last executing test programs: 1m27.459803201s ago: executing program 1 (id=323): socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66", 0x8}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[], 0x3c0}}, {{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="380000000000000029000000360000001103000000000000c910fc010000000000000000000000000000c20400000001c20400000003"], 0x38}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m25.228243916s ago: executing program 1 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c041}, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r5, 0xc0000000, 0x6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b20, &(0x7f0000000040)) 1m23.406591963s ago: executing program 1 (id=336): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getenv(0x4201, r1, 0x4, &(0x7f00000001c0)) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffefa7}, 0x1c) 1m22.259286401s ago: executing program 1 (id=341): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 1m20.670634008s ago: executing program 1 (id=345): syz_open_dev$video(&(0x7f0000000000), 0x3ff, 0x40040) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) 1m19.738803278s ago: executing program 1 (id=349): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000001c0)={0x0, 0x0}) 1m19.019952998s ago: executing program 32 (id=349): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000001c0)={0x0, 0x0}) 12.573160569s ago: executing program 3 (id=528): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x6, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x48a, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x2, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) readv(r5, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xe) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) ioctl$VT_SETMODE(r8, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 9.47329203s ago: executing program 0 (id=534): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, 0x0) socket$inet6(0xa, 0x8000e, 0x5) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) pread64(r1, &(0x7f0000000580)=""/199, 0xc7, 0x4) 9.47006976s ago: executing program 4 (id=535): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket(0xa, 0x3, 0xff) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x801, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4}) r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xae, 0x2, 0x400, 0x0, 0xffffffff, 0x1, "5ea0a2876cecbc48f8b35baaf4b52012e434d0c487b8079884511fe91a68ad715c791057f9ec88450e415f4dbbbbd32f7836d6613ce300eeb43556648ce101a887ed6d0adef072192dd48a48614dac45c0df86064889f97f85470a55b39081da04d9cdb1f795b8aa03481459f5cbd10640db8239263795c0577d2d64845c43b51e3bd41054f9a63b4d538c47b357f8b2c6e175f543777b5e03d49a0f25ee659e3440758dad37ce4bfbe2f900817d"}}, 0x1c6) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.45577565s ago: executing program 5 (id=536): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000043dceb56e4d86cae000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @local}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b84939328a7fcb5dfc0c0969e7f9fd383143aa01c0a3c0f16ff70ce8bb011366c81151af160efad39284dc73eda5b5de57aaa0cedfc56a31e86559edac3f0e9e45f7a763fda821af28", 0x49) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00003fd000/0x1000)=nil) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './mnt/file0'}, 0xf) 7.800311991s ago: executing program 4 (id=537): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00'}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x8000000, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x10000000, 0x8, r1, 0x1, 0x3, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) 7.150460178s ago: executing program 0 (id=538): listen(0xffffffffffffffff, 0x8000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 6.812531262s ago: executing program 2 (id=539): socket$inet_sctp(0x2, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) 6.656293239s ago: executing program 4 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xae, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) 6.126830801s ago: executing program 5 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r0 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() kcmp(r7, r7, 0x0, r6, r5) syz_genetlink_get_family_id$mptcp(0x0, r3) keyctl$read(0xb, r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) 6.050688354s ago: executing program 2 (id=542): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto(r0, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) 5.998334616s ago: executing program 0 (id=543): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 4.370200776s ago: executing program 5 (id=544): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 4.335381527s ago: executing program 4 (id=545): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 4.228182912s ago: executing program 2 (id=546): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @remote}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$evdev(&(0x7f0000000100), 0x1000, 0x10800) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0x3, 0x0}, 0x4040815) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, 0x0, 0x0, 0x9, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.166735374s ago: executing program 4 (id=547): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @remote}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0x3, 0x0}, 0x4040815) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, 0x0, 0x0, 0x9, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.152052784s ago: executing program 5 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000780)=0x3, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) bind$rose(r1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3a62, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8000, 0x89, &(0x7f00000004c0)=""/137, 0x40f00, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x3, 0x5, 0x7, 0x5}], 0x10, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x8, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 4.099696937s ago: executing program 3 (id=549): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x4000000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000140)="8000", 0x2}], 0x1, &(0x7f0000000180)=ANY=[], 0x2}}], 0x1, 0x4000010) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) read$dsp(r3, &(0x7f0000000080)=""/124, 0x7c) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) openat$comedi(0xffffff9c, 0x0, 0x628c00, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000800)={0x2f, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @pic={0x7, 0x48, 0x2, 0x3, 0x8, 0x5, 0x7, 0x22, 0x3, 0x0, 0x3, 0x6, 0x5, 0x2, 0x8b, 0x9}}) 2.59633816s ago: executing program 0 (id=550): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00'}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x8000000, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x10000000, 0x8, r1, 0x1, 0x3, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) 2.59586493s ago: executing program 4 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x248}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000100000002"], 0x0, 0x56, 0x0, 0x0, 0x3}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0xe, 0x0, &(0x7f0000000180)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000580)={0x24, &(0x7f0000000a80)=ANY=[@ANYBLOB="2021280000002822cdbea52d1d715b8b7a9b7f68059fa37217c52cfb00217fd9742da5582599f1758c0f9eb9ca93"], &(0x7f0000000280)={0x0, 0x3, 0x6c, @string={0x6c, 0x3, "2a4c8cf775b0bf67b479fcc99fd7791f61e5711172a94ab884f6dc7d36f256d632f7470185694bbc98a3743c490f1c367e33b1834d47b056c3cbe3d00b7fbe3c0e98ccc5f5f4424574f6de3361b6eac5c51e7166114bfb428d49d59925d63fb8d16a952a10a31ef4a795"}}, &(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES64=r0], &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x961}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="000bc20000009dee117485767ad1f0613770eba4e5829826982691abfeb39b45ac6038f3ea69618c3bb33330abdb7329b2ec9bb660864448e9c8d493eb2b1c490a95193d62c25529254da5a79b750c40c9f97f3ee3cc05aa2083c0166e98827b5294273bd7c702e0ce76ce6a041981c14a268ee4886d7cf5b8c0a9314e26836998808bfde3ff62ef5dbb05a52a633133fb8a519a10e5"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740), &(0x7f0000000800)={0x20, 0x3, 0x1, 0x4}}) alarm(0x388) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890c, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = inotify_init1(0x80000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000180)=0x10000) poll(&(0x7f0000000000)=[{r9, 0x4200}], 0x1, 0x7f) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000a00)=@get={0x1, &(0x7f0000000900)=""/232, 0x800}) inotify_add_watch(r8, &(0x7f0000000240)='.