last executing test programs: 18.265378528s ago: executing program 4 (id=129): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r3, 0x3516, 0x4, 0x0, 0x0, 0x0) 13.793423902s ago: executing program 4 (id=141): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x83, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x4d, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "e27bfc259f6d4cd91df23ed95a5d062e2109dee2c00cd71cb893f8048923fdd1135d1b558d294e555c38938a90822070505d18f0c8cecada1a552846ffec3eccc1"}}}}}}}, 0x0) 13.663950661s ago: executing program 4 (id=143): socket$kcm(0x10, 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000300)={0x8, 0x9ad, {0x57, 0x0, 0x4, {0x9, 0x1}, {0x7fff, 0x3}, @period={0x5d, 0x7, 0x9, 0x4, 0xae4, {0x0, 0x3, 0x101, 0x1}, 0x2, &(0x7f0000000380)=[0x3, 0x401]}}, {0x54, 0x2, 0x1c4, {0x9, 0xd0}, {0x9, 0xfffa}, @period={0x5d, 0x1, 0x3ff, 0x7, 0x5, {0x0, 0x7, 0x9, 0x3f}, 0x0, 0x0}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) bind$packet(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000010105"], 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40800) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) 12.096064705s ago: executing program 4 (id=148): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r3, 0x1000000}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 9.689823886s ago: executing program 0 (id=152): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="8500000013000000350000000000000085000000230000009500000000000000f4670880271e3542dfa8ba6287066c5197fabc5f7010e81a15202164afe0b737126ea6f7dc39cd340101000000000000e22ff5dde54704d25c79949c23e20100000000000000c09cc28de194f40800000000b0d3712c7e93366796c7224a0c2c0213af2ecdf3c075e3d800000104f4b1fc30dc914bc16543d4baa2bb755af3d576090c4867a7b6393e366c6386d5ec7209d031f40f3012e95752003b2f7846c744ae6af3c037102124d8eb000000000000000000000000a46aac3abe6c4d7f47ef6d02bad9dddacecf7eaa4a9779f8555ed6aea768c1f28221c110ed050000000ee282ab76ef93d96bc46a7c04b8c5324812d992a4f8dc6fcba00b1b2da951667d0276a0327b56c0ebfb19b3426887b6f1b6070e0ce1f844ce32a9988ca042dca52fbb8c1452b651ebf942f7297f7b66254c567b7983f60f2744419a2f238f173d0000003cf4fbd775d9c07d8d591a4dac60ff00a629b3b200000000000000000000000009001d004e41ff9b4d00e07ff771cea08bea1fb4c4c43f74936f333e3ae44f7ddd2fb35d4c46392ae855531b1eaf40aee8c94fd812e40f14c519a264ff3c572eecd5f6ca98b55e78f8d94f57ed7e6a3ab5dd9a4adedbdf0e58f58eb2e83500000000000000934c92002eace9a8d6f3dd008acf8a5c0fb433678060ac0e201e401fb1711d41f45d90a1e19795c995ff7d0020ecccf41d81c8c510cf773171407191872d0e3e62dd578d590e62ff74d667477ac69a806d4552084a87f74fdfc117d4975576c102976c1ef70ceac9ff714bab1f59f8ebd67f2aca41706c147e3e0d3e557de0349c5ca80f10361bedc4832ae62a2b745ef6587710a82c2e27bacc81877b996a708c3a9235bdbec2cde0cfca78205439b4fd312c7106000000000000000000000000df83e1a6c37e26d8f98d7e9419275bc3bba633b47d00"/721], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b688a8", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) 8.456921082s ago: executing program 3 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$msr(r4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x83, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x4, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x71, 0x7, 0xc739, 0x103, 0x0, 0x5, 0x4, 0x91, 0x1, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0xcb, 0xf9, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x8, 0x64e, 0xfffffdfe, 0x7fffffff, 0x26ed, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0xfffffffe, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2e, 0x80000003, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x5, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x6, 0x1, 0x1fd, 0xffff7441, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000200)='./bus\x00') socket$nl_generic(0x10, 0x3, 0x10) 8.436075622s ago: executing program 0 (id=157): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='ubifs\x00', 0x8800, 0x0) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 6.661319895s ago: executing program 0 (id=159): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @pix={0x6, 0xd1, 0x4745504d, 0x5, 0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x2d6e9417fde6ead5}}) 6.407927934s ago: executing program 3 (id=162): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584", @ANYRESDEC], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) 6.350968424s ago: executing program 4 (id=163): rt_sigreturn() rt_sigreturn() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setpgid(0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) socket(0x2, 0x80805, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x60f6000) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x660a1) 6.247995274s ago: executing program 0 (id=164): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}]}, 0x10) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.922990805s ago: executing program 2 (id=167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.806845284s ago: executing program 4 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xfffffffffffffef7, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40) 3.805179914s ago: executing program 2 (id=169): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r1 = syz_open_dev$sg(&(0x7f0000000100), 0xa, 0x840) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0xfffffff7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000028c0)=ANY=[@ANYBLOB="300200007d40000005ef0000000000000b0002000000070000000000000000000000000000000000000005000000000000001b0004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000240)) 3.507304583s ago: executing program 3 (id=170): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='ubifs\x00', 0x8800, 0x0) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 3.455486813s ago: executing program 1 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000002c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x0, &(0x7f0000000b00)) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.136634092s ago: executing program 0 (id=172): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[r2], 0x1, 0x800}) 2.945247641s ago: executing program 3 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000000df, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$msr(r4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x83, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x4, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x71, 0x7, 0xc739, 0x103, 0x0, 0x5, 0x4, 0x91, 0x1, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0xcb, 0xf9, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x8, 0x64e, 0xfffffdfe, 0x7fffffff, 0x26ed, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0xfffffffe, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2e, 0x80000003, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x5, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x6, 0x1, 0x1fd, 0xffff7441, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000200)='./bus\x00') socket$nl_generic(0x10, 0x3, 0x10) 2.784800581s ago: executing program 0 (id=174): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r3, 