last executing test programs: 41.050331687s ago: executing program 1 (id=62): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@remote, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 40.771317156s ago: executing program 1 (id=67): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='yeah', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000002c0)) 40.647647404s ago: executing program 1 (id=71): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x0, 0x0, 0x30}, @flat=@handle={0x70742a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 40.490980725s ago: executing program 1 (id=74): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x71bd2f, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4004094) 40.356463934s ago: executing program 1 (id=76): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 40.182719536s ago: executing program 1 (id=80): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 33.529705344s ago: executing program 2 (id=131): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000007000000eaff000000000004008b97b9fd731af2686fb2640ef45bf5834c5af962377ac79fea7b"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2800}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffff", 0x35}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 32.593303898s ago: executing program 2 (id=138): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000080)=0x4) 32.482083596s ago: executing program 2 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01011000000009"], 0x0) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003000000"], 0x35) 30.809967051s ago: executing program 2 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x8) 30.809734221s ago: executing program 2 (id=143): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 26.618785519s ago: executing program 2 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x80007, 0x0, {[0xffffffffffffffff, 0x3ff, 0x8, 0x4, 0x4, 0xfffffffffffffff7, 0x2, 0x5]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.520741626s ago: executing program 32 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x80007, 0x0, {[0xffffffffffffffff, 0x3ff, 0x8, 0x4, 0x4, 0xfffffffffffffff7, 0x2, 0x5]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.16180683s ago: executing program 33 (id=80): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 14.382524301s ago: executing program 5 (id=256): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 14.10601637s ago: executing program 5 (id=258): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1c9500) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x44080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$SG_IO(r1, 0x2285, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x54}, 0x0) recvmmsg(r4, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0x0, 0x0) 14.026448255s ago: executing program 3 (id=260): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x41, 0xffffff7f}}], 0x20, 0x4048800}, 0x0) 13.901436753s ago: executing program 3 (id=261): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x30000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) 13.845966668s ago: executing program 5 (id=262): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1}, 0x4000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 13.703089787s ago: executing program 5 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x4000009a, 0x0, 0x0}) 13.52103734s ago: executing program 3 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x11, 0x6, @random="c62599a33a3d"}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 13.485021722s ago: executing program 5 (id=267): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000000000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r2, &(0x7f0000000200)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.076319609s ago: executing program 3 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 11.827028657s ago: executing program 3 (id=273): unshare(0x62040200) syz_usb_connect(0x2, 0x56, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'filter\x00', 0x0, [0x800e2fa, 0x4de, 0x800, 0xc0d, 0x7]}, &(0x7f0000000280)=0x54) 10.431651962s ago: executing program 5 (id=282): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x7) 9.796933656s ago: executing program 3 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.550631563s ago: executing program 34 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.038101044s ago: executing program 0 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x88406, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x4, 0x5, 0x4}) 5.911007033s ago: executing program 0 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d8000000000000000000e6c5b4e27aafca7ae4d22d00000200000000000000800001000000000000020000000900000006000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000ffffffff008000000900000000000000000000000000000000000000000000000000000d60b5cd736264cb60ded7c462fcc5b953ba20551b005ec8333a177464ed962b23"], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 5.304915675s ago: executing program 6 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x60c42, 0x5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) readahead(r0, 0x6, 0x10) 5.037932513s ago: executing program 6 (id=316): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffc, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x9, 0x10009, 0x8, 0x155f, 0x6, 0x80, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x2, 0xbbd, 0x1000, 0x3, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x8, 0x7, 0x81, 0x8a, 0x0, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x40000007, 0xbe, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x3, 0x200b395, 0x400004, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x1, 0x8, 0x9, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x104, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ca, 0x4, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x1ff, 0x7fffffff, 0x5, 0x405, 0x491, 0x5, 0x200006, 0x8, 0x3fe, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x8000, 0x8000003, 0x6, 0x89, 0x3, 0x3, 0x9, 0x0, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e59, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x0, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x7, 0x0, 0x3, 0xd502, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x203, 0x5, 0x1], [0xa772, 0x3, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x6, 0xff, 0x1005, 0x1, 0x8000005, 0x1e, 0x7f, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5, 0x936, 0x106, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xf, 0x32d, 0x3, 0x200, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x1, 0xfffffff9, 0xd, 0xc, 0x463f, 0x7fffffff, 0x7fffffff, 0x8006, 0x20008, 0x14000, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/114, 0x72}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/239, 0xef}], 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xfffffffa}, &(0x7f00000001c0)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.93899288s ago: executing program 0 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 4.669207979s ago: executing program 0 (id=318): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c84", 0x17}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a", 0x83}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287", 0x5a}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.582030485s ago: executing program 6 (id=319): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 4.338639141s ago: executing program 6 (id=321): syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x202) 4.134425475s ago: executing program 4 (id=323): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100), 0x64, 0x2, 0x0, 0x0, r1}) 4.052457351s ago: executing program 4 (id=324): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x30}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0xc010) 3.931815929s ago: executing program 4 (id=325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f00000002c0)={0x3, 0x9, 0x1, 0xff, 0x9, 0x8, 0x7fff, 0xfffffffffffffffb, 0x6}) 3.830067016s ago: executing program 6 (id=326): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}}, 0x40) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) 3.78326562s ago: executing program 0 (id=327): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, 0x0, 0xc) 855.454961ms ago: executing program 4 (id=328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989"], 0x1000f) 754.104128ms ago: executing program 4 (id=329): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001740)={0x48, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0) 588.054269ms ago: executing program 0 (id=330): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a5, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 429.7104ms ago: executing program 4 (id=331): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r1, &(0x7f0000000380)="0af0ff", 0x3) 297.851409ms ago: executing program 6 (id=332): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000007000000eaff000000000004008b97b9fd731af2686fb2640ef45bf5834c5af962377ac79fea7b", @ANYRES32], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2800}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe80900", 0x23}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 263.270502ms ago: executing program 7 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000096, 0x0, 0xffff}]}) 0s ago: executing program 7 (id=333): syz_open_dev$vim2m(0x0, 0x47b, 0x2) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="043e1a0d210400"], 0x1d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 59.401388][ T4169] cgroup: Unknown subsys name 'net' [ 59.532318][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.993376][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.424786][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 62.509805][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.541455][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.548708][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.557942][ T4195] device bridge_slave_0 entered promiscuous mode [ 62.567353][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.574996][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.583006][ T4195] device bridge_slave_1 entered promiscuous mode [ 62.655161][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.668141][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.700680][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.713345][ T4195] team0: Port device team_slave_0 added [ 62.725903][ T4195] team0: Port device team_slave_1 added [ 62.732576][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.771229][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 62.821183][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.828903][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.837226][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.845614][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.853358][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.879850][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.909104][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.916360][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.924322][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.940943][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.948995][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.975355][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.022634][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.030144][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.038927][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.055160][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.067333][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.090504][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.098021][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.106852][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.149707][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.157497][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.165549][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.175420][ T4185] team0: Port device team_slave_0 added [ 63.190900][ T4185] team0: Port device team_slave_1 added [ 63.197688][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.205046][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.213359][ T4197] device bridge_slave_0 entered promiscuous mode [ 63.229105][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.236613][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.244502][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.255811][ T4195] device hsr_slave_0 entered promiscuous mode [ 63.263245][ T4195] device hsr_slave_1 entered promiscuous mode [ 63.275610][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.283101][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.291263][ T4197] device bridge_slave_1 entered promiscuous mode [ 63.300477][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.345990][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.353239][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.379634][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.393401][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.404279][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.416079][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.439574][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.446938][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.474085][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.517003][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.537160][ T4186] team0: Port device team_slave_0 added [ 63.551904][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.572788][ T4186] team0: Port device team_slave_1 added [ 63.582438][ T4192] team0: Port device team_slave_0 added [ 63.597279][ T4192] team0: Port device team_slave_1 added [ 63.653078][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.660115][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.687139][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.700684][ T4197] team0: Port device team_slave_0 added [ 63.717688][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.724749][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.732004][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.740081][ T4185] Cannot create hsr debugfs directory [ 63.753822][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.761013][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.787251][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.800111][ T4197] team0: Port device team_slave_1 added [ 63.806668][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.813831][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.840050][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.872455][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.879647][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.906802][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.948126][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.955383][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.982493][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.006773][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.013903][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.021281][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.029428][ T4186] Cannot create hsr debugfs directory [ 64.039808][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.046841][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.074065][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.115644][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.123023][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.130596][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.139547][ T4192] Cannot create hsr debugfs directory [ 64.139581][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 64.152240][ T4187] Bluetooth: hci4: command 0x0409 tx timeout [ 64.178225][ T4187] Bluetooth: hci0: command 0x0409 tx timeout [ 64.185462][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 64.216756][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.228290][ T4197] device hsr_slave_0 entered promiscuous mode [ 64.235412][ T4197] device hsr_slave_1 entered promiscuous mode [ 64.242728][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.250562][ T4197] Cannot create hsr debugfs directory [ 64.430817][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.464294][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.473867][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.489456][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.563153][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.580847][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.590069][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.600395][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.654911][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.674212][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.699940][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.710623][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.768535][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.796683][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.805552][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.818784][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.835956][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.849137][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.861753][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.878114][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.898829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.909459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.918490][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.936344][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.945574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.956070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.967475][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.974758][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.984174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.016182][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.045643][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.054743][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.064009][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.071117][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.080850][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.090000][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.127503][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.138055][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.148072][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.158316][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.167682][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.190878][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.200295][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.222387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.231759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.247819][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.257675][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.277224][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.297594][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.306686][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.321373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.330917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.342101][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.349251][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.374771][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.386017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.394571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.404382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.412672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.423806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.433927][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.441091][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.453893][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.471045][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.498552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.515198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.524413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.538763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.552475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.561722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.570651][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.577818][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.594108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.603033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.612063][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.619400][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.629158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.642097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.653792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.663562][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.670807][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.680797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.696023][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.711752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.721664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.731011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.741523][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.748776][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.758899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.794009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.805095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.814434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.827195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.835842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.844676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.853536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.862995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.872189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.882017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.891192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.901199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.910482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.919567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.928626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.937889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.957402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.967404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.975772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.988300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.997347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.006843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.018551][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.030955][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.046602][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.061940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.070586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.080039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.090978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.099528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.107895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.116940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.125886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.135215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.145041][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.152264][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.160605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.169817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.178775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.188862][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.210251][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.231326][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.263500][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 66.270370][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 66.277529][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.286341][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 66.303954][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 66.313227][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.323857][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.327855][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 66.356334][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.402610][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.421799][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.428976][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.455890][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.465619][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.485602][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.498046][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.508716][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.518817][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.528014][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.537018][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.549466][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.569039][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.608047][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.653529][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.670889][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.757297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.764949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.775139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.787813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.815583][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.841520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.850046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.862446][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.895904][ T4195] device veth0_vlan entered promiscuous mode [ 66.905238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.914190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.922128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.931258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.941090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.951321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.963907][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.983104][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.992568][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.004616][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.012955][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.024690][ T4195] device veth1_vlan entered promiscuous mode [ 67.061061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.070256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.080541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.090522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.101740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.111152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.135841][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.152559][ T4195] device veth0_macvtap entered promiscuous mode [ 67.162116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.170927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.180106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.189356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.198824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.207146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.214927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.224365][ T4186] device veth0_vlan entered promiscuous mode [ 67.248619][ T4195] device veth1_macvtap entered promiscuous mode [ 67.261149][ T4186] device veth1_vlan entered promiscuous mode [ 67.279548][ T4197] device veth0_vlan entered promiscuous mode [ 67.288863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.298235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.307376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.315890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.324763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.333662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.350159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.358720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.368075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.380780][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.389992][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.405453][ T4197] device veth1_vlan entered promiscuous mode [ 67.427062][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.435896][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.445401][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.453372][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.477134][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.494883][ T4186] device veth0_macvtap entered promiscuous mode [ 67.512093][ T4186] device veth1_macvtap entered promiscuous mode [ 67.524086][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.534175][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.544585][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.553659][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.563070][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.571786][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.581632][ T4185] device veth0_vlan entered promiscuous mode [ 67.602672][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.620479][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.630019][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.642145][ T4185] device veth1_vlan entered promiscuous mode [ 67.655648][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.672999][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.682468][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.691935][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.707545][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.720174][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.732577][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.746646][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.755760][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.766300][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.775264][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.784452][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.793524][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.802845][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.812064][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.820948][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.838342][ T4197] device veth0_macvtap entered promiscuous mode [ 67.855197][ T4197] device veth1_macvtap entered promiscuous mode [ 67.879931][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.892484][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.905233][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.914422][ T4192] device veth0_vlan entered promiscuous mode [ 67.935856][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.947108][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.958196][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.969200][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.983219][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.992420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.002640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.011601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.021028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.030148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.042500][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.052065][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.062185][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.071636][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.114096][ T4192] device veth1_vlan entered promiscuous mode [ 68.134806][ T4185] device veth0_macvtap entered promiscuous mode [ 68.159290][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.173356][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.188544][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.200273][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.210554][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.222327][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.234265][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.244893][ T4185] device veth1_macvtap entered promiscuous mode [ 68.264044][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.273198][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.284291][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.294294][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.297139][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 68.310316][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 68.314889][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.325838][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.326079][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 68.341804][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353919][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.377110][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 68.377978][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.383280][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 68.395396][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.412081][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.423818][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.434260][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.445476][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.459382][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.503180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.517875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.527665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.536978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.548207][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.560664][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.571165][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.582304][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.592743][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.603703][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.614918][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.629537][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.638779][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.648209][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.657200][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.683472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.694980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.712970][ T4192] device veth0_macvtap entered promiscuous mode [ 68.731398][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.740219][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.769260][ T4192] device veth1_macvtap entered promiscuous mode [ 68.776837][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.784828][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.789054][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.803084][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.812339][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.820809][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.879817][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.880158][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.900534][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.904054][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.918254][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.929404][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.941398][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.952086][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.962682][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.973461][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.984756][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.007575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.024512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.034586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.048307][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.059478][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.071910][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.083528][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.093979][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.104827][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.115329][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.127121][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.138805][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.153220][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.168660][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.179608][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.189180][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.213417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.228251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.239929][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.250002][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.333425][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.385525][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.410050][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.463354][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.541529][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.560356][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.596424][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.610360][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.624156][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.661610][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.670170][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.686734][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.696056][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.709190][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.717815][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.732646][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.831786][ T4271] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.392235][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 70.398787][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 70.426680][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 70.457655][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 70.474109][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 70.516162][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.526583][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.557176][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.664969][ T4275] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6'. [ 70.693133][ T4275] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6'. [ 70.894266][ T4284] fuse: Bad value for 'fd' [ 71.157764][ T4288] ======================================================= [ 71.157764][ T4288] WARNING: The mand mount option has been deprecated and [ 71.157764][ T4288] and is ignored by this kernel. Remove the mand [ 71.157764][ T4288] option from the mount to silence this warning. [ 71.157764][ T4288] ======================================================= [ 71.607565][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.615083][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.886545][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.970778][ T4267] loop4: detected capacity change from 0 to 40427 [ 72.025702][ T4267] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 72.062256][ T4267] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 72.144183][ T4267] F2FS-fs (loop4): invalid crc value [ 72.258346][ T4267] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.377479][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.393993][ T4306] loop1: detected capacity change from 0 to 64 [ 72.486674][ T4237] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.530404][ T4237] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 72.723936][ T4237] usb 1-1: too many endpoints for config 1 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 72.736055][ T4237] usb 1-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 72.749724][ T4237] usb 1-1: config 1 interface 0 has no altsetting 0 [ 72.766258][ T4237] usb 1-1: config 1 interface 0 has no altsetting 1 [ 72.897326][ T4310] attempt to access beyond end of device [ 72.897326][ T4310] loop1: rw=0, want=1026, limit=64 [ 72.908706][ T4310] Buffer I/O error on dev loop1, logical block 512, async page read [ 72.917873][ T4310] attempt to access beyond end of device [ 72.917873][ T4310] loop1: rw=0, want=113154, limit=64 [ 72.928982][ T4310] Buffer I/O error on dev loop1, logical block 56576, async page read [ 72.947718][ T4237] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 72.979193][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.020512][ T4237] usb 1-1: Product: syz [ 73.035692][ T4237] usb 1-1: Manufacturer: syz [ 73.051099][ T4237] usb 1-1: SerialNumber: syz [ 73.077513][ T4295] loop2: detected capacity change from 0 to 32768 [ 73.090387][ T4297] loop3: detected capacity change from 0 to 32768 [ 73.198913][ T4295] XFS (loop2): Mounting V5 Filesystem [ 73.326212][ T4295] XFS (loop2): Ending clean mount [ 73.367376][ T4295] XFS (loop2): Quotacheck needed: Please wait. [ 73.410487][ T4297] XFS (loop3): Mounting V5 Filesystem [ 73.440961][ T4237] smsusb:smsusb_probe: board id=8, interface number 0 [ 73.456206][ T4237] usb 1-1: selecting invalid altsetting 0 [ 73.472504][ T4237] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 73.483071][ T4237] smsusb: probe of 1-1:1.0 failed with error -22 [ 73.532141][ T4297] XFS (loop3): Ending clean mount [ 73.555985][ T4237] usb 1-1: USB disconnect, device number 2 [ 73.640113][ T4295] XFS (loop2): Quotacheck: Done. [ 73.677754][ T4297] XFS (loop3): Quotacheck needed: Please wait. [ 73.772511][ T4297] XFS (loop3): Quotacheck: Done. [ 73.920162][ T4185] XFS (loop2): Unmounting Filesystem [ 74.178256][ T4186] XFS (loop3): Unmounting Filesystem [ 74.421095][ T4346] loop0: detected capacity change from 0 to 2048 [ 74.533820][ T4346] NILFS (loop0): invalid segment: Checksum error in segment payload [ 74.590855][ T4346] NILFS (loop0): trying rollback from an earlier position [ 74.724011][ T4346] NILFS (loop0): recovery complete [ 74.787012][ T4349] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.830219][ T4338] loop4: detected capacity change from 0 to 32768 [ 75.566219][ T1107] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.768947][ T4338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.16 (4338) [ 75.851257][ T26] audit: type=1800 audit(1775463149.736:2): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file2" dev="loop0" ino=12 res=0 errno=0 [ 75.989701][ T4338] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 76.016467][ T4338] BTRFS info (device loop4): setting nodatasum [ 76.022883][ T4338] BTRFS info (device loop4): force zlib compression, level 3 [ 76.032005][ T4338] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 76.096257][ T4338] BTRFS info (device loop4): use lzo compression, level 0 [ 76.132078][ T4360] loop1: detected capacity change from 0 to 128 [ 76.140721][ T4338] BTRFS info (device loop4): turning on flush-on-commit [ 76.173202][ T4338] BTRFS info (device loop4): enabling auto defrag [ 76.190770][ T4338] BTRFS info (device loop4): max_inline at 4096 [ 76.206204][ T4338] BTRFS info (device loop4): using free space tree [ 76.213138][ T4338] BTRFS info (device loop4): has skinny extents [ 76.217101][ T4360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.266483][ T1107] usb 4-1: not running at top speed; connect to a high speed hub [ 76.347685][ T4360] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.398866][ T4338] BTRFS info (device loop4): enabling ssd optimizations [ 76.457382][ T1107] usb 4-1: config 12 has an invalid interface number: 254 but max is 3 [ 76.492785][ T1107] usb 4-1: config 12 has an invalid interface number: 219 but max is 3 [ 76.546252][ T1107] usb 4-1: config 12 has an invalid interface number: 209 but max is 3 [ 76.570265][ T26] audit: type=1800 audit(1775463150.456:3): pid=4338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 76.573078][ T1107] usb 4-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 76.707819][ T1107] usb 4-1: config 12 has an invalid descriptor of length 1, skipping remainder of the config [ 76.740315][ T1107] usb 4-1: config 12 has 3 interfaces, different from the descriptor's value: 4 [ 76.792988][ T1107] usb 4-1: config 12 has no interface number 0 [ 76.829182][ T1107] usb 4-1: config 12 has no interface number 1 [ 76.848902][ T1107] usb 4-1: config 12 has no interface number 2 [ 76.881794][ T1107] usb 4-1: config 12 interface 219 altsetting 4 endpoint 0xE has an invalid bInterval 248, changing to 4 [ 76.916295][ T1107] usb 4-1: config 12 interface 219 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 76.952862][ T1107] usb 4-1: config 12 interface 219 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 77.003630][ T1107] usb 4-1: config 12 interface 209 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 77.034342][ T1107] usb 4-1: config 12 interface 209 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 77.072160][ T1107] usb 4-1: config 12 interface 209 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 77.086297][ T1107] usb 4-1: config 12 interface 254 has no altsetting 0 [ 77.093385][ T1107] usb 4-1: config 12 interface 219 has no altsetting 0 [ 77.308232][ T4397] capability: warning: `syz.2.24' uses 32-bit capabilities (legacy support in use) [ 77.337761][ T1107] usb 4-1: New USB device found, idVendor=19d2, idProduct=1298, bcdDevice=73.4f [ 77.387159][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.434658][ T1107] usb 4-1: Product: syz [ 77.466167][ T1107] usb 4-1: Manufacturer: 䱎顾馺㛷ä†á¬Šæ¬è‰•â†”ç¬ë–·ç‹ïž’桑螉摂Ј㒼ã움䃺ꌛ敵礒嗒嗨䚺ꕮ둞륭顒æ½ä™­ï˜¢ã±­â¬žä’±î¡¹à®©ã‡šî†¿ì©”󤧜ㇹ㴺幽휩砾糔뢼쿞䄽犷ퟜ洂⽃í¿îŽŠã¦©äµ­ì¤†æ¦µéµë Ÿë„±ß…ﱪ᧻æ¸ã€¦æƒè·¦ê¦¿èž–掰㡲痖䦊〵뜪ꛕ╬ì†ê«¹ï‘ æ„œëºŠê±šç´…ë—³ç¢î®¯ê¼’䱘ᰊ패봱陔臱䤳톮㣱鶎Ⅻ蕨㎻￞ [ 77.532084][ T1107] usb 4-1: SerialNumber: syz [ 77.675874][ T4403] device syzkaller0 entered promiscuous mode [ 78.227961][ T1107] option 4-1:12.254: GSM modem (1-port) converter detected [ 78.320734][ T1107] usb 4-1: USB disconnect, device number 2 [ 78.342907][ T1107] option 4-1:12.254: device disconnected [ 78.578360][ T4441] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.714653][ T4436] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 78.749010][ T4436] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.939001][ T4454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 78.989888][ T4457] block device autoloading is deprecated and will be removed. [ 79.061293][ T4463] input: syz1 as /devices/virtual/input/input5 [ 79.752641][ T4499] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.792905][ T4505] [U] [ 79.795936][ T4505] [U] [ 79.799549][ T4505] [U] [ 79.802464][ T4505] [U] [ 79.828068][ T4505] [U] [ 79.830826][ T4505] [U] [ 79.833551][ T4505] [U] [ 79.836275][ T4505] [U] [ 79.846749][ T4505] [U] [ 79.849507][ T4505] [U] [ 79.852231][ T4505] [U] [ 79.873134][ T4496] [U] [ 79.900123][ T4499] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 80.205472][ T4522] syz.3.68 uses obsolete (PF_INET,SOCK_PACKET) [ 80.213818][ T4518] kvm: pic: non byte write [ 80.433145][ T4532] device syzkaller1 entered promiscuous mode [ 80.508002][ T4538] binder: 4536:4538 ioctl c0306201 2000000003c0 returned -14 [ 80.833570][ T4546] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.858292][ T26] audit: type=1326 audit(1775463154.746:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.3.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f837e372819 code=0x0 [ 80.880083][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.957401][ T4204] block nbd3: Receive control failed (result -32) [ 80.969216][ T4548] block nbd3: shutting down sockets [ 81.092007][ T4558] process 'syz.0.82' launched './file0' with NULL argv: empty string added [ 81.311576][ T4414] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.592403][ T4414] usb 5-1: Using ep0 maxpacket: 16 [ 81.748692][ T4562] smc: net device bond0 applied user defined pnetid SYZ2 [ 81.756315][ T4414] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 81.768929][ T4562] netlink: 14 bytes leftover after parsing attributes in process `syz.3.85'. [ 81.778167][ T4414] usb 5-1: config 0 has no interface number 0 [ 81.836784][ T26] audit: type=1800 audit(1775463155.716:5): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.82" name="/" dev="fuse" ino=4 res=0 errno=0 [ 81.895386][ T4562] smc: removing net device bond0 with user defined pnetid SYZ2 [ 81.944338][ T4562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.974373][ T4562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.996789][ T4414] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 82.019931][ T4562] bond0 (unregistering): Released all slaves [ 82.031941][ T4414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.045552][ T4414] usb 5-1: Product: syz [ 82.065704][ T4414] usb 5-1: Manufacturer: syz [ 82.083322][ T4414] usb 5-1: SerialNumber: syz [ 82.095220][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 82.110505][ T4414] usb 5-1: config 0 descriptor?? [ 82.157522][ T4414] hub 5-1:0.132: bad descriptor, ignoring hub [ 82.163851][ T4414] hub: probe of 5-1:0.132 failed with error -5 [ 82.190405][ T4414] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input6 [ 82.432780][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 82.443117][ T4204] CPU: 1 PID: 4204 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 82.450865][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 82.461152][ T4204] Workqueue: hci0 hci_rx_work [ 82.465950][ T4204] Call Trace: [ 82.469506][ T4204] [ 82.472458][ T4204] dump_stack_lvl+0x188/0x250 [ 82.477269][ T4204] ? show_regs_print_info+0x20/0x20 [ 82.482596][ T4204] ? load_image+0x400/0x400 [ 82.487311][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 82.492735][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 82.497545][ T4204] ? process_one_work+0x85f/0x1010 [ 82.502804][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 82.508572][ T4204] kobject_add_internal+0x6e0/0xd90 [ 82.514044][ T4204] kobject_add+0x160/0x230 [ 82.518583][ T4204] ? kobject_init+0x1d0/0x1d0 [ 82.523619][ T4204] ? klist_children_get+0x50/0x50 [ 82.528650][ T4204] ? get_device_parent+0x121/0x3f0 [ 82.533789][ T4204] device_add+0x483/0xfb0 [ 82.538270][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 82.543459][ T4204] le_conn_complete_evt+0xc48/0x15c0 [ 82.548912][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 82.554077][ T4204] ? __mutex_trylock_common+0x155/0x260 [ 82.559764][ T4204] hci_le_meta_evt+0x285/0x3c90 [ 82.564823][ T4204] ? hci_event_packet+0x37b/0x1370 [ 82.570637][ T4204] ? __lock_acquire+0x7d10/0x7d10 [ 82.575810][ T4204] ? hci_remote_host_features_evt+0x280/0x280 [ 82.581978][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 82.587635][ T4204] ? mark_lock+0x94/0x320 [ 82.592121][ T4204] ? mutex_unlock+0x10/0x10 [ 82.596739][ T4204] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 82.602827][ T4204] ? lock_chain_count+0x20/0x20 [ 82.607912][ T4204] ? __rwlock_init+0x140/0x140 [ 82.612930][ T4204] hci_event_packet+0xe48/0x1370 [ 82.618473][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 82.624385][ T4204] ? rcu_lock_release+0x20/0x20 [ 82.629274][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 82.634542][ T4204] hci_rx_work+0x255/0xa10 [ 82.638994][ T4204] process_one_work+0x85f/0x1010 [ 82.644271][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 82.650224][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 82.655530][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 82.660579][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 82.666659][ T4204] ? wq_worker_running+0x97/0x170 [ 82.671912][ T4204] worker_thread+0xaa6/0x1290 [ 82.676878][ T4204] ? lockdep_hardirqs_on+0x94/0x140 [ 82.682260][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 82.688408][ T4204] kthread+0x436/0x520 [ 82.692514][ T4204] ? rcu_lock_release+0x20/0x20 [ 82.697366][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 82.702366][ T4204] ret_from_fork+0x1f/0x30 [ 82.706839][ T4204] [ 82.709974][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.722717][ T4204] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.736865][ T4204] Bluetooth: hci0: failed to register connection device [ 82.860656][ T4583] Context (ID=0x1) not attached to queue pair (handle=0x4d9:0x2) [ 82.939357][ T23] usb 5-1: USB disconnect, device number 2 [ 83.099272][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.107720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 83.153116][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.338067][ T4233] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 83.349096][ T4233] Bluetooth: hci0: Injecting HCI hardware error event [ 83.359311][ T4204] Bluetooth: hci0: hardware error 0x00 [ 83.479828][ T4599] 9pnet_virtio: no channels available for device syz [ 83.654766][ T4605] netlink: 'syz.4.103': attribute type 29 has an invalid length. [ 83.674363][ T4605] netlink: 'syz.4.103': attribute type 29 has an invalid length. [ 83.684911][ T4605] netlink: 'syz.4.103': attribute type 29 has an invalid length. [ 83.987118][ T4619] binder: 4618:4619 ioctl c0306201 200000000380 returned -14 [ 84.390337][ T4640] Zero length message leads to an empty skb [ 84.390940][ T4631] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.426354][ T4631] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.483490][ T4643] netlink: 'syz.2.115': attribute type 10 has an invalid length. [ 84.570534][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 84.585736][ T4646] netlink: 'syz.2.116': attribute type 10 has an invalid length. [ 84.614751][ T4646] team0: Port device netdevsim0 added [ 84.716581][ T2288] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.086376][ T2288] usb 4-1: config 0 has no interfaces? [ 85.246398][ T2288] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 85.255895][ T2288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.265029][ T2288] usb 4-1: Product: syz [ 85.270193][ T2288] usb 4-1: Manufacturer: syz [ 85.275105][ T2288] usb 4-1: SerialNumber: syz [ 85.285285][ T2288] usb 4-1: config 0 descriptor?? [ 85.350195][ T4646] syz.2.116 (4646) used greatest stack depth: 20432 bytes left [ 85.543165][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.562505][ T4640] device bridge_slave_0 left promiscuous mode [ 85.569144][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.631815][ T2288] usb 4-1: USB disconnect, device number 3 [ 86.140810][ T4640] syz.3.114 (4640) used greatest stack depth: 20304 bytes left [ 86.949587][ T13] cfg80211: failed to load regulatory.db [ 87.237455][ T4626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.517819][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.876478][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.247015][ T23] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 88.262756][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.420200][ T4709] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 88.427414][ T4709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.435594][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.446461][ T4709] vhci_hcd vhci_hcd.0: Device attached [ 88.452353][ T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.464299][ T23] usb 5-1: Product: syz [ 88.468826][ T23] usb 5-1: Manufacturer: syz [ 88.473843][ T23] usb 5-1: SerialNumber: syz [ 88.481353][ T23] usb 5-1: config 0 descriptor?? [ 88.506753][ T4689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.531587][ T23] usb 5-1: selecting invalid altsetting 0 [ 88.756222][ T4687] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 88.781601][ T4689] usb 5-1: selecting invalid altsetting 0 [ 88.796347][ T2288] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.808495][ T4689] usb 5-1: 0:0: usb_set_interface failed (-22) [ 88.818892][ T4689] usb 5-1: selecting invalid altsetting 0 [ 88.824858][ T4689] usb 5-1: 0:0: usb_set_interface failed (-22) [ 88.831682][ T4689] usb 5-1: selecting invalid altsetting 0 [ 88.839600][ T4689] usb 5-1: 0:0: usb_set_interface failed (-22) [ 88.906392][ T23] usb 5-1: USB disconnect, device number 3 [ 89.036244][ T2288] usb 3-1: Using ep0 maxpacket: 8 [ 89.157049][ T2288] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 89.165258][ T2288] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 89.179179][ T2288] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 89.188574][ T2288] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.198564][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.449385][ T4710] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1 [ 89.451048][ T4414] usb 3-1: USB disconnect, device number 2 [ 89.472388][ T1366] vhci_hcd: stop threads [ 89.480922][ T1366] vhci_hcd: release socket [ 89.488265][ T1366] vhci_hcd: disconnect device [ 89.576464][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 89.583232][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 89.866275][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.266473][ T23] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 90.274853][ T23] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 90.285088][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.476615][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.486208][ T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.494703][ T23] usb 5-1: Product: syz [ 90.499375][ T23] usb 5-1: Manufacturer: syz [ 90.506191][ T23] usb 5-1: SerialNumber: syz [ 90.527955][ T23] usb 5-1: config 0 descriptor?? [ 90.569180][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 90.575154][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 90.591766][ T23] usb 5-1: selecting invalid altsetting 0 [ 90.886587][ T13] usb 5-1: USB disconnect, device number 4 [ 91.308954][ T4728] usb usb7: usbfs: process 4728 (syz.4.148) did not claim interface 0 before use [ 91.571479][ T4736] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.656615][ T4407] Bluetooth: hci5: command 0x1001 tx timeout [ 91.663106][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 91.882032][ T4194] Bluetooth: hci2: hcon ffff88801a18c000 sent 1 < count 511 [ 92.652464][ T4771] kvm [4769]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 92.662315][ T4771] kvm [4769]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 92.679270][ T4771] APIC base relocation is unsupported by KVM [ 93.736465][ T2288] Bluetooth: hci5: command 0x1009 tx timeout [ 93.906588][ T4687] vhci_hcd: vhci_device speed not set [ 94.213860][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.221609][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.332751][ T1366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.434971][ T1366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.576037][ T1366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.605959][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 94.668155][ T1366] team0: Port device netdevsim0 removed [ 94.675475][ T1366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.769840][ T4807] chnl_net:caif_netlink_parms(): no params data found [ 94.879428][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.892044][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.900590][ T4807] device bridge_slave_0 entered promiscuous mode [ 94.910406][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.923532][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.933605][ T4807] device bridge_slave_1 entered promiscuous mode [ 94.993624][ T4807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.052209][ T4807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.078769][ T4807] team0: Port device team_slave_0 added [ 95.087820][ T4807] team0: Port device team_slave_1 added [ 95.129065][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.145531][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.179887][ T4807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.198649][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.205923][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.233099][ T4807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.271251][ T4807] device hsr_slave_0 entered promiscuous mode [ 95.278286][ T4807] device hsr_slave_1 entered promiscuous mode [ 95.285267][ T4807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.293934][ T4807] Cannot create hsr debugfs directory [ 95.577328][ T4768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.588770][ T4807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.627939][ T4807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.688472][ T4807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.761282][ T4807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.195453][ T4807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.291543][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.306961][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.510274][ T4807] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.595244][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.619361][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.626314][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 96.647081][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.654578][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.678812][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.712579][ T1366] device hsr_slave_0 left promiscuous mode [ 96.727035][ T1366] device hsr_slave_1 left promiscuous mode [ 96.743438][ T1366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.751322][ T1366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.761508][ T1366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.775592][ T1366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.786629][ T1366] device bridge_slave_1 left promiscuous mode [ 96.793415][ T1366] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.809884][ T1366] device bridge_slave_0 left promiscuous mode [ 96.816333][ T1366] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.889019][ T1366] device veth1_macvtap left promiscuous mode [ 96.895726][ T1366] device veth0_macvtap left promiscuous mode [ 96.902621][ T1366] device veth1_vlan left promiscuous mode [ 96.918262][ T1366] device veth0_vlan left promiscuous mode [ 97.387324][ T4863] 9pnet_virtio: no channels available for device syz [ 97.561007][ T1366] team0 (unregistering): Port device team_slave_1 removed [ 97.620955][ T1366] team0 (unregistering): Port device team_slave_0 removed [ 97.656235][ T1366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.699530][ T1366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.100289][ T1366] bond0 (unregistering): Released all slaves [ 98.136231][ T4233] Bluetooth: hci6: command 0x0409 tx timeout [ 98.384967][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.406224][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.415610][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.422759][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.468566][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.511959][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.532179][ T4923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 