last executing test programs: 4m40.877982395s ago: executing program 32 (id=3905): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x18, 0x0, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r0, 0x0, 0x80006) 4m21.432126614s ago: executing program 33 (id=3957): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4m3.241518378s ago: executing program 34 (id=3997): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0xd, 0x0, '\x00', 0x6943}, 0x0, [0x0, 0x0, 0x400000000000000, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x7f40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0xfffffffffffffffc, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = creat(0x0, 0xecf86c37d53049e9) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xa}}, './file0\x00'}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0xfffffffffffffffc, {0x0, 0x0, 0x1}, 0xff}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x4, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x2, 0x4e23, @remote}, 0x1c5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='sit0\x00', 0xffffffff}) 3m58.703904641s ago: executing program 35 (id=4009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000002010101000000000000000002"], 0x24}}, 0x4000) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r4 = socket(0x28, 0x5, 0x0) listen(r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) sendmmsg$inet6(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="85", 0x1}, {&(0x7f0000000440)="a216c485b09810246e7a960a62884ad1af18", 0x12}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc880) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000003040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_le_read_def_data_len={{0xfc}, {0x1, 0x1}}}}, 0xb) 3m30.79374722s ago: executing program 36 (id=4060): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 3m27.427915397s ago: executing program 7 (id=4068): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x41, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"fbc447e69f4a6424884ac6"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) 3m27.250129907s ago: executing program 7 (id=4069): mkdir(&(0x7f0000000300)='./file1\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./file1/file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2000888, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$pptp(0x18, 0x1, 0x2) accept(r3, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r5, &(0x7f0000032500)=""/102400, 0x19000, 0x4001) 3m26.167167483s ago: executing program 7 (id=4072): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m20.615743543s ago: executing program 7 (id=4080): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') 3m20.363611082s ago: executing program 7 (id=4081): io_uring_setup(0x1dc0, &(0x7f0000000080)={0x0, 0x2e3, 0x400, 0x1, 0x333}) syz_open_dev$sndctrl(&(0x7f0000000080), 0x79e, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b59f0000383afffe880000000000cc5a00000000000001ff02000000000000000000000000000102"], 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x5957c38b6785e420, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x5}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) 3m15.246752323s ago: executing program 7 (id=4089): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') 3m14.923626202s ago: executing program 37 (id=4089): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') 2m54.144038356s ago: executing program 9 (id=4132): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000000000000007"], 0x18}], 0x1}, 0x0) 2m53.857700765s ago: executing program 9 (id=4133): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$isdn(0x22, 0x2, 0x26) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc8640, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 2m52.268722389s ago: executing program 9 (id=4136): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2m51.055796845s ago: executing program 9 (id=4139): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 2m50.643307523s ago: executing program 9 (id=4140): sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) getrlimit(0x4, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x8000, 0x0) 2m49.79078081s ago: executing program 9 (id=4142): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000000000000007"], 0x18}], 0x1}, 0x0) 2m49.449243509s ago: executing program 38 (id=4142): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000000000000007"], 0x18}], 0x1}, 0x0) 2m15.250258584s ago: executing program 8 (id=4253): read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc08c5335, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003ba"], 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 2m15.053872124s ago: executing program 6 (id=4255): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create(0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x19, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 2m13.421664917s ago: executing program 6 (id=4256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}}, 0x0) 2m13.035973836s ago: executing program 6 (id=4258): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'user\x00'}, 0x1a, 0xfffffffffffffffc) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 2m12.213930193s ago: executing program 6 (id=4261): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m11.22791098s ago: executing program 8 (id=4265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getuid() setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setresuid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m11.167152749s ago: executing program 6 (id=4267): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x98a, 0xcd, &(0x7f0000000000)) truncate(&(0x7f0000000100)='./file0\x00', 0xdf) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioperm(0x7f, 0x5, 0x84) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 2m9.299967792s ago: executing program 0 (id=4270): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 2m6.558810663s ago: executing program 8 (id=4273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 2m6.527795932s ago: executing program 0 (id=4274): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x1a1281) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m6.407446492s ago: executing program 6 (id=4275): read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc08c5335, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003ba"], 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 2m5.683668179s ago: executing program 39 (id=4275): read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc08c5335, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003ba"], 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 2m5.669731009s ago: executing program 8 (id=4277): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m5.326223948s ago: executing program 8 (id=4280): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) socket(0x2, 0x80805, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045503, &(0x7f0000002180)={0x1, 0x1}) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x2040, 0x2}, 0x14, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, 0x0, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x810c5701, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000006a00020025bd7000fedbdf250a00000000000000080001000000000008000500", @ANYRES32=0x0, @ANYBLOB="04000900cb4ea728da80689b"], 0x34}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) 2m3.861346453s ago: executing program 8 (id=4284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0xae7e, 0x0) 2m2.762224129s ago: executing program 40 (id=4284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0xae7e, 0x0) 2m2.740357058s ago: executing program 0 (id=4288): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) utime(0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), 0x0, 0x0, 0x10000, &(0x7f0000000800)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="574b0000000000c4000008000001"], 0x28}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000000) 2m1.555924994s ago: executing program 0 (id=4289): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400d5b1dbc8aed3d10e00000200010000000000a1d122fed6cb527eec15bfe4ab4d369c97e683e42667a6cc042dc3e621fba3051a882e7f4a6e994458a3f279bac0f8775299b5c4267cf597ef988d860e72fe16972b03de75df6be7ba3423ded7c2b920c59a8f519627bc889738c5d5bf1039aca17e9edde5570cd728dcac4c3443a810dc9a4fb942416001d47b4f4b7c4f860f43aabf0434a306068653a76124c4b79b39c8a3a80ccfb4dc2158340b7bc447cc889fee41273dc0ba756bc211c3145fa37c687b7b4d8c701c80a00a4b5eebb61b3d30eb8177e9cf4d3012fcaafbdc5f15354264ae6dfd23", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m0.831803432s ago: executing program 0 (id=4290): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvfrom(r0, 0x0, 0x0, 0x40012000, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2m0.21978483s ago: executing program 0 (id=4292): ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0x3, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000001}, 0xffffffffffffff63) tee(0xffffffffffffffff, r2, 0x3d2c, 0xc) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x14801, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x1}, 0x60000010, 0x0, 0x0, 0x140030, 0x0, 0x0, 0x900}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, 0x0, 0x0) write(r5, &(0x7f00000002c0), 0x0) close(r5) 1m58.711017284s ago: executing program 41 (id=4292): ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0x3, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000001}, 0xffffffffffffff63) tee(0xffffffffffffffff, r2, 0x3d2c, 0xc) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x14801, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x1}, 0x60000010, 0x0, 0x0, 0x140030, 0x0, 0x0, 0x900}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, 0x0, 0x0) write(r5, &(0x7f00000002c0), 0x0) close(r5) 52.764197133s ago: executing program 5 (id=4419): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x268, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e0, 0xffffffff, 0xffffffff, 0x4e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @remote, [0xffffff00, 0xffffffff, 0xff000000, 0x80], [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 'pimreg\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x7, 0x88}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, [0x0, 0xff000000, 0xff, 0xffffffff], 0x4e24, 0x4e22, 0x4e24, 0x4e21, 0x4, 0x4, 0x200, 0x2, 0x40}}}, {{@ipv6={@local, @mcast1, [0x0, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x3c, 0x9e, 0x4, 0x7c}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x2, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xc0020000, 0xe7ffffff, 0x42, 0x54ed}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)=0x0) sched_setscheduler(r5, 0x5, &(0x7f0000001300)) 38.22040507s ago: executing program 5 (id=4447): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.577925343s ago: executing program 5 (id=4462): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)={0x4e4ce7991309b9e2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @remote}, "68ef365c"}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0xfffffffffffffffc, &(0x7f00000000c0)=0xffffff50) syz_open_procfs(r1, &(0x7f0000000000)='net/ptype\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x8}}, 0x30) 30.057435637s ago: executing program 5 (id=4468): syz_open_dev$sndmidi(0x0, 0x2, 0x20042) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x1f, 0x8, 0x8}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000240)={0x4376ea830d45549b, 0x0, [0x0, 0xb, 0x0, 0x10001, 0x0, 0xe3, 0x400]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) 28.24691502s ago: executing program 5 (id=4472): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40814) 26.461267853s ago: executing program 5 (id=4477): r0 = epoll_create(0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x181403, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) setpriority(0x1, r4, 0x900) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x20000002}) 18.751917673s ago: executing program 4 (id=4494): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_control_io(r0, 0x0, 0x0) 16.638019945s ago: executing program 2 (id=4499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000006c0)={0xed34, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) r2 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='user\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = add_key$user(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000500)='blacklist\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r5}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 15.470859811s ago: executing program 4 (id=4502): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x24, 0x2, {0x2, 0x23}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0xf, 0x6a, "b6ce29b35f8cf10595c3fc6eb72a089aca0927484b05272d5943593c6bfd7d7f50ac8699a2b32d438c5a65143edaa1e4a545de3c3f8ff0ba253adb1522d6fcdd420c2f72468681ae18f46d5246d5577b560b54544d7155e778ad769ee1e8ce58f77efbeb41f966c45833"}, 0x0, 0x0}) 14.617962227s ago: executing program 2 (id=4503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 14.462380996s ago: executing program 1 (id=4505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00'}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000080)={0x1, 0x10}, 0xffffffffffffff8e) getpid() 12.068011777s ago: executing program 2 (id=4506): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvfrom(r0, 0x0, 0x0, 0x40012000, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 12.032853097s ago: executing program 1 (id=4507): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x21, 0xbf48eddca12f1974, 0xfffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x2000c800) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x12) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000280)={0x1, 0x3, 0xa, {0x7, 0x8, 0x2, 0x90000}}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) r4 = inotify_init1(0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 11.989967627s ago: executing program 3 (id=4508): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r5, 0xae7e, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 11.883860126s ago: executing program 4 (id=4509): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r1, 0x0, 0x11, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x42, 0x481e}, 0xe5e8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0xda2, 0x8169, 0x6, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c0001400000000000"], 0xdc}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)={r4}) setresuid(0xee00, 0xee00, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$kcm(0x29, 0x2, 0x0) 10.843185062s ago: executing program 1 (id=4510): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) 10.307178471s ago: executing program 3 (id=4511): io_uring_setup(0x1dc0, &(0x7f0000000080)={0x0, 0x2e3, 0x400, 0x1, 0x333}) syz_open_dev$sndctrl(&(0x7f0000000080), 0x79e, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b59f0000383afffe880000000000cc5a00000000000001ff02000000000000000000000000000102"], 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x5957c38b6785e420, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x5}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) 10.21560174s ago: executing program 42 (id=4477): r0 = epoll_create(0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x181403, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) setpriority(0x1, r4, 0x900) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x20000002}) 9.892002869s ago: executing program 4 (id=4513): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x0) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x1000800, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(0x0, 0x0, 0x244) 9.891776189s ago: executing program 2 (id=4514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x2, 0x80000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) 