0x1000000}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 2.784002011s ago: executing program 2 (id=175): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xbf9, 0x1000, 0x0, 0x2000000000000, 0x0, 0x2}, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0) 1.963926608s ago: executing program 3 (id=176): bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1.855375827s ago: executing program 2 (id=177): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r3, 0x3516, 0x4, 0x0, 0x0, 0x0) 1.731554957s ago: executing program 3 (id=178): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 836.296944ms ago: executing program 1 (id=179): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="c8f14a04070e54bec55711ae", 0xc}}, 0x0) 671.110673ms ago: executing program 2 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 612.215243ms ago: executing program 1 (id=181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 488.063842ms ago: executing program 2 (id=182): io_setup(0x7f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 480.475932ms ago: executing program 1 (id=183): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='ubifs\x00', 0x8800, 0x0) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 142.686791ms ago: executing program 1 (id=184): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, 0x0) 0s ago: executing program 1 (id=185): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)={0x4, 0x0, [{0x80000019, 0x3, 0x0, 0x3, 0x3, 0x0, 0x80000001}, {0xc0000000, 0x3, 0x0, 0x7, 0x2, 0xfff}, {0x4, 0x9, 0x1, 0x1b4, 0x4, 0x40, 0x9}, {0x80000019, 0x7, 0x4, 0x400000, 0x7bf1, 0x3, 0x3ff}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x3c, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", 0x0, 0x0, 0x0, 0xcb, 0x0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd", &(0x7f0000000280), 0x0, 0x8000}, 0x50) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x3, {0x0, 0x0, 0x9, 0x25}, {0x3, 0x0, 0x2000, 0xfffffffd}, {0x4020000, 0x10}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x9, 0x0, 0x3}, 'syz0\x00', 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. syzkaller login: [ 58.851681][ T4156] cgroup: Unknown subsys name 'net' [ 58.966427][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.423378][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.855379][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 61.943264][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 61.974120][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 62.002787][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 62.092502][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 62.107659][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.114945][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.124193][ T4166] device bridge_slave_0 entered promiscuous mode [ 62.154905][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.162110][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.170488][ T4166] device bridge_slave_1 entered promiscuous mode [ 62.234395][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.241612][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.249413][ T4169] device bridge_slave_0 entered promiscuous mode [ 62.257894][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.265196][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.273524][ T4170] device bridge_slave_0 entered promiscuous mode [ 62.282219][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.289289][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.297470][ T4170] device bridge_slave_1 entered promiscuous mode [ 62.305413][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.312771][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.321324][ T4168] device bridge_slave_0 entered promiscuous mode [ 62.341130][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.348203][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.356698][ T4169] device bridge_slave_1 entered promiscuous mode [ 62.372273][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.379356][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.387501][ T4168] device bridge_slave_1 entered promiscuous mode [ 62.396489][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.434220][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.464744][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.500482][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.512228][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.523632][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.536044][ T4166] team0: Port device team_slave_0 added [ 62.543845][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.561264][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.580348][ T4166] team0: Port device team_slave_1 added [ 62.594705][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.601937][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.610567][ T4167] device bridge_slave_0 entered promiscuous mode [ 62.655997][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.663859][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.671854][ T4167] device bridge_slave_1 entered promiscuous mode [ 62.690188][ T4170] team0: Port device team_slave_0 added [ 62.696854][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.704236][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.730696][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.745329][ T4168] team0: Port device team_slave_0 added [ 62.761074][ T4169] team0: Port device team_slave_0 added [ 62.768296][ T4170] team0: Port device team_slave_1 added [ 62.775036][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.782623][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.808822][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.821670][ T4168] team0: Port device team_slave_1 added [ 62.841722][ T4169] team0: Port device team_slave_1 added [ 62.849033][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.886110][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.936127][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.943543][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.969844][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.987207][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.994543][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.020849][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.033303][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.040346][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.066840][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.078500][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.085599][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.111649][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.125429][ T4167] team0: Port device team_slave_0 added [ 63.132308][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.139355][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.165440][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.189377][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.196566][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.223144][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.236074][ T4167] team0: Port device team_slave_1 added [ 63.282699][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.290266][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.316448][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.328932][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.335968][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.362480][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.380644][ T4166] device hsr_slave_0 entered promiscuous mode [ 63.388103][ T4166] device hsr_slave_1 entered promiscuous mode [ 63.433091][ T4169] device hsr_slave_0 entered promiscuous mode [ 63.440927][ T4169] device hsr_slave_1 entered promiscuous mode [ 63.447725][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.455699][ T4169] Cannot create hsr debugfs directory [ 63.487705][ T4170] device hsr_slave_0 entered promiscuous mode [ 63.494685][ T4170] device hsr_slave_1 entered promiscuous mode [ 63.501530][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.509083][ T4170] Cannot create hsr debugfs directory [ 63.523246][ T4168] device hsr_slave_0 entered promiscuous mode [ 63.530127][ T4168] device hsr_slave_1 entered promiscuous mode [ 63.536757][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.541351][ T4176] Bluetooth: hci3: command 0x0409 tx timeout [ 63.544643][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 63.551225][ T4168] Cannot create hsr debugfs directory [ 63.556675][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 63.568285][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 63.574672][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 63.598293][ T4167] device hsr_slave_0 entered promiscuous mode [ 63.605262][ T4167] device hsr_slave_1 entered promiscuous mode [ 63.612797][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.620504][ T4167] Cannot create hsr debugfs directory [ 63.949452][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.965423][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.975759][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.986155][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.040508][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.050813][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.067933][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.087755][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.110335][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.124385][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.134478][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.143796][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.207612][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.223586][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.233768][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.257877][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.334580][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.363403][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.378455][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.404025][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.418938][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.447006][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.457685][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.470121][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.496405][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.505550][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.515041][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.522285][ T4211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.532213][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.543712][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.552713][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.559819][ T4211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.573101][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.603450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.619533][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.641841][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.648823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.685335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.695483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.704649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.713982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.723016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.732649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.742021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.751368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.759689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.767641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.775826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.795341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.804093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.817448][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.830515][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.839399][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.854912][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.868935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.881079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.889485][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.896586][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.912575][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.931002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.939124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.956857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.967031][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.974169][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.986021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.994878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.003365][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.010778][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.024775][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.043638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.051916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.076939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.093066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.104327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.113132][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.120432][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.129652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.138467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.155780][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.181073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.188992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.198517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.207508][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.214619][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.223692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.231956