last executing test programs: 34.233942841s ago: executing program 2 (id=400): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) 31.810913817s ago: executing program 2 (id=409): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x56e02a3) 31.611385918s ago: executing program 2 (id=410): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 29.208586422s ago: executing program 2 (id=419): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0xfffffe6b) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x2, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000180)={0xa, {0xa, 0x4f}}, 0xa) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) 28.819650461s ago: executing program 2 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0x1, 0x1000000, 0x629, 0x4000006, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1f00, 0x0) 28.485561005s ago: executing program 2 (id=426): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0c, 0x0) 28.135851921s ago: executing program 32 (id=426): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0c, 0x0) 26.231394964s ago: executing program 3 (id=432): syz_io_uring_setup(0x371d, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x20008040}, 0x0) 25.499428818s ago: executing program 3 (id=436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x4000011) 25.443621464s ago: executing program 3 (id=437): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 24.605283539s ago: executing program 3 (id=441): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$unix(0x1, 0x2, 0x0) pread64(r2, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 24.391296511s ago: executing program 3 (id=442): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) sendmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000780)="05a8", 0x2}], 0x1}}], 0x1, 0x8040) 23.626308109s ago: executing program 3 (id=443): openat$kvm(0xffffff9c, 0x0, 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 10.203531053s ago: executing program 4 (id=494): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25d7dbfc, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e21, 0x3, 'sh\x00', 0x0, 0x83, 0x18}, {@rand_addr=0x64010500, 0x6e26, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) 9.396993585s ago: executing program 4 (id=495): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000400), 0x9) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000003c0)={"b7a8c4e7db869477b3f74f2edfbc2c260ca549791f50be4f9bf71b566872", 0x10000, 0x0, 0x401, 0x6, 0xad27, 0x1f, 0x5, 0x0, [0x8, 0x9, 0x7, 0xffffffff, 0x9, 0xfffff80a, 0x5, 0x1d70, 0x4, 0x5, 0xffffff80, 0x52061c7c, 0x2, 0x2, 0x7, 0x7, 0x654c, 0xed, 0x8]}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 8.102099267s ago: executing program 33 (id=443): openat$kvm(0xffffff9c, 0x0, 0x20000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 8.056524971s ago: executing program 4 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)) 7.08751485s ago: executing program 4 (id=502): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{0xff}, {0x3, 0x3}}}}, 0x8) 7.034601255s ago: executing program 4 (id=504): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x717c, &(0x7f0000000380)={0x0, 0xe2cc, 0x8000, 0x0, 0xfffffffe, 0x0, r2}, &(0x7f00000007c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22004d90"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) socket$kcm(0x2, 0xa, 0x2) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001840)="a905000000007464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000"], 0x10}}], 0x2, 0x40000) 6.97950272s ago: executing program 1 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) 6.955745493s ago: executing program 1 (id=507): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x240, 0x4, "00000000000000000000c2041a02003d00"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) r2 = syz_open_pts(r0, 0x20080) dup3(r2, r0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r4 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "baee6f174fe469da58168a334e1e04faca23cb98a2c9574fc35e49ee177e415d74d388ee12f9732cff4c07750a79371304a6df2f6106e5b91795edda00d45394", 0x33}, 0x48, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x20008050) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xc989, 0x400, 0x1, 0x278}, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r6, 0x4e14, 0x912a, 0x41, 0x0, 0x0) keyctl$unlink(0x9, r4, 0x0) setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) 6.739377105s ago: executing program 4 (id=509): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, r8, 0x2f, 0x2034, r8}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 5.50755842s ago: executing program 1 (id=512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) 4.551574747s ago: executing program 1 (id=518): ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04130902"], 0xc) 4.114263531s ago: executing program 1 (id=521): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000080)=0x3000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) pipe(&(0x7f0000000100)) unshare(0x24060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x818e, 0x2, {}, {}, 0x2, 0x6ff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001800dd8d2bbd700000000000020000000000000500000000060015000200000014001680100008800c00018006000100050200003c7a0c2226f098c3e6a61e308f5a60af09b111a07b78b893d01295"], 0x38}}, 0x0) 2.834895442s ago: executing program 5 (id=530): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_emit_ethernet(0x68, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "251a50", 0x0, 0x2c, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "fd0a"}}}}}}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) 2.218097614s ago: executing program 0 (id=532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5117c171}]}, 0x30}}, 0x0) 2.004256546s ago: executing program 0 (id=533): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x300, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) 1.875410189s ago: executing program 0 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1.76674853s ago: executing program 0 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x8000000000000000, 0x40, 0x40, 0x0, 0x3, 0x2004cc, 0x4000000000000000, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x2, 0xfffffffffffffffc, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.303071678s ago: executing program 5 (id=536): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2}) write$apparmor_current(r0, &(0x7f00000000c0)=@profile={'permprofile ', '/dev/input/event#\x00'}, 0x1e) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x2, 0x1, 0x2, 0xa, 0xc53e, 0x8}, 0x20) bind$qrtr(r0, &(0x7f0000000100)={0x2a, 0x1, 0x1}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x1, {0x8, 0x1}, {0x4f, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x2}, 0x0, 0x0}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x22, 0x1, 0xd7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r4, 0x0, 0x11) ioctl$MON_IOCG_STATS(r4, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 991.467069ms ago: executing program 0 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 949.673213ms ago: executing program 5 (id=538): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) statx(r1, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05002d20"], 0x45) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, &(0x7f00000001c0)) 681.653931ms ago: executing program 5 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x4, 0x6}}}}]}, 0x44}}, 0x850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x40007, 0x7ed53619, 0x1, 0x2, 0xd, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x5, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x4, 0x0, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42be, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x0, 0x40, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x5, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x203, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x5, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x200e, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x9, 0x7, 0xffff, 0xfffffffc, 0x5, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dca, 0x9, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x5, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 383.376981ms ago: executing program 1 (id=540): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000080)=0x3000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a0000000000000000070000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080002800800"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) unshare(0x24060400) mount$9p_fd(0xfdffffff, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x8}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r7 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x818e, 0x6, {r6}, {r7}, 0x2, 0x6ff}) 383.118911ms ago: executing program 5 (id=541): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0xfffffffd}, {0x0}, 0x0}}], 0x48}, 0x0) 287.059141ms ago: executing program 5 (id=542): socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x801, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 0s ago: executing program 0 (id=543): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'nq\x00', 0x8, 0x323b, 0x58}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. [ 49.527891][ T4168] cgroup: Unknown subsys name 'net' [ 49.692933][ T4168] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.160910][ T4168] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.707504][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.760796][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.781046][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.862159][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.912643][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 