6.933318027s ago: executing program 2 (id=4515): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000003c0)="cc409cfa0a7fd3ccdcfa92e2875ffc6a81b92a2f7b92f18e4ac37c519cc1d22496eaa6f7b2335df7be590e5bdf0d163a5ff33975d8becb28f19d08b806da4373e9858e0c20653ec83a9d7511c0775c266388a27f95e93e84a8bb8e8c54d1cac4102f52b2215cc79d4cd82936d444447ba809de0be87c9ceb59255b8b1cbef5e9f7e9a6ec98450c12d9c79dd3c08e4a6e994d", 0x92, 0x81, &(0x7f0000000080)={0xa, 0x0, 0x8, @loopback, 0x528, 0x1}, 0x20) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000100)="186e2a71ca9e2652e32c6d8e4d838e5e626105a60b3b4eaedb2f1b201583dd37b289d5dff9fa815568fc0a8e4622677fba306ddf89ce97ebb1d93a8d0ac3a4af608363b837085eaea0a02328c7dc05fa311acac8fe806c8bd5be84c20453aeb02d872e5a137683ea188a1064155c68bbc980e97dd2078633c06571698f44835a2a6e20c5a64b15b7fb014e276ba5c8429c6cf39e1d46ccdb302f73283d6b064e7b4103be7d3a7da0") syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300)=r0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x567) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000280)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 6.767150787s ago: executing program 3 (id=4516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 5.664065272s ago: executing program 3 (id=4517): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xfffffffffffffcd1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x3) 4.997567529s ago: executing program 4 (id=4518): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3.425013663s ago: executing program 3 (id=4519): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3.002176512s ago: executing program 2 (id=4520): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_usb_disconnect(0xffffffffffffffff) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r5, 0xae7e, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 1.869699207s ago: executing program 3 (id=4522): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x268, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e0, 0xffffffff, 0xffffffff, 0x4e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @remote, [0xffffff00, 0xffffffff, 0xff000000, 0x80], [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 'pimreg\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x3b, 0x7, 0x7, 0x88}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, [0x0, 0xff000000, 0xff, 0xffffffff], 0x4e24, 0x4e22, 0x4e24, 0x4e21, 0x4, 0x4, 0x200, 0x2, 0x40}}}, {{@ipv6={@local, @mcast1, [0x0, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x3c, 0x9e, 0x4, 0x7c}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x2, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xc0020000, 0xe7ffffff, 0x42, 0x54ed}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 1.737289277s ago: executing program 4 (id=4523): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7, 0x7, 0x1, 0xb8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0x0, 0x8}}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0xc0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x36, 0x2, 0x7fff}}}}]}, 0x44}}, 0x4004) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x6e25, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='veth1_to_batadv\x00') 668.726853ms ago: executing program 1 (id=4524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x7, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, 0x0) 0s ago: executing program 1 (id=4525): io_uring_setup(0x1dc0, &(0x7f0000000080)={0x0, 0x2e3, 0x400, 0x1, 0x333}) syz_open_dev$sndctrl(&(0x7f0000000080), 0x79e, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b59f0000383afffe880000000000cc5a00000000000001ff02000000000000000000000000000102"], 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x5957c38b6785e420, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0x5}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) kernel console output (not intermixed with test programs): evice veth0_vlan left promiscuous mode [ 1432.726434][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 1433.042316][T18599] input: syz0 as /devices/virtual/input/input114 [ 1434.710437][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 1434.838783][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4019'. [ 1434.960807][T10359] Bluetooth: hci1: command 0x041b tx timeout [ 1435.886485][T18615] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4021'. [ 1436.192053][ T5351] team0 (unregistering): Port device team_slave_1 removed [ 1436.291399][ T5351] team0 (unregistering): Port device team_slave_0 removed [ 1436.353706][ T5351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.362753][ T5351] device bond_slave_1 left promiscuous mode [ 1436.427451][ T5351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.437852][ T5351] device bond_slave_0 left promiscuous mode [ 1437.193082][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 1439.274154][ T5351] bond0 (unregistering): Released all slaves [ 1439.397640][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 1439.555882][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.835385][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1439.854293][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1440.610343][T18483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.883619][T18566] chnl_net:caif_netlink_parms(): no params data found [ 1441.012385][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.020840][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.068787][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1441.090464][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1441.121652][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1441.135990][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.143202][T10343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.159525][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1441.168516][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1441.178228][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.185405][T10343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1441.197282][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1441.302113][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1441.330962][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1441.385980][ T4427] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1441.397214][ T5437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.406528][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1441.421437][ T5437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.452816][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1441.475154][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1441.490963][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1441.499927][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1441.515398][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1441.567717][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1441.577351][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1441.600085][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.616016][T18566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.640531][T18566] device bridge_slave_0 entered promiscuous mode [ 1441.655734][ T4427] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1441.656664][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.685406][ T4427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.695535][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.711873][ T4427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.713081][T18566] device bridge_slave_1 entered promiscuous mode [ 1441.749129][ T4427] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1441.771039][ T4427] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1441.780139][ T4427] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1441.790351][T18483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1441.814310][T18483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1441.822334][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1441.835569][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1441.853738][ T4427] usb 6-1: Manufacturer: syz [ 1441.888931][ T4427] usb 6-1: config 0 descriptor?? [ 1441.933592][T18566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.000128][T18566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.242469][ T5351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.308978][T18566] team0: Port device team_slave_0 added [ 1442.340622][T18566] team0: Port device team_slave_1 added [ 1442.349759][ T4427] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 1442.368414][ T4427] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 1442.425343][ T4427] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1442.541061][ T5351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.681899][ T5351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.708662][T18483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1442.744194][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1442.756811][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1442.783753][T18566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.793499][T18566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.838220][T18566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.909989][ T5351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.957719][T18566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.965545][T18566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.997320][T18566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.268319][T18566] device hsr_slave_0 entered promiscuous mode [ 1443.285270][T18566] device hsr_slave_1 entered promiscuous mode [ 1443.300809][T18566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.324432][T18678] input: syz0 as /devices/virtual/input/input115 [ 1443.385590][T18566] Cannot create hsr debugfs directory [ 1445.024366][T18699] ubi0: attaching mtd0 [ 1445.061421][T18699] ubi0: scanning is finished [ 1445.251854][T14395] usb 6-1: USB disconnect, device number 2 [ 1445.315953][T18699] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1445.324900][T18699] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1445.354007][T18699] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1445.603549][T18699] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1445.836957][T18699] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1446.003484][T18699] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1446.016693][T18699] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1401452246 [ 1446.149000][T18699] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1446.173041][T18704] ubi0: background thread "ubi_bgt0d" started, PID 18704 [ 1446.398645][T18566] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1446.426655][T18566] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1446.456140][T18566] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1446.608389][T18566] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1446.736915][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1446.762877][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1446.877609][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1446.900581][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1446.988105][T18483] device veth0_vlan entered promiscuous mode [ 1446.998350][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1447.006164][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1447.044440][T18483] device veth1_vlan entered promiscuous mode [ 1447.158192][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1447.191423][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1447.201217][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1447.225456][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1447.278073][T18566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.286337][T18483] device veth0_macvtap entered promiscuous mode [ 1447.385515][T18483] device veth1_macvtap entered promiscuous mode [ 1447.410163][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1447.450534][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1447.484670][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1447.515426][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1447.551439][T18566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.633545][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1447.662080][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1447.740165][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.747340][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.117604][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1448.139873][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.179092][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.195730][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.211956][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.222186][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.232859][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.242742][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.253411][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.264983][T18483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.584535][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.630573][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.686975][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.749167][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.772935][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.784902][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.807263][T18483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.891545][T18483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.934377][T18483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.964879][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1448.986826][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1449.017805][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1449.026058][ T4446] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1449.041439][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1449.051101][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.058263][T10343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.075622][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1449.090474][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1449.114821][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1449.208548][T18483] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.234153][ T4446] usb 6-1: config 129 has an invalid interface number: 201 but max is 0 [ 1449.247189][T18483] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.292137][ T4446] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.297293][T18483] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.318803][ T4446] usb 6-1: config 129 has no interface number 0 [ 1449.339462][ T4446] usb 6-1: config 129 interface 201 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.370175][T18483] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.399548][ T4446] usb 6-1: config 129 interface 201 has no altsetting 0 [ 1449.458371][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1449.841043][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1449.865088][ T4446] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1449.904765][ T4446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.915602][ T4446] usb 6-1: Product: syz [ 1449.924924][ T4446] usb 6-1: Manufacturer: syz [ 1449.933258][ T4446] usb 6-1: SerialNumber: syz [ 1449.954920][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1449.990498][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1450.010087][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1450.031489][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1450.204341][ T4446] radioshark 6-1:129.201: Invalid radioSHARK device [ 1450.214165][ T4446] radioshark: probe