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.241865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.251393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.261320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.270183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.278785][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.285932][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.294553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.303968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.313808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.329892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.338112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.347475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.356418][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.363594][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.372052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.381068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.390006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.398386][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.405482][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.424925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.433962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.444247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.453760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.463743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.496087][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.507358][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.515108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.526105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.533812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.542469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.551530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.560120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.568763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.577767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.587000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.595816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.604640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.614679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.623971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.630189][ T4219] Bluetooth: hci0: command 0x041b tx timeout [ 65.632353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.644726][ T4219] Bluetooth: hci2: command 0x041b tx timeout [ 65.653841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.662033][ T4219] Bluetooth: hci1: command 0x041b tx timeout [ 65.668138][ T4219] Bluetooth: hci4: command 0x041b tx timeout [ 65.668871][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.674915][ T4219] Bluetooth: hci3: command 0x041b tx timeout [ 65.691810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.708341][ T4166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.721911][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.745574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.759280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.771786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.787565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.796282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.806028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.814882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.823479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.832175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.863153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.876034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.901751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.915702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.924698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.934965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.944647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.954091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.963504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.972448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.991564][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.029052][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.046378][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.056920][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.083861][ T4170] device veth0_vlan entered promiscuous mode [ 66.102184][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.118032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.137340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.155451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.170408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.182089][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.189565][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.219332][ T4170] device veth1_vlan entered promiscuous mode [ 66.238954][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.285739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.294374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.308956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.324912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.367224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.376651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.386028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.395408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.404553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.413569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.423471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.431791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.439261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.448829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.461214][ T4167] device veth0_vlan entered promiscuous mode [ 66.474093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.483778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.495321][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.511080][ T4170] device veth0_macvtap entered promiscuous mode [ 66.521758][ T4170] device veth1_macvtap entered promiscuous mode [ 66.533452][ T4167] device veth1_vlan entered promiscuous mode [ 66.544548][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.559539][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.569026][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.584637][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.594702][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.606085][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.615089][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.636603][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.651238][ T4166] device veth0_vlan entered promiscuous mode [ 66.666815][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.683210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.695847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.708291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.723066][ T4166] device veth1_vlan entered promiscuous mode [ 66.756072][ T4167] device veth0_macvtap entered promiscuous mode [ 66.767766][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.775728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.785554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.796523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.806128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.818138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.828626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.837530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.846718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.856169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.870375][ T4167] device veth1_macvtap entered promiscuous mode [ 66.891893][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.901070][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.910430][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.919146][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.931707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.944859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.953539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.983200][ T4166] device veth0_macvtap entered promiscuous mode [ 66.995161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.004163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.013269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.031827][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.043604][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.055840][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.066786][ T4166] device veth1_macvtap entered promiscuous mode [ 67.083933][ T4168] device veth0_vlan entered promiscuous mode [ 67.103544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.112315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.120640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.128442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.137765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.156241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.165482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.182048][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.192722][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.204209][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.225780][ T4168] device veth1_vlan entered promiscuous mode [ 67.238707][ T4169] device veth0_vlan entered promiscuous mode [ 67.246990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.256501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.265954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.275119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.283935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.292645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.301533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.314341][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.323289][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.333521][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.342735][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.414476][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.432413][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.442827][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.453642][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.466392][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.478500][ T4169] device veth1_vlan entered promiscuous mode [ 67.501487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.511237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.519349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.528498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.537713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.549082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.561312][ T4168] device veth0_macvtap entered promiscuous mode [ 67.599289][ T4168] device veth1_macvtap entered promiscuous mode [ 67.613029][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.632184][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.632439][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.653571][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.664186][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.674934][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.685964][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.700286][ T4219] Bluetooth: hci3: command 0x040f tx timeout [ 67.706384][ T4219] Bluetooth: hci4: command 0x040f tx timeout [ 67.714033][ T4219] Bluetooth: hci1: command 0x040f tx timeout [ 67.715397][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.720551][ T4219] Bluetooth: hci2: command 0x040f tx timeout [ 67.734346][ T4219] Bluetooth: hci0: command 0x040f tx timeout [ 67.736094][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.748686][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.757821][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.766221][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.776055][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.815962][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.830135][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.838859][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.848079][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.868575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.878013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.887552][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.898145][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.908504][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.919274][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.929492][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.941233][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.952816][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.984131][ T4169] device veth0_macvtap entered promiscuous mode [ 67.993545][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.002234][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.011321][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.031527][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.043960][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.052822][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.053919][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.071179][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.081986][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.092121][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.102901][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.115851][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.126213][ T4169] device veth1_macvtap entered promiscuous mode [ 