52.934976][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.942565][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.951281][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.989118][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.997201][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.005072][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.024659][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.031886][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.040680][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.051412][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.059300][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.067846][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.090221][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.097510][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.105476][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.129282][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.136672][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.144350][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.165682][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.208214][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.219898][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.229653][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.237227][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.245435][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.254915][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.278535][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.289740][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.297298][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.305433][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.320976][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.367818][ T4189] team0: Port device team_slave_0 added [ 53.395489][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.402932][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.411508][ T4194] device bridge_slave_0 entered promiscuous mode [ 53.421944][ T4189] team0: Port device team_slave_1 added [ 53.437559][ T4183] team0: Port device team_slave_0 added [ 53.445825][ T4182] team0: Port device team_slave_0 added [ 53.454263][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.463902][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.472297][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.480741][ T4194] device bridge_slave_1 entered promiscuous mode [ 53.497698][ T4183] team0: Port device team_slave_1 added [ 53.504806][ T4182] team0: Port device team_slave_1 added [ 53.512313][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.528565][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.535647][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.561915][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.600424][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.607687][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.634398][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.669464][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.681945][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.695133][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.702464][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.728766][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.744798][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.752174][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.781169][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.794226][ T4191] team0: Port device team_slave_0 added [ 53.818609][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.826150][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.853319][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.864993][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.872536][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.900056][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.918044][ T4191] team0: Port device team_slave_1 added [ 53.933126][ T4194] team0: Port device team_slave_0 added [ 53.944166][ T4194] team0: Port device team_slave_1 added [ 53.993004][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.001089][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.027433][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.050206][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.057590][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.073313][ T4189] device hsr_slave_0 entered promiscuous mode [ 54.080785][ T4189] device hsr_slave_1 entered promiscuous mode [ 54.087948][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.095714][ T4189] Cannot create hsr debugfs directory [ 54.102111][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.109868][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.136528][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.152901][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.160217][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.186450][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.198501][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.205482][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.232015][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.284479][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.291620][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.298969][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.307036][ T4183] Cannot create hsr debugfs directory [ 54.377102][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 54.377102][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 54.377548][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 54.388919][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.391034][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 54.411899][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.419317][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.427401][ T4191] Cannot create hsr debugfs directory [ 54.454416][ T4194] device hsr_slave_0 entered promiscuous mode [ 54.456598][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 54.467428][ T4194] device hsr_slave_1 entered promiscuous mode [ 54.474288][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.482569][ T4194] Cannot create hsr debugfs directory [ 54.737533][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.748693][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.768344][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.777756][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.825599][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.837662][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.860525][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.870708][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.915293][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.947359][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.959385][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.975608][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.041111][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.057274][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.070435][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.086930][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.095853][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.139690][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.155853][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.172607][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.198086][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.208598][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.218889][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.229711][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.270539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.279990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.291423][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.298726][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.308713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.318536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.327173][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.334247][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.342684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.353306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.363082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.372088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.384279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.393168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.420055][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.430901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.440804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.464680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.473745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.494073][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.507410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.516539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.540275][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.552181][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.561066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.571672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.579884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.589331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.602326][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.614970][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.627532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.643032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.652310][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.659583][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.698750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.714110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.725260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.734454][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.741595][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.751730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.761426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.770472][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.777762][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.785710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.794938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.805418][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.812531][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.821040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.831183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.850364][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.864821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.875713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.886150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.897572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.913018][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.930943][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.941622][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.951112][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.961490][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.988781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.007074][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.026933][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.038217][