of 6-1:129.201 failed with error -22 [ 1450.222642][ T4446] usbhid 6-1:129.201: couldn't find an input interrupt endpoint [ 1450.241056][ T4446] usb 6-1: USB disconnect, device number 3 [ 1450.276054][T18566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1450.291463][T18566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1450.325822][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1450.355963][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1450.365316][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1450.375329][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1450.386476][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1450.497179][ T5351] device hsr_slave_0 left promiscuous mode [ 1450.516550][ T5351] device hsr_slave_1 left promiscuous mode [ 1450.527439][ T5351] batman_adv: batadv0: Removing interface: team0 [ 1450.541208][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.563276][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.588029][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.599949][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.609705][ T5351] device bridge_slave_1 left promiscuous mode [ 1450.630696][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.659439][ T5351] device bridge_slave_0 left promiscuous mode [ 1450.684279][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.734412][ T5351] device veth1_macvtap left promiscuous mode [ 1450.740682][ T5351] device veth0_macvtap left promiscuous mode [ 1450.746920][ T5351] device veth1_vlan left promiscuous mode [ 1450.753771][ T5351] device veth0_vlan left promiscuous mode [ 1452.996101][ T5351] team0 (unregistering): Port device team_slave_1 removed [ 1453.110641][ T5351] team0 (unregistering): Port device team_slave_0 removed [ 1453.259319][ T5351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.386368][ T5351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.158995][ T5351] bond0 (unregistering): Released all slaves [ 1455.729108][T15954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.751771][T15954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.881041][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.899389][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.055458][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1456.063421][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1456.094150][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1456.107321][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1456.144099][T18566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.497896][ T5351] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.729706][ T5351] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.296578][ T5351] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.423596][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1459.440798][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1459.686095][ T5351] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.087376][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1460.118003][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1460.161113][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1460.198274][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1460.233877][T10359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1460.244028][T10359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1460.252937][T10359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1460.262823][T10359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1460.275759][T18566] device veth0_vlan entered promiscuous mode [ 1460.289279][T10359] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1460.298961][T10359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1460.830145][T18566] device veth1_vlan entered promiscuous mode [ 1461.018487][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1461.040578][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1461.070244][T18566] device veth0_macvtap entered promiscuous mode [ 1461.120080][T18566] device veth1_macvtap entered promiscuous mode [ 1461.194710][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1461.216150][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1461.292271][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.308359][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1461.319308][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1461.340331][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.157898][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1462.190538][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.206117][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1462.217769][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.229810][T18566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.455509][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1462.499872][ T4264] Bluetooth: hci2: command 0x0409 tx timeout [ 1462.578866][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1463.905399][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.932382][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.953572][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.977764][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.210400][ T4427] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1464.712627][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 1465.042775][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.087433][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.116983][T18566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.144121][T18566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.155700][T18566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.233566][ T4427] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.253051][ T4427] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1465.270807][ T4427] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.295288][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1465.303653][ T4427] usb 8-1: config 0 descriptor?? [ 1465.315929][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1465.327537][ T4427] pwc: Askey VC010 type 2 USB webcam detected. [ 1465.350993][T18566] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.376185][T18566] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.385575][T18566] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.418144][T18566] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.571391][T18870] chnl_net:caif_netlink_parms(): no params data found [ 1465.748618][ T4427] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1465.765731][ T4427] pwc: recv_control_msg error -32 req 02 val 2700 [ 1465.791305][ T4427] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1466.016972][ T4427] pwc: recv_control_msg error -32 req 04 val 1000 [ 1466.038263][ T4427] pwc: recv_control_msg error -32 req 04 val 1300 [ 1466.095101][ T4427] pwc: recv_control_msg error -32 req 04 val 1400 [ 1466.269453][ T4427] pwc: recv_control_msg error -32 req 02 val 2000 [ 1466.366724][ T4427] pwc: recv_control_msg error -32 req 02 val 2100 [ 1466.467629][ T4427] pwc: recv_control_msg error -32 req 04 val 1500 [ 1466.762334][T18870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.780609][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.790297][ T4427] pwc: recv_control_msg error -71 req 02 val 2400 [ 1466.804470][ T4427] pwc: recv_control_msg error -71 req 02 val 2600 [ 1466.840143][ T4427] pwc: recv_control_msg error -71 req 02 val 2900 [ 1466.851380][ T4427] pwc: recv_control_msg error -71 req 02 val 2800 [ 1466.869221][ T4427] pwc: recv_control_msg error -71 req 04 val 1100 [ 1466.877163][T18870] device bridge_slave_0 entered promiscuous mode [ 1466.916401][ T4427] pwc: recv_control_msg error -71 req 04 val 1200 [ 1466.936421][T10359] Bluetooth: hci2: command 0x040f tx timeout [ 1466.942969][ T5323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.972098][ T5323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.992491][ T4427] pwc: Registered as video103. [ 1466.999990][ T4427] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input116 [ 1467.024078][ T4427] usb 8-1: USB disconnect, device number 2 [ 1467.061579][T18870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.082611][T18870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.097690][T18870] device bridge_slave_1 entered promiscuous mode [ 1467.124955][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1467.799027][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.801495][T18870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.815534][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.842900][T18870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.938031][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1467.967628][T18870] team0: Port device team_slave_0 added [ 1468.185885][T18870] team0: Port device team_slave_1 added [ 1468.298036][T18870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.329941][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.422472][T18870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.439151][ T5351] device hsr_slave_0 left promiscuous mode [ 1468.486009][ T5351] device hsr_slave_1 left promiscuous mode [ 1468.495801][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1468.505714][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.517977][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.528165][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.544431][ T5351] device bridge_slave_1 left promiscuous mode [ 1468.576045][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.730246][ T5351] device bridge_slave_0 left promiscuous mode [ 1468.825047][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.213529][T10359] Bluetooth: hci2: command 0x0419 tx timeout [ 1469.262888][ T5351] device veth1_macvtap left promiscuous mode [ 1469.275341][ T5351] device veth0_macvtap left promiscuous mode [ 1469.302916][ T5351] device veth1_vlan left promiscuous mode [ 1469.308825][ T5351] device veth0_vlan left promiscuous mode [ 1470.521441][ T5351] team0 (unregistering): Port device team_slave_1 removed [ 1470.588969][ T5351] team0 (unregistering): Port device team_slave_0 removed [ 1470.653976][ T5351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.726928][ T5351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.054006][ T5351] bond0 (unregistering): Released all slaves [ 1472.629283][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4087'. [ 1472.987725][T18870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.994712][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.072717][T18870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.522596][T18870] device hsr_slave_0 entered promiscuous mode [ 1473.617334][T18870] device hsr_slave_1 entered promiscuous mode [ 1473.635819][T18870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1473.675137][T18870] Cannot create hsr debugfs directory [ 1474.139872][T19018] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4095'. [ 1474.817227][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1474.828269][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1474.836191][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1474.845000][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1474.855269][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1474.863619][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1474.941903][T18870] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1475.053851][T18870] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1475.097511][T18870] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1475.263312][ T5351] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.346353][T18870] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1475.543847][ T5351] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.665970][ T5351] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.876896][ T5351] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.005007][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.028535][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 1477.045011][T19023] chnl_net:caif_netlink_parms(): no params data found [ 1477.079663][T18870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.163865][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1477.189384][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1477.334391][T18870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.386515][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1477.408363][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1477.430397][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.437539][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.547546][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1477.568954][T19023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.588246][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.602779][T19023] device bridge_slave_0 entered promiscuous mode [ 1477.719805][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1477.740638][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1477.996608][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.004045][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.215143][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1478.271933][T19023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.284989][T19023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.327673][T19023] device bridge_slave_1 entered promiscuous mode [ 1478.567032][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1478.926132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1478.954316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1479.002207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1479.118190][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1479.139231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1479.186189][T19023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.232448][T19023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.250116][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1479.262613][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 1479.281309][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1479.353423][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1479.400900][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1479.588937][T19023] team0: Port device team_slave_0 added [ 1479.629337][T19023] team0: Port device team_slave_1 added [ 1479.867058][T19023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.879667][T19023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.914833][T19023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.940510][T19023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.969582][T19023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1480.020709][T19023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.295007][T19023] device hsr_slave_0 entered promiscuous mode [ 1480.306622][T19023] device hsr_slave_1 entered promiscuous mode [ 1480.328551][T19023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1480.374541][T19023] Cannot create hsr debugfs directory [ 1480.450945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1480.472801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1480.567629][T19073] Can't find a SQUASHFS superblock on nullb0 [ 1480.584098][ T5351] device hsr_slave_0 left promiscuous mode [ 1480.973780][ T5351] device hsr_slave_1 left promiscuous mode [ 1480.996041][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.003498][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.105833][T19075] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4110'. [ 1481.475660][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 1481.483706][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.491471][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.499426][ T5351] device bridge_slave_1 left