(0x3, r6) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="fefce2920e4a1bf8e1e61b842684d06539b34affbcbaff953240f3d205c8c9170cd0497e405d5fa20791bbad0d040cefd368c98496d15628d8b0840e87987b344b9bb56f375a19d242fae3bd2b9265f65795d3024dc16a5d6ed32cdc50b552c11a301f26b5deb58f310c30905f66a0c769e54e96b437"], 0xe) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r9, 0x1}, &(0x7f0000000080)=0x8) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000180)={'ipvlan0\x00', {0x2, 0x4e21, @loopback}}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0x18c6) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x64, 0x15, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x26, 0x8, "d7b5b9787eb05b12267741138e851d3b8915af465bf75a1f90a47dba1b654014c388"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8091) 4.000558595s ago: executing program 1 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 3.999920685s ago: executing program 2 (id=266): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) inotify_init1(0x80000) close_range(r2, 0xffffffffffffffff, 0x0) 3.785018065s ago: executing program 1 (id=268): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcb09fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffffd]}}) write$uinput_user_dev(r1, &(0x7f0000000680)={'syz1\x00', {0x9, 0x9, 0xcbdb, 0x9}, 0x43, [0x6, 0xfff, 0x6, 0x7fff, 0x7, 0x8, 0x0, 0xfffffffd, 0x7, 0x10001, 0x1, 0x3, 0xffff0000, 0x8000, 0x8, 0x400, 0xa786, 0x9, 0x9e1, 0x6, 0x0, 0xf9d, 0x997, 0x5, 0x80000001, 0x5df, 0x3, 0xcc, 0xfffffff8, 0x100, 0xffffffff, 0x54d7, 0x87a, 0x0, 0x7, 0x3, 0x3, 0xa, 0x3f2, 0x7fff, 0x5, 0x7fff, 0xfffffff8, 0x5, 0xf, 0x1, 0x9, 0x5, 0xea7d, 0x0, 0x41, 0xe00000, 0x51f, 0x959, 0x6, 0x4, 0x6a000000, 0x7, 0x7fff, 0x1, 0x3, 0xba, 0xcd, 0xfffffffc], [0xffffff82, 0x1, 0x7fffffff, 0xfffffffd, 0xff, 0x9, 0x7fffffff, 0xb0, 0x2, 0x8000, 0xd4, 0x5, 0x5, 0x5, 0xdbe, 0x0, 0x7, 0x6, 0x3, 0x401, 0x4, 0x0, 0xfe, 0x8, 0x0, 0xfffffffa, 0x4, 0x6, 0x80000000, 0xfffffffe, 0x7fffffff, 0x7e785f5d, 0x6, 0x8000, 0x83b4, 0x2, 0x40, 0x4, 0x70, 0x0, 0x80, 0x1, 0x4, 0x9476, 0xcd5a, 0x8001, 0x1, 0x8000, 0x69, 0x8, 0x59c, 0x0, 0x6f, 0x81, 0x0, 0x6, 0x4, 0x6, 0x0, 0xfff, 0x0, 0x9, 0x4, 0x7], [0x8001, 0x9, 0x800, 0x2, 0x7fffffff, 0x1e26579b, 0x7, 0xb339, 0x101, 0x7, 0x8f77, 0x7ff, 0x9, 0x8, 0x6, 0x9, 0xfdb, 0x6, 0x6, 0x0, 0x10001, 0x4, 0x7, 0x5d0d, 0x3, 0x3, 0xd45, 0x2, 0xffff, 0x8000, 0x0, 0x2, 0x4, 0x9, 0x0, 0x1085, 0x7, 0x1, 0x3ff, 0x1, 0x3, 0x69e0, 0x3ff, 0x495, 0x6, 0xe, 0x9, 0x9, 0x0, 0x0, 0x5, 0x6, 0x10001, 0x5, 0x6, 0x5, 0xffffffff, 0x9, 0x800, 0x3, 0x3, 0x6, 0x80000000, 0x8], [0x7, 0x3, 0x62c652cc, 0x8, 0x2, 0x8, 0xffffffc0, 0x3ff, 0x4, 0x8, 0x9, 0x0, 0x7, 0x7, 0x77, 0x3, 0x5, 0x5, 0x2, 0xa53, 0x3, 0x1, 0x4, 0x800, 0x2, 0x1, 0xff, 0x7, 0x80, 0x1, 0x3, 0x7fffffff, 0xfb, 0x5, 0xffe00, 0x5e0, 0x3, 0x6e55, 0xffff79bd, 0xfffffff9, 0x4, 0x7, 0x1, 0x12fe, 0x5, 0x5, 0x40, 0x3, 0x3, 0x7, 0x4, 0x5, 0x200, 0xe, 0x80, 0x80, 0x0, 0x77a30, 0x7, 0x90, 0x1, 0x3, 0x2, 0x6]}, 0x45c) 3.784841734s ago: executing program 4 (id=269): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x23, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a"]}]}, 0x38}], 0x1}, 0x0) 3.551132004s ago: executing program 2 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x80000}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 3.441331843s ago: executing program 2 (id=271): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @multicast}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x2b) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.389113553s ago: executing program 1 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) 3.388892683s ago: executing program 3 (id=273): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@none, 0x26, 0x6, 0x5f, 'V&+', 0x3, 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x10, 0x7f, "be83a0", 0x7, 0x1}]}}}, 0x22) 3.325358163s ago: executing program 3 (id=274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x709, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044051}, 0x20010844) r2 = syz_usbip_server_init(0x3) write$usbip_server(r2, &(0x7f00000000c0)=@ret_submit={{0x3, 0x9, 0x0, 0x0, 0x2}, 0x7, 0x9e, 0x7f, 0x0, 0x11, 0x0, "5f5437581bafa0781b68157c60e772e59c1ee7b067f9eda0a3c924d498b259a62dcce32473e46650a60e71fc54d03f43a100ca87c1dcb8f8223b052e2797b8b0cb56b742a7ed17f6d8b07e0752453df03d4c2c73274d5dd8a5836f4ac031f7f11c54c17c12b4edec643154fcd98c504d96c786e9369f5e686b929da3ceb7637798a74a50340ac2654179d2981b7c259eeea2a9bfc11eebcbd93d855d8ad3"}, 0xce) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '::^\'-]}Z.\x00'}) 3.211432792s ago: executing program 1 (id=275): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0xc) tee(r2, r5, 0x8f5, 0x0) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r7, 0x10d, 0xc, 0x0, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r8, 0x0, 0x2000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) 3.121022142s ago: executing program 4 (id=276): syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000040aca7440240000102030109022d00010106b006090400010103010001070000001001228c070905810310007f08d57fe8415f"], 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xfe73, 0x10101, 0x0, 0x3}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000000000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1, 0x40000000000, 0x0, 0x0, 0x1000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.074240862s ago: executing program 0 (id=277): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639a", 0x51, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000"]) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={0x0}}, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.369661109s ago: executing program 3 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$notify(r1, 0x402, 0x8000003d) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000440)=0x2, 0x4) fcntl$setsig(r1, 0xa, 0x21) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) 2.046256198s ago: executing program 0 (id=280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000376, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x57c91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) fsopen(&(0x7f0000000280)='smb3\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x0, &(0x7f0000000800)) 1.980753657s ago: executing program 3 (id=281): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xdf, 0x40}, 0xc) 1.134453844s ago: executing program 4 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, 0x0) 1.048784594s ago: executing program 3 (id=283): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80060}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0x4142, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc029900000000761ad367dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33719cb230328931deb95ef3fcafb1de27743a93f4715976edec860ab4dc3a4f514173187437437938d275a6d39cea", 0xd7, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'team_slave_0\x00', {0x80000001}, 0x9}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, 0x0) 939.432724ms ago: executing program 4 (id=284): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06055c8, &(0x7f0000000380)={0x0, 0x1, {0x53, 0x7, 0x400, {0x8, 0x2}, {0x8206, 0x1c00}, @cond=[{0x101, 0x3, 0x9, 0x45be, 0xf, 0x80e2}, {0xc3d8, 0x7, 0x1, 0x3, 0x9, 0x8}]}, {0x52, 0x5b29, 0x2, {0x5, 0x3}, {0x0, 0x9}, @cond=[{0x7, 0x2, 0xfc01, 0x3ff, 0x3}, {0x6, 0x7, 0x7d10, 0x6, 0x3, 0x5}]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x5c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 596.26µs ago: executing program 1 (id=285): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1a0d53ae"], 0x1d) 0s ago: executing program 4 (id=286): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000002c0)="cb601b87c32de50f5edc863ee2448204fdf3cf3a5f87a7266825616f724bddb9b3d0d558f14057bdfec2b4779fbb9f64337da3a90b7e839a493ee33a1be682ed630e70780c4dad5c86ed47001b37f311bdd39b267d779455ebf03d13dbef3f78d3f08e694fe0ccbc2065e8c0bd0454b179d56b4f17204b37f47acad965ceaaa75a266d818bb8f40bdda94d3f21", 0x8d) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e65742c706f727400"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a31000000000500010007"], 