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.048653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.059112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.067048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.074912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.084056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.093769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.102282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.111262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.120502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.130245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.139358][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.146672][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.154426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.164663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.182550][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.204449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.213659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.222160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.232151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.240726][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.247818][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.257535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.266593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.276681][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.288261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.301034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.312682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.322082][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.329180][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.365316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.377009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.396721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.411719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.422308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.434917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.444477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.453177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.456724][ T2342] Bluetooth: hci0: command 0x041b tx timeout [ 56.461678][ T4222] Bluetooth: hci3: command 0x041b tx timeout [ 56.473577][ T4222] Bluetooth: hci1: command 0x041b tx timeout [ 56.474077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.480526][ T4222] Bluetooth: hci4: command 0x041b tx timeout [ 56.494627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.503507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.517999][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.537010][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 56.543520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.553609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.562605][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.569939][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.578648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.589209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.598390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.609929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.619084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.629739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.638932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.646885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.664110][ T4189] device veth0_vlan entered promiscuous mode [ 56.674534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.700812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.715910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.725117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.751925][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.764552][ T4189] device veth1_vlan entered promiscuous mode [ 56.779110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.792540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.807720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.816110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.825201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.839423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.847871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.858162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.892819][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.911491][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.930520][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.944277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.952269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.960220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.968085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.975761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.984787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.001602][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.050977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.082072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.131233][ T4189] device veth0_macvtap entered promiscuous mode [ 57.139128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.155171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.164352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.173449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.183288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.199642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.208960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.223659][ T4191] device veth0_vlan entered promiscuous mode [ 57.233951][ T4189] device veth1_macvtap entered promiscuous mode [ 57.248039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.265159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.274807][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.289323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.300107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.309690][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.318200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.332103][ T4191] device veth1_vlan entered promiscuous mode [ 57.345197][ T4183] device veth0_vlan entered promiscuous mode [ 57.376143][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.393840][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.402967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.411703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.420463][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.428413][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.436830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.445443][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.461505][ T4183] device veth1_vlan entered promiscuous mode [ 57.480045][ T4191] device veth0_macvtap entered promiscuous mode [ 57.489208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.499483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.508401][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.517319][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.525887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.534045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.547689][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.556973][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.611878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.623097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.634215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.643664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.653189][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.665127][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.675066][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.684280][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.693490][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.714168][ T4191] device veth1_macvtap entered promiscuous mode [ 57.758167][ T4183] device veth0_macvtap entered promiscuous mode [ 57.766166][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.774542][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.784527][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.801156][ T4182] device veth0_vlan entered promiscuous mode [ 57.815155][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.829506][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.841916][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.852324][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.864434][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.875449][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.884389][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.893132][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.902896][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.911548][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.921204][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.930121][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.939183][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.948011][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.955700][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.969164][ T4183] device veth1_macvtap entered promiscuous mode [ 57.993115][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.003619][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.013522][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.028710][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.064909][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.083330][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.093705][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.104517][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.117622][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.153408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.163837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.183300][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.193882][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.203985][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.218019][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.231175][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.245544][ T4182] device veth1_vlan entered promiscuous mode [ 