last executing test programs: 1m39.31436636s ago: executing program 4 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd24, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x13bc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xcc84}, 0x200088c2) 1m38.945644311s ago: executing program 4 (id=41): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4", 0x64, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2d", 0x28}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e6", 0xae}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m36.300562322s ago: executing program 4 (id=46): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000094000/0x1000)=nil, 0x1000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b78, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) userfaultfd(0x80001) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 1m33.298148772s ago: executing program 4 (id=52): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x6, 0xfe, 0x0, 0x2, 0x9, @local}, 0x10) 1m32.233451165s ago: executing program 4 (id=55): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() r5 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r5, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r4}}}], 0x18}}], 0x1, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x170bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x1, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "a38c26ec238c4259"}, 0x2}}]}, 0x14c}}, 0x4884) tkill(r4, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1m30.617435244s ago: executing program 4 (id=63): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4031, 0x2b) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000006040)=""/4086, 0x1000}, {&(0x7f0000000040)=""/111}, {&(0x7f0000000480)=""/143}, {&(0x7f0000000180)=""/132}, {&(0x7f0000000340)=""/151}], 0x1}, 0x8000}], 0x1c26679f6db3718, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048048) 1m15.5629063s ago: executing program 32 (id=63): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4031, 0x2b) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000006040)=""/4086, 0x1000}, {&(0x7f0000000040)=""/111}, {&(0x7f0000000480)=""/143}, {&(0x7f0000000180)=""/132}, {&(0x7f0000000340)=""/151}], 0x1}, 0x8000}], 0x1c26679f6db3718, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048048) 16.045349134s ago: executing program 5 (id=284): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000180)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, 0x0, 0x0) 14.545411209s ago: executing program 5 (id=288): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 14.242906808s ago: executing program 5 (id=293): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x3554000) sendmsg$NFT_BATCH(r3, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040840}, 0x800) fadvise64(r3, 0x3, 0x4000000005, 0x4) ioctl$FE_GET_EVENT(r3, 0x80286f4e, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) syz_kvm_assert_syzos_uexit$x86(0xffffffffffffffff, 0x0, 0x100000000000001) fstatfs(0xffffffffffffffff, &(0x7f0000000200)=""/165) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 12.640787167s ago: executing program 5 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 11.269740529s ago: executing program 5 (id=300): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000427000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x7e272000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 11.132842593s ago: executing program 2 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, 0x0}, 0x20) 11.130002503s ago: executing program 3 (id=304): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x2b}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r5, 0x89fb, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x20001100, 0x0, @fr=0x0}}) 7.370558307s ago: executing program 3 (id=306): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 7.188410182s ago: executing program 5 (id=308): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000069000b000700"/20], 0x18}}, 0x4000000) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) poll(&(0x7f0000000140)=[{r4, 0x2cfc08c20dafc34e}, {r2, 0xf102}], 0x2, 0x8000007) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000ac0), 0x0, 0xff00) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) 7.188041312s ago: executing program 3 (id=310): syz_usb_connect$printer(0x1f, 0x36, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) io_uring_setup(0x7109, 0x0) r1 = userfaultfd(0x801) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) getresgid(0xfffffffffffffffd, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 7.183638482s ago: executing program 2 (id=311): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x800, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x401, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 6.489903254s ago: executing program 0 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(0xffffffffffffffff, 0x6f6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 6.479716454s ago: executing program 2 (id=314): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 6.310314489s ago: executing program 0 (id=315): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 6.121625454s ago: executing program 1 (id=316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x0, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x2, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x4, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x8000, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x6]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x9, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd4, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xffff0000, 0x7, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x6, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x1856, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefbc, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5.378024177s ago: executing program 2 (id=317): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) fsopen(&(0x7f0000000040)='binder\x00', 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.215293352s ago: executing program 1 (id=318): fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000200000000000000000850000006100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fanotify_init(0x10, 0x80000) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @empty}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x11b, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x800, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5.099953426s ago: executing program 0 (id=319): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) setresgid(0xee00, 0x0, 0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(0x0, 0x0) 5.045635667s ago: executing program 2 (id=320): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x80108906, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ptrace(0x8, r0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 5.018543308s ago: executing program 1 (id=321): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0xa0002) fcntl$setstatus(r0, 0x4, 0x2000) 4.864440492s ago: executing program 1 (id=322): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 3.229833082s ago: executing program 0 (id=323): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x2, 0x3, 0x5, 0x6, 0x3, 0x4, {0x1, 0x3ff, 0xff, 0x4, 0x100, 0x4, 0x9, 0x7ffffffd, 0x9, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03) 2.580010452s ago: executing program 2 (id=324): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0xaad80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x400, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d2b984b30c50997d3bef409ff2176fd7afe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa501c50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) 2.532213454s ago: executing program 3 (id=325): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x80045430, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsopen(&(0x7f00000004c0)='befs\x00', 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) pipe2$9p(&(0x7f0000000000), 0x800) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 2.213829943s ago: executing program 3 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf2515000000580001800d000100"], 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 2.178611914s ago: executing program 1 (id=327): fanotify_init(0x8, 0x40000) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 1.296886451s ago: executing program 0 (id=328): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008b000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100000000808700000000000000181a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000180000000080000000000000cb0a0000bf91000000000000b7020000030000008500000084000000b70000000005000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/16], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) 41.715489ms ago: executing program 3 (id=329): getpid() openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 41.417269ms ago: executing program 0 (id=330): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r1 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x3, 0x9d}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=331): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000140)={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x8010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 58.368807][ T4177] cgroup: Unknown subsys name 'net' [ 58.476892][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.745163][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.522371][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 61.551821][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.621349][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 