0x5c}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)}], 0x1}, 0x40f0) io_setup(0x6, &(0x7f0000001380)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=0x0, @ANYBLOB="091a0000000000000000080000000c0001800600010000000000"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000f2730088819aba394f56bfce776476a24f808f308dd7c413cbfbb363357647526de39ef322817f33694be041e74ae003aaeea89b25b8c35132795be121", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002"], 0x3c}}, 0x4000000) shutdown(r3, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 57.770320][ T4158] cgroup: Unknown subsys name 'net' [ 57.881837][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.368599][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.247843][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 61.356751][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 61.408831][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 61.428773][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 61.480248][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.488696][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.497436][ T4170] device bridge_slave_0 entered promiscuous mode [ 61.506315][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 61.540536][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.547825][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.555893][ T4170] device bridge_slave_1 entered promiscuous mode [ 61.612564][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.619656][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.627873][ T4178] device bridge_slave_0 entered promiscuous mode [ 61.649087][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.662048][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.679199][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.686548][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.694619][ T4178] device bridge_slave_1 entered promiscuous mode [ 61.735276][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.742523][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.750484][ T4172] device bridge_slave_0 entered promiscuous mode [ 61.789471][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.796850][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.804971][ T4172] device bridge_slave_1 entered promiscuous mode [ 61.829870][ T4170] team0: Port device team_slave_0 added [ 61.836169][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.843562][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.851645][ T4176] device bridge_slave_0 entered promiscuous mode [ 61.860670][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.887397][ T4170] team0: Port device team_slave_1 added [ 61.893577][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.900662][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.908779][ T4176] device bridge_slave_1 entered promiscuous mode [ 61.917493][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.928656][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.938021][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.945474][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.953600][ T4168] device bridge_slave_0 entered promiscuous mode [ 61.985547][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.994793][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.002012][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.010014][ T4168] device bridge_slave_1 entered promiscuous mode [ 62.055808][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.063195][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.089160][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.102614][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.114667][ T4178] team0: Port device team_slave_0 added [ 62.122457][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.146888][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.154088][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.180290][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.193209][ T4178] team0: Port device team_slave_1 added [ 62.212525][ T4172] team0: Port device team_slave_0 added [ 62.228239][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.264196][ T4172] team0: Port device team_slave_1 added [ 62.272323][ T4176] team0: Port device team_slave_0 added [ 62.279774][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.290092][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.297887][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.324327][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.345130][ T4176] team0: Port device team_slave_1 added [ 62.367308][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.374481][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.400539][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.447656][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.454904][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.481165][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.502530][ T4168] team0: Port device team_slave_0 added [ 62.508807][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.517067][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.543507][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.558948][ T4170] device hsr_slave_0 entered promiscuous mode [ 62.565991][ T4170] device hsr_slave_1 entered promiscuous mode [ 62.582555][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.589546][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.615801][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.628371][ T4168] team0: Port device team_slave_1 added [ 62.635161][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.642181][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.668484][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.718622][ T4178] device hsr_slave_0 entered promiscuous mode [ 62.725712][ T4178] device hsr_slave_1 entered promiscuous mode [ 62.732883][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.740640][ T4178] Cannot create hsr debugfs directory [ 62.747740][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.755259][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.781460][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.794155][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.801265][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.827187][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.923927][ T4172] device hsr_slave_0 entered promiscuous mode [ 62.930985][ T4172] device hsr_slave_1 entered promiscuous mode [ 62.932522][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 62.941523][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 62.949514][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 62.949584][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.956028][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 62.969907][ T4172] Cannot create hsr debugfs directory [ 62.986600][ T4176] device hsr_slave_0 entered promiscuous mode [ 62.993631][ T4176] device hsr_slave_1 entered promiscuous mode [ 63.000199][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.008209][ T4176] Cannot create hsr debugfs directory [ 63.013759][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 63.068661][ T4168] device hsr_slave_0 entered promiscuous mode [ 63.075842][ T4168] device hsr_slave_1 entered promiscuous mode [ 63.082630][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.090198][ T4168] Cannot create hsr debugfs directory [ 63.365057][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.384688][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.397512][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.408623][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.452131][ T4178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.462274][ T4178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.483455][ T4178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.498465][ T4178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.558690][ T4172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.569007][ T4172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.599947][ T4172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.619652][ T4172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.654211][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.698822][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.706755][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.717125][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.726520][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.747072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.756295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.767563][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.775113][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.791533][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.801396][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.811733][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.820797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.854092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.863461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.873866][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.881048][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.919720][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.948448][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.958306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.972201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.984738][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.995952][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.024802][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.033515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.042837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.052423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.062376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.072163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.089334][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.098565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.108322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.121671][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.140068][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.161919][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.169799][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.177880][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.187244][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.196573][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.205339][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.214069][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.223494][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.232431][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.239576][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.247990][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.262114][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.278389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.288175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.297738][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.304883][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.319999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.329493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.338540][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.345689][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.370290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.379518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.388973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.400382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.409538][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.416746][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.439381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.451561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.490417][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.508452][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.518543][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.529981][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.538935][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.553948][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.563619][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.582660][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.591457][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.600467][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.639451][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.650373][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.667673][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.677044][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.686301][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.696063][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.706553][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.715272][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.724086][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.732504][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.740869][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.762947][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.773695][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.792112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.799688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.807402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.816595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.825577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.835879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.854337][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.874786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.884158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.893724][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.900825][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.909219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.919030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.928015][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.935145][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.949908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.963881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.975787][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.000528][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.011455][ T4214] Bluetooth: hci0: command 0x041b tx timeout [ 65.031697][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 65.037976][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 65.044246][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.051724][ T4214] Bluetooth: hci4: command 0x041b tx timeout [ 65.091573][ T4214] Bluetooth: hci3: command 0x041b tx timeout [ 65.097690][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.108484][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.117914][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.127479][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.136828][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.145056][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.153964][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.163297][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.172901][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.186308][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.195963][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.205633][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.212833][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.227057][ T4170] device veth0_vlan entered promiscuous mode [ 