\x00', 0x60000726) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(0xffffffffffffffff, 0x541, 0x40001019, r10, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 2.528752104s ago: executing program 2 (id=552): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000043dceb56e4d86cae000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @local}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b84939328a7fcb5dfc0c0969e7f9fd383143aa01c0a3c0f16ff70ce8bb011366c81151af160efad39284dc73eda5b5de57aaa0cedfc56a31e86559edac3f0e9e45f7a763fda821af28", 0x49) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './mnt/file0'}, 0xf) 2.287219284s ago: executing program 3 (id=553): socket$inet_sctp(0x2, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = creat(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) 1.517423686s ago: executing program 5 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r0 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() kcmp(r7, r7, 0x0, r6, r5) syz_genetlink_get_family_id$mptcp(0x0, r3) keyctl$read(0xb, r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) 1.474466948s ago: executing program 0 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xae, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) 1.412339521s ago: executing program 3 (id=556): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto(r0, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) 362.269565ms ago: executing program 5 (id=557): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 362.012515ms ago: executing program 2 (id=558): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xa, 0x20040) sendmmsg$unix(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="44cd4a6969837612db86ee0afc854bf749a319cf354bd187a1208e876858cd34a4747f54d2bf9fed1a512764cfac1181738ac8de9ae45cd7630d47bc1fbda51cf542b93f8d7b", 0x46}], 0x1, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [r0, r2, r2, r1, r1]}}], 0x28, 0x24048001}}], 0x1, 0x44080) 361.015955ms ago: executing program 3 (id=559): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 224.729031ms ago: executing program 2 (id=560): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x41d9fda7) 177.857643ms ago: executing program 0 (id=561): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') fchdir(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @remote}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0x3, 0x0}, 0x4040815) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, 0x0, 0x0, 0x9, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) 0s ago: executing program 3 (id=562): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44080) sendmsg$nl_route_sched(r0, 0x0, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 70.498189][ T4253] cgroup: Unknown subsys name 'net' [ 70.636349][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.431520][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.438179][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.168692][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.700965][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.709545][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.722482][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.730309][ T4271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.738148][ T4271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.749649][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.757721][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.764974][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.766138][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.772707][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.779973][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.787684][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.795415][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.801750][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.808885][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.816422][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.822567][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.829047][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.836062][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.843515][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.850335][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.857763][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.870789][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.870952][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.878157][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.892085][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.893527][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.907449][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.915037][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.920413][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.308192][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 74.484046][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 74.551928][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 74.585618][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 74.607214][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.618146][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.632010][ T4276] device bridge_slave_0 entered promiscuous mode [ 74.668387][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.676114][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.684614][ T4276] device bridge_slave_1 entered promiscuous mode [ 74.738206][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 74.780849][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.787992][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.797154][ T4264] device bridge_slave_0 entered promiscuous mode [ 74.810176][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.819457][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.826580][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.835225][ T4268] device bridge_slave_0 entered promiscuous mode [ 74.847883][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.855570][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.864360][ T4268] device bridge_slave_1 entered promiscuous mode [ 74.888401][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.895737][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.904390][ T4264] device bridge_slave_1 entered promiscuous mode [ 74.913279][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.946628][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.953951][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.962035][ T4274] device bridge_slave_0 entered promiscuous mode [ 75.001538][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.008868][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.016833][ T4274] device bridge_slave_1 entered promiscuous mode [ 75.036996][ T4276] team0: Port device team_slave_0 added [ 75.056382][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.076168][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.087980][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.099457][ T4276] team0: Port device team_slave_1 added [ 75.114209][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.155022][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.164937][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.173270][ T4272] device bridge_slave_0 entered promiscuous mode [ 75.194136][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.224846][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.232365][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.241085][ T4272] device bridge_slave_1 entered promiscuous mode [ 75.250031][ T4268] team0: Port device team_slave_0 added [ 75.265949][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.286036][ T4264] team0: Port device team_slave_0 added [ 75.293114][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.300439][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.326539][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.339804][ T4268] team0: Port device team_slave_1 added [ 75.346050][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.353302][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.379812][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.402486][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.424401][ T4274] team0: Port device team_slave_0 added [ 75.432535][ T4264] team0: Port device team_slave_1 added [ 75.440094][ T4274] team0: Port device team_slave_1 added [ 75.457697][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.548720][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.555809][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.582203][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.596032][ T4272] team0: Port device team_slave_0 added [ 75.602629][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.610008][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.636287][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.648048][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.655059][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.681325][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.695899][ T4276] device hsr_slave_0 entered promiscuous mode [ 75.702921][ T4276] device hsr_slave_1 entered promiscuous mode [ 75.710673][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.717646][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.743962][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.756656][ T4272] team0: Port device team_slave_1 added [ 75.763087][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.770634][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.796765][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.808402][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.815687][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.841685][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.905121][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.912336][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.938418][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.972379][ T4268] device hsr_slave_0 entered promiscuous mode [ 75.979795][ T4268] device hsr_slave_1 entered promiscuous mode [ 75.986387][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.989673][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 75.994314][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 76.000424][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 