61.635075][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.643930][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.705257][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.712517][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.720682][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.756764][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.764057][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.771659][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.779173][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.786408][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.794250][ T4196] device bridge_slave_0 entered promiscuous mode [ 61.816446][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.823788][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.831342][ T4196] device bridge_slave_1 entered promiscuous mode [ 61.889102][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.906378][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.915693][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.923029][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.930657][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.941795][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.948973][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.956662][ T4195] device bridge_slave_0 entered promiscuous mode [ 61.966058][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.977427][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.986738][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.993954][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.001869][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.008887][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.016205][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.025152][ T4193] device bridge_slave_0 entered promiscuous mode [ 62.032722][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.039776][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.047716][ T4195] device bridge_slave_1 entered promiscuous mode [ 62.092444][ T4196] team0: Port device team_slave_0 added [ 62.098485][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.106338][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.114350][ T4193] device bridge_slave_1 entered promiscuous mode [ 62.122944][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.139966][ T4196] team0: Port device team_slave_1 added [ 62.154212][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.169939][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.194277][ T4189] team0: Port device team_slave_0 added [ 62.201522][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.234871][ T4189] team0: Port device team_slave_1 added [ 62.241311][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.248362][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.274514][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.294148][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.305362][ T4195] team0: Port device team_slave_0 added [ 62.319414][ T4195] team0: Port device team_slave_1 added [ 62.325611][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.332654][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.358597][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.371858][ T4190] team0: Port device team_slave_0 added [ 62.379290][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.412713][ T4190] team0: Port device team_slave_1 added [ 62.418809][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.425894][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.451885][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.481157][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.488449][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.515144][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.528663][ T4193] team0: Port device team_slave_0 added [ 62.535479][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.542507][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.568743][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.580686][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.587872][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.613832][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.640807][ T4193] team0: Port device team_slave_1 added [ 62.656852][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.663926][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.690464][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.709772][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.716956][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.742968][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.769559][ T4196] device hsr_slave_0 entered promiscuous mode [ 62.777030][ T4196] device hsr_slave_1 entered promiscuous mode [ 62.824402][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.830922][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.838195][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.845954][ T4189] Cannot create hsr debugfs directory [ 62.851820][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.858836][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.884804][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.912398][ T4195] device hsr_slave_0 entered promiscuous mode [ 62.919089][ T4195] device hsr_slave_1 entered promiscuous mode [ 62.926040][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.933789][ T4195] Cannot create hsr debugfs directory [ 62.954205][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.961158][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.987107][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.000794][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.007610][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.014288][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.021841][ T4190] Cannot create hsr debugfs directory [ 63.108343][ T4193] device hsr_slave_0 entered promiscuous mode [ 63.115334][ T4193] device hsr_slave_1 entered promiscuous mode [ 63.122629][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.130272][ T4193] Cannot create hsr debugfs directory [ 63.232755][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 63.232880][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 63.239423][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 63.253467][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 63.260792][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 63.394100][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.408586][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.417701][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.426916][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.475347][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.493463][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.511074][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.526848][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.545701][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.560840][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.569495][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.594362][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.663858][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.674509][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.689054][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.697788][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.724743][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.740511][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.775196][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.785245][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.794180][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.803114][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.811970][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.819179][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.827754][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.836646][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.845311][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.852378][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.860376][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.892897][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.901694][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.917593][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.928310][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.937797][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.946661][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.961190][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.973204][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.981497][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.990141][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.007128][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.034218][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.043212][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.051390][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.059306][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.069646][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.081018][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.089380][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.101209][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.119125][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.143163][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.151857][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.160894][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.167997][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.177259][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.194608][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.208163][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.217226][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.226978][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