65.265601][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.274147][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.288982][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.298165][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.307415][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.316906][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.325806][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.335620][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.342769][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.350576][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.359397][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.368664][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.377772][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.394385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.406011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.419115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.427410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.453064][ T4170] device veth1_vlan entered promiscuous mode [ 65.464056][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.472455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.482719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.491415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.499055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.515665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.527109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.535910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.548887][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.563121][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.630074][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.641816][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.650502][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.661026][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.671442][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.706251][ T4170] device veth0_macvtap entered promiscuous mode [ 65.741742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.761741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.805452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.816374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.826537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.839734][ T4170] device veth1_macvtap entered promiscuous mode [ 65.862098][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.885346][ T4172] device veth0_vlan entered promiscuous mode [ 65.894164][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.903781][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.914597][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.926693][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.938730][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.964114][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.986715][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.995224][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.003611][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.011796][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.019238][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.028312][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.037497][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.046426][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.059841][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.075623][ T4172] device veth1_vlan entered promiscuous mode [ 66.086979][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.096231][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.104607][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.114588][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.133623][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.142869][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.153306][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.162628][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.198761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.208230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.219763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.275010][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.283788][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.294320][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.305364][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.314821][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.323474][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.333719][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.341925][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.349805][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.358006][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.395190][ T4178] device veth0_vlan entered promiscuous mode [ 66.433051][ T4168] device veth0_vlan entered promiscuous mode [ 66.445746][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.459897][ T4178] device veth1_vlan entered promiscuous mode [ 66.476852][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.484987][ T4176] device veth0_vlan entered promiscuous mode [ 66.500156][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.508692][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.517602][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.527376][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.537180][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.548285][ T4172] device veth0_macvtap entered promiscuous mode [ 66.575582][ T4168] device veth1_vlan entered promiscuous mode [ 66.585126][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.594403][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.605688][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.615889][ T4172] device veth1_macvtap entered promiscuous mode [ 66.626141][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.641312][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.663175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.675665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.683904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.693370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.703661][ T4176] device veth1_vlan entered promiscuous mode [ 66.738075][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.753171][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.765976][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.784559][ T4178] device veth0_macvtap entered promiscuous mode [ 66.816736][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.832256][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.840615][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.878805][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.889903][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.899149][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.907802][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.924423][ T4178] device veth1_macvtap entered promiscuous mode [ 66.935824][ T4176] device veth0_macvtap entered promiscuous mode [ 66.943984][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.955800][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.967587][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.981372][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.990211][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.999293][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.008979][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.043732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.053668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.062410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.072029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.081675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.090339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.091703][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 67.105882][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 67.107434][ T4168] device veth0_macvtap entered promiscuous mode [ 67.114271][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 67.125878][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 67.126873][ T4176] device veth1_macvtap entered promiscuous mode [ 67.157540][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.168912][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.171240][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 