68.146347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.158183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.167595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.177736][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.187357][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.196597][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.207869][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.220243][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.228237][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.263099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.285933][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.296861][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.307133][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.321165][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.331393][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.343661][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.353537][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.365300][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.376592][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.403212][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.405711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.418577][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.433687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.443586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.457558][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.473604][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.484089][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.495025][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.505598][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.517198][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.527381][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.538310][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.550391][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.588390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.611499][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.628699][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.638788][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.654435][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.664641][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.700468][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.724192][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.755030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.807258][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.838045][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.872842][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.946992][ T4253] syz.2.6 sent an empty control message without MSG_MORE. [ 68.986533][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.073355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.140698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.342763][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.357458][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.405662][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.419690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.437602][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.557475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.598281][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.630758][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.663704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.782614][ T4219] Bluetooth: hci0: command 0x0419 tx timeout [ 69.795152][ T4219] Bluetooth: hci2: command 0x0419 tx timeout [ 69.823661][ T4219] Bluetooth: hci1: command 0x0419 tx timeout [ 69.847278][ T4219] Bluetooth: hci4: command 0x0419 tx timeout [ 69.887750][ T4268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8'. [ 70.073830][ T4219] Bluetooth: hci3: command 0x0419 tx timeout [ 71.047310][ T4276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.058229][ T4276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.089728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.121899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 71.139622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.148656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.157654][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.166725][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.175620][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.184606][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.193499][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.202503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.313431][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.321086][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.470482][ T4327] 9pnet: Insufficient options for proto=fd [ 81.369833][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.626580][ T1108] cfg80211: failed to load regulatory.db [ 82.693880][ T1325] usb 4-1: string descriptor 0 read error: -71 [ 82.712182][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 82.745980][ T1325] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 82.783414][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.411852][ T1325] usb 4-1: config 0 descriptor?? [ 83.449680][ T4252] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.500569][ T1325] usb 4-1: can't set config #0, error -71 [ 83.533172][ T1325] usb 4-1: USB disconnect, device number 2 [ 83.820158][ T4252] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 83.828816][ T4252] usb 5-1: config 0 has no interface number 0 [ 83.835336][ T4252] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 83.846673][ T4252] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.856931][ T4252] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 84.030324][ T4252] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=b1.52 [ 84.040061][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.048310][ T4252] usb 5-1: Product: syz [ 84.053042][ T4252] usb 5-1: Manufacturer: syz [ 84.057835][ T4252] usb 5-1: SerialNumber: syz [ 84.084814][ T4252] usb 5-1: config 0 descriptor?? [ 84.133090][ T4252] cypress_m8 5-1:0.8: HID->COM RS232 Adapter converter detected [ 84.181454][ T4252] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 84.339353][ T1108] usb 5-1: USB disconnect, device number 2 [ 84.416230][ T1108] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 84.448829][ T1108] cypress_m8 5-1:0.8: device disconnected [ 85.221340][ T4420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.805207][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 87.526213][ T4450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.64'. [ 87.538178][ T4450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.64'. [ 88.561079][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 88.702421][ T4458] overlayfs: failed to clone upperpath [ 88.706089][ T4462] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.221731][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.639821][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 92.759765][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.781754][ T13] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 92.814940][ T4495] xt_hashlimit: max too large, truncated to 1048576 [ 