.236047][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.243156][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.250952][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.260552][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.270085][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.277173][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.285277][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.303877][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.315438][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.324651][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.335414][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.349851][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.356973][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.365877][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.395681][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.404513][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.415170][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.426675][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.436523][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.445209][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.455239][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.464051][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.471798][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.488440][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.509590][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.518369][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.528602][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.537750][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.550864][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.559890][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.585625][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.593202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.600624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.608462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.617795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.626332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.634333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.645110][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.664635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.678551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.725135][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.740646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.751645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.760612][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.767711][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.777092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.785922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.794988][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.802274][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.810067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.819166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.828012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.837176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.847178][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.879559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.893414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.918274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.936217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.957627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.974048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.999603][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.010310][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.030276][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.039519][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.063688][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.072586][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.081075][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.096843][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.124523][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.139766][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.189764][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.197908][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.207713][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.215613][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.224503][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.232492][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.240582][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.249899][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.257923][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.267616][ T4196] device veth0_vlan entered promiscuous mode [ 65.276292][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.297192][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.306915][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.315076][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 65.316250][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 65.321125][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 65.334152][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.341286][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.346239][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 65.368645][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 65.370045][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.385813][ T4196] device veth1_vlan entered promiscuous mode [ 65.414433][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.423179][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.430958][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.440023][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.448636][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.455725][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.464386][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.475353][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.484264][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.491648][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.499291][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.508025][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.516930][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.526498][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.534864][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.543601][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.551872][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.581289][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.601287][ T4195] device veth0_vlan entered promiscuous mode [ 65.610099][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.619559][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.627221][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.635590][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.644363][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.652649][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.660271][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.673162][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.681534][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.690184][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.698993][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.716591][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.728039][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.741567][ T4196] device veth0_macvtap entered promiscuous mode [ 65.754751][ T4195] device veth1_vlan entered promiscuous mode [ 65.769122][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.777403][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.786258][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.803109][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.813716][ T4196] device veth1_macvtap entered promiscuous mode [ 65.860435][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.880626][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.899512][ T4193] device veth0_vlan entered promiscuous mode [ 65.916855][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.930487][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.940549][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.959094][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.970200][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.980684][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.994181][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.002849][ T4189] device veth0_vlan entered promiscuous mode [ 66.015963][ T4195] device veth0_macvtap entered promiscuous mode [ 66.028216][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.037262][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.047428][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.055875][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.067067][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.075839][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.085106][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.093637][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.102280][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.110001][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.124278][ T4195] device veth1_macvtap entered promiscuous mode [ 66.134018][ T4193] device veth1_vlan entered promiscuous mode [ 66.144026][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.155100][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.164240][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.173180][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.189250][ T4189] device veth1_vlan entered promiscuous mode [ 