last executing test programs: 18.449806835s ago: executing program 3 (id=37): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 12.92638629s ago: executing program 1 (id=47): openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x40010) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0x2) close(r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0x8ed3, 0x1c, 0x1, 0x961, 0x19, "0300000001000000000000000000be00"}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)=0x9eb9, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3) 11.012354924s ago: executing program 2 (id=48): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x8, 0x80000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10.843044737s ago: executing program 1 (id=49): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x3136564e, 0x5, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2}}) 9.56561061s ago: executing program 2 (id=51): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaaaa0000"], 0xac}}, 0x0) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 9.43961184s ago: executing program 3 (id=53): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000271) read(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x40000001, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x2, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 9.229192857s ago: executing program 2 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x6}]}}}]}, 0x40}}, 0x0) 8.643803444s ago: executing program 2 (id=57): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007580), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) kexec_load(0x9, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x40000000, 0x41000000}], 0x0) 6.278284365s ago: executing program 2 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x10000000}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x4) splice(r3, 0x0, r1, 0x0, 0x406f413, 0x0) rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) 5.993928358s ago: executing program 1 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1a1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x204018, &(0x7f0000000180)) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffffff, 0x0, 0x200102, 0x13) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x20040054) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x2, 0x0, 0x100, 0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x80000000, 0x104, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000400)={0x4, 0x3ff, 0xfffffffc, 0x0, 0x1}) 5.956363571s ago: executing program 0 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b"], 0x6f4}}, 0x0) 3.341584881s ago: executing program 1 (id=63): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="190000000400000004000000020002"], 0x48) 3.083869592s ago: executing program 0 (id=64): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.083702332s ago: executing program 1 (id=65): syz_open_dev$ndb(0x0, 0x0, 0x800000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_submit(0x0, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 3.068558943s ago: executing program 4 (id=66): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaaaa0000"], 0xac}}, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) 2.888685877s ago: executing program 1 (id=67): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000340)={0x40, 0x30, 0x5, "f622117ccb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.842932491s ago: executing program 4 (id=68): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x237, 0x0, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000500)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) io_uring_enter(r2, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08902200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x2) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x2, 0x0, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x96, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x5, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x80000001, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x2, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x20000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x1, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000980)=0xfff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x1}, 0x14}}, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) 2.775706767s ago: executing program 0 (id=69): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x47, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r2, 0x1}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9738}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) 2.542115455s ago: executing program 0 (id=70): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x3136564e, 0x5, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2}}) 2.449502433s ago: executing program 4 (id=71): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0xfffffffffffffde0) 1.859455731s ago: executing program 3 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000001040300000000000000000005000003050001000200000008000340000000100a00020000000006020000000500010001000000060006400002000008000540000001000600064000020000080004"], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) 1.703485453s ago: executing program 2 (id=73): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) getdents64(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 1.62400697s ago: executing program 4 (id=74): r0 = socket(0x10, 0x803, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000001c0)={0x1, 0x2, 0x7fffffffffffffff, 0x9}) 1.551491515s ago: executing program 3 (id=75): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) 499.90652ms ago: executing program 4 (id=76): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, 0x0) 440.525615ms ago: executing program 3 (id=77): syz_open_dev$ndb(0x0, 0x0, 0x800000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 420.536826ms ago: executing program 0 (id=78): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaaaa0000"], 0xac}}, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) 216.668923ms ago: executing program 3 (id=79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0xffffffff, 0x8, 0xdeb9, 0x8, 0x5, 0x6, 0x4, 0x5, 0x6736, 0x2, 0xc, 0x7, 0xfffffffffffffff9, 0xa7, 0xa9], 0xdddd0000, 0x82200}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 87.733353ms ago: executing program 4 (id=80): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x47, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r2, 0x1}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9738}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) 0s ago: executing program 0 (id=81): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x237, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000500)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) io_uring_enter(r2, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08902200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x2) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x2, 0x0, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x96, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x5, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x80000001, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x2, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x20000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x1, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000000980)=0xfff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r10, 0x1}, 0x14}}, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 73.263454][ T4255] cgroup: Unknown subsys name 'net' [ 73.424586][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.914554][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.500262][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.519201][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.528121][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.536934][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.545554][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.554298][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.554325][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.555278][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.562415][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.571175][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.576581][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.584156][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.590582][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.597707][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.604131][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.611461][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.619946][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.628614][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.639590][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.646527][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.653581][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.660846][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.667062][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.681222][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.688627][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.690295][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.703592][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.712058][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.743122][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.763923][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.127104][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 77.266191][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 77.332064][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.339574][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.348004][ T4265] device bridge_slave_0 entered promiscuous mode [ 77.384391][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.394054][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.402726][ T4265] device bridge_slave_1 entered promiscuous mode [ 77.413412][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 77.470360][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 77.507926][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.534252][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.541706][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.549852][ T4275] device bridge_slave_0 entered promiscuous mode [ 77.558957][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.568145][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.575619][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.583678][ T4275] device bridge_slave_1 entered promiscuous mode [ 77.638407][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 77.650055][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.683602][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.709831][ T4265] team0: Port device team_slave_0 added [ 77.741817][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.749158][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.757020][ T4271] device bridge_slave_0 entered promiscuous mode [ 77.765689][ T4265] team0: Port device team_slave_1 added [ 77.787839][ T4275] team0: Port device team_slave_0 added [ 77.794190][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.801442][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.810073][ T4271] device bridge_slave_1 entered promiscuous mode [ 77.840143][ T4275] team0: Port device team_slave_1 added [ 77.892751][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.899941][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.925917][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.937739][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.945170][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.953625][ T4267] device bridge_slave_0 entered promiscuous mode [ 77.974820][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.984651][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.991803][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.017900][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.029246][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.036352][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.044677][ T4267] device bridge_slave_1 entered promiscuous mode [ 78.060743][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.067861][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.094228][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.109143][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.145868][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.153144][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.180635][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.219092][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.226243][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.235379][ T4266] device bridge_slave_0 entered promiscuous mode [ 78.247061][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.254584][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.263321][ T4266] device bridge_slave_1 entered promiscuous mode [ 78.290159][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.301789][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.332624][ T4271] team0: Port device team_slave_0 added [ 78.343044][ T4265] device hsr_slave_0 entered promiscuous mode [ 78.350156][ T4265] device hsr_slave_1 entered promiscuous mode [ 78.374794][ T4271] team0: Port device team_slave_1 added [ 78.393286][ T4267] team0: Port device team_slave_0 added [ 78.401475][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.434576][ T4267] team0: Port device team_slave_1 added [ 78.442571][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.470990][ T4275] device hsr_slave_0 entered promiscuous mode [ 78.478096][ T4275] device hsr_slave_1 entered promiscuous mode [ 78.485466][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.493552][ T4275] Cannot create hsr debugfs directory [ 