promiscuous mode [ 1481.520913][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.529718][ T5351] device bridge_slave_0 left promiscuous mode [ 1481.535950][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.620931][ T5351] device veth1_macvtap left promiscuous mode [ 1481.628314][ T5351] device veth0_macvtap left promiscuous mode [ 1481.634578][ T5351] device veth1_vlan left promiscuous mode [ 1481.640926][ T5351] device veth0_vlan left promiscuous mode [ 1482.892525][ T5351] team0 (unregistering): Port device team_slave_1 removed [ 1482.948806][ T5351] team0 (unregistering): Port device team_slave_0 removed [ 1482.997311][ T5351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1483.046658][ T5351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1483.619963][ T5351] bond0 (unregistering): Released all slaves [ 1483.699228][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 1483.699906][T18870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.727866][T19073] netlink: 'syz.3.4109': attribute type 10 has an invalid length. [ 1483.735839][T19073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1483.745831][T19073] bridge0: port 3(macvlan1) entered blocking state [ 1483.752446][T19073] bridge0: port 3(macvlan1) entered disabled state [ 1483.760592][T19073] device macvlan1 entered promiscuous mode [ 1483.767369][T19073] bridge0: port 3(macvlan1) entered blocking state [ 1483.774180][T19073] bridge0: port 3(macvlan1) entered forwarding state [ 1483.822533][T19083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1483.830124][T19083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1483.840644][T19083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1483.848166][T19083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1483.855903][T19083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1483.863630][T19083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1483.890603][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4112'. [ 1485.411314][T19091] netlink: 'syz.8.4114': attribute type 1 has an invalid length. [ 1485.722161][ T4447] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1485.777417][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1485.821413][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1485.947966][ T4447] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1485.969500][ T4447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.994260][ T4447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.022222][ T4447] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1486.054575][ T4447] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1486.066426][ T4447] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1486.075013][ T4447] usb 7-1: Manufacturer: syz [ 1486.102099][ T4447] usb 7-1: config 0 descriptor?? [ 1486.246410][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1486.284772][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1486.541451][ T4447] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 1486.556573][ T4447] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 1486.596923][ T4447] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1486.621296][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1486.636440][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1486.693803][T18870] device veth0_vlan entered promiscuous mode [ 1486.778125][T18870] device veth1_vlan entered promiscuous mode [ 1486.867130][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.873481][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.937711][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1486.961112][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1486.983737][T18870] device veth0_macvtap entered promiscuous mode [ 1487.112624][T18870] device veth1_macvtap entered promiscuous mode [ 1487.199416][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1487.226688][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.265286][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1487.276220][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.287446][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1487.323201][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.335933][T18870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1487.349830][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1487.360697][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1487.401768][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1487.433864][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1487.476023][T19023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1487.502979][T19023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1487.556881][T19023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1487.601313][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1487.621936][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.676498][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1487.696388][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.719440][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1487.730974][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.747579][T18870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.756943][T19023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1487.828115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1487.839853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1487.873507][T18870] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.889324][T18870] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.909147][T18870] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.942197][T18870] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.211040][T19023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.261203][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1488.274325][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1488.303393][ T4947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.325595][ T4947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.338454][T19023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.877614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1488.888634][T14395] usb 7-1: USB disconnect, device number 2 [ 1488.898891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1488.938823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1488.947768][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.954937][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.002790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1489.021404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1489.030828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1489.061556][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.068788][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.126491][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.153893][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1489.156597][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.175944][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1489.197487][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1489.216650][T19138] ubi: mtd0 is already attached to ubi0 [ 1489.238262][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1489.267927][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1489.289862][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1489.389756][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1489.421138][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1489.439623][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1489.459360][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1489.551178][T19023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1489.657566][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1490.251682][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1490.316307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1493.637296][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1493.657656][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1493.698579][T19023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.390382][T18170] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1494.614760][T18170] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1494.623485][T18170] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1494.703405][T18170] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1494.743592][T18170] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.896840][T18170] usb 9-1: Product: syz [ 1494.907218][T18170] usb 9-1: Manufacturer: syz [ 1494.917994][T18170] usb 9-1: SerialNumber: syz [ 1495.046441][T18170] usb 9-1: config 0 descriptor?? [ 1495.479893][T19199] ubi: mtd0 is already attached to ubi0 [ 1495.649234][T19194] delete_channel: no stack [ 1495.871245][T18170] mos7840 9-1:0.0: required endpoints missing [ 1495.925661][T18170] usb 9-1: USB disconnect, device number 2 [ 1496.389830][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1496.463817][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1497.272117][T19023] device veth0_vlan entered promiscuous mode [ 1497.361769][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1497.416362][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1497.453410][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1497.470616][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1497.501327][T19023] device veth1_vlan entered promiscuous mode [ 1497.518462][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1497.558489][T14395] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1497.596349][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1497.606489][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1497.635475][T19023] device veth0_macvtap entered promiscuous mode [ 1497.668077][T19023] device veth1_macvtap entered promiscuous mode [ 1497.714007][T19023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.753466][T19023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.780120][T14395] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1497.812661][T19023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.842811][T14395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.853781][T19023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.896218][T19023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.896319][T14395] usb 4-1: config 0 descriptor?? [ 1497.940430][T19023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.956875][T14395] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1497.979700][T19023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1498.023034][T19023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.074731][T19023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1498.086860][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1498.100886][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1498.109449][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1498.124356][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1498.336369][T19023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1498.351863][T19023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.362369][T19023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1498.375226][T19023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.394306][T19023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1498.408177][T14395] gp8psk: usb in 128 operation failed. [ 1498.430702][T19023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.440527][T19023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1498.452542][T14395] gp8psk: usb in 137 operation failed. [ 1498.458048][T14395] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1498.473745][T14395] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1498.487668][T19023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.505697][T14395] usb 4-1: USB disconnect, device number 50 [ 1498.528521][T19023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.540874][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1498.567643][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1498.579710][T19023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.651044][T19023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.671236][T19023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.703173][T19023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.850167][ T5437] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.073525][ T5437] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.341752][ T5437] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.697767][ T5437] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.914701][T15954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.060491][T15954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.920731][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1501.004597][T19261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1501.078310][T19258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.097205][T19258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.437623][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1501.906368][T10359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1501.936642][T10359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1502.117940][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1502.143617][ T4264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1502.251997][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1502.446572][ T4264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1504.655789][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 1505.098366][T19267] chnl_net:caif_netlink_parms(): no params data found [ 1505.462428][T19316] kvm [19315]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8bfc [ 1505.507760][T19316] kvm [19315]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xecd4 [ 1505.871835][T19325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4162'. [ 1506.613165][T19267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.627648][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.637363][T19267] device bridge_slave_0 entered promiscuous mode [ 1506.742833][T19267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.750201][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.758363][T19267] device bridge_slave_1 entered promiscuous mode [ 1506.941482][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 1507.871705][T19267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1508.140548][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4168'. [ 1508.910449][T19358] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4170'. [ 1509.100269][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 1509.336219][T19267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.442832][T19378] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4174'. [ 1510.481680][T19267] team0: Port device team_slave_0 added [ 1511.200935][T19391] hub 2-0:1.0: USB hub found [ 1511.216834][T19391] hub 2-0:1.0: 1 port detected [ 1511.829906][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 1512.305450][T19267] team0: Port device team_slave_1 added [ 1512.651087][ T5437] device hsr_slave_0 left promiscuous mode [ 1512.670875][T15580] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1512.731437][ T5437] device hsr_slave_1 left promiscuous mode [ 1512.887352][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.906021][T15580] usb 9-1: Using ep0 maxpacket: 16 [ 1512.913163][T15580] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.930276][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.942073][T15580] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.967494][T15580] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1512.990731][T15580] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.008881][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1513.024737][T15580] usb 9-1: config 0 descriptor?? [ 1513.033424][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1513.054130][ T5437] device bridge_slave_1 left promiscuous mode [ 1513.070683][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.091249][ T5437] device bridge_slave_0 left promiscuous mode [ 1513.107057][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.215526][T19411] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4183'. [ 1513.795926][T15580] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1513.835523][T15580] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1513.856882][T15580] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1513.879251][T15580] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1513.905641][T15580] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 1513.914759][T19419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4185'. [ 1513.928459][T15580] appleir 0003:05AC:8241.0007: No inputs registered, leaving [ 1513.944604][ T5437] device veth1_macvtap left promiscuous mode [ 1513.950969][T15580] appleir 0003:05AC:8241.