66.209019][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.227478][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.236704][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.244838][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.253476][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.261326][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.269034][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.283516][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.294898][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.305982][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.340376][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.350363][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.359937][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.369754][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.379198][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.389004][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.399604][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.411361][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.448124][ T4193] device veth0_macvtap entered promiscuous mode [ 66.458289][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.467294][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.477156][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.485981][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.495898][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.507420][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.517570][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.526304][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.535074][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.549729][ T4189] device veth0_macvtap entered promiscuous mode [ 66.573246][ T4193] device veth1_macvtap entered promiscuous mode [ 66.591540][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.600777][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.610913][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.620947][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.629707][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.644252][ T4190] device veth0_vlan entered promiscuous mode [ 66.660335][ T4189] device veth1_macvtap entered promiscuous mode [ 66.683529][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.696063][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.706582][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.719081][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.730456][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.737840][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.746118][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.755617][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.763563][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.771134][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.779888][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.796139][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.812559][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.815338][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.831752][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.850558][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.861273][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.874150][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.895908][ T4190] device veth1_vlan entered promiscuous mode [ 66.910366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.918879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.927957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.939001][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.948413][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.959040][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.967834][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.981850][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.993809][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.003752][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.014591][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.024652][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.035319][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.046714][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.072484][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.080326][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.093846][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.101642][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.110621][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.121841][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.132450][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.142612][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.153754][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.163824][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.174496][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.186017][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.214227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.223564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.235399][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.244417][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.253805][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.262586][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.314789][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.325788][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.347729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.361217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.370264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.384463][ T4190] device veth0_macvtap entered promiscuous mode [ 67.408569][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 67.423299][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 67.436240][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 67.442798][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.450626][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.452235][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 67.466573][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.476986][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.536249][ T4190] device veth1_macvtap entered promiscuous mode [ 67.578099][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.617828][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.684347][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.743500][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.774732][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.788297][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.807072][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.819379][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.836446][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.851053][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.869484][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.897823][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.906313][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.919280][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.928999][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.956133][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.981640][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.009675][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.041261][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.064457][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.079031][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.097541][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.108956][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.128765][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.138986][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.155939][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.167397][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.184010][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.201750][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.219352][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.258504][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.275879][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.287269][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.299660][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.324586][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 68.345500][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.360220][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.380475][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.389995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.410419][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.452311][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 68.520290][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.572247][ T1107] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 68.587608][ T1107] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 68.612156][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.627752][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.634325][ T1107] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 68.640784][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.662081][ T1107] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 68.662111][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.719980][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.822137][ T1107] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 68.831216][ T1107] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 69.025705][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.142168][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.266121][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.472796][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 