76.006467][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 76.012613][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 76.019923][ T4268] Cannot create hsr debugfs directory [ 76.031253][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.038231][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.064852][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.119902][ T4264] device hsr_slave_0 entered promiscuous mode [ 76.126769][ T4264] device hsr_slave_1 entered promiscuous mode [ 76.133790][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.141518][ T4264] Cannot create hsr debugfs directory [ 76.160528][ T4274] device hsr_slave_0 entered promiscuous mode [ 76.167338][ T4274] device hsr_slave_1 entered promiscuous mode [ 76.174320][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.182056][ T4274] Cannot create hsr debugfs directory [ 76.249194][ T4272] device hsr_slave_0 entered promiscuous mode [ 76.256123][ T4272] device hsr_slave_1 entered promiscuous mode [ 76.263463][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.271336][ T4272] Cannot create hsr debugfs directory [ 76.587326][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.600031][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.610699][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.627144][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.712560][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.725397][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.750217][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.761615][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.794285][ T4268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.820227][ T4268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.837078][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.860646][ T4268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.871850][ T4268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.914872][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.924756][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.936795][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.965303][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.989658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.001543][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.010974][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.018256][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.027354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.036943][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.046022][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.053304][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.061281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.072284][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.087968][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.118138][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.128006][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.159943][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.183860][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.193331][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.202599][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.211983][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.224049][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.255227][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.265449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.274650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.296114][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.306868][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.317793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.325830][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.342029][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.354413][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.363428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.374436][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.383347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.397181][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.406226][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.415047][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.422629][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.431172][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.440175][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.448836][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.456097][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.467974][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.489254][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.514615][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.561203][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.609859][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.620510][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.631321][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.640952][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.651762][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.660872][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.670575][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.680227][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.689519][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.698091][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.707401][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.721128][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.751099][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.767694][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.808405][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.819182][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.827784][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.835069][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.845671][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.855720][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.864626][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.871813][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.920187][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.927234][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.951290][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.963647][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.976210][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.993973][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.006997][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.033316][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.045998][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.066858][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.078704][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 78.084769][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 78.085013][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 78.092695][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 78.096980][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 78.117918][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.125916][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.134590][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.186341][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.195028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.211086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.224099][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.231309][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.246277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.264221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.273803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.283383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.292155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.300176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.307751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.326364][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.343129][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.352645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.362246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.373074][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.380268][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.390624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.398717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.406597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.419702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.429673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.438191][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.445341][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.453764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.483338][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.506863][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.514616][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.522633][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.533382][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.541955][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.549103][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.557560][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.567436][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.610668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.621272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.643893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