92.824008][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.848016][ T4495] Cannot find set identified by id 0 to match [ 92.871247][ T13] usb 4-1: config 0 descriptor?? [ 93.146712][ T4513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.411986][ T13] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 93.460998][ T13] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 93.499037][ T13] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 93.555892][ T13] hid-generic 0003:1044:7A4D.0001: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 93.622899][ T13] usb 4-1: USB disconnect, device number 3 [ 95.115897][ T4532] process 'syz.3.94' launched './file0' with NULL argv: empty string added [ 96.145398][ T26] audit: type=1800 audit(1737845185.257:2): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.94" name="/" dev="fuse" ino=0 res=0 errno=0 [ 96.609700][ T4556] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.763548][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 99.182846][ T4595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.340749][ T2321] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.950180][ T2321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.070530][ T2321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.310199][ T2321] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 100.349786][ T2321] usb 1-1: New USB device strings: Mfr=255, Product=221, SerialNumber=0 [ 100.399007][ T2321] usb 1-1: Product: syz [ 100.403296][ T2321] usb 1-1: Manufacturer: syz [ 100.429809][ T2321] usb 1-1: config 0 descriptor?? [ 100.932456][ T2321] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 100.943127][ T2321] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 100.950877][ T2321] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 100.958062][ T2321] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 100.965339][ T2321] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 101.343377][ T2321] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 101.350305][ T2321] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 101.358856][ T2321] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 101.579778][ T2321] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 101.587216][ T2321] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 101.628149][ T2321] arvo: probe of 0003:1E7D:30D4.0002 failed with error -71 [ 101.692471][ T2321] usb 1-1: USB disconnect, device number 2 [ 102.283142][ T4649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.000389][ T4659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 105.697302][ T4667] syz.1.137 uses obsolete (PF_INET,SOCK_PACKET) [ 106.570776][ T4689] overlayfs: failed to clone upperpath [ 106.571323][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 109.084295][ T4714] mmap: syz.0.149 (4714) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.904900][ T4739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.415642][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.423404][ T4219] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.695683][ T4219] usb 1-1: Using ep0 maxpacket: 16 [ 114.701020][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 114.825872][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 114.837196][ T4219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.866393][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 114.883923][ T4219] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.895079][ T4219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.924767][ T4219] usb 1-1: config 0 descriptor?? [ 115.116788][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.136219][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.169733][ T13] usb 4-1: Product: syz [ 115.174025][ T13] usb 4-1: Manufacturer: syz [ 115.178724][ T13] usb 4-1: SerialNumber: syz [ 115.220661][ T13] usb 4-1: config 0 descriptor?? [ 115.266722][ T13] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.289765][ T13] em28xx 4-1:0.0: DVB interface 0 found: isoc [ 115.424092][ T4219] mcp2221 0003:04D8:00DD.0003: item fetching failed at offset 0/5 [ 115.440256][ T4219] mcp2221 0003:04D8:00DD.0003: can't parse reports [ 115.446821][ T4219] mcp2221: probe of 0003:04D8:00DD.0003 failed with error -22 [ 115.589700][ T13] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 115.639930][ T4219] usb 1-1: USB disconnect, device number 3 [ 115.751138][ T13] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 115.769240][ T13] em28xx 4-1:0.0: board has no eeprom [ 115.929692][ T13] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 115.937661][ T13] em28xx 4-1:0.0: dvb set to isoc mode. [ 115.949294][ T4219] em28xx 4-1:0.0: Binding DVB extension [ 115.990797][ T13] usb 4-1: USB disconnect, device number 4 [ 116.012814][ T13] em28xx 4-1:0.0: Disconnecting em28xx [ 116.248590][ T4219] em28xx 4-1:0.0: Registering input extension [ 116.266800][ T13] em28xx 4-1:0.0: Closing input extension [ 116.332166][ T13] em28xx 4-1:0.0: Freeing device [ 117.011382][ T4788] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.799749][ T4274] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.076847][ T4274] usb 4-1: Using ep0 maxpacket: 32 [ 119.438063][ T4274] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 119.598682][ T4178] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 119.598942][ T4178] ================================================================== [ 119.614441][ T4178] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 119.622307][ T4178] Read of size 1 at addr ffff88807cbafc05 by task kworker/u5:2/4178 [ 119.630306][ T4178] [ 119.632651][ T4178] CPU: 0 PID: 4178 Comm: kworker/u5:2 Not tainted 5.15.177-syzkaller #0 [ 119.640999][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 119.651075][ T4178] Workqueue: hci0 hci_rx_work [ 119.655801][ T4178] Call Trace: [ 119.659097][ T4178] [ 119.662045][ T4178] dump_stack_lvl+0x1e3/0x2d0 [ 119.666745][ T4178] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 119.672590][ T4178] ? _printk+0xd1/0x120 [ 119.676774][ T4178] ? __wake_up_klogd+0xcc/0x100 [ 119.681652][ T4178] ? panic+0x860/0x860 [ 119.685769][ T4178] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 119.691267][ T4178] print_address_description+0x63/0x3b0 [ 119.696859][ T4178] ? hci_le_meta_evt+0x11d6/0x3f50 [ 119.701994][ T4178] kasan_report+0x16b/0x1c0 [ 119.706520][ T4178] ? hci_le_meta_evt+0x11d6/0x3f50 [ 119.711662][ T4178] hci_le_meta_evt+0x11d6/0x3f50 [ 119.716666][ T4178] ? __lock_acquire+0x1ff0/0x1ff0 [ 119.721744][ T4178] ? hci_remote_host_features_evt+0x280/0x280 [ 119.727919][ T4178] ? __mutex_unlock_slowpath+0x218/0x750 [ 119.733575][ T4178] ? hci_event_packet+0x3b4/0x1550 [ 119.738715][ T4178] ? mutex_unlock+0x10/0x10 [ 119.743244][ T4178] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 119.749247][ T4178] ? print_irqtrace_events+0x210/0x210 [ 119.754730][ T4178] hci_event_packet+0xc41/0x1550 [ 119.759724][ T4178] ? rcu_lock_release+0x20/0x20 [ 119.764610][ T4178] ? hci_send_to_monitor+0x99/0x4d0 [ 119.769836][ T4178] hci_rx_work+0x237/0xa10 [ 119.774288][ T4178] process_one_work+0x8a1/0x10c0 [ 119.779265][ T4178] ? worker_detach_from_pool+0x260/0x260 [ 119.784927][ T4178] ? _raw_spin_lock_irqsave+0x120/0x120 [ 119.790501][ T4178] ? kthread_data+0x4e/0xc0 [ 119.795045][ T4178] ? wq_worker_running+0x97/0x170 [ 119.800088][ T4178] worker_thread+0xaca/0x1280 [ 119.804811][ T4178] kthread+0x3f6/0x4f0 [ 119.808895][ T4178] ? rcu_lock_release+0x20/0x20 [ 119.813767][ T4178] ? kthread_blkcg+0xd0/0xd0 [ 119.818376][ T4178] ret_from_fork+0x1f/0x30 [ 119.822827][ T4178] [ 119.825860][ T4178] [ 119.828191][ T4178] Allocated by task 4818: [ 119.832526][ T4178] ____kasan_kmalloc+0xba/0xf0 [ 119.837305][ T4178] __kmalloc_node_track_caller+0x195/0x390 [ 119.843136][ T4178] __alloc_skb+0x12c/0x590 [ 119.847575][ T4178] vhci_write+0xbc/0x430 [ 119.851833][ T4178] vfs_write+0xacd/0xe50 [ 119.856089][ T4178] ksys_write+0x1a2/0x2c0 [ 119.860481][ T4178] do_syscall_64+0x3b/0xb0 [ 119.864914][ T4178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.870830][ T4178] [ 119.873164][ T4178] The buggy address belongs to the object at ffff88807cbaf800 [ 119.873164][ T4178] which belongs to the cache kmalloc-1k of size 1024 [ 119.887232][ T4178] The buggy address is located 5 bytes to the right of [ 119.887232][ T4178] 1024-byte region [ffff88807cbaf800, ffff88807cbafc00) [ 119.900961][ T4178] The buggy address belongs to the page: [ 119.906612][ T4178] page:ffffea0001f2ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cba8 [ 119.916798][ T4178] head:ffffea0001f2ea00 order:3 compound_mapcount:0 compound_pincount:0 [ 119.925140][ T4178] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 119.933167][ T4178] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 119.941785][ T4178] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 119.950381][ T4178] page dumped because: kasan: bad access detected [ 119.956822][ T4178] page_owner tracks the page as allocated [ 119.962549][ T4178] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4292, ts 73375081848, free_ts 64486945812 [ 119.980979][ T4178] get_page_from_freelist+0x3b78/0x3d40 [ 119.986554][ T4178] __alloc_pages+0x272/0x700 [ 119.991416][ T4178] new_slab+0xbb/0x4b0 [ 119.995501][ T4178] ___slab_alloc+0x6f6/0xe10 [ 120.000101][ T4178] __kmalloc+0x1c9/0x300 [ 120.004359][ T4178] ieee802_11_parse_elems_crc+0xb3/0x1130 [ 120.010091][ T4178] ieee80211_ibss_rx_queued_mgmt+0x380/0x2af0 [ 120.016180][ T4178] ieee80211_iface_work+0x78f/0xcc0 [ 120.021407][ T4178] process_one_work+0x8a1/0x10c0 [ 120.026371][ T4178] worker_thread+0xaca/0x1280 [ 120.031071][ T4178] kthread+0x3f6/0x4f0 [ 120.035159][ T4178] ret_from_fork+0x1f/0x30 [ 120.039599][ T4178] page last free stack trace: [ 120.044276][ T4178] free_unref_page_prepare+0xc34/0xcf0 [ 120.049845][ T4178] free_unref_page+0x95/0x2d0 [ 120.054535][ T4178] ___cache_free+0xe3/0x100 [ 120.059050][ T4178] qlist_free_all+0x36/0x90 [ 120.063567][ T4178] kasan_quarantine_reduce+0x162/0x180 [ 120.069048][ T4178] __kasan_slab_alloc+0x2f/0xc0 [ 120.073923][ T4178] slab_post_alloc_hook+0x53/0x380 [ 120.079072][ T4178] __kmalloc+0x120/0x300 [ 120.083354][ T4178] fib6_info_alloc+0x2c/0xd0 [ 120.087959][ T4178] ip6_route_info_create+0x446/0x12c0 [ 120.093344][ T4178] addrconf_f6i_alloc+0x3a0/0x7d0 [ 120.098392][ T4178] ipv6_add_addr+0x44e/0xd80 [ 120.103012][ T4178] inet6_addr_add+0x45c/0x9a0 [ 120.107709][ T4178] inet6_rtm_newaddr+0x892/0x2540 [ 120.112749][ T4178] rtnetlink_rcv_msg+0x993/0xee0 [ 120.117713][ T4178] netlink_rcv_skb+0x1cf/0x410 [ 120.122494][ T4178] [ 120.124823][ T4178] Memory state around the buggy address: [ 120.130459][ T4178] ffff88807cbafb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.138535][ T4178] ffff88807cbafb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.146631][ T4178] >ffff88807cbafc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.154705][ T4178] ^ [ 120.158795][ T4178] ffff88807cbafc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.166890][ T4178] ffff88807cbafd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.174965][ T4178] ================================================================== [ 120.183042][ T4178] Disabling lock debugging due to kernel taint [ 120.189238][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.209700][ T4274] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.218775][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.228485][ T4274] usb 4-1: Product: syz [ 120.232957][ T4274] usb 4-1: Manufacturer: syz [ 120.237566][ T4274] usb 4-1: SerialNumber: syz [ 120.277551][ T4274] usb 4-1: config 0 descriptor?? [ 120.309871][ T4178] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.317327][ T4178] CPU: 1 PID: 4178 Comm: kworker/u5:2 Tainted: G B 5.15.177-syzkaller #0 [ 120.327077][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 120.337253][ T4178] Workqueue: hci0 hci_rx_work [ 120.341957][ T4178] Call Trace: [ 120.345267][ T4178] [ 120.348204][ T4178] dump_stack_lvl+0x1e3/0x2d0 [ 120.352901][ T4178] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 120.358556][ T4178] ? panic+0x860/0x860 [ 120.362644][ T4178] ? rcu_is_watching+0x11/0xa0 [ 120.367425][ T4178] ? preempt_schedule_common+0xa6/0xd0 [ 120.372200][ T4800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.372897][ T4178] panic+0x318/0x860 [ 120.383714][ T4178] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 120.389972][ T4178] ? check_panic_on_warn+0x1d/0xa0 [ 120.395135][ T4178] ? fb_is_primary_device+0xd0/0xd0 [ 120.400367][ T4178] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 120.406369][ T4178] ? _raw_spin_unlock+0x40/0x40 [ 120.411238][ T4178] check_panic_on_warn+0x7e/0xa0 [ 120.416192][ T4178] ? hci_le_meta_evt+0x11d6/0x3f50 [ 120.421157][ T4826] overlayfs: failed to clone upperpath [ 120.421318][ T4178] end_report+0x6d/0xf0 [ 120.430918][ T4178] kasan_report+0x18e/0x1c0 [ 120.435440][ T4178] ? hci_le_meta_evt+0x11d6/0x3f50 [ 120.440569][ T4178] hci_le_meta_evt+0x11d6/0x3f50 [ 120.445522][ T4178] ? __lock_acquire+0x1ff0/0x1ff0 [ 120.450567][ T4178] ? hci_remote_host_features_evt+0x280/0x280 [ 120.456651][ T4178] ? __mutex_unlock_slowpath+0x218/0x750 [ 120.462297][ T4178] ? hci_event_packet+0x3b4/0x1550 [ 120.467426][ T4178] ? mutex_unlock+0x10/0x10 [ 120.471947][ T4178] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 120.477943][ T4178] ? print_irqtrace_events+0x210/0x210 [ 120.483413][ T4178] hci_event_packet+0xc41/0x1550 [ 120.488367][ T4178] ? rcu_lock_release+0x20/0x20 [ 120.493250][ T4178] ? hci_send_to_monitor+0x99/0x4d0 [ 120.498469][ T4178] hci_rx_work+0x237/0xa10 [ 120.502915][ T4178] process_one_work+0x8a1/0x10c0 [ 120.507878][ T4178] ? worker_detach_from_pool+0x260/0x260 [ 120.513528][ T4178] ? _raw_spin_lock_irqsave+0x120/0x120 [ 120.519094][ T4178] ? kthread_data+0x4e/0xc0 [ 120.523611][ T4178] ? wq_worker_running+0x97/0x170 [ 120.528651][ T4178] worker_thread+0xaca/0x1280 [ 120.533366][ T4178] kthread+0x3f6/0x4f0 [ 120.537453][ T4178] ? rcu_lock_release+0x20/0x20 [ 120.542346][ T4178] ? kthread_blkcg+0xd0/0xd0 [ 120.546949][ T4178] ret_from_fork+0x1f/0x30 [ 120.551472][ T4178] [ 120.554758][ T4178] Kernel Offset: disabled [ 120.559099][ T4178] Rebooting in 86400 seconds..