67.180684][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.185449][ T4212] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.196287][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.215177][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.227870][ T4168] device veth1_macvtap entered promiscuous mode [ 67.244585][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.255440][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.266928][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.275761][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.284573][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.311383][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.324218][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.338546][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.349457][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.361934][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.374755][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.387256][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.397407][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.408196][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.419189][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.430646][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.443226][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.446755][ T4212] usb 2-1: Using ep0 maxpacket: 32 [ 67.456710][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.466564][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.475906][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.485131][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.499622][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.508675][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.517686][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.526803][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.537919][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.550602][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.561333][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.572966][ T4212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.576599][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.583317][ T4212] usb 2-1: config 0 has no interfaces? [ 67.609043][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.620028][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.631322][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.642213][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.656606][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.670149][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.681641][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.692226][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.704356][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.714350][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.725185][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.737556][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.741420][ T4212] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 67.752105][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.761892][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.764824][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.769980][ T4212] usb 2-1: Product: syz [ 67.779233][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.789631][ T4212] usb 2-1: Manufacturer: syz [ 67.792326][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.795793][ T4212] usb 2-1: SerialNumber: syz [ 67.810768][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.822071][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.842100][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.847025][ T4212] usb 2-1: config 0 descriptor?? [ 67.857481][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.868158][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.879082][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.889197][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.905747][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.917327][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.939874][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.950755][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.960556][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.969573][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.983389][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.992426][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.013076][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.031698][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.036983][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.040444][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.040510][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.040542][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.118861][ T4214] usb 2-1: USB disconnect, device number 2 [ 68.141373][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.203746][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.222768][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.247666][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.292999][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.302851][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.310829][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.326345][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.336526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.352613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.379262][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.432579][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.447114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.480017][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.489928][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.503867][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.509736][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.527747][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.559572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.572903][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.598692][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.651077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.747912][ T4258] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6'. [ 68.825460][ T4258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 70.440292][ T2286] Bluetooth: hci0: command 0x0419 tx timeout [ 70.465531][ T2286] Bluetooth: hci1: command 0x0419 tx timeout [ 70.471702][ T2286] Bluetooth: hci2: command 0x0419 tx timeout [ 70.477819][ T2286] Bluetooth: hci4: command 0x0419 tx timeout [ 70.484193][ T2286] Bluetooth: hci3: command 0x0419 tx timeout [ 70.988826][ T4280] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 71.201769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.337093][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.345246][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.496581][ T4300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.516541][ T4320] input: syz0 as /devices/virtual/input/input5 [ 74.929686][ T4325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.778445][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 75.920980][ T4340] 9pnet_virtio: no channels available for device syz [ 75.940927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.949888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.958887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.967810][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.976825][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.985734][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.025806][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.070660][ T4338] device veth1_macvtap left promiscuous mode [ 76.101110][ T4338] device macsec0 entered promiscuous mode [ 77.071136][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.561314][ T21] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 77.649223][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.925676][ T21] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 