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 1513.974531][ T5437] device veth0_macvtap left promiscuous mode [ 1513.980974][ T5437] device veth1_vlan left promiscuous mode [ 1514.007812][ T5437] device veth0_vlan left promiscuous mode [ 1514.234641][ T5679] usb 9-1: USB disconnect, device number 3 [ 1514.343103][T19433] ubi: mtd0 is already attached to ubi0 [ 1517.897639][T19466] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4196'. [ 1518.506461][ T5437] team0 (unregistering): Port device team_slave_1 removed [ 1518.726421][T19482] ubi: mtd0 is already attached to ubi0 [ 1518.791277][T19483] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4200'. [ 1518.811466][ T5437] team0 (unregistering): Port device team_slave_0 removed [ 1518.912150][ T5437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.976663][ T5437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1519.925353][T19490] kvm: pic: non byte write [ 1519.935499][T19490] kvm: pic: non byte write [ 1519.940091][T19490] kvm: pic: non byte write [ 1519.946849][T19490] kvm: pic: non byte write [ 1519.960098][T19490] kvm: pic: non byte write [ 1519.965975][T19490] kvm: pic: non byte write [ 1519.970612][T19490] kvm: pic: non byte write [ 1519.982207][T19490] kvm: pic: non byte write [ 1519.988451][T19490] kvm: pic: non byte write [ 1520.122401][ T5679] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1520.337967][ T5679] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1520.350314][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1520.365137][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.381521][ T5679] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1520.397040][ T5679] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1520.406412][ T5679] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1520.414856][ T5679] usb 4-1: Manufacturer: syz [ 1520.436194][ T5679] usb 4-1: config 0 descriptor?? [ 1520.570639][ T5437] bond0 (unregistering): Released all slaves [ 1520.658647][T19267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1520.669946][T19267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.697071][T19267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1520.725002][T19463] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.734819][T19463] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.743903][T19463] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.752646][T19463] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.774221][T19463] device vxlan0 entered promiscuous mode [ 1520.793877][T19463] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.802912][T19463] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.812065][T19463] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.821219][T19463] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.956568][T19267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.007217][T19267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.034201][ T5679] usbhid 4-1:0.0: can't add hid device: -71 [ 1521.040690][ T5679] usbhid: probe of 4-1:0.0 failed with error -71 [ 1521.051768][T19267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.064541][ T5679] usb 4-1: USB disconnect, device number 51 [ 1522.255566][T19267] device hsr_slave_0 entered promiscuous mode [ 1522.271428][T19267] device hsr_slave_1 entered promiscuous mode [ 1522.283039][T19267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1522.291266][T19267] Cannot create hsr debugfs directory [ 1522.893977][T19513] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4208'. [ 1524.132774][T17064] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1524.360883][T17064] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1524.412964][T17064] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.462454][T17064] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.476613][T17064] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1524.494799][T19554] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4221'. [ 1524.509853][T17064] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1524.519794][T17064] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1524.563553][T17064] usb 9-1: Manufacturer: syz [ 1524.592540][T17064] usb 9-1: config 0 descriptor?? [ 1524.992250][T19558] netlink: 'syz.4.4222': attribute type 29 has an invalid length. [ 1525.021849][T19558] netlink: 'syz.4.4222': attribute type 29 has an invalid length. [ 1525.033259][T17064] usbhid 9-1:0.0: can't add hid device: -71 [ 1525.039292][T17064] usbhid: probe of 9-1:0.0 failed with error -71 [ 1525.068958][T19558] netlink: 'syz.4.4222': attribute type 29 has an invalid length. [ 1525.077095][T17064] usb 9-1: USB disconnect, device number 4 [ 1525.140316][T19560] tmpfs: Bad value for 'mpol' [ 1525.880430][T19267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1525.902698][T19267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1525.935706][T19267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1525.957510][T19267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1526.309519][T19577] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4228'. [ 1526.518758][T19267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.556988][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1526.595442][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1526.629655][T19267] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.703568][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1526.725297][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1526.747513][T19336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.754638][T19336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.792423][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1526.856900][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1526.882142][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1526.910092][T19336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.917397][T19336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.507949][T19267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1527.550073][T19267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1528.260178][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1528.347987][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1528.376232][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1528.406067][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1528.425080][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1528.444651][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1528.453427][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1528.469308][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1528.478002][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1528.519768][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1528.738861][T15580] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1528.770062][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1528.785798][T19336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1528.962591][T15580] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1528.974224][T15580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.986673][T15580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.998329][T15580] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1529.036734][T15580] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1529.072443][T15580] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1529.117360][T15580] usb 5-1: Manufacturer: syz [ 1529.133240][T15580] usb 5-1: config 0 descriptor?? [ 1529.297515][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1529.311260][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1529.373862][T19267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.453413][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1529.491739][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1529.534328][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1529.555243][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1529.571284][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1529.583714][T15580] usbhid 5-1:0.0: can't add hid device: -71 [ 1529.590766][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1529.603728][T15580] usbhid: probe of 5-1:0.0 failed with error -71 [ 1529.626602][T15580] usb 5-1: USB disconnect, device number 71 [ 1529.628939][T19267] device veth0_vlan entered promiscuous mode [ 1529.679815][T19267] device veth1_vlan entered promiscuous mode [ 1529.727457][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1529.738574][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1529.753572][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1529.762878][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1529.786864][T19267] device veth0_macvtap entered promiscuous mode [ 1529.796660][T19267] device veth1_macvtap entered promiscuous mode [ 1529.833799][T19267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.853484][T19267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.882826][T19267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.903863][T19267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.913753][T19267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.934919][T19267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.945255][T19267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.961456][T19267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.975676][T19267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.987528][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1529.998662][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1530.014057][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1530.025423][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1530.039400][T19267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.060907][T19267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.085767][T19267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.106487][T19267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.149753][T19267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.160204][T19267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.198518][T19267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.212593][T19267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.231510][T19267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.410510][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1530.432898][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1531.298705][T19267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.321223][T19267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.348966][T19267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.357710][T19267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.595106][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.627296][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.809813][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1532.056803][ T5351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.203457][ T5351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.244502][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1535.000994][T15122] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1535.240116][T15122] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1535.367491][T15122] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.401873][T15122] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.412533][T15122] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1535.427339][T15122] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1535.441049][T15122] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1535.467517][T15122] usb 9-1: Manufacturer: syz [ 1535.481041][T15122] usb 9-1: config 0 descriptor?? [ 1536.062626][T15122] usbhid 9-1:0.0: can't add hid device: -71 [ 1536.073199][T15122] usbhid: probe of 9-1:0.0 failed with error -71 [ 1536.092840][T15122] usb 9-1: USB disconnect, device number 5 [ 1537.499813][T19743] ubi: mtd0 is already attached to ubi0 [ 1542.029818][T19774] loop9: detected capacity change from 0 to 6 [ 1542.459278][T15177] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.750022][T15177] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.877748][T19791] ubi: mtd0 is already attached to ubi0 [ 1542.905428][T15177] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.587993][T15177] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.189328][ T4264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1545.204310][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1545.212518][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1545.222019][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1545.229809][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1545.237390][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1546.160738][T19836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1547.353612][T19812] chnl_net:caif_netlink_parms(): no params data found [ 1547.427801][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 1548.007145][T19853] ubi: mtd0 is already attached to ubi0 [ 1548.036885][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1548.045214][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1548.181950][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1548.201495][T10359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1548.209263][T10359] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1548.228001][T10359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1548.976222][T19812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.990713][T19812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.035649][T19812] device bridge_slave_0 entered promiscuous mode [ 1549.250518][T19812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.264905][T19812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.279811][T19812] device bridge_slave_1 entered promiscuous mode [ 1549.429850][T19812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.505794][T19812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.638982][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 1549.743750][T19812] team0: Port device team_slave_0 added [ 1549.786019][T19812] team0: Port device team_slave_1 added [ 1550.125419][T19855] chnl_net:caif_netlink_parms(): no params data found [ 1550.194283][T19812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.205632][T19812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1550.285278][T19812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.594142][T19812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.660982][T19812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1550.816106][ T4264] Bluetooth: hci2: command 0x0409 tx timeout [ 1551.011589][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1551.026112][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1551.039477][ T4264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1551.065823][ T4264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1551.077496][ T4264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1551.090158][ T4264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1551.246302][T19812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.489890][T19812] device hsr_slave_0 entered promiscuous mode [ 1551.512711][T19812] device hsr_slave_1 entered promiscuous mode [ 1551.519451][T19812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1551.542265][T19812] Cannot create hsr debugfs directory [ 1551.661972][T19892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4297'. [ 1551.681872][T15177] device hsr_slave_0 left promiscuous mode [ 1551.722158][T15177] device hsr_slave_1 left promiscuous mode [ 1551.771277][T15177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1551.859681][T15177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.868555][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 1551.932050][T15177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1551.939980][T15177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.955168][T15177] device bridge_slave_1 left promiscuous mode [ 1551.962737][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.998709][T15177] device bridge_slave_0 left promiscuous mode [ 1552.006264][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.089193][T15177] device veth1_macvtap left promiscuous mode [ 1552.095723][T15177] device veth0_macvtap left promiscuous mode [ 1552.105454][T15177] device veth1_vlan left promiscuous mode [ 1552.151379][T15177] device veth0_vlan left promiscuous mode [ 1552.549006][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.555344][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.974628][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 1553.096303][T15177] team0 (unregistering): Port device team_slave_1 removed [ 1553.209634][T15177] team0 (unregistering): Port device team_slave_0 removed [ 1553.273450][T15177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.316431][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 1553.352410][T15177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.094930][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 1554.228351][T15177] bond0 (unregistering): Released all slaves [ 1554.443239][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4303'. [ 1554.627336][T19855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.649850][T19855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.711505][T19855] device bridge_slave_0 entered promiscuous mode [ 1554.775398][T19855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.785631][T19855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.833624][T19855] device bridge_slave_1 entered promiscuous mode [ 1555.208710][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 1555.454642][T19855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.489322][T19855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1555.550795][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 1555.623060][T19855] team0: Port device team_slave_0 added [ 1555.638965][T19855] team0: Port device team_slave_1 added [ 1556.565352][T19855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.575652][T19855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1556.612914][T19855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.636469][T19855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.647854][T19855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1556.678247][T19855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.733126][T19933] kvm: pic: non byte write [ 1556.742374][T19933] kvm: pic: non byte write [ 1556.758154][T19933] kvm: pic: non byte write [ 1556.775347][T19933] kvm: pic: non byte write [ 1556.784394][T19933] kvm: pic: non byte write [ 1556.790352][T19933] kvm: pic: non byte write [ 1556.800195][T19933] kvm: pic: non byte write [ 1556.953171][T19855] device hsr_slave_0 entered promiscuous mode [ 1556.983030][T19855] device hsr_slave_1 entered promiscuous mode [ 1556.990263][T19855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1557.015904][T19855] Cannot create hsr debugfs directory [ 1557.159883][T19881] chnl_net:caif_netlink_parms(): no params data found [ 1557.421894][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 1557.516063][T15177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.578002][T19881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.585416][T19881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.603592][T19881] device bridge_slave_0 entered promiscuous mode [ 1557.632978][T19881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.640328][T19881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.648929][T19881] device bridge_slave_1 entered promiscuous mode [ 1557.699969][T15177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.759366][T19881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.770055][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 1557.795265][T19881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.859143][T15177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.911443][T19881] team0: Port device team_slave_0 added [ 1557.959288][T15177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.992210][T19881] team0: Port device team_slave_1 added [ 1558.011715][T19812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1558.788056][T19812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1559.987115][T19812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1559.987512][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 1560.406728][T19812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1560.548352][T19881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.559960][T19881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.615970][T19881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.647794][T19881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.658638][T19881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.789763][T19881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.395274][T19881] device hsr_slave_0 entered promiscuous mode [ 1562.402525][T19881] device hsr_slave_1 entered promiscuous mode [ 1562.409850][T19881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1562.417751][T19881] Cannot create hsr debugfs directory [ 1562.554482][T15177] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.691720][T15177] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.747237][T19812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.769536][T19855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1562.811351][T15177] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.836326][T19855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1562.860509][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1562.870243][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1562.886614][T19812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.903529][T19855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1562.952113][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1562.971932][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1563.013890][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.021033][ T5351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.124894][T15177] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.174690][T19855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1563.196981][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1563.299785][T20014] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1563.369322][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1563.378375][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1563.396855][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.404022][ T5351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.590124][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1563.810384][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1563.996313][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1564.008057][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1564.028676][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1564.037695][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1564.051826][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1564.060966][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1564.069525][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1564.078984][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1564.094711][T19263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1564.144676][T19812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1564.358714][T19855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.561094][T19771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1564.576839][T19771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1564.665304][T19855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.743354][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1564.753831][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1564.774524][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.781701][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.872570][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1565.077463][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1565.139325][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1565.168304][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.175491][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.250529][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1565.292530][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1565.342785][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1565.424955][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1565.735383][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1565.752461][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1565.781364][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1565.805066][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1565.826558][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1565.855978][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1565.884373][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1565.921202][T14868] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1565.976340][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1565.990097][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1566.013069][T19855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1566.129853][T19812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.134435][T14868] usb 5-1: Using ep0 maxpacket: 8 [ 1566.148886][T14868] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1566.168013][T14868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1566.202653][T14868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1566.221911][T14868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1566.267950][T14868] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1566.290390][T14868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1566.303707][T14868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.476053][T19881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1566.540334][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1566.559397][T14868] usb 5-1: GET_CAPABILITIES returned 0 [ 1566.560694][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1566.573779][T14868] usbtmc 5-1:16.0: can't read capabilities [ 1566.728354][T19881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1566.839270][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1566.894324][T20050] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1566.920398][T19881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1566.940132][T18170] usb 5-1: USB disconnect, device number 72 [ 1567.117234][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1567.130763][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1567.172775][T19812] device veth0_vlan entered promiscuous mode [ 1567.191787][T19881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1567.314933][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1567.340617][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1567.370542][T19812] device veth1_vlan entered promiscuous mode [ 1567.477573][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1567.487807][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1567.512056][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1567.540459][T19855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1567.662582][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1567.710227][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1567.721330][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1567.731954][T19812] device veth0_macvtap entered promiscuous mode [ 1568.753463][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1568.824916][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1568.974912][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1569.269655][T19812] device veth1_macvtap entered promiscuous mode [ 1569.358873][T19855] device veth0_vlan entered promiscuous mode [ 1569.417982][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1569.426648][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1569.463623][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1569.481377][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1569.645129][T19855] device veth1_vlan entered promiscuous mode [ 1569.681369][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.692758][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.702658][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.713390][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.723571][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.734059][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.744047][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.754567][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.792420][T19812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.813017][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1569.825503][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1569.834945][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1569.876887][ T4425] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1569.885842][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.903835][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.918079][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.939749][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.952050][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.963207][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.973438][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.991824][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.020679][T19812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.111362][ T4425] usb 4-1: Using ep0 maxpacket: 8 [ 1570.118202][ T4425] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1570.142941][ T4425] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1570.153198][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1570.165322][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1570.183811][T19881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.190639][ T4425] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1570.206039][T19812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.218829][ T4425] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1570.239013][T19812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.247793][T19812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.260570][ T4425] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1570.270002][T19812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.279072][ T4425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.519557][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1570.536635][ T4425] usb 4-1: GET_CAPABILITIES returned 0 [ 1570.542449][ T4425] usbtmc 4-1:16.0: can't read capabilities [ 1570.556922][ T5437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1570.612334][T19881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.644972][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1570.677463][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1571.954568][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1571.974088][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1572.191739][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.199002][ T5323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.322512][T19855] device veth0_macvtap entered promiscuous mode [ 1572.368334][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1572.529515][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.545005][T15177] device hsr_slave_0 left promiscuous mode [ 1572.562389][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.595402][T15177] device hsr_slave_1 left promiscuous mode [ 1572.655071][T15177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.696158][T15177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.795892][T20130] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1572.887632][T15177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.901717][T15177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.917959][T15177] device bridge_slave_1 left promiscuous mode [ 1572.924618][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.975910][T15177] device bridge_slave_0 left promiscuous mode [ 1572.985926][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.022391][T15177] device hsr_slave_0 left promiscuous mode [ 1573.034394][T15177] device hsr_slave_1 left promiscuous mode [ 1573.044717][T15177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.056728][T15177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.068689][T15177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.083492][T15177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.108493][T15177] device bridge_slave_1 left promiscuous mode [ 1573.114822][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.132100][T15177] device bridge_slave_0 left promiscuous mode [ 1573.145529][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.751138][T15177] device veth1_macvtap left promiscuous mode [ 1573.764154][T15177] device veth0_macvtap left promiscuous mode [ 1573.772932][T15177] device veth1_vlan left promiscuous mode [ 1573.778971][T15177] device veth0_vlan left promiscuous mode [ 1573.786790][T15177] device veth1_macvtap left promiscuous mode [ 1573.793617][T15177] device veth0_macvtap left promiscuous mode [ 1573.799841][T15177] device veth1_vlan left promiscuous mode [ 1573.805777][T15177] device veth0_vlan left promiscuous mode [ 1573.919125][T20149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4330'. [ 1574.610840][T15177] team0 (unregistering): Port device team_slave_1 removed [ 1574.671392][T15177] team0 (unregistering): Port device team_slave_0 removed [ 1574.722158][T15177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.781607][T15177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1575.370787][T15177] bond0 (unregistering): Released all slaves [ 1575.902501][T15177] team0 (unregistering): Port device team_slave_1 removed [ 1575.956174][T15177] team0 (unregistering): Port device team_slave_0 removed [ 1576.008923][T15177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1576.060855][T15177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1576.656759][T15177] bond0 (unregistering): Released all slaves [ 1576.735578][T19855] device veth1_macvtap entered promiscuous mode [ 1576.764213][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1576.772372][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1576.781037][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1576.790150][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.797295][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.805107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1576.813854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1576.858257][T14395] usb 4-1: USB disconnect, device number 52 [ 1576.913269][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1576.938760][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1576.963559][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1577.016266][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1577.056222][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1577.069613][T19855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.099117][T19855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.129685][T19855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.176945][T19855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.366573][T19855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.377567][T19855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.708889][T19855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1578.733949][T19881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1578.754319][T19881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1578.779349][T19263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.797492][T19263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.872153][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1578.897921][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1578.964105][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1578.985078][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1579.017212][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1579.040098][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1579.078055][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1579.088124][T19855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.107271][T19855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.119425][T19855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.135660][T19855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.145954][T19855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.158240][T19855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.199223][T19855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.464860][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1579.479385][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1579.491230][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1579.642130][T12614] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1579.658668][T19855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.682765][T19855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.711697][T19855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.731409][T19855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.836157][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1579.858740][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1579.893231][T12614] usb 4-1: Using ep0 maxpacket: 8 [ 1579.902151][T12614] usb 4-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 1579.921044][T19881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.935533][T12614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.956137][T12614] usb 4-1: Product: syz [ 1579.961693][T12614] usb 4-1: Manufacturer: syz [ 1579.966398][T12614] usb 4-1: SerialNumber: syz [ 1580.008645][T12614] usb 4-1: config 0 descriptor?? [ 1580.034529][T12614] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1580.056770][T12614] usb 4-1: Detected FT232A [ 1580.099013][T12614] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1580.679516][T12614] usb 4-1: USB disconnect, device number 53 [ 1580.701831][T10343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.713273][T12614] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1580.738092][T10343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.764759][T12614] ftdi_sio 4-1:0.0: device disconnected [ 1580.796415][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1580.880698][ T4632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.899007][ T4632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.931699][T20208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1580.947819][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1581.038612][T14395] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1581.294221][T14395] usb 3-1: Using ep0 maxpacket: 16 [ 1581.299605][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1581.319520][T14395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.326512][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1581.372993][T14395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.407548][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1581.432333][T14395] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1581.451782][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1581.463476][T14395] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1581.613093][T14395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.635885][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1582.400453][T14395] usb 3-1: config 0 descriptor?? [ 1582.406618][T15545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1582.474671][T19881] device veth0_vlan entered promiscuous mode [ 1582.530341][T19881] device veth1_vlan entered promiscuous mode [ 1582.697530][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1582.793120][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1582.818671][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1582.860744][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1582.881355][T19881] device veth0_macvtap entered promiscuous mode [ 1582.900911][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1582.927513][T19881] device veth1_macvtap entered promiscuous mode [ 1582.941307][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1583.099297][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1583.109944][T19881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.120703][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1583.165184][T19881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.269909][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1583.269917][T19881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.269938][T19881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.314219][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1583.579965][T19881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.600158][T19881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.600157][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1583.611608][T19881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1583.636750][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1583.636773][T19881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.672571][T14395] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0 [ 1583.674158][T19881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.696866][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1583.706510][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1583.729927][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1583.731483][T14395] hid-generic 0003:0457:07DA.0008: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 1583.745145][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1583.782223][T19881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.797364][T19881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.822732][T19881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.832287][T14395] usb 3-1: USB disconnect, device number 13 [ 1583.853182][T19881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.870128][T19881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.912865][T19881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1583.957885][T19881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1583.989241][T19881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.010667][T19881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.036750][T15177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1584.086384][T15177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1584.147210][T19881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.166909][T19881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.181273][T19881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.216579][T19881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.403862][ T4517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.417443][ T4517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.459765][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1584.520038][ T5080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.546743][ T5080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.615581][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1585.423381][T20258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4349'. [ 1585.584223][T20265] autofs4:pid:20265:autofs_fill_super: called with bogus options [ 1586.940272][T20288] binder: 20284:20288 ioctl c0306201 0 returned -14 [ 1586.957186][T20288] binder: 20284:20288 ioctl c0306201 0 returned -14 [ 1591.592599][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4363'. [ 1596.336475][T20396] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4371'. [ 1596.750445][T20403] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4373'. [ 1598.022354][T20422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4376'. [ 1598.832915][T20435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1602.368593][T20467] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4387'. [ 1606.135884][T20503] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1606.985061][T20515] Can't find a SQUASHFS superblock on nullb0 [ 1607.176011][T15122] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1607.471772][T15122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.221485][T15122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.238853][T15122] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1608.248772][T15122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.259882][T15122] usb 2-1: config 0 descriptor?? [ 1608.351214][T20528] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4403'. [ 1609.186109][ T5679] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1610.330421][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 1610.532824][ T5679] usb 6-1: Using ep0 maxpacket: 16 [ 1610.563230][ T5679] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.584147][ T5679] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1610.621462][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.639900][ T5679] usb 6-1: Product: syz [ 1610.644194][ T5679] usb 6-1: Manufacturer: syz [ 1610.648903][ T5679] usb 6-1: SerialNumber: syz [ 1610.696046][ T5679] usb 6-1: config 0 descriptor?? [ 1611.007015][ T4446] usb 6-1: USB disconnect, device number 4 [ 1611.129875][T15122] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input117 [ 1611.267497][T15122] uclogic 0003:256C:006D.