98.551166][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.604950][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.615639][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.628175][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.637457][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.658966][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.703906][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 98.716976][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.758142][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.780233][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.796400][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 98.832409][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.853158][ T4832] chnl_net:caif_netlink_parms(): no params data found [ 99.103582][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.196425][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.205393][ T4832] device bridge_slave_0 entered promiscuous mode [ 99.245258][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.280127][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.315568][ T4832] device bridge_slave_1 entered promiscuous mode [ 99.445848][ T4832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.518942][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.572162][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.609053][ T4964] usb usb8: usbfs: process 4964 (syz.3.202) did not claim interface 0 before use [ 99.626812][ T4832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.640631][ T4807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.773807][ T4832] team0: Port device team_slave_0 added [ 99.857826][ T4832] team0: Port device team_slave_1 added [ 100.023898][ T4970] device syzkaller0 entered promiscuous mode [ 100.175974][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.192192][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.216582][ T4233] Bluetooth: hci6: command 0x041b tx timeout [ 100.288798][ T4832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.370863][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.405019][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.506058][ T4832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.700205][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.723993][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.776346][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 100.788906][ T4832] device hsr_slave_0 entered promiscuous mode [ 100.824250][ T4832] device hsr_slave_1 entered promiscuous mode [ 100.922040][ T4832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.941317][ T4832] Cannot create hsr debugfs directory [ 100.962269][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.000482][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.040703][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.070024][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.184859][ T4807] device veth0_vlan entered promiscuous mode [ 101.283566][ T4807] device veth1_vlan entered promiscuous mode [ 101.471561][ T4807] device veth0_macvtap entered promiscuous mode [ 101.509993][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.536703][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.560446][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.629117][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.664680][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.717080][ T4807] device veth1_macvtap entered promiscuous mode [ 101.819417][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.848472][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.868825][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.879851][ T4982] 9pnet_virtio: no channels available for device syz [ 101.907953][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.930040][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.951948][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.969595][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.990131][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.005938][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.029769][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.044397][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.077326][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.101616][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.122146][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.153437][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.206190][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.247620][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.278274][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.296452][ T23] Bluetooth: hci6: command 0x040f tx timeout [ 102.316428][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.376032][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.385616][ T4832] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.486651][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.495671][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.531386][ T4807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.575872][ T4807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.634385][ T4807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.651148][ T4807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.678959][ T4832] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.739498][ T4832] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.803693][ T4832] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.856414][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 103.004330][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.024879][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.111756][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.260482][ T4905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.298333][ T4832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.326190][ T4905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.334792][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.430964][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.458150][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.498140][ T4832] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.551894][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.597228][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.617727][ T5079] loop6: detected capacity change from 0 to 7 [ 103.638502][ T4901] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.645716][ T4901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.672085][ T5086] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 103.693232][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.716695][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.744984][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.778366][ T5079] Dev loop6: unable to read RDB block 7 [ 103.792379][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.799762][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.842904][ T5079] loop6: unable to read partition table [ 103.873010][ T5079] loop6: partition table beyond EOD, truncated [ 103.898733][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.911773][ T5079] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 103.934026][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.966486][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.008894][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.043327][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.071338][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.139944][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.178952][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.205423][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.252618][ T4832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.282247][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.337121][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.347311][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.383792][ T4687] Bluetooth: hci6: command 0x0419 tx timeout [ 104.626460][ T4233] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.902353][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 104.936536][ T2288] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.985501][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.022834][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.036619][ T4233] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 105.045067][ T4233] usb 1-1: config 179 has no interface number 0 [ 105.069180][ T4832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.100234][ T4233] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 105.158994][ T4233] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 105.194442][ T4233] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.205728][ T1366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.224941][ T4233] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 105.264607][ T4233] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 105.279592][ T4233] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 105.290756][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.317266][ T5136] device syzkaller0 entered promiscuous mode [ 105.326616][ T5102] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.334131][ T5140] netlink: 'syz.5.243': attribute type 1 has an invalid length. [ 105.409032][ T1366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.534643][ T1366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.620024][ T4233] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 105.632392][ T1366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.770774][ T4233] usb 1-1: USB disconnect, device number 3 [ 105.786158][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 105.820522][ T4233] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 105.931600][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.945437][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.043581][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.055025][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.159479][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.199032][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.229281][ T4832] device veth0_vlan entered promiscuous mode [ 106.265192][ T4832] device veth1_vlan entered promiscuous mode [ 106.434659][ T5178] cgroup: Unknown subsys name 'obj_role' [ 106.566372][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.585561][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.643181][ T4832] device veth0_macvtap entered promiscuous mode [ 106.719298][ T4832] device veth1_macvtap entered promiscuous mode [ 106.838123][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.902594][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.966784][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.000636][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.066339][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.088434][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.126459][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.162302][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.202958][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.252939][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.299116][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.356718][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.365263][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.393057][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.412596][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.429365][ T26] audit: type=1326 audit(1775463181.316:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7b19e6819 code=0x0 [ 107.451161][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.477517][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.510498][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.542149][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.570692][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.616469][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.641029][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.656022][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.667155][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.685415][ T4832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.696478][ T4832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.727405][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.863731][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.873332][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.891022][ T5222] device syzkaller1 entered promiscuous mode [ 107.982828][ T5238] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 108.006603][ T4687] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.333588][ T4832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.385974][ T4832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.406803][ T4687] usb 6-1: config 0 has no interfaces? [ 108.413878][ T4687] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.461773][ T4832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.477384][ T4687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.606741][ T4832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.619100][ T4687] usb 6-1: config 0 descriptor?? [ 108.839141][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.864096][ T2288] usb 6-1: USB disconnect, device number 2 [ 108.889660][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.986259][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.039043][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.053990][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.140438][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.527921][ T1366] device hsr_slave_0 left promiscuous mode [ 109.551768][ T1366] device hsr_slave_1 left promiscuous mode [ 109.557677][ T5261] kvm: pic: level sensitive irq not supported [ 109.562752][ T5261] kvm: pic: single mode not supported [ 109.569405][ T5261] kvm: pic: level sensitive irq not supported [ 109.579006][ T1366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.598274][ T5261] kvm: pic: single mode not supported [ 109.605499][ T5261] kvm: pic: single mode not supported [ 109.620437][ T5261] kvm: pic: single mode not supported [ 109.633344][ T5261] kvm: pic: single mode not supported [ 109.634888][ T1366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.646655][ T5261] kvm: pic: single mode not supported [ 109.652183][ T5261] kvm: pic: level sensitive irq not supported [ 109.670956][ T5261] kvm: pic: single mode not supported [ 109.678141][ T5261] kvm: pic: level sensitive irq not supported [ 109.701725][ T1366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.743331][ T1366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.770213][ T1366] device bridge_slave_1 left promiscuous mode [ 109.793589][ T1366] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.829231][ T1366] device bridge_slave_0 left promiscuous mode [ 109.851872][ T1366] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.932721][ T1366] device veth1_macvtap left promiscuous mode [ 109.963444][ T1366] device veth0_macvtap left promiscuous mode [ 109.984105][ T1366] device veth1_vlan left promiscuous mode [ 110.005645][ T1366] device veth0_vlan left promiscuous mode [ 110.047929][ T5272] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 110.849045][ T1366] team0 (unregistering): Port device team_slave_1 removed [ 110.864061][ T1366] team0 (unregistering): Port device team_slave_0 removed [ 110.879775][ T1366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.897415][ T1366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.957134][ T4233] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.989581][ T1366] bond0 (unregistering): Released all slaves [ 111.168630][ T5301] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 111.237725][ T5301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.260501][ T4233] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 111.312168][ T5305] bond1: (slave ip6gretap1): making interface the new active one [ 111.324786][ T5305] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 111.369995][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.383344][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.398135][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 111.406235][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.486539][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.511644][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.533649][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.656722][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.674317][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.740108][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.836382][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.845508][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.886153][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.966375][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.975325][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.016160][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.096385][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.120406][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.176322][ T4687] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.186457][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.208086][ T5324] chnl_net:caif_netlink_parms(): no params data found [ 112.266428][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.275675][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.294241][ T5324] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.303438][ T5324] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.311771][ T5324] device bridge_slave_0 entered promiscuous mode [ 112.322242][ T5324] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.336185][ T5324] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.362697][ T5324] device bridge_slave_1 entered promiscuous mode [ 112.385422][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.424465][ T5324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.443998][ T5324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.476808][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.497279][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.536922][ T4687] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 112.548019][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.567984][ T4687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.597880][ T5324] team0: Port device team_slave_0 added [ 112.616480][ T21] Bluetooth: hci1: command 0x1003 tx timeout [ 112.623555][ T4194] Bluetooth: hci1: sending frame failed (-49) [ 112.644473][ T5324] team0: Port device team_slave_1 added [ 112.666584][ T4687] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 112.676528][ T4687] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 112.684601][ T4687] usb 1-1: Manufacturer: syz [ 112.703499][ T4687] usb 1-1: config 0 descriptor?? [ 112.716380][ T4233] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 112.734360][ T4233] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 112.750366][ T5324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.766232][ T4233] usb 5-1: Product: syz [ 112.770761][ T4233] usb 5-1: Manufacturer: syz [ 112.775484][ T5324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.801884][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.822572][ T4233] usb 5-1: SerialNumber: syz [ 112.837501][ T4233] usb 5-1: config 0 descriptor?? [ 112.853857][ T5324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.894763][ T4687] rc_core: IR keymap rc-hauppauge not found [ 112.902722][ T4687] Registered IR keymap rc-empty [ 112.911812][ T4233] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 112.937503][ T4687] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 112.953629][ T5352] device syzkaller0 entered promiscuous mode [ 112.961911][ T4687] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 112.980525][ T5324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.988636][ T5324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.015581][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.039214][ T4687] usb 1-1: USB disconnect, device number 4 [ 113.052518][ T5324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.208502][ T5324] device hsr_slave_0 entered promiscuous mode [ 113.217628][ T5324] device hsr_slave_1 entered promiscuous mode [ 113.224438][ T5324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.232769][ T5324] Cannot create hsr debugfs directory [ 113.556363][ T5324] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.591427][ T5324] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.611758][ T5324] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.643058][ T5324] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.676314][ T4228] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 113.817283][ T4233] Bluetooth: hci4: command 0x0409 tx timeout [ 113.885497][ T5324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.917822][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.932529][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.958207][ T5324] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.985472][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.003301][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.032031][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.039232][ T4893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.086642][ T4228] usb 7-1: config 0 has no interfaces? [ 114.092755][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.100573][ T4228] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.112877][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.121505][ T4228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.131176][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.146161][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 114.151448][ T4228] usb 7-1: config 0 descriptor?? [ 114.171752][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.179255][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.206354][ T1107] usb 5-1: USB disconnect, device number 6 [ 114.221384][ T1107] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 114.272518][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.299794][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.311527][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 114.358918][ T5385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.394181][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.412500][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.423035][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.433549][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.451071][ T4233] usb 7-1: USB disconnect, device number 2 [ 114.459691][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.473170][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.482820][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.505977][ T5385] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 114.541467][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 114.570134][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.594708][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.629462][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.696758][ T23] Bluetooth: hci1: command 0x1001 tx timeout [ 114.703014][ T4194] Bluetooth: hci1: sending frame failed (-49) [ 115.131024][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.146877][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.198734][ T1366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.222373][ T5324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.229996][ T5418] device wg1 entered promiscuous mode [ 115.265442][ T1366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.360002][ T1366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.468594][ T1366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.843561][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.885375][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.898876][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 116.045380][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.072928][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.092270][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.108759][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.129538][ T5324] device veth0_vlan entered promiscuous mode [ 116.167265][ T5324] device veth1_vlan entered promiscuous mode [ 116.276183][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.285263][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.297435][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.307776][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.320536][ T5324] device veth0_macvtap entered promiscuous mode [ 116.344664][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.357713][ T5324] device veth1_macvtap entered promiscuous mode [ 116.402225][ T26] audit: type=1804 audit(1775463190.286:7): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.319" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0 [ 116.403223][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.448229][ T4194] Bluetooth: Frame is too long (len 10, expected len 4) [ 116.474348][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.482376][ T26] audit: type=1800 audit(1775463190.316:8): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.319" name="/" dev="fuse" ino=1 res=0 errno=0 [ 