78.189708][ T21] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 78.211005][ T21] usb 3-1: Manufacturer: syz [ 78.217794][ T21] usb 3-1: config 0 descriptor?? [ 78.243611][ T4370] netlink: 'syz.4.38': attribute type 10 has an invalid length. [ 78.275739][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.284205][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.421596][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.428816][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.437126][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.444317][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.452082][ T21] rc_core: IR keymap rc-hauppauge not found [ 78.458642][ T21] Registered IR keymap rc-empty [ 78.481141][ T4370] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 78.493476][ T21] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 78.510397][ T21] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 78.578839][ T21] usb 3-1: USB disconnect, device number 2 [ 78.991214][ T4215] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.182115][ T4398] binder: 4397:4398 ioctl c0306201 20000140 returned -14 [ 79.232837][ T4215] usb 2-1: Using ep0 maxpacket: 8 [ 79.353679][ T4215] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 79.395524][ T4215] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 79.435750][ T4215] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.493766][ T4215] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.531131][ T4215] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.546496][ T4215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.646718][ T4408] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.741088][ T4404] kvm: pic: non byte read [ 79.753405][ T4404] kvm: pic: level sensitive irq not supported [ 79.754012][ T4404] kvm: pic: non byte read [ 79.794984][ T4404] kvm: pic: level sensitive irq not supported [ 79.795347][ T4404] kvm: pic: non byte read [ 79.811313][ T4215] usb 2-1: usb_control_msg returned -32 [ 79.820207][ T4215] usbtmc 2-1:16.0: can't read capabilities [ 79.852210][ T4404] kvm: pic: level sensitive irq not supported [ 79.852319][ T4404] kvm: pic: non byte read [ 79.896390][ T4215] usb 2-1: USB disconnect, device number 3 [ 79.942291][ T4404] kvm: pic: level sensitive irq not supported [ 79.942377][ T4404] kvm: pic: non byte read [ 79.991734][ T4404] kvm: pic: level sensitive irq not supported [ 79.991954][ T4404] kvm: pic: non byte read [ 80.030191][ T4404] kvm: pic: level sensitive irq not supported [ 80.030551][ T4404] kvm: pic: non byte read [ 80.997657][ T4436] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.706914][ T1327] cfg80211: failed to load regulatory.db [ 82.579581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 82.795643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.100913][ C1] sched: RT throttling activated [ 84.430467][ T4455] overlayfs: failed to resolve './file0': -2 [ 84.744131][ T4211] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.408558][ T4475] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.651388][ T4211] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 85.741172][ T4211] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.761024][ T4211] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.781285][ T4211] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.827740][ T4484] 9pnet_virtio: no channels available for device syz [ 85.981061][ T4211] usb 3-1: unable to read config index 1 descriptor/all [ 86.002666][ T4211] usb 3-1: can't read configurations, error -71 [ 86.557848][ T4499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 87.052980][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 87.976979][ T4511] input: syz0 as /devices/virtual/input/input7 [ 90.435589][ T4542] block nbd1: shutting down sockets [ 90.954418][ T4556] input: syz0 as /devices/virtual/input/input8 [ 91.441176][ T4216] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.841329][ T4216] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 91.865223][ T4216] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 91.895750][ T4216] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.995912][ T4216] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.024024][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.043189][ T4577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.104'. [ 92.072488][ T4216] usb 3-1: config 0 descriptor?? [ 92.101838][ T4566] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.133513][ T4216] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 93.271028][ T4215] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.501147][ T1327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.524877][ T4215] usb 5-1: Using ep0 maxpacket: 32 [ 93.691119][ T4215] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.760994][ T1327] usb 1-1: Using ep0 maxpacket: 8 [ 93.781044][ T4215] usb 5-1: config 17 has an invalid interface number: 11 but max is 0 [ 93.796545][ T4215] usb 5-1: config 17 has no interface number 0 [ 93.811588][ T4215] usb 5-1: config 17 interface 11 has no altsetting 0 [ 93.911171][ T1327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.942534][ T1327] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.981121][ T4215] usb 5-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 94.004617][ T4215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.039019][ T4215] usb 5-1: Product: syz [ 94.070865][ T1327] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 94.091746][ T4215] usb 5-1: Manufacturer: syz [ 94.117471][ T4215] usb 5-1: SerialNumber: syz [ 94.355004][ T1327] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 94.370737][ T1327] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 94.382565][ T1327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.454365][ T1327] hub 1-1:1.0: bad descriptor, ignoring hub [ 94.462077][ T1327] hub: probe of 1-1:1.0 failed with error -5 [ 94.465876][ T21] usb 3-1: USB disconnect, device number 5 [ 94.475727][ T4612] device hsr0 entered promiscuous mode [ 94.476349][ T1327] cdc_wdm 1-1:1.0: skipping garbage [ 94.492232][ T1327] cdc_wdm 1-1:1.0: skipping garbage [ 94.502287][ T1327] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 94.508942][ T1327] cdc_wdm 1-1:1.0: Unknown control protocol [ 94.519257][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 94.558155][ T4612] device hsr_slave_0 left promiscuous mode [ 94.574738][ T4612] device hsr_slave_1 left promiscuous mode [ 94.612034][ T4215] usb 5-1: bad CDC descriptors [ 94.629224][ T4215] usb 5-1: USB disconnect, device number 2 [ 94.684062][ T4618] openvswitch: netlink: Message has 16 unknown bytes. [ 94.684096][ T4612] device hsr0 left promiscuous mode [ 94.793892][ T4213] usb 1-1: USB disconnect, device number 2 [ 94.946418][ T4624] Zero length message leads to an empty skb [ 95.141057][ T4213] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 95.191496][ T4216] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.591357][ T4213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.601799][ T4213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.610965][ T4213] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 95.622301][ T4213] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 95.631532][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.671119][ T4216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.682388][ T4595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.695627][ T4216] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.706451][ T4213] hub 1-1:1.0: bad descriptor, ignoring hub [ 95.715280][ T4213] hub: probe of 1-1:1.0 failed with error -5 [ 95.729598][ T4213] cdc_wdm 1-1:1.0: skipping garbage [ 95.736915][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.750182][ T4213] cdc_wdm 1-1:1.0: skipping garbage [ 95.759537][ T4216] usb 3-1: config 0 descriptor?? [ 95.769301][ T4213] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 95.775711][ T4213] cdc_wdm 1-1:1.0: Unknown control protocol [ 95.968159][ T4642] binder: 4641:4642 ioctl c0306201 0 returned -14 [ 96.041686][ T4213] usb 1-1: USB disconnect, device