.659832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.674271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.683852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.693190][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.702453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.712341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.754505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.765627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.777377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.787230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.797348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.806917][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.816079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.824880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.834596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.843272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.852144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.861026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.892467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.901120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.918191][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.935393][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.948115][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.968068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.978322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.994422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.005577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.017795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.034142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.043649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.052156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.062045][ T4274] device veth0_vlan entered promiscuous mode [ 79.071822][ T4276] device veth0_vlan entered promiscuous mode [ 79.108270][ T4276] device veth1_vlan entered promiscuous mode [ 79.146631][ T4274] device veth1_vlan entered promiscuous mode [ 79.204052][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.213664][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.236755][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.253226][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.265638][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.276771][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.311384][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.354331][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.370066][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.388988][ T4276] device veth0_macvtap entered promiscuous mode [ 79.404970][ T4276] device veth1_macvtap entered promiscuous mode [ 79.423410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.443615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.458106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.480567][ T4274] device veth0_macvtap entered promiscuous mode [ 79.525066][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.545853][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.570005][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.624571][ T4274] device veth1_macvtap entered promiscuous mode [ 79.657344][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.674037][ T4268] device veth0_vlan entered promiscuous mode [ 79.688881][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.697183][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.708066][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.717354][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.726157][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.746072][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.755852][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.764475][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.772386][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.785240][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.798338][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.812082][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.823841][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.843718][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.855864][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.864966][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.880335][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.895573][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.907876][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.927109][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.937457][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.951888][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.965426][ T4268] device veth1_vlan entered promiscuous mode [ 79.979913][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.988173][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.002798][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.012452][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.023512][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.035641][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.052737][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.061579][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.071603][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.080843][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.093662][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.103543][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.143180][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.150209][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 80.150245][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 80.150270][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 80.150296][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 80.150321][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 80.284708][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.294483][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.306117][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.345299][ T4268] device veth0_macvtap entered promiscuous mode [ 80.379536][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.391385][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.420330][ T4268] device veth1_macvtap entered promiscuous mode [ 80.435804][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.450702][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.461072][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.470332][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.486372][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.506845][ T4264] device veth0_vlan entered promiscuous mode [ 80.529992][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.538058][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.547524][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.565533][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.582150][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.596014][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.607376][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.619050][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.633720][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.659825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.670863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.689650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.704795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.717812][ T4264] device veth1_vlan entered promiscuous mode [ 80.749145][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.762934][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.773170][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.783797][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.796740][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.810980][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.819932][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.828910][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.837648][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.860054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.868345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.877827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.887879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.908993][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.917237][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.943378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.961092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.970286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.983647][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.013907][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.045111][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.056438][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.071969][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.090560][ T4272] device veth0_vlan entered promiscuous mode [ 81.131949][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.146634][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.157418][ T4264] device veth0_macvtap entered promiscuous mode [ 81.167670][ T4272] device veth1_vlan entered promiscuous mode [ 81.186714][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.206181][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.208546][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.217009][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.267392][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.279055][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.301234][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.435199][ T4264] device veth1_macvtap entered promiscuous mode [ 81.936818][ T4385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.965850][ T4383] netlink: 'syz.2.3': attribute type 27 has an invalid length. [ 81.969021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.998380][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.014839][ T4272] device veth0_macvtap entered promiscuous mode [ 82.026880][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.040766][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.044888][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.052492][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.082031][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.093914][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.111193][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.141751][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.152429][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.168579][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.178128][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.192945][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.208153][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.228567][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 82.229457][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 82.234612][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 82.241715][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 82.247835][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 82.273480][ T4272] device veth1_macvtap entered promiscuous mode [ 82.293889][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.323360][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.333952][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.345231][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.355421][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.366137][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.381566][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.391500][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.426776][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.467831][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.481554][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.497424][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.506892][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.519101][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.528232][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.573765][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.618643][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.638706][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.655278][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.667462][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.700022][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.773155][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.849542][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.861925][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.011448][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.022329][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.033036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.041342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 83.049653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 83.063360][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.089681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.099166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.758531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 83.818930][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.851439][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.868651][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.937130][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.948157][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.983368][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.056354][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.086940][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.128139][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.171379][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.240328][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.254645][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.271942][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.281331][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.545740][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.585852][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.632192][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.632436][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.680861][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.698979][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.704068][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.726749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.776266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.882699][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.905048][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.935997][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.129481][ T4416] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.966563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.975461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.983797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 86.629847][ T4430] lo speed is unknown, defaulting to 1000 [ 86.635837][ T4430] lo speed is unknown, defaulting to 1000 [ 86.643210][ T4430] lo speed is unknown, defaulting to 1000 [ 86.652141][ T4430] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.663574][ T4430] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.789908][ T7] cfg80211: failed to load regulatory.db [ 87.245976][ T4428] sched: RT throttling activated [ 87.312683][ T4430] lo speed is unknown, defaulting to 1000 [ 87.320060][ T4430] lo speed is unknown, defaulting to 1000 [ 87.326598][ T4430] lo speed is unknown, defaulting to 1000 [ 87.333326][ T4430] lo speed is unknown, defaulting to 1000 [ 87.339950][ T4430] lo speed is unknown, defaulting to 1000 [ 90.686217][ T4439] input: syz1 as /devices/virtual/input/input5 [ 95.729359][ T4507] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 96.513361][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.728000][ T4514] mkiss: ax0: crc mode is auto. [ 96.999504][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 97.069184][ T7] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 97.130393][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.162738][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.192738][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.267983][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.323162][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.378089][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.712410][ T4538] block device autoloading is deprecated and will be removed. [ 102.467118][ T7] usb 5-1: usb_control_msg returned -71 [ 102.475426][ T7] usbtmc 5-1:16.0: can't read capabilities [ 102.546321][ T7] usb 5-1: USB disconnect, device number 2 [ 103.268472][ T27] audit: type=1326 audit(1765194402.177:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a78f749 code=0x7ffc0000 [ 103.358520][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.459417][ T4572] ======================================================= [ 103.459417][ T4572] WARNING: The mand mount option has been deprecated and [ 103.459417][ T4572] and is ignored by this kernel. Remove the mand [ 103.459417][ T4572] option from the mount to silence this warning. [ 103.459417][ T4572] ======================================================= [ 103.950512][ T4570] lo speed is unknown, defaulting to 1000 [ 104.346850][ T27] audit: type=1326 audit(1765194402.177:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3a78f749 code=0x7ffc0000 [ 104.370644][ T14] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 104.445917][ T14] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 104.461005][ T27] audit: type=1326 audit(1765194402.177:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4b3a78f749 code=0x7ffc0000 [ 104.536651][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.649455][ T14] usb 2-1: config 0 descriptor?? [ 104.845946][ T14] usb 2-1: unsupported MDLM descriptors [ 104.968779][ T4309] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.611314][ T14] usb 2-1: USB disconnect, device number 2 [ 105.784140][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 105.798641][ T4309] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.827677][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 105.855743][ T4309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.874306][ T4309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.935027][ T4309] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.046627][ T4309] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.096774][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.161244][ T4595] loop6: detected capacity change from 0 to 4096 [ 106.198092][ C1] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.250086][ C1] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.259757][ C1] Buffer I/O error on dev loop6, logical block 496, async page read [ 106.359080][ T4309] usb 1-1: GET_CAPABILITIES returned 0 [ 106.364815][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 106.376412][ T4309] usbtmc 1-1:16.0: can't read capabilities [ 106.403515][ C0] I/O error, dev loop6, sector 1048 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 106.413640][ C0] I/O error, dev loop6, sector 2080 op 0x0:(READ) flags 0x80700 phys_seg 59 prio class 2 [ 106.425207][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.434482][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.582290][ T14] usb 1-1: USB disconnect, device number 2 [ 109.265281][ T4622] Bluetooth: MGMT ver 1.22 [ 115.770931][ T4666] Zero length message leads to an empty skb [ 116.278581][ T4255] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 116.441324][ T4679] netlink: 'syz.0.72': attribute type 8 has an invalid length. [ 116.485296][ T4255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 116.536084][ T4255] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 116.584767][ T4255] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 116.751061][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.039436][ T4255] usb 3-1: config 0 descriptor?? [ 117.046053][ T4671] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.275188][ T4255] usbhid 3-1:0.0: can't add hid device: -71 [ 117.286877][ T4255] usbhid: probe of 3-1:0.0 failed with error -71 [ 117.335473][ T4255] usb 3-1: USB disconnect, device number 2 [ 117.878608][ T4255] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.974716][ T4699] device syzkaller0 entered promiscuous mode [ 118.078608][ T4255] usb 3-1: Using ep0 maxpacket: 32 [ 118.088999][ T4255] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 118.187741][ T4255] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 118.224420][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.274118][ T4255] usb 3-1: config 0 descriptor?? [ 118.300642][ T4347] libceph: connect (1)[c::]:6789 error -101 [ 118.314621][ T4347] libceph: mon0 (1)[c::]:6789 connect error [ 118.359128][ T4347] libceph: connect (1)[c::]:6789 error -101 [ 118.378200][ T4347] libceph: mon0 (1)[c::]:6789 connect error [ 118.493377][ T4705] ceph: No mds server is up or the cluster is laggy [ 118.656111][ T4347] libceph: connect (1)[c::]:6789 error -101 [ 118.662357][ T4347] libceph: mon0 (1)[c::]:6789 connect error [ 118.730777][ T4255] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 118.763682][ T4255] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 118.808952][ T4255] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 118.849314][ T4255] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 118.881295][ T4255] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 118.975255][ T4255] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 119.080755][ T4255] usb 3-1: USB disconnect, device number 3 [ 119.593740][ T4720] rdma_op ffff88802d1011f0 conn xmit_rdma 0000000000000000 [ 120.047840][ T4718] fido_id[4718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 121.518551][ T4255] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.140484][ T4255] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.296894][ T4255] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 123.333659][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 123.353455][ T4255] usb 3-1: Product: syz [ 123.379560][ T4255] usb 3-1: Manufacturer: syz [ 123.404859][ T4255] usb 3-1: SerialNumber: syz [ 123.653163][ T4255] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 125.233346][ T4380] usb 3-1: USB disconnect, device number 4 [ 125.259633][ T4380] usblp0: removed [ 126.085585][ T4769] netlink: 'syz.3.95': attribute type 27 has an invalid length. [ 128.338654][ T4789] siw: device registration error -23 [ 129.250561][ T127] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.652747][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 129.914333][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 130.988733][ T4810] netlink: 312 bytes leftover after parsing attributes in process `syz.1.108'. [ 131.164472][ T4813] netlink: 'syz.0.109': attribute type 27 has an invalid length. [ 132.336887][ T127] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 132.350057][ T127] usb 3-1: can't read configurations, error -71 [ 132.871337][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877934][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.616535][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 135.069855][ T4255] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.408658][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 135.688672][ T4255] usb 1-1: Using ep0 maxpacket: 8 [ 135.732936][ T4255] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 135.772373][ T4255] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.785754][ T4255] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.790210][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.807472][ T4255] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.843312][ T4255] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.904341][ T4255] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.932144][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.985364][ T26] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 136.041034][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.098927][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.165230][ T26] usb 4-1: config 0 descriptor?? [ 136.829084][ T26] razer 0003:1532:010E.0002: failed to enable macro keys: -71 [ 136.876626][ T26] razer 0003:1532:010E.0002: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 137.013461][ T26] usb 4-1: USB disconnect, device number 2 [ 137.609618][ T4879] fido_id[4879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 138.291022][ T4883] sctp: failed to load transform for md5: -2 [ 138.672984][ T4255] usb 1-1: can't set config #16, error -71 [ 138.694598][ T4255] usb 1-1: USB disconnect, device number 3 [ 138.993610][ T4309] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 139.244760][ T4309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.336379][ T4309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.457497][ T4309] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 139.568378][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.665787][ T4309] usb 3-1: config 0 descriptor?? [ 140.914242][ T4309] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 141.045004][ T4922] overlayfs: unrecognized mount option "/" or missing value [ 141.270091][ T4923] input: syz1 as /devices/virtual/input/input6 [ 141.539001][ T4309] usb 3-1: USB disconnect, device number 7 [ 141.924223][ T4928] fido_id[4928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.698522][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.478545][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 143.487947][ T26] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 143.510113][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.543849][ T26] usb 5-1: Product: syz [ 143.550135][ T26] usb 5-1: Manufacturer: syz [ 143.554788][ T26] usb 5-1: SerialNumber: syz [ 143.572524][ T26] usb 5-1: config 0 descriptor?? [ 143.610632][ T26] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 144.724542][ T26] gspca_ov534_9: reg_w failed -110 [ 145.268563][ T26] gspca_ov534_9: Unknown sensor 0000 [ 145.268636][ T26] ov534_9: probe of 5-1:0.0 failed with error -22 [ 145.292942][ T26] usb 5-1: USB disconnect, device number 3 [ 146.632035][ T4962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 147.011113][ T4962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 148.245282][ T4975] input: syz1 as /devices/virtual/input/input7 [ 148.954674][ T4978] nvme_fabrics: missing parameter 'transport=%s' [ 148.961722][ T4978] nvme_fabrics: missing parameter 'nqn=%s' [ 152.636547][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 163.018871][ T5122] tmpfs: Unknown parameter '/dev/comedi3' [ 163.045362][ T5119] futex_wake_op: syz.2.204 tries to shift op by 144; fix this program [ 163.144892][ T5129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'. [ 166.526899][ T5161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'. [ 170.997329][ T5210] input: syz1 as /devices/virtual/input/input10 [ 174.048499][ T4309] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 174.246311][ T4309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.286530][ T4309] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.331055][ T4309] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 174.344131][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.355044][ T4309] usb 1-1: SerialNumber: syz [ 174.405114][ T4309] usb 1-1: 0:2 : does not exist [ 174.748889][ T5251] input: syz1 as /devices/virtual/input/input11 [ 174.814417][ T4309] usb 1-1: USB disconnect, device number 4 [ 175.062813][ T5257] netlink: 416 bytes leftover after parsing attributes in process `syz.3.251'. [ 175.128541][ T4949] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 176.341089][ T4949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.499451][ T4949] usb 5-1: not running at top speed; connect to a high speed hub [ 179.264118][ T5298] befs: (nullb0): invalid magic header [ 179.285740][ T27] audit: type=1800 audit(1765194478.147:5): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.260" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 180.010641][ T5302] input: syz1 as /devices/virtual/input/input12 [ 180.037479][ T5300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 180.108551][ T5300] overlayfs: missing 'lowerdir' [ 182.553749][ T4949] usb 5-1: unable to read config index 0 descriptor/start: -110 [ 