116.495783][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.561900][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.591187][ T26] audit: type=1804 audit(1775463190.326:9): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.319" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0 [ 116.626818][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.664306][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.692553][ T26] audit: type=1800 audit(1775463190.326:10): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.319" name="/" dev="fuse" ino=1 res=0 errno=0 [ 116.730112][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.749294][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.765928][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.777098][ T21] Bluetooth: hci1: command 0x1009 tx timeout [ 116.804611][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.845074][ T5324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.880087][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.923981][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.953340][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.964555][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.975441][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.994242][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.032521][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.053318][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.063479][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.081597][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.093244][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.113312][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.127667][ T5324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.144015][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.184461][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.235612][ T5324] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.253203][ T5324] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.262670][ T5324] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.272229][ T5324] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.308329][ T4407] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.654914][ T1366] device hsr_slave_0 left promiscuous mode [ 117.671947][ T1366] device hsr_slave_1 left promiscuous mode [ 117.679290][ T1366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.689732][ T1366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.698409][ T1366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.705867][ T1366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.715110][ T1366] device bridge_slave_1 left promiscuous mode [ 117.716277][ T4407] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 117.721702][ T1366] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.740068][ T4407] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.760847][ T4407] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.771730][ T4407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.790634][ T1366] device veth1_macvtap left promiscuous mode [ 117.790950][ T4407] usb 5-1: config 0 descriptor?? [ 117.802406][ T1366] device veth0_macvtap left promiscuous mode [ 117.809831][ T1366] device veth1_vlan left promiscuous mode [ 117.816702][ T1366] device veth0_vlan left promiscuous mode [ 117.842827][ T4407] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 117.977476][ T1725] Bluetooth: hci4: command 0x040f tx timeout [ 118.024501][ T1366] team0 (unregistering): Port device team_slave_1 removed [ 118.041485][ T1366] team0 (unregistering): Port device team_slave_0 removed [ 120.013914][ T21] usb 5-1: USB disconnect, device number 7 [ 120.057616][ T4407] Bluetooth: hci4: command 0x0419 tx timeout [ 120.206417][ T5491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.328602][ T4905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.340802][ T4905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.377139][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.411119][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.457062][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.503729][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.580111][ T5506] kvm [5505]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x48 [ 120.639074][ T5506] kvm [5505]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 120.684572][ T5506] kvm [5505]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 120.732821][ T5506] kvm [5505]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 120.762605][ T5506] kvm [5505]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x10 [ 120.785764][ T5506] kvm [5505]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 120.786239][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.850142][ T5506] kvm [5505]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 120.908100][ T5506] kvm [5505]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 120.925266][ T5506] kvm [5505]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 120.941206][ T4201] ================================================================== [ 120.949997][ T4201] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 120.958123][ T4201] Read of size 1 at addr ffff88802ba6a204 by task kworker/u5:6/4201 [ 120.966513][ T4201] [ 120.968869][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 120.976534][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.986927][ T4201] Workqueue: hci4 hci_rx_work [ 120.991656][ T4201] Call Trace: [ 120.994972][ T4201] [ 120.997941][ T4201] dump_stack_lvl+0x188/0x250 [ 121.002671][ T4201] ? show_regs_print_info+0x20/0x20 [ 121.007922][ T4201] ? load_image+0x400/0x400 [ 121.012733][ T4201] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 121.018359][ T4201] ? mutex_lock_io_nested+0x60/0x60 [ 121.023823][ T4201] print_address_description+0x60/0x2d0 [ 121.029597][ T4201] ? hci_le_meta_evt+0x133f/0x3c90 [ 121.034906][ T4201] kasan_report+0xdf/0x130 [ 121.039346][ T4201] ? hci_le_meta_evt+0x133f/0x3c90 [ 121.044471][ T4201] hci_le_meta_evt+0x133f/0x3c90 [ 121.049521][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 121.055772][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 121.061508][ T4201] ? mark_lock+0x94/0x320 [ 121.065851][ T4201] ? mutex_unlock+0x10/0x10 [ 121.070449][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.076743][ T4201] ? lock_chain_count+0x20/0x20 [ 121.081690][ T4201] ? __rwlock_init+0x140/0x140 [ 121.086491][ T4201] hci_event_packet+0xe48/0x1370 [ 121.091530][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 121.096750][ T4201] ? rcu_lock_release+0x20/0x20 [ 121.101808][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 121.107201][ T4201] hci_rx_work+0x255/0xa10 [ 121.111725][ T4201] process_one_work+0x85f/0x1010 [ 121.116775][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 121.122417][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 121.127807][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.133366][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.139110][ T4201] ? wq_worker_running+0x97/0x170 [ 121.144488][ T4201] worker_thread+0xaa6/0x1290 [ 121.149246][ T4201] kthread+0x436/0x520 [ 121.153442][ T4201] ? rcu_lock_release+0x20/0x20 [ 121.158476][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 121.163429][ T4201] ret_from_fork+0x1f/0x30 [ 121.167922][ T4201] [ 121.171044][ T4201] [ 121.173528][ T4201] Allocated by task 5528: [ 121.177948][ T4201] __kasan_kmalloc+0xb5/0xf0 [ 121.182548][ T4201] __alloc_skb+0x22c/0x750 [ 121.186968][ T4201] vhci_write+0xbc/0x450 [ 121.191217][ T4201] vfs_write+0x745/0xd60 [ 121.195468][ T4201] ksys_write+0x152/0x260 [ 121.199909][ T4201] do_syscall_64+0x4c/0xa0 [ 121.204507][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.210494][ T4201] [ 121.212946][ T4201] The buggy address belongs to the object at ffff88802ba6a000 [ 121.212946][ T4201] which belongs to the cache kmalloc-512 of size 512 [ 121.227706][ T4201] The buggy address is located 4 bytes to the right of [ 121.227706][ T4201] 512-byte region [ffff88802ba6a000, ffff88802ba6a200) [ 121.241509][ T4201] The buggy address belongs to the page: [ 121.247138][ T4201] page:ffffea0000ae9a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ba68 [ 121.258429][ T4201] head:ffffea0000ae9a00 order:2 compound_mapcount:0 compound_pincount:0 [ 121.267019][ T4201] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 121.275241][ T4201] raw: 00fff00000010200 ffffea0001806000 0000000500000005 ffff888016c41c80 [ 121.284019][ T4201] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 121.292692][ T4201] page dumped because: kasan: bad access detected [ 121.299374][ T4201] page_owner tracks the page as allocated [ 121.305269][ T4201] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 22005770518, free_ts 0 [ 121.323774][ T4201] get_page_from_freelist+0x1bbd/0x1ca0 [ 121.329331][ T4201] __alloc_pages+0x1ee/0x480 [ 121.334015][ T4201] alloc_page_interleave+0x24/0x1e0 [ 121.339316][ T4201] new_slab+0xc0/0x4b0 [ 121.343572][ T4201] ___slab_alloc+0x80a/0xdd0 [ 121.348260][ T4201] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 121.354194][ T4201] __alloc_skb+0x22c/0x750 [ 121.358719][ T4201] inet_netconf_notify_devconf+0x16f/0x230 [ 121.364706][ T4201] __devinet_sysctl_register+0x32a/0x3a0 [ 121.370433][ T4201] devinet_sysctl_register+0x17c/0x1f0 [ 121.375893][ T4201] inetdev_init+0x28c/0x4d0 [ 121.380577][ T4201] inetdev_event+0x26f/0x1370 [ 121.385443][ T4201] raw_notifier_call_chain+0xcb/0x160 [ 121.391171][ T4201] register_netdevice+0x12a6/0x1710 [ 121.396682][ T4201] register_netdev+0x37/0x50 [ 121.401278][ T4201] nr_proto_init+0x177/0x840 [ 121.405984][ T4201] page_owner free stack trace missing [ 121.411607][ T4201] [ 121.414046][ T4201] Memory state around the buggy address: [ 121.419679][ T4201] ffff88802ba6a100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.427741][ T4201] ffff88802ba6a180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.435982][ T4201] >ffff88802ba6a200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.444039][ T4201] ^ [ 121.448111][ T4201] ffff88802ba6a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.456275][ T4201] ffff88802ba6a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.464432][ T4201] ================================================================== [ 121.473013][ T4201] Disabling lock debugging due to kernel taint [ 121.479255][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.490087][ T4201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 121.497698][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 121.506674][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.516838][ T4201] Workqueue: hci4 hci_rx_work [ 121.521552][ T4201] Call Trace: [ 121.524855][ T4201] [ 121.527795][ T4201] dump_stack_lvl+0x188/0x250 [ 121.532481][ T4201] ? show_regs_print_info+0x20/0x20 [ 121.537684][ T4201] ? load_image+0x400/0x400 [ 121.542276][ T4201] panic+0x2e5/0x810 [ 121.546358][ T4201] ? bpf_jit_dump+0xd0/0xd0 [ 121.550865][ T4201] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 121.557028][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 121.561887][ T4201] ? hci_le_meta_evt+0x133f/0x3c90 [ 121.567002][ T4201] check_panic_on_warn+0x80/0xa0 [ 121.571942][ T4201] ? hci_le_meta_evt+0x133f/0x3c90 [ 121.577229][ T4201] end_report+0x6d/0xf0 [ 121.581390][ T4201] kasan_report+0x102/0x130 [ 121.585895][ T4201] ? hci_le_meta_evt+0x133f/0x3c90 [ 121.591013][ T4201] hci_le_meta_evt+0x133f/0x3c90 [ 121.596133][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 121.602304][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 121.608045][ T4201] ? mark_lock+0x94/0x320 [ 121.612387][ T4201] ? mutex_unlock+0x10/0x10 [ 121.616899][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.623058][ T4201] ? lock_chain_count+0x20/0x20 [ 121.628001][ T4201] ? __rwlock_init+0x140/0x140 [ 121.632768][ T4201] hci_event_packet+0xe48/0x1370 [ 121.637723][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 121.642945][ T4201] ? rcu_lock_release+0x20/0x20 [ 121.647816][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 121.653017][ T4201] hci_rx_work+0x255/0xa10 [ 121.657443][ T4201] process_one_work+0x85f/0x1010 [ 121.662389][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 121.668031][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 121.673416][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.678555][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.684101][ T4201] ? wq_worker_running+0x97/0x170 [ 121.689228][ T4201] worker_thread+0xaa6/0x1290 [ 121.694006][ T4201] kthread+0x436/0x520 [ 121.698085][ T4201] ? rcu_lock_release+0x20/0x20 [ 121.702939][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 121.707532][ T4201] ret_from_fork+0x1f/0x30 [ 121.712140][ T4201] [ 121.715797][ T4201] Kernel Offset: disabled [ 121.720131][ T4201] Rebooting in 86400 seconds..