number 3 [ 96.101075][ T4216] usbhid 3-1:0.0: can't add hid device: -71 [ 96.107099][ T4216] usbhid: probe of 3-1:0.0 failed with error -71 [ 96.128374][ T4216] usb 3-1: USB disconnect, device number 6 [ 96.461608][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.640979][ T4216] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.731048][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 96.852771][ T1107] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.891166][ T1107] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.901172][ T1107] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.911466][ T1107] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.933800][ T1107] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.940772][ T4216] usb 3-1: Using ep0 maxpacket: 32 [ 96.943113][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.091654][ T4216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.136637][ T4216] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 97.189324][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.211087][ T1107] usb 4-1: usb_control_msg returned -32 [ 97.216820][ T1107] usbtmc 4-1:16.0: can't read capabilities [ 97.316666][ T4216] usb 3-1: config 0 descriptor?? [ 97.431226][ T4216] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 97.507589][ T4216] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 97.634956][ T4622] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 97.654861][ T4622] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 97.873924][ T4216] usb 3-1: USB disconnect, device number 7 [ 97.901526][ T4216] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 99.113384][ T4704] 9pnet: Insufficient options for proto=fd [ 99.411797][ T4213] usb 4-1: USB disconnect, device number 2 [ 100.714588][ T4723] block nbd3: shutting down sockets [ 101.161511][ T4743] tmpfs: Unknown parameter 'usrquota' [ 103.491351][ T4783] input: syz0 as /devices/virtual/input/input9 [ 104.542893][ T4801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.168'. [ 106.625569][ T4826] tmpfs: Unknown parameter 'usrquota' [ 107.125937][ T4831] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 107.283963][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.314250][ T4831] team0: Port device batadv0 added [ 107.674670][ T4843] tmpfs: Unknown parameter 'usrquota' [ 107.821968][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 109.411349][ C1] llc_process_tmr_ev: timer called on closed connection [ 111.354998][ T4879] crypto_alloc_aead failed rc=-4 [ 111.583845][ T4903] capability: warning: `syz.2.201' uses deprecated v2 capabilities in a way that may be insecure [ 112.891056][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.901303][ T4215] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.032091][ T4923] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 113.051991][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.059355][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.261281][ T1107] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.270273][ T4215] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 113.278794][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.289257][ T1107] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.302166][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.311736][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 113.323125][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 113.381093][ T4215] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 113.390272][ T4215] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 113.399911][ T4215] usb 1-1: Manufacturer: syz [ 113.424684][ T4215] usb 1-1: config 0 descriptor?? [ 113.451144][ T1107] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.460547][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.469649][ T1107] usb 4-1: Product: syz [ 113.480672][ T1107] usb 4-1: Manufacturer: syz [ 113.543551][ T1107] cdc_wdm 4-1:1.0: skipping garbage [ 113.548982][ T1107] cdc_wdm 4-1:1.0: skipping garbage [ 113.570485][ T1107] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 113.576518][ T1107] cdc_wdm 4-1:1.0: Unknown control protocol [ 113.582666][ T4215] rc_core: IR keymap rc-hauppauge not found [ 113.588625][ T4215] Registered IR keymap rc-empty [ 113.599616][ T4215] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 113.647573][ T4215] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 113.685326][ T4920] udc-core: couldn't find an available UDC or it's busy [ 113.692611][ T4920] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.714054][ T4215] usb 1-1: USB disconnect, device number 4 [ 113.763120][ T21] usb 4-1: USB disconnect, device number 3 [ 121.063984][ T5048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 121.241514][ T5048] netlink: 148 bytes leftover after parsing attributes in process `syz.2.246'. [ 122.000720][ T5062] input: syz1 as /devices/virtual/input/input11 [ 122.050215][ T5062] input: failed to attach handler leds to device input11, error: -6 [ 123.252532][ T4214] Bluetooth: hci4: command 0x0405 tx timeout [ 123.583697][ T5079] netlink: 92 bytes leftover after parsing attributes in process `syz.1.257'. [ 123.611197][ T5063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.712796][ T4214] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.950755][ T4214] usb 4-1: Using ep0 maxpacket: 16 [ 124.065615][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.095067][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.121194][ T4214] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.199226][ T4214] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 124.228561][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.255031][ T4214] usb 4-1: config 0 descriptor?? [ 124.360363][ T4211] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.617792][ T5097] sctp: [Deprecated]: syz.2.262 (pid 5097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.617792][ T5097] Use struct sctp_sack_info instead [ 124.634245][ T4211] usb 1-1: Using ep0 maxpacket: 8 [ 124.728335][ T4214] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 124.762495][ T4214] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 124.762600][ T4211] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.782394][ T4214] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 124.798319][ T4211] usb 1-1: config 0 has no interface number 0 [ 124.815429][ T4214] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 124.834706][ T4214] hid-generic 0003:0955:7214.0001: unknown main item tag 0x0 [ 124.838712][ T4211] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.863627][ T4211] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.881529][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.929401][ T4211] usb 1-1: config 0 descriptor?? [ 124.941893][ T5102] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 124.953422][ T4214] hid-generic 0003:0955:7214.0001: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 125.000029][ T4211] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 125.056636][ T4214] usb 4-1: USB disconnect, device number 4 [ 125.242992][ T4246] usb 1-1: USB disconnect, device number 5 [ 125.605373][ T5124] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 125.612151][ T5124] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.640092][ T5124] vhci_hcd vhci_hcd.0: Device attached [ 125.650953][ T5125] vhci_hcd: connection closed [ 125.671593][ T9] vhci_hcd: stop threads [ 125.703055][ T9] vhci_hcd: release socket [ 125.720804][ T9] vhci_hcd: disconnect device [ 127.999696][ T5157] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.528726][ T4212] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 128.592458][ T4212] Bluetooth: hci3: Injecting HCI hardware error event [ 128.649397][ T4184] Bluetooth: hci3: hardware error 0x00 [ 128.913873][ T4182] ================================================================== [ 128.922325][ T4182] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11f1/0x3f50 [ 128.930177][ T4182] Read of size 1 at addr ffff888079b62604 by task kworker/u5:6/4182 [ 128.938167][ T4182] [ 128.940505][ T4182] CPU: 1 PID: 