58.258520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.268762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.278064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.287248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.309986][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.322870][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.333510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.348292][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.357353][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.367595][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.377636][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.424831][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.439155][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.470215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.478437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.488786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.497996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.506035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.524808][ T4182] device veth0_macvtap entered promiscuous mode [ 58.536924][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 58.544297][ T4194] device veth0_vlan entered promiscuous mode [ 58.546570][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 58.561119][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.571720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.587646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.603263][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.611345][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 58.615933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.626792][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 58.635324][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 58.648669][ T4182] device veth1_macvtap entered promiscuous mode [ 58.663094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.675714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.717508][ T4194] device veth1_vlan entered promiscuous mode [ 58.739705][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.759249][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.772675][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.789368][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.801911][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.819248][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.835444][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.867040][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.888605][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.898163][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.908366][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.926706][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.945950][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.957670][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.974592][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.984805][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.003834][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.021707][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.037545][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.049077][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.062342][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.073716][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.084408][ T4288] loop0: detected capacity change from 0 to 32768 [ 59.088795][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.107012][ T1393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.115092][ T1393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.127741][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.138250][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.147596][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.161728][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.182891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.194500][ T4288] (syz.0.1,4288,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.211211][ T4288] (syz.0.1,4288,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.212431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.241530][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.262441][ T4194] device veth0_macvtap entered promiscuous mode [ 59.272028][ T4288] JBD2: Ignoring recovery information on journal [ 59.307802][ T4194] device veth1_macvtap entered promiscuous mode [ 59.441779][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.463764][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.478213][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.493368][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.495908][ T4288] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 59.515212][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.558882][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.576751][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.596169][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.616261][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.637373][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.677109][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.701729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.719152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.728404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.736932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.747671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.780560][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.811181][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.822325][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.844762][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.861176][ T4288] syz.0.1 (4288) used greatest stack depth: 19200 bytes left [ 59.861862][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.886032][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.907531][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.924353][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.937922][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.961725][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.973297][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.984012][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.993901][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.999515][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 60.014472][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.017242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.036370][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.052499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.116395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.201582][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.255564][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.300997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.341068][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.372189][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.417744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.488825][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.531217][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.553860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.617101][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 60.626483][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 60.697970][ T4222] Bluetooth: hci2: command 0x0419 tx timeout [ 60.706038][ T4222] Bluetooth: hci0: command 0x0419 tx timeout [ 60.729396][ T4222] Bluetooth: hci3: command 0x0419 tx timeout [ 60.855788][ T4313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.919972][ T4298] loop2: detected capacity change from 0 to 32768 [ 61.023165][ T4298] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.7 (4298) [ 61.135153][ T4298] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 61.177446][ T4298] BTRFS info (device loop2): setting nodatacow, compression disabled [ 61.260418][ T4298] BTRFS info (device loop2): force clearing of disk cache [ 61.295897][ T4298] BTRFS info (device loop2): enabling ssd optimizations [ 61.333497][ T4298] BTRFS info (device loop2): using spread ssd allocation scheme [ 61.344306][ T4323] device ipvlan2 entered promiscuous mode [ 61.370933][ T4298] BTRFS info (device loop2): turning off barriers [ 61.406344][ T4298] BTRFS info (device loop2): disabling free space tree [ 61.536382][ T4298] BTRFS info (device loop2): not using ssd optimizations [ 61.543509][ T4298] BTRFS info (device loop2): not using spread ssd allocation scheme [ 61.691224][ T4298] BTRFS info (device loop2): has skinny extents [ 62.290005][ T4298] BTRFS info (device loop2): clearing free space tree [ 62.345821][ T4298] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 62.429379][ T4298] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 62.552457][ T4315] loop0: detected capacity change from 0 to 40427 [ 62.588954][ T4328] capability: warning: `syz.4.12' uses 32-bit capabilities (legacy support in use) [ 62.635007][ T4315] ======================================================= [ 62.635007][ T4315] WARNING: The mand mount option has been deprecated and [ 62.635007][ T4315] and is ignored by this kernel. Remove the mand [ 62.635007][ T4315] option from the mount to silence this warning. [ 62.635007][ T4315] ======================================================= [ 62.670382][ C1] vkms_vblank_simulate: vblank timer overrun [ 62.869289][ T4315] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 62.911598][ T4315] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.943779][ T4355] smc: net device bond0 applied user defined pnetid SYZ0 [ 62.982883][ T4315] F2FS-fs (loop0): invalid crc value [ 63.103544][ T4315] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.476787][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.492796][ T4315] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 63.511322][ T4315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.215500][ T4315] overlayfs: unrecognized mount option "verity=on" or missing value [ 64.398365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 64.411932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #288!!! [ 64.459176][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.499759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.560981][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.591988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.605146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.635986][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.645660][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.656027][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 66.240650][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.886350][ T4375] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.660231][ T4411] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 68.079195][ T4420] 9pnet_virtio: no channels available for device syz [ 68.091846][ T4420] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.306595][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.546510][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 68.677262][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 68.767739][ T4410] loop3: detected capacity change from 0 to 32768 [ 68.799430][ T4410] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.25 (4410) [ 68.829933][ T4410] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 68.846501][ T1108] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.891825][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.925404][ T26] audit: type=1326 audit(1768101623.557:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703abdd749 code=0x7ffc0000 [ 68.952659][ T4410] BTRFS info (device loop3): setting nodatacow, compression disabled [ 68.976637][ T1108] usb 2-1: Product: syz [ 68.980873][ T1108] usb 2-1: Manufacturer: syz [ 68.994731][ T4423] Zero length message leads to an empty skb [ 69.001269][ T4410] BTRFS info (device loop3): force clearing of disk cache [ 69.011204][ T1108] usb 2-1: SerialNumber: syz [ 69.016051][ T4410] BTRFS info (device loop3): enabling ssd optimizations [ 69.036846][ T26] audit: type=1326 audit(1768101623.587:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f703abdbf90 code=0x7ffc0000 [ 69.057196][ T1108] usb 2-1: config 0 descriptor?? [ 69.066785][ T4410] BTRFS info (device loop3): using spread ssd allocation scheme [ 69.074771][ T4410] BTRFS info (device loop3): turning off barriers [ 69.132997][ T4410] BTRFS info (device loop3): disabling free space tree [ 69.160966][ T1108] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 69.172679][ T26] audit: type=1326 audit(1768101623.587:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f703abdef77 code=0x7ffc0000 [ 69.176356][ T4410] BTRFS info (device loop3): not using ssd optimizations [ 69.222996][ T1108] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 69.292838][ T26] audit: type=1326 audit(1768101623.587:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f703abdd749 code=0x7ffc0000 [ 69.324931][ T4410] BTRFS info (device loop3): not using spread ssd allocation scheme [ 69.457515][ T4410] BTRFS info (device loop3): has skinny extents [ 69.504788][ T26] audit: type=1326 audit(1768101623.587:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f703abdef77 code=0x7ffc0000 [ 69.846406][ T1108] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 70.604265][ T4410] BTRFS error (device loop3): open_ctree failed: -12 [ 70.649113][ T1108] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.689667][ T1108] em28xx 2-1:0.0: board has no eeprom [ 70.701396][ T26] audit: type=1326 audit(1768101623.587:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f703abdc3aa code=0x7ffc0000 [ 70.723956][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.816301][ T1108] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 70.824295][ T1108] em28xx 2-1:0.0: dvb set to bulk mode. [ 70.895548][ T1108] usb 2-1: USB disconnect, device number 2 [ 70.965488][ T26] audit: type=1326 audit(1768101623.587:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703abdd749 code=0x7ffc0000 [ 70.965641][ T1108] em28xx 2-1:0.0: Disconnecting em28xx [ 70.987843][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.051738][ T26] audit: type=1326 audit(1768101623.587:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f703abdd749 code=0x7ffc0000 [ 71.119908][ T2342] em28xx 2-1:0.0: Binding DVB extension [ 71.129400][ T4174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4174) [ 71.145953][ T26] audit: type=1326 audit(1768101623.587:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703abdd749 code=0x7ffc0000 [ 71.168358][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.426572][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.433811][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.176354][ T26] audit: type=1326 audit(1768101623.587:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4422 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f703abdd749 code=0x7ffc0000 [ 72.298199][ T2342] em28xx 2-1:0.0: Registering input extension [ 72.304995][ T1108] em28xx 2-1:0.0: Closing input extension [ 72.396288][ T4470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.36'. [ 72.425488][ T1108] em28xx 2-1:0.0: Freeing device [ 72.757539][ T4375] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.187197][ T4375] usb 3-1: config 0 has no interfaces? [ 73.276498][ T4375] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 73.306394][ T4375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.339193][ T4375] usb 3-1: SerialNumber: syz [ 73.392665][ T4375] usb 3-1: config 0 descriptor?? [ 73.412621][ T4454] loop1: detected capacity change from 0 to 40427 [ 74.116533][ T4497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'. [ 74.495191][ T4375] usb 3-1: USB disconnect, device number 2 [ 75.115123][ T4524] overlayfs: missing 'lowerdir' [ 77.904723][ T4552] loop5: detected capacity change from 0 to 7 [ 77.916980][ T4552] Dev loop5: unable to read RDB block 7 [ 77.922798][ T4552] loop5: AHDI p1 p2 [ 77.926837][ T4552] loop5: partition table partially beyond EOD, truncated [ 77.935458][ T4552] loop5: p1 start 1702000233 is beyond EOD, truncated [ 80.009693][ T4566] sched: RT throttling activated [ 81.013581][ T4574] 9pnet_virtio: no channels available for device syz [ 81.395164][ T4582] netlink: 'syz.1.66': attribute type 2 has an invalid length. [ 81.660475][ T1111] cfg80211: failed to load regulatory.db [ 82.856873][ T4587] delete_channel: no stack [ 84.191437][ T4606] ODEBUG: Out of memory. ODEBUG disabled [ 84.595456][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 85.456287][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.782296][ T147] Bluetooth: Unexpected continuation frame (len 4) [ 86.007213][ T1108] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 86.027480][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.053381][ T1108] usb 3-1: Product: syz [ 86.067168][ T1108] usb 3-1: Manufacturer: syz [ 86.092036][ T1108] usb 3-1: SerialNumber: syz [ 86.126158][ T1108] usb 3-1: config 0 descriptor?? [ 86.236539][ T4680] tmpfs: Unknown parameter 'quota' [ 86.407081][ T1108] usb 3-1: USB disconnect, device number 3 [ 86.436302][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.618368][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 86.618384][ T26] audit: type=1326 audit(1768101641.257:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 86.696317][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 86.746289][ T26] audit: type=1326 audit(1768101641.287:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 86.826384][ T7] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 86.834808][ T7] usb 4-1: config 0 has no interface number 0 [ 86.841360][ T26] audit: type=1326 audit(1768101641.287:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 86.886274][ T7] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 86.906326][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.916253][ T7] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 86.926127][ T26] audit: type=1326 audit(1768101641.287:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 86.948581][ T7] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.989112][ T7] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.021254][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.056616][ T26] audit: type=1326 audit(1768101641.287:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 87.058950][ T7] usb 4-1: config 0 descriptor?? [ 87.117680][ T4691] syz.1.86 uses obsolete (PF_INET,SOCK_PACKET) [ 87.135852][ T26] audit: type=1326 audit(1768101641.287:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 87.150789][ T4691] device syzkaller1 entered promiscuous mode [ 87.207892][ T7] ldusb 4-1:0.55: Interrupt in endpoint not found [ 87.213498][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 87.361456][ T1111] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 87.380465][ T1111] usb 1-1: config 0 has no interface number 0 [ 87.397111][ T1111] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 87.448700][ T26] audit: type=1326 audit(1768101642.087:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 87.482384][ T1111] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 87.482620][ T7] usb 4-1: USB disconnect, device number 3 [ 87.504128][ T1111] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.536296][ T1111] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.545758][ T26] audit: type=1326 audit(1768101642.147:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 87.568429][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.585138][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.609769][ T1111] usb 1-1: config 0 descriptor?? [ 87.677906][ T1111] ldusb 1-1:0.55: Interrupt in endpoint not found [ 87.893494][ T1108] usb 1-1: USB disconnect, device number 2 [ 89.696412][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.976688][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 90.096432][ T1108] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 90.119905][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 90.140858][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.153683][ T1108] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.185994][ T1108] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.313347][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.723110][ T4729] loop2: detected capacity change from 0 to 7 [ 90.745886][ T4476] Dev loop2: unable to read RDB block 7 [ 90.758098][ T1108] usb 5-1: GET_CAPABILITIES returned 0 [ 90.764139][ T1108] usbtmc 5-1:16.0: can't read capabilities [ 90.773971][ T4476] loop2: unable to read partition table [ 90.796392][ T4476] loop2: partition table beyond EOD, truncated [ 90.836151][ T4729] Dev loop2: unable to read RDB block 7 [ 90.845839][ T4729] loop2: unable to read partition table [ 90.872293][ T4729] loop2: partition table beyond EOD, truncated [ 90.884002][ T4729] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.142572][ T3560] Dev loop2: unable to read RDB block 7 [ 91.156000][ T2342] usb 5-1: USB disconnect, device number 2 [ 91.164670][ T3560] loop2: unable to read partition table [ 91.193190][ T3560] loop2: partition table beyond EOD, truncated [ 91.206374][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.472049][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 91.546351][ T4363] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.612259][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.643768][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.674292][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.732017][ T1108] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 91.763979][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.801625][ T1108] usb 1-1: config 0 descriptor?? [ 91.840479][ T4363] usb 4-1: Using ep0 maxpacket: 16 [ 91.967591][ T4363] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 92.029886][ T4363] usb 4-1: config 0 has no interface number 0 [ 92.036071][ T4363] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.047375][ T4363] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 92.328142][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 92.376374][ T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 92.395544][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 92.472850][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 92.507203][ T4728] lo speed is unknown, defaulting to 1000 [ 92.559186][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 92.583929][ T4728] lo speed is unknown, defaulting to 1000 [ 92.635273][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 92.660706][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 92.708593][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 92.766364][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.811810][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 92.837768][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.938163][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.017053][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.055046][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.140458][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.151060][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.160211][ T4728] lo speed is unknown, defaulting to 1000 [ 93.227180][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.351260][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.445380][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.468078][ T4757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.506587][ T4363] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 93.508650][ T4728] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.515688][ T4363] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 93.515714][ T4363] usb 4-1: Product: syz [ 93.515728][ T4363] usb 4-1: SerialNumber: syz [ 93.556526][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.586569][ T7] usb 3-1: usb_control_msg returned -32 [ 93.592397][ T7] usbtmc 3-1:16.0: can't read capabilities [ 93.607372][ T4757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.625469][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.706744][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.798313][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 93.815484][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.884117][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 93.977582][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.070451][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.144884][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.269864][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.351797][ T4728] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.373239][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.439625][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.517073][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.628526][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.729511][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.826635][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 94.935697][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 95.032050][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 95.162364][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 95.202288][ T4363] usb 4-1: config 0 descriptor?? [ 95.226403][ T4363] usb 4-1: can't set config #0, error -71 [ 95.243161][ T4363] usb 4-1: USB disconnect, device number 4 [ 95.364679][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 95.372959][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 95.389970][ T1108] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 95.407046][ T4773] capability: warning: `syz.3.115' uses deprecated v2 capabilities in a way that may be insecure [ 95.410074][ T1108] hid-generic 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 95.426127][ T4773] input: syz1 as /devices/virtual/input/input7 [ 95.451087][ T1108] usb 3-1: USB disconnect, device number 4 [ 95.468524][ T4758] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.478407][ T4758] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.534623][ T4728] lo speed is unknown, defaulting to 1000 [ 95.553144][ T4728] lo speed is unknown, defaulting to 1000 [ 95.594580][ T4728] lo speed is unknown, defaulting to 1000 [ 95.622058][ T4728] lo speed is unknown, defaulting to 1000 [ 95.635955][ T4728] lo speed is unknown, defaulting to 1000 [ 95.773806][ T1108] usb 1-1: USB disconnect, device number 3 [ 96.009528][ T4785] fido_id[4785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 96.067268][ T4184] Bluetooth: Wrong link type (-22) [ 96.486962][ T1108] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.546317][ T1111] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 96.623049][ T4814] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 96.736317][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 96.857305][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.908111][ T1108] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 96.966488][ T1111] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 96.971722][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.995364][ T1108] usb 4-1: config 0 descriptor?? [ 97.004689][ T1111] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.069817][ T1111] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 97.206463][ T1111] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.230049][ T1111] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.277320][ T1111] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 97.288226][ T4184] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 97.406408][ T1111] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.415934][ T1111] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.447148][ T1111] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 97.478045][ T1108] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 97.488636][ T1108] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 97.537137][ T1108] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 97.577959][ T1108] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 97.646562][ T1108] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 97.666429][ T4363] Bluetooth: hci4: command 0x0406 tx timeout [ 97.733334][ T1108] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 97.786464][ T1111] usb 2-1: string descriptor 0 read error: -22 [ 97.792842][ T1111] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.821788][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.897919][ T1111] adutux 2-1:168.0: interrupt endpoints not found [ 97.905037][ T1108] usb 4-1: USB disconnect, device number 5 [ 98.106603][ T1111] usb 2-1: USB disconnect, device number 3                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    [ 125.943777][ T5262] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.951746][ T5262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.959452][ T5262] IPv6: NLM_F_CREATE should be set when creating new route [ 126.686036][ T5264] 9pnet_virtio: no channels available for device syz [ 127.076677][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 131.266320][ T4458] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.459704][ T5325] 9pnet_virtio: no channels available for device syz [ 131.516363][ T4458] usb 3-1: Using ep0 maxpacket: 16 [ 131.646453][ T4458] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.661249][ T4458] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.666291][ T4363] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.674566][ T4458] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.713749][ T4458] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 131.723399][ T4458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.739556][ T4458] usb 3-1: config 0 descriptor?? [ 131.846392][ T4373] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.116430][ T4373] usb 5-1: Using ep0 maxpacket: 16 [ 132.121732][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.142689][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.157014][ T4458] usbhid 3-1:0.0: can't add hid device: -71 [ 132.162989][ T4458] usbhid: probe of 3-1:0.0 failed with error -71 [ 132.167390][ T4363] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.194568][ T4363] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.206444][ T4458] usb 3-1: USB disconnect, device number 8 [ 132.244712][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.281250][ T4363] usb 2-1: config 0 descriptor?? [ 132.293083][ T4373] usb 5-1: config 0 has no interfaces? [ 132.299842][ T4373] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 132.319559][ T4373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.371198][ T4373] usb 5-1: config 0 descriptor?? [ 132.623599][ T4458] usb 5-1: USB disconnect, device number 3 [ 132.788905][ T4363] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 132.859761][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.866307][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.885651][ T4363] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.067960][ T4286] usb 2-1: USB disconnect, device number 5 [ 133.862919][ T5371] lo speed is unknown, defaulting to 1000 [ 135.530024][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888062137c00: rx timeout, send abort [ 135.656635][ T5405] IPVS: Error connecting to the multicast addr [ 135.670011][ T5404] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 135.690851][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 135.722227][ T5404] binder: Unknown parameter 'sta‘§É€ts' [ 136.039807][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888062137c00: abort rx timeout. Force session deactivation [ 139.118427][ T5428] overlayfs: failed to resolve './file0': -2 [ 139.936227][ T4458] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 140.430988][ T4458] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.475747][ T4458] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.557303][ T4458] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 140.635667][ T4458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.887075][ T4458] usb 2-1: config 0 descriptor?? [ 141.094169][ T4458] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 