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1611.498596][T15122] usb 2-1: USB disconnect, device number 46 [ 1616.379569][T20595] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4417'. [ 1618.234890][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.242243][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.274076][T20622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4423'. [ 1618.334746][T20622] netlink: 'syz.2.4423': attribute type 25 has an invalid length. [ 1618.375718][T20622] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.385060][T20622] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.393843][T20622] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.403038][T20622] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1622.306610][T15122] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1622.605741][T15122] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.628170][T15122] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1622.667489][T15122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.704131][T15122] usb 2-1: config 0 descriptor?? [ 1622.724675][T15122] pwc: Askey VC010 type 2 USB webcam detected. [ 1623.187647][T15122] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1623.221544][T15122] pwc: recv_control_msg error -32 req 02 val 2700 [ 1623.347500][T15122] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1623.584894][T15122] pwc: recv_control_msg error -32 req 04 val 1000 [ 1623.613092][T15122] pwc: recv_control_msg error -32 req 04 val 1300 [ 1623.621276][T15122] pwc: recv_control_msg error -32 req 04 val 1400 [ 1623.631457][T15122] pwc: recv_control_msg error -32 req 02 val 2000 [ 1623.641365][T15122] pwc: recv_control_msg error -32 req 02 val 2100 [ 1623.864194][T15122] pwc: recv_control_msg error -71 req 02 val 2500 [ 1623.918486][T15122] pwc: recv_control_msg error -71 req 02 val 2400 [ 1623.928134][T15122] pwc: recv_control_msg error -71 req 02 val 2600 [ 1623.940934][T15122] pwc: recv_control_msg error -71 req 02 val 2900 [ 1623.957980][T15122] pwc: recv_control_msg error -71 req 02 val 2800 [ 1623.978456][T15122] pwc: recv_control_msg error -71 req 04 val 1100 [ 1624.007371][T15122] pwc: recv_control_msg error -71 req 04 val 1200 [ 1624.052150][T15122] pwc: Registered as video103. [ 1624.561171][T15122] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input118 [ 1624.664167][T15122] usb 2-1: USB disconnect, device number 47 [ 1626.065998][T15122] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1628.781448][T15122] usb 2-1: Using ep0 maxpacket: 16 [ 1628.813690][T20717] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4441'. [ 1628.971332][T15122] usb 2-1: device descriptor read/all, error -71 [ 1629.137161][T20729] netlink: 396 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1630.262847][T20735] dccp_close: ABORT with 52 bytes unread [ 1631.097998][T20732] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1631.105329][T20732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1631.117734][T20732] vhci_hcd vhci_hcd.0: Device attached [ 1631.172359][T20743] netlink: 'syz.2.4443': attribute type 5 has an invalid length. [ 1631.668752][T20739] vhci_hcd: connection closed [ 1631.678833][T15954] vhci_hcd: stop threads [ 1631.734106][T15954] vhci_hcd: release socket [ 1631.793534][T15954] vhci_hcd: disconnect device [ 1631.835235][T20751] batman_adv: batadv0: Adding interface: dummy0 [ 1631.847822][T20751] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.918770][T17064] vhci_hcd: vhci_device speed not set [ 1631.963472][T20751] batman_adv: batadv0: Interface activated: dummy0 [ 1632.106775][ T4425] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1632.353421][ T4425] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.635993][ T4425] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1633.042442][ T4425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.107103][ T4425] usb 6-1: config 0 descriptor?? [ 1633.142893][ T4425] pwc: Askey VC010 type 2 USB webcam detected. [ 1633.645877][ T4425] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1633.653436][ T4425] pwc: recv_control_msg error -32 req 02 val 2700 [ 1633.661418][ T4425] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1633.670415][ T4425] pwc: recv_control_msg error -32 req 04 val 1000 [ 1633.679911][ T4425] pwc: recv_control_msg error -32 req 04 val 1300 [ 1633.687063][ T4425] pwc: recv_control_msg error -32 req 04 val 1400 [ 1634.544137][T20762] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1634.597490][ T4425] pwc: recv_control_msg error -32 req 02 val 2000 [ 1634.604903][ T4425] pwc: recv_control_msg error -32 req 02 val 2100 [ 1634.666689][T20788] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4456'. [ 1634.789694][T20762] usb 3-1: Using ep0 maxpacket: 8 [ 1634.824877][T20762] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1634.841232][ T4425] pwc: recv_control_msg error -71 req 02 val 2500 [ 1634.859351][T20762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.867628][ T4425] pwc: recv_control_msg error -71 req 02 val 2400 [ 1634.879743][ T4425] pwc: recv_control_msg error -71 req 02 val 2600 [ 1634.888280][ T4425] pwc: recv_control_msg error -71 req 02 val 2900 [ 1634.906493][T20762] usb 3-1: config 0 descriptor?? [ 1634.911791][ T4425] pwc: recv_control_msg error -71 req 02 val 2800 [ 1634.933923][ T4425] pwc: recv_control_msg error -71 req 04 val 1100 [ 1634.941070][T20792] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4457'. [ 1634.941510][ T4425] pwc: recv_control_msg error -71 req 04 val 1200 [ 1634.977460][ T4425] pwc: Registered as video103. [ 1634.995015][ T4425] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input119 [ 1635.018240][ T4425] usb 6-1: USB disconnect, device number 5 [ 1640.089894][T20762] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1640.199508][T20762] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1640.210982][T20762] asix: probe of 3-1:0.0 failed with error -71 [ 1640.220106][T20762] usb 3-1: USB disconnect, device number 14 [ 1642.926783][T20876] input: syz1 as /devices/virtual/input/input120 [ 1643.310046][T20762] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1643.696529][T20762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1643.713147][T20762] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1643.774021][T20762] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=69.70 [ 1643.829858][T20762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.851445][T20762] usb 3-1: Product: syz [ 1643.863952][T20762] usb 3-1: Manufacturer: syz [ 1643.875553][T20762] usb 3-1: SerialNumber: syz [ 1643.899185][T20762] usb 3-1: config 0 descriptor?? [ 1643.992972][T20762] HFC-S_USB: probe of 3-1:0.0 failed with error -5 [ 1645.567467][T15580] usb 3-1: USB disconnect, device number 15 [ 1647.691396][T20930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4488'. [ 1650.101192][T18170] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1650.243899][T20959] can0: slcan on ptm0. [ 1651.114120][T18170] usb 5-1: Using ep0 maxpacket: 32 [ 1651.122358][T18170] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1651.141781][T18170] usb 5-1: config 0 has no interface number 0 [ 1651.162643][T18170] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1651.168270][T20953] can0 (unregistered): slcan off ptm0. [ 1651.199339][T18170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.220989][T18170] usb 5-1: Product: syz [ 1651.225190][T18170] usb 5-1: Manufacturer: syz [ 1651.229834][T18170] usb 5-1: SerialNumber: syz [ 1651.264714][T18170] usb 5-1: config 0 descriptor?? [ 1651.273837][T18170] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1651.871499][T18170] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1652.205963][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1652.558135][T18170] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1652.752605][T18170] usb 5-1: USB disconnect, device number 73 [ 1652.871705][T18170] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1653.029083][T18170] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1653.320687][T18170] quatech2 5-1:0.51: device disconnected [ 1656.373837][T18170] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1657.033840][T18170] usb 5-1: device not accepting address 74, error -71 [ 1658.769179][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1658.769271][ T27] audit: type=1326 audit(1737695434.523:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1658.797775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1662.793849][ T27] audit: type=1326 audit(1737695434.523:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1665.263729][ T27] audit: type=1326 audit(1737695434.533:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1665.311648][ T27] audit: type=1326 audit(1737695434.533:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1665.359612][ T27] audit: type=1326 audit(1737695434.533:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1665.756080][ T27] audit: type=1326 audit(1737695434.542:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1667.386273][ T27] audit: type=1326 audit(1737695434.542:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1668.064591][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1668.074448][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1668.086917][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1668.096033][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1668.103801][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1668.111089][ T4269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1668.294695][ T27] audit: type=1326 audit(1737695434.542:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1668.345762][ T27] audit: type=1326 audit(1737695434.542:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1668.414368][ T27] audit: type=1326 audit(1737695434.542:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1668.474876][ T27] audit: type=1326 audit(1737695434.542:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1668.497695][ T27] audit: type=1326 audit(1737695434.552:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21027 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f935878cd29 code=0x7ffc0000 [ 1668.858593][T19881] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 1668.870446][T19881] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1668.878869][T19881] CPU: 1 PID: 19881 Comm: syz-executor Not tainted 6.1.127-syzkaller #0 [ 1668.887187][T19881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1668.897246][T19881] RIP: 0010:klist_remove+0x1e2/0x460 [ 1668.902529][T19881] Code: 80 3c 04 00 74 08 4c 89 ff e8 7a 85 3a f7 4d 8b 2f 49 83 e5 fe 49 8d 7d 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 53 85 3a f7 4d 8b 75 58 4c 89 ef e8 97 91 15 [ 1668.922201][T19881] RSP: 0018:ffffc900031d7420 EFLAGS: 00010202 [ 1668.928271][T19881] RAX: 000000000000000b RBX: ffffffff8e83dca8 RCX: dffffc0000000000 [ 1668.936243][T19881] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1668.944225][T19881] RBP: ffffc900031d7508 R08: dffffc0000000000 R09: fffffbfff1d07b89 [ 1668.952212][T19881] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100b103a8c [ 1668.960173][T19881] R13: 0000000000000000 R14: ffff888017f3bb80 R15: ffff88805881d460 [ 1668.968143][T19881] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1668.977065][T19881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1668.983675][T19881] CR2: 00007f811e5e9370 CR3: 0000000077bbc000 CR4: 00000000003506e0 [ 1668.991654][T19881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1668.999621][T19881] DR3: 000000000000060c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1669.007585][T19881] Call Trace: [ 1669.010859][T19881] [ 1669.013781][T19881] ? __die_body+0x5e/0xa0 [ 1669.018113][T19881] ? die_addr+0x95/0xc0 [ 1669.022267][T19881] ? exc_general_protection+0x3ae/0x590 [ 1669.027814][T19881] ? do_raw_spin_lock+0x14a/0x370 [ 1669.032835][T19881] ? asm_exc_general_protection+0x22/0x30 [ 1669.038558][T19881] ? klist_remove+0x1e2/0x460 [ 1669.043231][T19881] ? klist_del+0x100/0x100 [ 1669.047639][T19881] ? kobject_put+0x460/0x460 [ 1669.052221][T19881] ? get_device_parent+0x295/0x400 [ 1669.057341][T19881] device_move+0x1b0/0x700 [ 1669.061766][T19881] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1669.067674][T19881] hci_conn_del_sysfs+0xa8/0x150 [ 1669.072613][T19881] hci_conn_cleanup+0x5a0/0x740 [ 1669.077458][T19881] hci_conn_del+0x417/0x6c0 [ 1669.082014][T19881] ? hci_conn_hash_flush+0x1fd/0x3f0 [ 1669.087294][T19881] hci_conn_hash_flush+0x300/0x3f0 [ 1669.092405][T19881] ? hci_conn_switch_role+0x210/0x210 [ 1669.097794][T19881] ? drain_workqueue+0x2c9/0x390 [ 1669.102723][T19881] ? hci_discovery_set_state+0x5c/0x1a0 [ 1669.108264][T19881] hci_dev_close_sync+0x9a9/0xfc0 [ 1669.113285][T19881] hci_unregister_dev+0x207/0x500 [ 1669.118303][T19881] vhci_release+0x7f/0xd0 [ 1669.122624][T19881] ? vhci_open+0x360/0x360 [ 1669.127030][T19881] __fput+0x3f6/0x8d0 [ 1669.131004][T19881] task_work_run+0x246/0x300 [ 1669.135597][T19881] ? kasan_quarantine_put+0xd4/0x220 [ 1669.140913][T19881] ? task_work_cancel+0x2e0/0x2e0 [ 1669.145985][T19881] ? kmem_cache_free+0x292/0x510 [ 1669.150911][T19881] ? do_exit+0xa69/0x26a0 [ 1669.155238][T19881] do_exit+0xa6e/0x26a0 [ 1669.159391][T19881] ? put_task_struct+0x80/0x80 [ 1669.164150][T19881] ? get_signal+0x137e/0x17d0 [ 1669.168823][T19881] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1669.174796][T19881] ? print_irqtrace_events+0x210/0x210 [ 1669.180243][T19881] ? _raw_spin_lock_irq+0xdb/0x110 [ 1669.185349][T19881] do_group_exit+0x202/0x2b0 [ 1669.189930][T19881] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1669.195129][T19881] ? lockdep_hardirqs_on+0x94/0x130 [ 1669.200319][T19881] get_signal+0x16f7/0x17d0 [ 1669.204838][T19881] ? ptrace_notify+0x370/0x370 [ 1669.209601][T19881] arch_do_signal_or_restart+0xb0/0x1a10 [ 1669.215228][T19881] ? __ia32_sys_waitid+0xc0/0xc0 [ 1669.220157][T19881] ? kernel_waitid+0x520/0x520 [ 1669.224913][T19881] ? rcu_force_quiescent_state+0x230/0x230 [ 1669.230707][T19881] ? __fput+0x6c6/0x8d0 [ 1669.234852][T19881] ? get_sigframe_size+0x10/0x10 [ 1669.239777][T19881] ? __x64_sys_wait4+0x181/0x1e0 [ 1669.244713][T19881] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1669.250689][T19881] ? exit_to_user_mode_loop+0x39/0x100 [ 1669.256138][T19881] exit_to_user_mode_loop+0x6a/0x100 [ 1669.261410][T19881] exit_to_user_mode_prepare+0xb1/0x140 [ 1669.266944][T19881] syscall_exit_to_user_mode+0x60/0x270 [ 1669.272478][T19881] do_syscall_64+0x47/0xb0 [ 1669.276899][T19881] ? clear_bhb_loop+0x45/0xa0 [ 1669.281574][T19881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1669.287459][T19881] RIP: 0033:0x7f4bd4982f97 [ 1669.291886][T19881] Code: Unable to access opcode bytes at 0x7f4bd4982f6d. [ 1669.298885][T19881] RSP: 002b:00007ffd5b48cd20 EFLAGS: 00000293 ORIG_RAX: 000000000000003d SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1669.307289][T19881] RAX: fffffffffffffe00 RBX: 000000000000004e RCX: 00007f4bd4982f97 [ 1669.315250][T19881] RDX: 0000000040000000 RSI: 00007ffd5b48cd7c RDI: 00000000ffffffff [ 1669.323211][T19881] RBP: 00007ffd5b48cd7c R08: 0000000000000000 R09: 0000000000000010 [ 1669.331175][T19881] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1669.339130][T19881] R13: 0000555576e4e590 R14: 00007ffd5b48cdd0 R15: 0000000000000016 [ 1669.347093][T19881] [ 1669.350094][T19881] Modules linked in: [ 1669.913227][T19881] ---[ end trace 0000000000000000 ]--- [ 1669.919433][T19881] RIP: 0010:klist_remove+0x1e2/0x460 [ 1669.924761][T19881] Code: 80 3c 04 00 74 08 4c 89 ff e8 7a 85 3a f7 4d 8b 2f 49 83 e5 fe 49 8d 7d 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 53 85 3a f7 4d 8b 75 58 4c 89 ef e8 97 91 15 [ 1669.965430][T19881] RSP: 0018:ffffc900031d7420 EFLAGS: 00010202 [ 1669.971636][T19881] RAX: 000000000000000b RBX: ffffffff8e83dca8 RCX: dffffc0000000000 [ 1669.979678][T19881] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1669.988564][T19881] RBP: ffffc900031d7508 R08: dffffc0000000000 R09: fffffbfff1d07b89 [ 1670.004319][T19881] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100b103a8c [ 1670.012408][T19881] R13: 0000000000000000 R14: ffff888017f3bb80 R15: ffff88805881d460 [ 1670.036682][T19881] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1670.045670][T19881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1670.068484][T19881] CR2: 00007f1c78470ff8 CR3: 000000003018b000 CR4: 00000000003506f0 [ 1670.076593][T19881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1670.124560][T19881] DR3: 00000000000005ff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1670.143290][T19881] Kernel panic - not syncing: Fatal exception [ 1670.149748][T19881] Kernel Offset: disabled [ 1670.154074][T19881] Rebooting in 86400 seconds..