69.475969][ T1107] usb 1-1: Product: syz [ 69.478919][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 69.483052][ T1107] usb 1-1: Manufacturer: syz [ 69.483070][ T1107] usb 1-1: SerialNumber: syz [ 69.517010][ T1107] usb 1-1: config 0 descriptor?? [ 69.569415][ T1107] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 69.575694][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 69.592651][ T1107] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 69.926822][ T4304] ======================================================= [ 69.926822][ T4304] WARNING: The mand mount option has been deprecated and [ 69.926822][ T4304] and is ignored by this kernel. Remove the mand [ 69.926822][ T4304] option from the mount to silence this warning. [ 69.926822][ T4304] ======================================================= [ 70.127617][ T4234] usb 1-1: USB disconnect, device number 2 [ 70.368533][ T4234] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 70.508454][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 70.735918][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 71.059848][ T4189] ODEBUG: Out of memory. ODEBUG disabled [ 71.227783][ T4316] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3'. [ 71.244240][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.250903][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.143363][ T4318] virtio-fs: tag not found [ 73.441932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.931940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 74.979768][ T4324] lo speed is unknown, defaulting to 1000 [ 74.993846][ T4324] lo speed is unknown, defaulting to 1000 [ 75.003374][ T4324] lo speed is unknown, defaulting to 1000 [ 75.022749][ T4324] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.040922][ T4324] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.064541][ T4324] lo speed is unknown, defaulting to 1000 [ 75.084795][ T4324] lo speed is unknown, defaulting to 1000 [ 75.093653][ T4324] lo speed is unknown, defaulting to 1000 [ 75.105783][ T4324] lo speed is unknown, defaulting to 1000 [ 75.113027][ T4324] lo speed is unknown, defaulting to 1000 [ 75.118860][ T4335] Zero length message leads to an empty skb [ 75.261947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.281951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.301954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.341940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 75.361940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.371938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.391938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.401940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.612010][ T4234] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.093528][ T4234] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 78.108562][ T4234] usb 5-1: config 0 has no interface number 0 [ 78.332818][ T4234] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 78.817950][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.839037][ T4234] usb 5-1: Product: syz [ 78.843338][ T4234] usb 5-1: Manufacturer: syz [ 78.848104][ T4234] usb 5-1: SerialNumber: syz [ 78.861686][ T4234] usb 5-1: config 0 descriptor?? [ 79.155019][ T4234] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 79.208350][ T4369] tipc: Started in network mode [ 79.217099][ T4369] tipc: Node identity e22c0982b583, cluster identity 4711 [ 79.225502][ T4369] tipc: Enabled bearer , priority 0 [ 79.235970][ T4369] device syzkaller0 entered promiscuous mode [ 79.248931][ T4369] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 79.272442][ T4369] tipc: Resetting bearer [ 79.283890][ T4368] tipc: Resetting bearer [ 79.309243][ T4368] tipc: Disabling bearer [ 79.743190][ T4234] gspca_m5602: Failed to find a sensor [ 79.751103][ T4234] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 80.004681][ T4234] usb 5-1: USB disconnect, device number 2 [ 83.450313][ T4420] sched: RT throttling activated [ 83.625621][ T4420] syz.4.38 uses obsolete (PF_INET,SOCK_PACKET) [ 83.904019][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.988308][ T4433] dlm: no local IP address has been set [ 85.010696][ T4433] dlm: cannot start dlm midcomms -107 [ 85.427374][ T4442] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.594308][ T1354] cfg80211: failed to load regulatory.db [ 91.129084][ T4478] raw_sendmsg: syz.4.55 forgot to set AF_INET. Fix it! [ 91.142062][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.149458][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.162228][ T4478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.532776][ T4236] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.782024][ T4236] usb 1-1: Using ep0 maxpacket: 8 [ 91.902192][ T4236] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 91.927658][ T4236] usb 1-1: config 0 has no interface number 0 [ 91.939346][ T4236] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 91.950507][ T4236] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 91.967195][ T4236] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.980581][ T4236] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 91.995111][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.019572][ T4236] usb 1-1: config 0 descriptor?? [ 92.134436][ T4236] ldusb 1-1:0.55: Interrupt in endpoint not found [ 92.341134][ T21] usb 1-1: USB disconnect, device number 3 [ 94.113577][ T4483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.364813][ T25] audit: type=1326 audit(1781851605.040:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb2ddee59 code=0x7ffc0000 [ 96.468732][ T25] audit: type=1326 audit(1781851605.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb2ddee59 code=0x7ffc0000 [ 97.471217][ T25] audit: type=1326 audit(1781851605.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb2ddee59 code=0x7ffc0000 [ 97.546359][ T25] audit: type=1326 audit(1781851605.040:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fccb2ddee59 code=0x7ffc0000 [ 98.653267][ T25] audit: type=1326 audit(1781851605.040:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb2ddee59 code=0x7ffc0000 [ 98.772236][ T25] audit: type=1326 audit(1781851605.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fccb2ddee59 code=0x7ffc0000 [ 98.848047][ T25] audit: type=1326 audit(1781851605.040:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fccb2ddee59 code=0x7ffc0000 [ 101.223081][ T4585] netlink: 'syz.0.85': attribute type 10 has an invalid length. [ 101.230940][ T4585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.85'. [ 101.678547][ T4585] team0: Port device geneve0 added [ 103.802040][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.989793][ T1354] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.056839][ T1354] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.066546][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 104.222178][ T4236] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.312154][ T4236] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 104.320338][ T4236] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 104.371267][ T4236] usb 4-1: config 14 has no interface number 0 [ 104.409827][ T4236] usb 4-1: config 14 has no interface number 1 [ 104.418735][ T4236] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 104.467812][ T4236] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 104.509226][ T4236] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 104.571968][ T4236] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.622112][ T4236] usb 4-1: config 14 interface 57 has no altsetting 0 [ 104.641959][ T4236] usb 4-1: config 14 interface 228 has no altsetting 0 [ 104.822158][ T4236] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 105.237017][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.271430][ T4236] usb 4-1: Product: syz [ 105.290259][ T4236] usb 4-1: Manufacturer: syz [ 105.308274][ T4236] usb 4-1: SerialNumber: syz [ 106.706273][ T4236] legousbtower 4-1:14.57: interrupt endpoints not found [ 107.563098][ T4236] legousbtower 4-1:14.228: interrupt endpoints not found [ 107.652111][ T4236] usb 4-1: USB disconnect, device number 2 [ 110.321366][ T4703] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.445055][ T4703] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.668461][ T4712] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.690271][ T4712] overlayfs: failed to look up (tracing) for ino (-66) [ 110.907160][ T4719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.200572][ T4716] lo speed is unknown, defaulting to 1000 [ 112.879179][ T4744] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 113.355570][ T4744] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 115.528547][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.560552][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 115.615370][ T4196] syz-executor (4196) used greatest stack depth: 21136 bytes left [ 115.731170][ T4297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.772174][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 115.804040][ T4716] chnl_net:caif_netlink_parms(): no params data found [ 115.853455][ T4297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.902554][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 115.994854][ T4297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.082253][ T1107] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.091422][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.100412][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.107989][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.123905][ T4716] device bridge_slave_0 entered promiscuous mode [ 116.142963][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.150460][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.162789][ T4716] device bridge_slave_1 entered promiscuous mode [ 116.954289][ T4297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.968307][ T1107] usb 3-1: Product: syz [ 116.972545][ T1107] usb 3-1: Manufacturer: syz [ 116.977142][ T1107] usb 3-1: SerialNumber: syz [ 116.993531][ T1107] usb 3-1: config 0 descriptor?? [ 117.022905][ T1107] usb 3-1: can't set config #0, error -71 [ 117.042824][ T1107] usb 3-1: USB disconnect, device number 2 [ 117.088913][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.167555][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.655990][ T1354] Bluetooth: hci5: command 0x041b tx timeout [ 117.777054][ T4716] team0: Port device team_slave_0 added [ 117.835951][ T4716] team0: Port device team_slave_1 added [ 118.045722][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.062266][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.133561][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.482035][ T1354] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.529588][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.637592][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.892276][ T1354] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.948900][ T1354] usb 4-1: config 0 has no interfaces? [ 118.987994][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.027709][ T1354] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 119.165383][ T1354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.413605][ T1354] usb 4-1: config 0 descriptor?? [ 119.622147][ T4716] device hsr_slave_0 entered promiscuous mode [ 119.630045][ T4716] device hsr_slave_1 entered promiscuous mode [ 119.690514][ T4716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.712230][ T1354] Bluetooth: hci5: command 0x040f tx timeout [ 119.725417][ T4716] Cannot create hsr debugfs directory [ 120.669512][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 120.790877][ T4305] usb 4-1: USB disconnect, device number 3 [ 121.467187][ T4716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.592005][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.651785][ T4716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.802776][ T1354] Bluetooth: hci5: command 0x0419 tx timeout [ 121.939925][ T4716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.046385][ T4716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.453492][ T4297] device hsr_slave_0 left promiscuous mode [ 122.469921][ T4297] device hsr_slave_1 left promiscuous mode [ 122.479574][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.496674][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.515415][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.588164][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.602057][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.678116][ T4297] device bridge_slave_1 left promiscuous mode [ 122.743263][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.752631][ T1107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.764367][ T1107] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 122.782158][ T4297] device bridge_slave_0 left promiscuous mode [ 122.788530][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.831598][ T4297] device veth1_macvtap left promiscuous mode [ 122.847976][ T4297] device veth0_macvtap left promiscuous mode [ 122.862354][ T4297] device veth1_vlan left promiscuous mode [ 122.868507][ T4297] device veth0_vlan left promiscuous mode [ 122.932208][ T1107] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 122.948007][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.972128][ T1107] usb 2-1: Product: syz [ 122.983926][ T1107] usb 2-1: Manufacturer: syz [ 123.026198][ T1107] usb 2-1: SerialNumber: syz [ 124.304139][ T1107] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 124.999851][ T1107] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 125.012029][ T25] audit: type=1326 audit(1781851634.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9568fe59 code=0x0 [ 125.069383][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 125.592396][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 126.142135][ T1107] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 126.162937][ T1107] usb 2-1: USB disconnect, device number 2 [ 126.208514][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.231527][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.339779][ T4297] bond0 (unregistering): Released all slaves [ 126.439431][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.584800][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.611315][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.664694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.681756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.728388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.819001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.127170][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.134389][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.297893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.312630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.331412][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.339062][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.362401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.371723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.385588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.394573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.417311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.453390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.461657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.475054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.506129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.539989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.561794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.590600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.156020][ T4945] device syzkaller0 entered promiscuous mode [ 129.275161][ T4952] binder: Unknown parameter 'subj_user' [ 129.297785][ T4931] device syzkaller0 entered promiscuous mode [ 130.562838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.574941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.613327][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.892383][ T5005] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.900318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.960201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.069567][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.083026][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.112631][ T4716] device veth0_vlan entered promiscuous mode [ 132.136410][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.159596][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.204608][ T4716] device veth1_vlan entered promiscuous mode [ 132.519354][ T4716] device veth0_macvtap entered promiscuous mode [ 132.543195][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.550645][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.579112][ T4998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.603846][ T4716] device veth1_macvtap entered promiscuous mode [ 132.686478][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.693614][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.713231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.871592][ T5028] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 132.892636][ T5028] cramfs: wrong magic [ 134.273930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.297316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.601687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.876704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.897554][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.924408][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.949771][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.981532][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.052058][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.079426][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.096029][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.124023][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.151234][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.180601][ T5028] netlink: 52 bytes leftover after parsing attributes in process `syz.3.177'. [ 136.265771][ T5052] binder_alloc: 5051: binder_alloc_buf, no vma [ 136.293082][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.300527][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.419511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.441047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.502815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.528564][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.597076][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.665589][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.724358][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.762890][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.809639][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.855846][ T4716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.924443][ T4716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.978089][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.029962][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.068414][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.194763][ T4716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.302137][ T4716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.437482][ T4716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.480282][ T4716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.692438][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.737321][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.792465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.862420][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.870277][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.087257][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.262157][ T5132] binder: 5127:5132 ioctl c018620c 200000000240 returned -1 [ 143.587721][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 143.598278][ T4236] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.012026][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 144.142285][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.183581][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.262230][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.283253][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.302284][ T26] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 144.305734][ T4236] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 144.331656][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.350809][ T4236] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 144.356536][ T26] usb 6-1: config 0 descriptor?? [ 144.394372][ T4236] usb 3-1: Manufacturer: syz [ 144.423338][ T4236] usb 3-1: config 0 descriptor?? [ 144.662192][ T2300] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.910088][ T4236] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 144.945249][ T4236] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 144.975780][ T4236] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 145.013109][ T4236] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 145.051558][ T4236] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 145.088596][ T4236] creative-sb0540 0003:041E:3100.0002: No inputs registered, leaving [ 145.132092][ T26] usb 6-1: string descriptor 0 read error: -22 [ 145.170339][ T4236] creative-sb0540 0003:041E:3100.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 145.229348][ T4236] usb 3-1: USB disconnect, device number 3 [ 145.304809][ T5183] fido_id[5183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 145.397070][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0003/input/input5 [ 145.462217][ T2300] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.470886][ T2300] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.481792][ T2300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.492010][ T2300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 145.508567][ T26] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 145.520538][ T2300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 145.611469][ T4236] usb 6-1: USB disconnect, device number 2 [ 145.704256][ T5196] fido_id[5196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 145.726198][ T2300] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.753842][ T2300] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.762469][ T2300] usb 1-1: Product: syz [ 145.913924][ T2300] usb 1-1: Manufacturer: syz [ 146.096683][ T2300] cdc_wdm 1-1:1.0: skipping garbage [ 146.121061][ T2300] cdc_wdm 1-1:1.0: skipping garbage [ 146.235353][ T2300] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 146.369059][ T2300] cdc_wdm 1-1:1.0: Unknown control protocol [ 147.713576][ T5235] lo speed is unknown, defaulting to 1000 [ 148.941993][ T1107] usb 1-1: USB disconnect, device number 4 [ 149.301381][ T5253] device syzkaller0 entered promiscuous mode [ 150.115174][ T5270] binder: Unknown parameter 'subj_user' [ 150.743249][ T1320] Bluetooth: (null): Invalid header checksum [ 150.842363][ T1320] Bluetooth: (null): Invalid header checksum [ 150.849044][ T1320] Bluetooth: (null): Invalid header checksum [ 150.878058][ T1320] Bluetooth: (null): Invalid header checksum [ 150.990536][ T1320] Bluetooth: (null): Invalid header checksum [ 151.098315][ T1320] Bluetooth: (null): Invalid header checksum [ 152.998653][ T5299] input: syz1 as /devices/virtual/input/input6 [ 157.382018][ T1107] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 157.388772][ T5344] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.222367][ T1107] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 158.232051][ T1107] usb 3-1: config 127 has no interface number 0 [ 158.255038][ T1107] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 158.453250][ T1107] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 158.486121][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.518620][ T1107] usb 3-1: Product: syz [ 158.552254][ T1107] usb 3-1: Manufacturer: syz [ 158.556891][ T1107] usb 3-1: SerialNumber: syz [ 158.612337][ T5337] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.876788][ T5379] device syzkaller0 entered promiscuous mode [ 159.152905][ T5337] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.293162][ T4305] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.417643][ T1107] asix 3-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 159.582402][ T4305] usb 4-1: Using ep0 maxpacket: 16 [ 159.772903][ T4305] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 159.845137][ T4305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.092737][ T4305] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.180990][ T1107] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 160.191542][ T1107] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 160.223404][ T1107] asix: probe of 3-1:127.57 failed with error -71 [ 160.252081][ T1107] usb 3-1: USB disconnect, device number 4 [ 160.361955][ T4305] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 160.499895][ T4305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.612127][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.781998][ T4305] usb 4-1: Product: syz [ 160.786202][ T4305] usb 4-1: Manufacturer: syz [ 160.811989][ T4305] usb 4-1: SerialNumber: syz [ 160.842986][ T4305] usb 4-1: config 0 descriptor?? [ 160.871999][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 160.992337][ T1107] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.000669][ T1107] usb 3-1: config 0 has no interface number 0 [ 161.034586][ T1107] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 161.075020][ T1107] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 161.127010][ T5427] virtio-fs: tag not found [ 161.191871][ T1107] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.407748][ T1107] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.535063][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.692562][ T1107] usb 3-1: config 0 descriptor?? [ 161.764263][ T4234] Bluetooth: hci5: command 0x0405 tx timeout [ 161.821752][ T1107] ldusb 3-1:0.55: Interrupt in endpoint not found [ 161.980841][ T26] usb 4-1: USB disconnect, device number 4 [ 162.095563][ T1107] usb 3-1: USB disconnect, device number 5 [ 162.424925][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 162.993678][ T4234] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 163.349260][ T5451] lo speed is unknown, defaulting to 1000 [ 163.713615][ T4234] Bluetooth: hci5: Injecting HCI hardware error event [ 163.721730][ T4202] Bluetooth: hci5: hardware error 0x00 [ 165.510678][ T5523] netlink: 'syz.2.279': attribute type 2 has an invalid length. [ 165.569134][ T5523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 165.800286][ T5532] netlink: set zone limit has 8 unknown bytes [ 165.869820][ T5533] process 'syz.2.281' launched './file0' with NULL argv: empty string added [ 165.882171][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.822387][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 168.664427][ T5560] device syzkaller0 entered promiscuous mode [ 169.025640][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.992151][ T1107] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 170.005911][ T1107] usb 4-1: can't read configurations, error -71 [ 176.289302][ T5641] input: syz1 as /devices/virtual/input/input7 [ 177.678981][ T5666] device syzkaller0 entered promiscuous mode [ 181.588748][ T5705] loop5: detected capacity change from 0 to 7 [ 181.802817][ T5706] netlink: 68 bytes leftover after parsing attributes in process `syz.3.326'. [ 181.943056][ T5705] Dev loop5: unable to read RDB block 7 [ 183.057768][ T5705] loop5: unable to read partition table [ 183.068637][ T5705] loop5: partition table beyond EOD, truncated [ 183.085543][ T5705] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 183.183866][ T5705] [ 183.186229][ T5705] ====================================================== [ 183.193241][ T5705] WARNING: possible circular locking dependency detected [ 183.200265][ T5705] syzkaller #0 Not tainted [ 183.204668][ T5705] ------------------------------------------------------ [ 183.211676][ T5705] syz.2.324/5705 is trying to acquire lock: [ 183.217557][ T5705] ffff88807de27138 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 183.227331][ T5705] [ 183.227331][ T5705] but task is already holding lock: [ 183.234682][ T5705] ffff888147456468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 183.243475][ T5705] [ 183.243475][ T5705] which lock already depends on the new lock. [ 183.243475][ T5705] [ 183.253879][ T5705] [ 183.253879][ T5705] the existing dependency chain (in reverse order) is: [ 183.262893][ T5705] [ 183.262893][ T5705] -> #8 (&lo->lo_mutex){+.+.}-{3:3}: [ 183.270392][ T5705] __mutex_lock_common+0x1e3/0x2400 [ 183.276121][ T5705] mutex_lock_killable_nested+0x17/0x20 [ 183.282189][ T5705] lo_open+0x6a/0x100 [ 183.286686][ T5705] blkdev_get_whole+0x90/0x390 [ 183.291966][ T5705] blkdev_get_by_dev+0x2d0/0xa60 [ 183.297416][ T5705] blkdev_open+0x12d/0x2c0 [ 183.302334][ T5705] do_dentry_open+0x7ff/0xf80 [ 183.307515][ T5705] path_openat+0x26f5/0x2fa0 [ 183.312606][ T5705] do_filp_open+0x1e2/0x410 [ 183.317611][ T5705] do_sys_openat2+0x150/0x4b0 [ 183.322785][ T5705] __x64_sys_openat+0x135/0x160 [ 183.328130][ T5705] do_syscall_64+0x4c/0xa0 [ 183.333048][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.339445][ T5705] [ 183.339445][ T5705] -> #7 (&disk->open_mutex){+.+.