4182 Comm: kworker/u5:6 Not tainted 5.15.177-syzkaller #0 [ 128.948850][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 128.951153][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 128.958923][ T4182] Workqueue: hci1 hci_rx_work [ 128.972464][ T4182] Call Trace: [ 128.975757][ T4182] [ 128.978704][ T4182] dump_stack_lvl+0x1e3/0x2d0 [ 128.983413][ T4182] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 128.989064][ T4182] ? _printk+0xd1/0x120 [ 128.993242][ T4182] ? __wake_up_klogd+0xcc/0x100 [ 128.998112][ T4182] ? panic+0x860/0x860 [ 129.002192][ T4182] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 129.007683][ T4182] print_address_description+0x63/0x3b0 [ 129.013239][ T4182] ? hci_le_meta_evt+0x11f1/0x3f50 [ 129.018356][ T4182] kasan_report+0x16b/0x1c0 [ 129.022863][ T4182] ? hci_le_meta_evt+0x11f1/0x3f50 [ 129.027981][ T4182] hci_le_meta_evt+0x11f1/0x3f50 [ 129.032917][ T4182] ? __lock_acquire+0x1ff0/0x1ff0 [ 129.037961][ T4182] ? hci_remote_host_features_evt+0x280/0x280 [ 129.044027][ T4182] ? __mutex_unlock_slowpath+0x218/0x750 [ 129.049664][ T4182] ? hci_event_packet+0x3b4/0x1550 [ 129.054877][ T4182] ? mutex_unlock+0x10/0x10 [ 129.059388][ T4182] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 129.065367][ T4182] ? print_irqtrace_events+0x210/0x210 [ 129.070827][ T4182] hci_event_packet+0xc41/0x1550 [ 129.075770][ T4182] ? rcu_lock_release+0x20/0x20 [ 129.080717][ T4182] ? hci_send_to_monitor+0x99/0x4d0 [ 129.085917][ T4182] hci_rx_work+0x237/0xa10 [ 129.090342][ T4182] process_one_work+0x8a1/0x10c0 [ 129.095291][ T4182] ? worker_detach_from_pool+0x260/0x260 [ 129.100992][ T4182] ? _raw_spin_lock_irqsave+0x120/0x120 [ 129.106549][ T4182] ? kthread_data+0x4e/0xc0 [ 129.111056][ T4182] ? wq_worker_running+0x97/0x170 [ 129.116080][ T4182] worker_thread+0xaca/0x1280 [ 129.120789][ T4182] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 129.126707][ T4182] kthread+0x3f6/0x4f0 [ 129.130795][ T4182] ? rcu_lock_release+0x20/0x20 [ 129.135644][ T4182] ? kthread_blkcg+0xd0/0xd0 [ 129.140231][ T4182] ret_from_fork+0x1f/0x30 [ 129.144657][ T4182] [ 129.147761][ T4182] [ 129.150079][ T4182] Allocated by task 5166: [ 129.154400][ T4182] ____kasan_kmalloc+0xba/0xf0 [ 129.159181][ T4182] __kmalloc_node_track_caller+0x195/0x390 [ 129.164999][ T4182] __alloc_skb+0x12c/0x590 [ 129.169412][ T4182] vhci_write+0xbc/0x430 [ 129.173735][ T4182] vfs_write+0xacd/0xe50 [ 129.177982][ T4182] ksys_write+0x1a2/0x2c0 [ 129.182304][ T4182] do_syscall_64+0x3b/0xb0 [ 129.186803][ T4182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.192696][ T4182] [ 129.195014][ T4182] The buggy address belongs to the object at ffff888079b62400 [ 129.195014][ T4182] which belongs to the cache kmalloc-512 of size 512 [ 129.209065][ T4182] The buggy address is located 4 bytes to the right of [ 129.209065][ T4182] 512-byte region [ffff888079b62400, ffff888079b62600) [ 129.222687][ T4182] The buggy address belongs to the page: [ 129.228320][ T4182] page:ffffea0001e6d800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79b60 [ 129.238476][ T4182] head:ffffea0001e6d800 order:2 compound_mapcount:0 compound_pincount:0 [ 129.246796][ T4182] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 129.254793][ T4182] raw: 00fff00000010200 ffffea0000830100 0000000200000002 ffff888017441c80 [ 129.263373][ T4182] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 129.271944][ T4182] page dumped because: kasan: bad access detected [ 129.278355][ T4182] page_owner tracks the page as allocated [ 129.284057][ T4182] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3549, ts 22696606550, free_ts 19574160307 [ 129.303173][ T4182] get_page_from_freelist+0x3b78/0x3d40 [ 129.308722][ T4182] __alloc_pages+0x272/0x700 [ 129.313306][ T4182] new_slab+0xbb/0x4b0 [ 129.317372][ T4182] ___slab_alloc+0x6f6/0xe10 [ 129.321959][ T4182] kmem_cache_alloc_trace+0x1a0/0x290 [ 129.327325][ T4182] kernfs_fop_open+0x3b5/0xbc0 [ 129.332085][ T4182] do_dentry_open+0x807/0xfb0 [ 129.336760][ T4182] path_openat+0x2705/0x2f20 [ 129.341353][ T4182] do_filp_open+0x21c/0x460 [ 129.345851][ T4182] do_sys_openat2+0x13b/0x4f0 [ 129.350526][ T4182] __x64_sys_openat+0x243/0x290 [ 129.355374][ T4182] do_syscall_64+0x3b/0xb0 [ 129.359802][ T4182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.365724][ T4182] page last free stack trace: [ 129.370396][ T4182] free_unref_page_prepare+0xc34/0xcf0 [ 129.375851][ T4182] free_unref_page+0x95/0x2d0 [ 129.380536][ T4182] free_contig_range+0x95/0xf0 [ 129.385295][ T4182] destroy_args+0xfe/0x980 [ 129.389709][ T4182] debug_vm_pgtable+0x40d/0x470 [ 129.394553][ T4182] do_one_initcall+0x22b/0x7a0 [ 129.399336][ T4182] do_initcall_level+0x157/0x210 [ 129.404270][ T4182] do_initcalls+0x49/0x90 [ 129.408596][ T4182] kernel_init_freeable+0x425/0x5c0 [ 129.413801][ T4182] kernel_init+0x19/0x290 [ 129.418150][ T4182] ret_from_fork+0x1f/0x30 [ 129.422567][ T4182] [ 129.424883][ T4182] Memory state around the buggy address: [ 129.430513][ T4182] ffff888079b62500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.438565][ T4182] ffff888079b62580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.446618][ T4182] >ffff888079b62600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.454687][ T4182] ^ [ 129.458838][ T4182] ffff888079b62680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.466898][ T4182] ffff888079b62700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.474959][ T4182] ================================================================== [ 129.483051][ T4182] Disabling lock debugging due to kernel taint [ 129.504671][ T4182] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 129.511897][ T4182] CPU: 1 PID: 4182 Comm: kworker/u5:6 Tainted: G B 5.15.177-syzkaller #0 [ 129.521632][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 129.531706][ T4182] Workqueue: hci1 hci_rx_work [ 129.536398][ T4182] Call Trace: [ 129.539667][ T4182] [ 129.542621][ T4182] dump_stack_lvl+0x1e3/0x2d0 [ 129.547316][ T4182] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 129.553029][ T4182] ? panic+0x860/0x860 [ 129.557097][ T4182] ? rcu_is_watching+0x11/0xa0 [ 129.561865][ T4182] ? preempt_schedule_common+0xa6/0xd0 [ 129.567318][ T4182] panic+0x318/0x860 [ 129.571222][ T4182] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 129.577368][ T4182] ? check_panic_on_warn+0x1d/0xa0 [ 129.582484][ T4182] ? fb_is_primary_device+0xd0/0xd0 [ 129.587704][ T4182] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 129.593694][ T4182] ? _raw_spin_unlock+0x40/0x40 [ 129.598587][ T4182] check_panic_on_warn+0x7e/0xa0 [ 129.603563][ T4182] ? hci_le_meta_evt+0x11f1/0x3f50 [ 129.608673][ T4182] end_report+0x6d/0xf0 [ 129.612827][ T4182] kasan_report+0x18e/0x1c0 [ 129.617322][ T4182] ? hci_le_meta_evt+0x11f1/0x3f50 [ 129.622435][ T4182] hci_le_meta_evt+0x11f1/0x3f50 [ 129.627368][ T4182] ? __lock_acquire+0x1ff0/0x1ff0 [ 129.632411][ T4182] ? hci_remote_host_features_evt+0x280/0x280 [ 129.638471][ T4182] ? __mutex_unlock_slowpath+0x218/0x750 [ 129.644096][ T4182] ? hci_event_packet+0x3b4/0x1550 [ 129.649209][ T4182] ? mutex_unlock+0x10/0x10 [ 129.653931][ T4182] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 129.659923][ T4182] ? print_irqtrace_events+0x210/0x210 [ 129.665415][ T4182] hci_event_packet+0xc41/0x1550 [ 129.670369][ T4182] ? rcu_lock_release+0x20/0x20 [ 129.675223][ T4182] ? hci_send_to_monitor+0x99/0x4d0 [ 129.680435][ T4182] hci_rx_work+0x237/0xa10 [ 129.684864][ T4182] process_one_work+0x8a1/0x10c0 [ 129.689803][ T4182] ? worker_detach_from_pool+0x260/0x260 [ 129.695443][ T4182] ? _raw_spin_lock_irqsave+0x120/0x120 [ 129.700996][ T4182] ? kthread_data+0x4e/0xc0 [ 129.705581][ T4182] ? wq_worker_running+0x97/0x170 [ 129.710699][ T4182] worker_thread+0xaca/0x1280 [ 129.715387][ T4182] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 129.721300][ T4182] kthread+0x3f6/0x4f0 [ 129.725519][ T4182] ? rcu_lock_release+0x20/0x20 [ 129.730395][ T4182] ? kthread_blkcg+0xd0/0xd0 [ 129.735007][ T4182] ret_from_fork+0x1f/0x30 [ 129.739794][ T4182] [ 129.743115][ T4182] Kernel Offset: disabled [ 129.747442][ T4182] Rebooting in 86400 seconds..