141.185053][ T4458] dvb-usb: bulk message failed: -22 (3/0) [ 141.338817][ T4458] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 141.446599][ T4458] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 141.476454][ T4458] usb 2-1: media controller created [ 141.529362][ T4458] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.630569][ T4458] dvb-usb: bulk message failed: -22 (6/0) [ 141.677081][ T4458] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 141.807990][ T4458] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 141.883544][ T4458] dvb-usb: schedule remote query interval to 150 msecs. [ 141.913027][ T4458] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 142.012158][ T4458] usb 2-1: USB disconnect, device number 6 [ 142.138845][ T4458] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 142.490933][ T5498] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 143.044486][ T5489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.958561][ T5510] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 144.993359][ T5519] netlink: 2980 bytes leftover after parsing attributes in process `syz.3.366'. [ 145.969186][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 145.969199][ T26] audit: type=1326 audit(1768101700.607:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488eef749 code=0x7ffc0000 [ 149.113613][ T5552] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 149.799599][ T5561] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 152.192623][ T5594] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.216571][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.223929][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.282178][ T5599] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 152.464088][ T5599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.563285][ T5602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.646606][ T5602] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.729933][ T5602] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 155.478909][ T4457] libceph: connect (1)[c::]:6789 error -101 [ 156.186532][ T4457] libceph: mon0 (1)[c::]:6789 connect error [ 156.233633][ T4457] libceph: connect (1)[c::]:6789 error -101 [ 156.243375][ T4457] libceph: mon0 (1)[c::]:6789 connect error [ 156.251671][ T5636] ceph: No mds server is up or the cluster is laggy [ 156.699009][ T5650] netlink: 'syz.0.407': attribute type 4 has an invalid length. [ 156.854250][ T5652] netlink: 'syz.0.407': attribute type 4 has an invalid length. [ 156.881673][ T4457] lo speed is unknown, defaulting to 1000 [ 156.900192][ T4373] lo speed is unknown, defaulting to 1000 [ 157.321324][ T5664] Invalid ELF header type: 3 != 1 [ 157.498546][ T5666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.644465][ T5669] overlayfs: failed to clone upperpath [ 157.694580][ T5669] overlayfs: failed to clone upperpath [ 157.734179][ T5669] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 157.894040][ T5671] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 158.134388][ T4363] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 158.163247][ T4363] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 158.176245][ T4363] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 158.201963][ T4363] hid-generic 0003:0003:0000.0006: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 158.445897][ T5676] fido_id[5676]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.723868][ T5695] device syzkaller0 entered promiscuous mode [ 159.736108][ T5695] 0: reclassify loop, rule prio 0, protocol 700 [ 160.275071][ T4646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.514952][ T4646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.620176][ T4646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.743687][ T4646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.979840][ T5719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 161.533397][ T5723] lo speed is unknown, defaulting to 1000 [ 161.705183][ T5729] process 'syz.4.430' launched './file2' with NULL argv: empty string added [ 162.146610][ T4646] device hsr_slave_0 left promiscuous mode [ 162.316601][ T4646] device hsr_slave_1 left promiscuous mode [ 162.436314][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.562480][ T4646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.590879][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.610792][ T4646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.622805][ T4646] device bridge_slave_1 left promiscuous mode [ 162.636255][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.673186][ T4646] device bridge_slave_0 left promiscuous mode [ 162.679686][ T4646] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.704185][ T4646] device veth1_macvtap left promiscuous mode [ 162.716565][ T4646] device veth0_macvtap left promiscuous mode [ 162.732059][ T4646] device veth1_vlan left promiscuous mode [ 162.752983][ T4646] device veth0_vlan left promiscuous mode [ 162.966510][ T5662] Set syz1 is full, maxelem 65536 reached [ 163.133333][ T4646] bond1 (unregistering): Released all slaves [ 163.416293][ T4458] Bluetooth: hci3: command 0x0409 tx timeout [ 163.549477][ T5766] 9pnet_virtio: no channels available for device syz [ 163.692051][ T4646] team0 (unregistering): Port device team_slave_1 removed [ 163.734950][ T4646] team0 (unregistering): Port device team_slave_0 removed [ 163.809413][ T4646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.881639][ T4646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.041408][ T4646] bond0 (unregistering): Released all slaves [ 164.094273][ T5723] chnl_net:caif_netlink_parms(): no params data found [ 164.905957][ T5782] siw: device registration error -23 [ 165.247560][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.266247][ T4363] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 165.308717][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.338031][ T5723] device bridge_slave_0 entered promiscuous mode [ 165.357679][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.395199][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.449893][ T5723] device bridge_slave_1 entered promiscuous mode [ 165.496994][ T4457] Bluetooth: hci3: command 0x041b tx timeout [ 165.656506][ T4363] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.723656][ T4363] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 165.844864][ T4363] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.037898][ T4363] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 166.901977][ T4363] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 166.989013][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.026571][ T4363] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.096342][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.098541][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.150716][ T4363] usb 1-1: Product: syz [ 167.181054][ T4363] usb 1-1: Manufacturer: syz [ 167.257413][ T4363] cdc_wdm 1-1:1.0: skipping garbage [ 167.268372][ T4363] cdc_wdm 1-1:1.0: skipping garbage [ 167.318280][ T5723] team0: Port device team_slave_0 added [ 167.333164][ T4363] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.352917][ T4363] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.355183][ T5723] team0: Port device team_slave_1 added [ 167.518480][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.576241][ T4457] Bluetooth: hci3: command 0x040f tx timeout [ 167.576280][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.714490][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.819489][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.855678][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.124738][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.258753][ T5723] device hsr_slave_0 entered promiscuous mode [ 168.296266][ T5723] device hsr_slave_1 entered promiscuous mode [ 168.316274][ T5723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.359561][ T5723] Cannot create hsr debugfs directory [ 168.518415][ T4363] usb 1-1: USB disconnect, device number 4 [ 169.656243][ T4457] Bluetooth: hci3: command 0x0419 tx timeout [ 170.561459][ T5723] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.590369][ T5723] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.644795][ T5723] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.685414][ T5723] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.710737][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.806541][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.814591][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.858412][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.940149][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.965031][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.036060][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.043229][ T4648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.091030][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.159574][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.191109][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.226867][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.234013][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.278898][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.299468][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.350647][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.403027][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.461938][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.493151][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.533201][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.553997][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.594214][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.613088][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.641951][ T1393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.663635][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.915726][ T5904] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 173.142731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.167217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.220383][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.659053][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.752373][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.812422][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.845755][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.909265][ T5723] device veth0_vlan entered promiscuous mode [ 174.999354][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.015403][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.162090][ T5723] device veth1_vlan entered promiscuous