}-{3:3}: [ 183.347238][ T5705] __mutex_lock_common+0x1e3/0x2400 [ 183.352938][ T5705] mutex_lock_nested+0x17/0x20 [ 183.358206][ T5705] bd_register_pending_holders+0x33/0x310 [ 183.364423][ T5705] device_add_disk+0x5a7/0xd40 [ 183.369688][ T5705] md_alloc+0x809/0xc00 [ 183.374350][ T5705] blk_request_module+0x26e/0x290 [ 183.379876][ T5705] blkdev_get_no_open+0x38/0x1d0 [ 183.385312][ T5705] blkdev_get_by_dev+0x77/0xa60 [ 183.390663][ T5705] swsusp_check+0xa1/0x2b0 [ 183.395586][ T5705] software_resume+0xc6/0x3b0 [ 183.400762][ T5705] resume_store+0xe4/0x130 [ 183.405678][ T5705] kernfs_fop_write_iter+0x379/0x4c0 [ 183.411464][ T5705] vfs_write+0x745/0xd60 [ 183.416205][ T5705] ksys_write+0x152/0x260 [ 183.421035][ T5705] do_syscall_64+0x4c/0xa0 [ 183.425954][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.432354][ T5705] [ 183.432354][ T5705] -> #6 (disks_mutex){+.+.}-{3:3}: [ 183.439643][ T5705] __mutex_lock_common+0x1e3/0x2400 [ 183.445360][ T5705] mutex_lock_nested+0x17/0x20 [ 183.450638][ T5705] md_alloc+0x48/0xc00 [ 183.455220][ T5705] blk_request_module+0x26e/0x290 [ 183.460780][ T5705] blkdev_get_no_open+0x38/0x1d0 [ 183.466229][ T5705] blkdev_get_by_dev+0x77/0xa60 [ 183.471580][ T5705] swsusp_check+0xa1/0x2b0 [ 183.476500][ T5705] software_resume+0xc6/0x3b0 [ 183.481679][ T5705] resume_store+0xe4/0x130 [ 183.486594][ T5705] kernfs_fop_write_iter+0x379/0x4c0 [ 183.492381][ T5705] vfs_write+0x745/0xd60 [ 183.497123][ T5705] ksys_write+0x152/0x260 [ 183.501951][ T5705] do_syscall_64+0x4c/0xa0 [ 183.506869][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.513264][ T5705] [ 183.513264][ T5705] -> #5 (major_names_lock){+.+.}-{3:3}: [ 183.520972][ T5705] __mutex_lock_common+0x1e3/0x2400 [ 183.526671][ T5705] mutex_lock_nested+0x17/0x20 [ 183.531934][ T5705] blk_request_module+0x31/0x290 [ 183.537372][ T5705] blkdev_get_no_open+0x38/0x1d0 [ 183.542806][ T5705] blkdev_get_by_dev+0x77/0xa60 [ 183.548154][ T5705] swsusp_check+0xa1/0x2b0 [ 183.553073][ T5705] software_resume+0xc6/0x3b0 [ 183.558250][ T5705] resume_store+0xe4/0x130 [ 183.563168][ T5705] kernfs_fop_write_iter+0x379/0x4c0 [ 183.568956][ T5705] vfs_write+0x745/0xd60 [ 183.573697][ T5705] ksys_write+0x152/0x260 [ 183.578528][ T5705] do_syscall_64+0x4c/0xa0 [ 183.583449][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.589843][ T5705] [ 183.589843][ T5705] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 183.598339][ T5705] __mutex_lock_common+0x1e3/0x2400 [ 183.604042][ T5705] mutex_lock_nested+0x17/0x20 [ 183.609310][ T5705] software_resume+0x7c/0x3b0 [ 183.614488][ T5705] resume_store+0xe4/0x130 [ 183.619407][ T5705] kernfs_fop_write_iter+0x379/0x4c0 [ 183.625284][ T5705] vfs_write+0x745/0xd60 [ 183.630026][ T5705] ksys_write+0x152/0x260 [ 183.634869][ T5705] do_syscall_64+0x4c/0xa0 [ 183.639789][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.646184][ T5705] [ 183.646184][ T5705] -> #3 (&of->mutex){+.+.}-{3:3}: [ 183.653370][ T5705] __mutex_lock_common+0x1e3/0x2400 [ 183.659070][ T5705] mutex_lock_nested+0x17/0x20 [ 183.664334][ T5705] kernfs_seq_start+0x51/0x3c0 [ 183.669598][ T5705] seq_read_iter+0x3c4/0xd50 [ 183.674688][ T5705] vfs_read+0x759/0xd60 [ 183.679340][ T5705] ksys_read+0x152/0x260 [ 183.684777][ T5705] do_syscall_64+0x4c/0xa0 [ 183.689690][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.696082][ T5705] [ 183.696082][ T5705] -> #2 (&p->lock){+.+.}-{3:3}: [ 183.703094][ T5705] __mutex_lock_common+0x1e3/0x2400 [ 183.708796][ T5705] mutex_lock_nested+0x17/0x20 [ 183.714058][ T5705] seq_read_iter+0xad/0xd50 [ 183.719065][ T5705] do_iter_readv_writev+0x47e/0x5f0 [ 183.724762][ T5705] do_iter_read+0x20b/0x7c0 [ 183.729762][ T5705] loop_process_work+0x16dd/0x24a0 [ 183.735370][ T5705] process_one_work+0x85f/0x1010 [ 183.740807][ T5705] worker_thread+0xaa6/0x1290 [ 183.745981][ T5705] kthread+0x436/0x520 [ 183.750551][ T5705] ret_from_fork+0x1f/0x30 [ 183.755466][ T5705] [ 183.755466][ T5705] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 183.764564][ T5705] process_one_work+0x7bb/0x1010 [ 183.770003][ T5705] worker_thread+0xaa6/0x1290 [ 183.775191][ T5705] kthread+0x436/0x520 [ 183.779760][ T5705] ret_from_fork+0x1f/0x30 [ 183.784679][ T5705] [ 183.784679][ T5705] -> #0 ((wq_completion)loop5){+.+.}-{0:0}: [ 183.792731][ T5705] __lock_acquire+0x2c42/0x7d10 [ 183.798085][ T5705] lock_acquire+0x19e/0x400 [ 183.803087][ T5705] flush_workqueue+0x16c/0x13d0 [ 183.808440][ T5705] drain_workqueue+0xcf/0x380 [ 183.813621][ T5705] destroy_workqueue+0x7b/0xb20 [ 183.818972][ T5705] __loop_clr_fd+0x234/0xb90 [ 183.824061][ T5705] blkdev_put+0x53f/0x7d0 [ 183.828893][ T5705] blkdev_close+0x76/0xa0 [ 183.833721][ T5705] __fput+0x234/0x930 [ 183.838204][ T5705] task_work_run+0x125/0x1a0 [ 183.843296][ T5705] get_signal+0x122e/0x12d0 [ 183.848297][ T5705] arch_do_signal_or_restart+0xe7/0x12c0 [ 183.854432][ T5705] exit_to_user_mode_loop+0x9e/0x130 [ 183.860215][ T5705] exit_to_user_mode_prepare+0xee/0x180 [ 183.866258][ T5705] syscall_exit_to_user_mode+0x16/0x40 [ 183.872219][ T5705] do_syscall_64+0x58/0xa0 [ 183.877134][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.883530][ T5705] [ 183.883530][ T5705] other info that might help us debug this: [ 183.883530][ T5705] [ 183.893821][ T5705] Chain exists of: [ 183.893821][ T5705] (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex [ 183.893821][ T5705] [ 183.907271][ T5705] Possible unsafe locking scenario: [ 183.907271][ T5705] [ 183.914696][ T5705] CPU0 CPU1 [ 183.920035][ T5705] ---- ---- [ 183.925373][ T5705] lock(&lo->lo_mutex); [ 183.929592][ T5705] lock(&disk->open_mutex); [ 183.936684][ T5705] lock(&lo->lo_mutex); [ 183.944137][ T5705] lock((wq_completion)loop5); [ 183.948964][ T5705] [ 183.948964][ T5705] *** DEADLOCK *** [ 183.948964][ T5705] [ 183.957079][ T5705] 2 locks held by syz.2.324/5705: [ 183.962078][ T5705] #0: ffff88802059c518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 183.971369][ T5705] #1: ffff888147456468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 183.980565][ T5705] [ 183.980565][ T5705] stack backtrace: [ 183.986446][ T5705] CPU: 1 PID: 5705 Comm: syz.2.324 Not tainted syzkaller #0 [ 183.993711][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.003753][ T5705] Call Trace: [ 184.007039][ T5705] [ 184.009951][ T5705] dump_stack_lvl+0x188/0x250 [ 184.014614][ T5705] ? load_image+0x400/0x400 [ 184.019106][ T5705] ? show_regs_print_info+0x20/0x20 [ 184.024288][ T5705] ? print_circular_bug+0x12b/0x1a0 [ 184.029468][ T5705] check_noncircular+0x296/0x330 [ 184.034389][ T5705] ? add_chain_block+0x940/0x940 [ 184.039303][ T5705] ? lockdep_lock+0xf1/0x1f0 [ 184.043875][ T5705] ? lockdep_unlock+0x143/0x2e0 [ 184.048707][ T5705] ? mark_lock+0x94/0x320 [ 184.053015][ T5705] __lock_acquire+0x2c42/0x7d10 [ 184.057853][ T5705] ? __lock_acquire+0x13bc/0x7d10 [ 184.062859][ T5705] ? verify_lock_unused+0x140/0x140 [ 184.068044][ T5705] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 184.074009][ T5705] ? memset+0x1e/0x40 [ 184.077970][ T5705] lock_acquire+0x19e/0x400 [ 184.082456][ T5705] ? flush_workqueue+0x150/0x13d0 [ 184.087461][ T5705] ? __mutex_trylock_common+0x155/0x260 [ 184.092984][ T5705] ? read_lock_is_recursive+0x10/0x10 [ 184.098343][ T5705] ? __init_swait_queue_head+0xa5/0x150 [ 184.103874][ T5705] flush_workqueue+0x16c/0x13d0 [ 184.108704][ T5705] ? flush_workqueue+0x150/0x13d0 [ 184.113706][ T5705] ? __lock_acquire+0x7d10/0x7d10 [ 184.118711][ T5705] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 184.124671][ T5705] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 184.130110][ T5705] ? rcu_work_rcufn+0x120/0x120 [ 184.134940][ T5705] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 184.140555][ T5705] ? finish_wait+0xc0/0x1d0 [ 184.145040][ T5705] drain_workqueue+0xcf/0x380 [ 184.149704][ T5705] destroy_workqueue+0x7b/0xb20 [ 184.154536][ T5705] __loop_clr_fd+0x234/0xb90 [ 184.159122][ T5705] ? lo_release+0x172/0x1f0 [ 184.163604][ T5705] ? lo_open+0x100/0x100 [ 184.167827][ T5705] blkdev_put+0x53f/0x7d0 [ 184.172144][ T5705] blkdev_close+0x76/0xa0 [ 184.176456][ T5705] ? blkdev_open+0x2c0/0x2c0 [ 184.181049][ T5705] __fput+0x234/0x930 [ 184.185017][ T5705] task_work_run+0x125/0x1a0 [ 184.189591][ T5705] get_signal+0x122e/0x12d0 [ 184.194077][ T5705] ? kasan_save_stack+0x4b/0x60 [ 184.198906][ T5705] ? kasan_save_stack+0x35/0x60 [ 184.203734][ T5705] ? kasan_record_aux_stack+0xb8/0x100 [ 184.209189][ T5705] ? task_work_add+0x2f/0x1d0 [ 184.213862][ T5705] ? fput_many+0xde/0x1a0 [ 184.218178][ T5705] ? __se_sys_ioctl+0x157/0x170 [ 184.223009][ T5705] ? do_syscall_64+0x4c/0xa0 [ 184.227588][ T5705] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.233651][ T5705] arch_do_signal_or_restart+0xe7/0x12c0 [ 184.239285][ T5705] ? get_sigframe_size+0x10/0x10 [ 184.244219][ T5705] ? kick_process+0xd4/0x140 [ 184.248806][ T5705] ? exit_to_user_mode_loop+0x3b/0x130 [ 184.254248][ T5705] exit_to_user_mode_loop+0x9e/0x130 [ 184.259517][ T5705] exit_to_user_mode_prepare+0xee/0x180 [ 184.265049][ T5705] syscall_exit_to_user_mode+0x16/0x40 [ 184.270510][ T5705] do_syscall_64+0x58/0xa0 [ 184.274921][ T5705] ? clear_bhb_loop+0x30/0x80 [ 184.279601][ T5705] ? clear_bhb_loop+0x30/0x80 [ 184.284265][ T5705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.290160][ T5705] RIP: 0033:0x7f37974b7e59 [ 184.294565][ T5705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.314162][ T5705] RSP: 002b:00007f37956f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.322582][ T5705] RAX: 0000000000000000 RBX: 00007f3797731090 RCX: 00007f37974b7e59 [ 184.330535][ T5705] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000007 [ 184.338486][ T5705] RBP: 00007f379754de6f R08: 0000000000000000 R09: 0000000000000000 [ 184.346438][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.354390][ T5705] R13: 00007f3797731128 R14: 00007f3797731090 R15: 00007fff83f9d278 [ 184.362346][ T5705] [ 186.432051][ T4236] Bluetooth: hci0: command 0x0406 tx timeout [ 186.438096][ T4236] Bluetooth: hci1: command 0x0406 tx timeout [ 186.444270][ T4236] Bluetooth: hci3: command 0x0406 tx timeout