182.561599][ T4949] usb 5-1: can't read configurations, error -110 [ 184.871812][ T5350] input: syz1 as /devices/virtual/input/input13 [ 185.489602][ T5355] binder_alloc: 5354: binder_alloc_buf, no vma [ 187.364967][ T5373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 187.379330][ T5373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 187.399710][ T5371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.285'. [ 187.748668][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.959090][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 187.994186][ T22] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 188.004208][ T22] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 188.018580][ T22] usb 2-1: Product: syz [ 188.022803][ T22] usb 2-1: Manufacturer: syz [ 188.027620][ T22] usb 2-1: SerialNumber: syz [ 188.040684][ T22] usb 2-1: config 0 descriptor?? [ 188.894843][ T22] usb 2-1: USB disconnect, device number 3 [ 189.238229][ T4716] udevd[4716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.672022][ T5391] binder_alloc: 5390: binder_alloc_buf, no vma [ 190.077467][ T5401] input: syz1 as /devices/virtual/input/input14 [ 193.105368][ T5425] lo speed is unknown, defaulting to 1000 [ 193.184670][ T5429] binder_alloc: 5428: binder_alloc_buf, no vma [ 194.313664][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.320129][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.499727][ T5448] Bluetooth: Invalid esc byte 0xcb [ 196.426571][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 196.433637][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 196.439774][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 196.439814][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 206.781017][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.796779][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.811080][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.083618][ T4460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.254549][ T4460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.435832][ T4460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.746030][ T4460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.550292][ T5630] 9pnet_fd: Insufficient options for proto=fd [ 210.149662][ T5661] sd 0:0:1:0: PR command failed: 1026 [ 210.155430][ T5661] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 210.165253][ T5661] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 210.965567][ T4267] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 210.965829][ T4267] Bluetooth: hci1: Injecting HCI hardware error event [ 210.982810][ T4279] Bluetooth: hci1: hardware error 0x00 [ 211.512949][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.524909][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.533759][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.543203][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.550897][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.560420][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.351547][ T5670] lo speed is unknown, defaulting to 1000 [ 213.742478][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 213.750306][ T4279] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 214.154502][ T5785] fuse: Bad value for 'user_id' [ 214.603268][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 215.927354][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 216.682351][ T5670] chnl_net:caif_netlink_parms(): no params data found [ 216.747519][ T5866] block device autoloading is deprecated and will be removed. [ 217.314540][ T5387] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 218.049379][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 218.234148][ T5387] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.255272][ T5387] usb 3-1: not running at top speed; connect to a high speed hub [ 218.301561][ T5387] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.478095][ T5387] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 218.747243][ T5387] usb 3-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 218.760998][ T5387] usb 3-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 218.774620][ T5387] usb 3-1: config 1 interface 1 has no altsetting 0 [ 219.004813][ T5387] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.049227][ T5387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 219.755876][ T5387] usb 3-1: Product: syz [ 219.779519][ T5387] usb 3-1: Manufacturer: syz [ 219.808845][ T5387] usb 3-1: SerialNumber: syz [ 220.078704][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 220.489442][ T4460] device hsr_slave_0 left promiscuous mode [ 220.560729][ T4460] device hsr_slave_1 left promiscuous mode [ 220.619383][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.659059][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.710610][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.718162][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.390245][ T4460] device bridge_slave_1 left promiscuous mode [ 221.444420][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.481676][ T4460] device bridge_slave_0 left promiscuous mode [ 221.518684][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.943093][ T4460] device veth1_macvtap left promiscuous mode [ 222.038664][ T4460] device veth0_macvtap left promiscuous mode [ 222.546499][ T4460] device veth1_vlan left promiscuous mode [ 222.575819][ T4460] device veth0_vlan left promiscuous mode [ 222.617491][ T5982] rdma_op ffff88801eb169f0 conn xmit_rdma 0000000000000000 [ 224.260271][ T6005] befs: (nullb0): invalid magic header [ 225.044805][ T5387] usb 3-1: can't set config #1, error -110 [ 225.669133][ T4309] usb 3-1: USB disconnect, device number 8 [ 227.166358][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 228.039940][ T6038] Bluetooth: MGMT ver 1.22 [ 230.254189][ T6034] rdma_op ffff888054d341f0 conn xmit_rdma 0000000000000000 [ 231.078094][ T4460] team0 (unregistering): Port device team_slave_1 removed [ 231.121067][ T4460] team0 (unregistering): Port device team_slave_0 removed [ 231.162714][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.210890][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.325673][ T4460] bond0 (unregistering): Released all slaves [ 235.613352][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.635514][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.653573][ T5670] device bridge_slave_0 entered promiscuous mode [ 235.706694][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.774153][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.846355][ T5670] device bridge_slave_1 entered promiscuous mode [ 235.857543][ T6115] 9pnet_fd: Insufficient options for proto=fd [ 236.208130][ T5670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.273476][ T5670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.524488][ T5670] team0: Port device team_slave_0 added [ 237.595214][ T5670] team0: Port device team_slave_1 added [ 237.659011][ T4309] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 238.739722][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.747348][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.774046][ T4309] usb 3-1: Using ep0 maxpacket: 16 [ 238.784891][ T5670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.371430][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.581294][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.348442][ T5670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.719242][ T5670] device hsr_slave_0 entered promiscuous mode [ 241.764862][ T5670] device hsr_slave_1 entered promiscuous mode [ 241.827138][ T5670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.851347][ T5670] Cannot create hsr debugfs directory [ 243.815527][ T5670] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 243.828933][ T4309] usb 3-1: device descriptor read/all, error -110 [ 243.882168][ T5670] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.950935][ T5670] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.003235][ T5670] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.010340][ T4309] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 244.372623][ T5670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.466219][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.483896][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.503324][ T5670] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.525598][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.536729][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.547805][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.556157][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.571549][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.591129][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.619281][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.640406][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.647622][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.690355][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.726802][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.737642][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.768864][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.801673][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.817540][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.827354][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.842700][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.863725][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.920838][ T5670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.933448][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.957002][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.694676][ T1109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.079219][ T6441] binder: BINDER_SET_CONTEXT_MGR already set [ 246.161059][ T6441] binder: 6436:6441 ioctl 4018620d 200000000040 returned -16 [ 246.853721][ T6463] fuse: Bad value for 'fd' [ 247.546708][ T6486] befs: (nullb0): invalid magic header [ 248.285851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.318830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.698724][ T5670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.736420][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.758036][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.816444][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.835542][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.848122][ T5670] device veth0_vlan entered promiscuous mode [ 250.861961][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.877006][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.904725][ T5670] device veth1_vlan entered promiscuous mode [ 250.977688][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.999977][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.013588][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.055152][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.075739][ T5670] device veth0_macvtap entered promiscuous mode [ 251.120153][ T5670] device veth1_macvtap entered promiscuous mode [ 251.187195][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.327437][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.504591][ T6563] Bluetooth: MGMT ver 1.22 [ 252.198594][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.248498][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.285043][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.320091][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.332829][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.073458][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.371564][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.868992][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.895993][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.917325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.953031][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.011078][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.078305][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.088720][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.099563][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.116500][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.158568][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.192144][ T6596] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 255.200085][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.228487][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.239418][ T6596] binder: 6594:6596 ioctl 4018620d 2000000000c0 returned -1 [ 255.267675][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.323934][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.371321][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.407780][ T5670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.444782][ T5670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.617870][ T5670] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.342894][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.389614][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.577307][ T5670] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.023365][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.040867][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.127183][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.163399][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.209481][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.266764][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 260.408490][ T4380] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 260.828519][ T4380] usb 3-1: Using ep0 maxpacket: 16 [ 261.197950][ T4380] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.214251][ T4380] usb 3-1: config 6 has an invalid interface number: 3 but max is 0 [ 261.229121][ T4380] usb 3-1: config 6 has no interface number 0 [ 261.358681][ T4380] usb 3-1: config 6 interface 3 has no altsetting 0 [ 261.388133][ T4380] usb 3-1: string descriptor 0 read error: -22 [ 261.572217][ T4380] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=44.bd [ 261.954811][ T4380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.109359][ T6685] input: syz1 as /devices/virtual/input/input15 [ 262.314641][ T4380] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 262.382601][ T4380] usb 3-1: No valid video chain found. [ 262.512434][ T4380] usb 3-1: USB disconnect, device number 11 [ 269.727181][ T6780] lo speed is unknown, defaulting to 1000 [ 276.078470][ T6878] lo speed is unknown, defaulting to 1000 [ 277.118738][ T6864] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 282.218605][ T4309] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 282.418725][ T4309] usb 1-1: Using ep0 maxpacket: 32 [ 282.440703][ T4309] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 283.225793][ T4309] usb 1-1: config 0 has no interface number 0 [ 283.327226][ T4309] usb 1-1: config 0 interface 12 has no altsetting 0 [ 283.551023][ T4309] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 283.856983][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.898763][ T4309] usb 1-1: Product: syz [ 283.921600][ T4309] usb 1-1: Manufacturer: syz [ 283.936372][ T4309] usb 1-1: SerialNumber: syz [ 284.031924][ T4309] usb 1-1: config 0 descriptor?? [ 284.185950][ T4309] usb 1-1: can't set config #0, error -71 [ 284.528410][ T4309] usb 1-1: USB disconnect, device number 5 [ 288.138593][ T4511] [ 288.140986][ T4511] ============================================ [ 288.147147][ T4511] WARNING: possible recursive locking detected [ 288.153320][ T4511] syzkaller #0 Not tainted [ 288.157732][ T4511] -------------------------------------------- [ 288.163250][ T7038] PM: Image not found (code -5) [ 288.163873][ T4511] kworker/u4:13/4511 is trying to acquire lock: [ 288.163886][ T4511] ffff88807f38d9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x15a/0x550 [ 288.184220][ T4511] [ 288.184220][ T4511] but task is already holding lock: [ 288.191588][ T4511] ffff88807f38e9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 288.200656][ T4511] [ 288.200656][ T4511] other info that might help us debug this: [ 288.208723][ T4511] Possible unsafe locking scenario: [ 288.208723][ T4511] [ 288.216190][ T4511] CPU0 [ 288.219470][ T4511] ---- [ 288.222747][ T4511] lock(rlock-AF_UNIX); [ 288.226999][ T4511] lock(rlock-AF_UNIX); [ 288.231273][ T4511] [ 288.231273][ T4511] *** DEADLOCK *** [ 288.231273][ T4511] [ 288.239526][ T4511] May be due to missing lock nesting notation [ 288.239526][ T4511] [ 288.247857][ T4511] 4 locks held by kworker/u4:13/4511: [ 288.253304][ T4511] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 288.264368][ T4511] #1: ffffc90004a9fd00 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 288.273966][ T4511] #2: ffffffff8dc3b738 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0x9e/0x18b0 [ 288.282891][ T4511] #3: ffff88807f38e9e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 288.292395][ T4511] [ 288.292395][ T4511] stack backtrace: [ 288.298331][ T4511] CPU: 1 PID: 4511 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 288.305992][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.316064][ T4511] Workqueue: events_unbound __unix_gc [ 288.321489][ T4511] Call Trace: [ 288.324770][ T4511] [ 288.327700][ T4511] dump_stack_lvl+0x168/0x22e [ 288.332391][ T4511] ? show_regs_print_info+0x12/0x12 [ 288.337629][ T4511] ? load_image+0x3b0/0x3b0 [ 288.342159][ T4511] __lock_acquire+0x122f/0x7c50 [ 288.347041][ T4511] ? lockdep_lock+0x1e0/0x1e0 [ 288.351738][ T4511] ? verify_lock_unused+0x140/0x140 [ 288.357040][ T4511] ? mark_lock+0x94/0x320 [ 288.361379][ T4511] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 288.367372][ T4511] ? rcu_is_watching+0x11/0xa0 [ 288.372147][ T4511] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 288.377786][ T4511] lock_acquire+0x1b4/0x490 [ 288.382309][ T4511] ? unix_collect_skb+0x15a/0x550 [ 288.387444][ T4511] ? lock_acquire+0x20f/0x490 [ 288.392304][ T4511] ? read_lock_is_recursive+0x10/0x10 [ 288.397787][ T4511] ? do_raw_spin_lock+0x11d/0x280 [ 288.402839][ T4511] ? __rwlock_init+0x140/0x140 [ 288.407626][ T4511] ? mark_lock+0x94/0x320 [ 288.411973][ T4511] _raw_spin_lock+0x2a/0x40 [ 288.416508][ T4511] ? unix_collect_skb+0x15a/0x550 [ 288.421551][ T4511] unix_collect_skb+0x15a/0x550 [ 288.426418][ T4511] __unix_gc+0x1083/0x18b0 [ 288.430844][ T4511] ? wait_for_unix_gc+0x190/0x190 [ 288.435877][ T4511] ? lock_acquire+0x20f/0x490 [ 288.440567][ T4511] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 288.446608][ T4511] ? _raw_spin_unlock_irq+0x1f/0x40 [ 288.451813][ T4511] ? process_one_work+0x7a1/0x1160 [ 288.456928][ T4511] process_one_work+0x898/0x1160 [ 288.461880][ T4511] ? worker_detach_from_pool+0x240/0x240 [ 288.467538][ T4511] ? _raw_spin_lock_irq+0xab/0xe0 [ 288.472577][ T4511] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 288.477963][ T4511] ? kthread_data+0x4b/0xc0 [ 288.482520][ T4511] worker_thread+0xaa2/0x1250 [ 288.487285][ T4511] kthread+0x29d/0x330 [ 288.491361][ T4511] ? worker_clr_flags+0x1a0/0x1a0 [ 288.496388][ T4511] ? kthread_blkcg+0xd0/0xd0 [ 288.501001][ T4511] ret_from_fork+0x1f/0x30 [ 288.505424][ T4511]