mode [ 175.384146][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.400080][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.465121][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.544999][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.575205][ T5723] device veth0_macvtap entered promiscuous mode [ 175.634171][ T5723] device veth1_macvtap entered promiscuous mode [ 175.686251][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.730842][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.770671][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.818128][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.856119][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.896553][ T4457] Bluetooth: hci2: command 0x0406 tx timeout [ 175.916508][ T4457] Bluetooth: hci1: command 0x0406 tx timeout [ 175.924982][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.939011][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.950506][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.968710][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.982452][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.993407][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.030567][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.055595][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.073162][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.084189][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.117251][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.134020][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.156088][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.195890][ T5723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.224321][ T5723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.250842][ T5723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.292550][ T5723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.584649][ T4653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.593711][ T4653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.630772][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.711898][ T4653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.728626][ T4653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.779821][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.120199][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 177.199922][ T5973] netlink: 72 bytes leftover after parsing attributes in process `syz.4.478'. [ 177.989694][ T5977] qnx6: unable to read the first superblock [ 180.444230][ T6008] mmap: syz.5.489 (6008) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 180.681439][ T6045] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 181.785366][ T6068] binder: 6066:6068 ioctl 40046205 0 returned -22 [ 183.132310][ T6079] lo speed is unknown, defaulting to 1000 [ 183.626580][ T6096] comedi comedi3: dac02: I/O port conflict (0x8,8) [ 184.141659][ T4638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.706879][ T4638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.016313][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 185.197172][ T4638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.347036][ T4638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.529833][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 185.784894][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 185.993122][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.002564][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.028547][ T6079] device bridge_slave_0 entered promiscuous mode [ 186.119327][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.153059][ T6160] netlink: 56 bytes leftover after parsing attributes in process `syz.0.531'. [ 186.173197][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.197387][ T6079] device bridge_slave_1 entered promiscuous mode [ 186.334260][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.401035][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.587597][ T6079] team0: Port device team_slave_0 added [ 186.634235][ T6079] team0: Port device team_slave_1 added [ 186.802631][ T13] libceph: connect (1)[c::]:6789 error -101 [ 186.810800][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 186.858250][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.885809][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.912310][ T6158] ceph: No mds server is up or the cluster is laggy [ 187.093206][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.105518][ T4458] Bluetooth: hci5: command 0x041b tx timeout [ 187.177904][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.184904][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.310076][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.589510][ T6079] device hsr_slave_0 entered promiscuous mode [ 187.605617][ T6079] device hsr_slave_1 entered promiscuous mode [ 187.670427][ T6079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.719112][ T6079] Cannot create hsr debugfs directory [ 188.395199][ T6079] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.519978][ T6079] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.553103][ T4638] device hsr_slave_0 left promiscuous mode [ 188.573689][ T4638] device hsr_slave_1 left promiscuous mode [ 188.608940][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.634042][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.669605][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.703587][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.738317][ T4638] device bridge_slave_1 left promiscuous mode [ 188.765673][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.804920][ T4638] device bridge_slave_0 left promiscuous mode [ 188.834822][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.889472][ T4638] device veth1_macvtap left promiscuous mode [ 188.918201][ T4638] device veth0_macvtap left promiscuous mode [ 188.936560][ T4638] device veth1_vlan left promiscuous mode [ 188.948281][ T4638] device veth0_vlan left promiscuous mode [ 189.180302][ T4458] Bluetooth: hci5: command 0x040f tx timeout [ 189.187190][ T4187] ------------[ cut here ]------------ [ 189.194190][ T4187] WARNING: CPU: 0 PID: 4187 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 189.204849][ T4187] Modules linked in: [ 189.208856][ T4187] CPU: 0 PID: 4187 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 189.216701][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 189.226950][ T4187] Workqueue: hci4 hci_conn_timeout [ 189.232231][ T4187] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.238498][ T4187] Code: 69 8d e8 c4 c1 f7 f8 48 8b 35 e5 c2 a4 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 06 94 88 f8 e8 01 59 b3 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.258293][ T4187] RSP: 0018:ffffc90002fafc08 EFLAGS: 00010293 [ 189.264389][ T4187] RAX: ffffffff88c4730f RBX: ffff888079e08138 RCX: ffff88801a5f9dc0 [ 189.272691][ T4187] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.281802][ T4187] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f3c1003 [ 189.289993][ T4187] R10: ffffed100f3c1003 R11: 1ffff1100f3c1002 R12: dffffc0000000000 [ 189.298063][ T4187] R13: dffffc0000000000 R14: ffff888079e08000 R15: ffff888079e08010 [ 189.306217][ T4187] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 189.315194][ T4187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.321983][ T4187] CR2: 0000200000b94030 CR3: 0000000064527000 CR4: 00000000003506f0 [ 189.330019][ T4187] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.338367][ T4187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.346418][ T4187] Call Trace: [ 189.349737][ T4187] [ 189.352728][ T4187] process_one_work+0x863/0x1000 [ 189.357764][ T4187] ? worker_detach_from_pool+0x240/0x240 [ 189.363801][ T4187] ? lockdep_hardirqs_off+0x70/0x100 [ 189.369236][ T4187] ? _raw_spin_lock_irq+0xab/0xe0 [ 189.374409][ T4187] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 189.379953][ T4187] ? wq_worker_running+0x97/0x170 [ 189.385276][ T4187] worker_thread+0xaa8/0x12a0 [ 189.390183][ T4187] kthread+0x436/0x520 [ 189.394407][ T4187] ? rcu_lock_release+0x20/0x20 [ 189.399558][ T4187] ? kthread_blkcg+0xd0/0xd0 [ 189.404490][ T4187] ret_from_fork+0x1f/0x30 [ 189.409012][ T4187] [ 189.412046][ T4187] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.419440][ T4187] CPU: 0 PID: 4187 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 189.426986][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.437056][ T4187] Workqueue: hci4 hci_conn_timeout [ 189.442169][ T4187] Call Trace: [ 189.445445][ T4187] [ 189.448370][ T4187] dump_stack_lvl+0x168/0x230 [ 189.453041][ T4187] ? show_regs_print_info+0x20/0x20 [ 189.458378][ T4187] ? load_image+0x3b0/0x3b0 [ 189.462922][ T4187] panic+0x2c9/0x7f0 [ 189.466842][ T4187] ? bpf_jit_dump+0xd0/0xd0 [ 189.471467][ T4187] ? ret_from_fork+0x1f/0x30 [ 189.476078][ T4187] ? hci_conn_timeout+0x24f/0x450 [ 189.481099][ T4187] __warn+0x248/0x2b0 [ 189.485080][ T4187] ? hci_conn_timeout+0x24f/0x450 [ 189.490127][ T4187] report_bug+0x1b7/0x2e0 [ 189.494470][ T4187] handle_bug+0x3a/0x70 [ 189.498724][ T4187] exc_invalid_op+0x16/0x40 [ 189.503251][ T4187] asm_exc_invalid_op+0x16/0x20 [ 189.508372][ T4187] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.514025][ T4187] Code: 69 8d e8 c4 c1 f7 f8 48 8b 35 e5 c2 a4 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 06 94 88 f8 e8 01 59 b3 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.533852][ T4187] RSP: 0018:ffffc90002fafc08 EFLAGS: 00010293 [ 189.540111][ T4187] RAX: ffffffff88c4730f RBX: ffff888079e08138 RCX: ffff88801a5f9dc0 [ 189.548384][ T4187] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.556482][ T4187] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f3c1003 [ 189.564596][ T4187] R10: ffffed100f3c1003 R11: 1ffff1100f3c1002 R12: dffffc0000000000 [ 189.572596][ T4187] R13: dffffc0000000000 R14: ffff888079e08000 R15: ffff888079e08010 [ 189.580625][ T4187] ? hci_conn_timeout+0x24f/0x450 [ 189.585900][ T4187] ? hci_conn_timeout+0x24f/0x450 [ 189.590967][ T4187] process_one_work+0x863/0x1000 [ 189.595960][ T4187] ? worker_detach_from_pool+0x240/0x240 [ 189.601616][ T4187] ? lockdep_hardirqs_off+0x70/0x100 [ 189.607081][ T4187] ? _raw_spin_lock_irq+0xab/0xe0 [ 189.612147][ T4187] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 189.617554][ T4187] ? wq_worker_running+0x97/0x170 [ 189.622618][ T4187] worker_thread+0xaa8/0x12a0 [ 189.627349][ T4187] kthread+0x436/0x520 [ 189.631443][ T4187] ? rcu_lock_release+0x20/0x20 [ 189.636316][ T4187] ? kthread_blkcg+0xd0/0xd0 [ 189.640941][ T4187] ret_from_fork+0x1f/0x30 [ 189.645753][ T4187] [ 189.648962][ T4187] Kernel Offset: disabled [ 189.653567][ T4187] Rebooting in 86400 seconds..