78.523397][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.530692][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.557335][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.596151][ T4266] team0: Port device team_slave_0 added [ 78.604380][ T4266] team0: Port device team_slave_1 added [ 78.611403][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.618716][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.644902][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.670295][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.677387][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.703344][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.744036][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.751197][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.777377][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.789288][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 78.789291][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 78.789530][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 78.795550][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 78.801800][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 78.875167][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.882314][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.909117][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.926965][ T4271] device hsr_slave_0 entered promiscuous mode [ 78.934331][ T4271] device hsr_slave_1 entered promiscuous mode [ 78.941164][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.949378][ T4271] Cannot create hsr debugfs directory [ 78.972803][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.979922][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.006032][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.043827][ T4267] device hsr_slave_0 entered promiscuous mode [ 79.050800][ T4267] device hsr_slave_1 entered promiscuous mode [ 79.057459][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.065638][ T4267] Cannot create hsr debugfs directory [ 79.115817][ T4266] device hsr_slave_0 entered promiscuous mode [ 79.123257][ T4266] device hsr_slave_1 entered promiscuous mode [ 79.130305][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.137898][ T4266] Cannot create hsr debugfs directory [ 79.426514][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.443953][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.465306][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.475971][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.487475][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.501948][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.511546][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.527672][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.606634][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.616229][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.630215][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.645973][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.737728][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.773818][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.783680][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.814026][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.885049][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.899652][ T4266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.914751][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.926403][ T4266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.941663][ T4266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.956153][ T4266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.975903][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.992068][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.001564][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.011513][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.020122][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.046631][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.060362][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.070244][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.080636][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.087998][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.097296][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.140210][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.164769][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.172584][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.183234][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.191934][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.199194][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.207211][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.217672][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.226517][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.235379][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.242530][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.251597][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.260905][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.270423][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.277526][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.285503][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.293704][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.334862][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.343426][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.356369][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.367026][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.376237][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.385336][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.394640][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.404259][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.444338][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.453005][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.461566][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.472355][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.481778][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.490964][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.499880][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.507006][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.514845][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.523861][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.533165][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.542108][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.550741][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.559872][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.569132][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.584313][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.592741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.604262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.615967][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.623203][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.637722][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.650657][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.659918][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.674328][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.697375][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.717336][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.733337][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.743880][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.752772][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.761533][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.770676][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.804955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.815343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.830782][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.837954][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.856018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.866642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.874892][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 80.874948][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 80.878737][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 80.890602][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.893928][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 80.900183][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.907420][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 80.920723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.945893][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.965336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.977881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.004134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.025611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.037260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.059969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.070201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.116288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.127395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.144569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.155981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.166445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.176408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.187930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.204852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.215593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.229908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.250835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.272715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.285739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.300401][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.323442][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.332620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.347377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.365000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.380852][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.396685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.424041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.434073][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.441282][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.461929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.509837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.545581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.564730][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.571963][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.600970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.612701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.626262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.634917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.653259][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.691130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.705625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.717129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.733220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.746042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.794847][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.823087][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.836076][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.854174][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.879292][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.924098][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.943653][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.994414][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.006356][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.017071][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.027612][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.037043][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.044969][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.063761][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.080073][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.093318][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.114738][ T4265] device veth0_vlan entered promiscuous mode [ 82.128623][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.136679][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.146806][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.156485][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.166972][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.175695][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.192086][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.202369][ T4275] device veth0_vlan entered promiscuous mode [ 82.222925][ T4265] device veth1_vlan entered promiscuous mode [ 82.246269][ T4275] device veth1_vlan entered promiscuous mode [ 82.259488][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.266718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.276324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.285902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.294352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.365925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.374776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.383534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.396191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.406092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.415099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.433080][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.442390][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.455972][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.465066][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.476458][ T4275] device veth0_macvtap entered promiscuous mode [ 82.495096][ T4275] device veth1_macvtap entered promiscuous mode [ 82.514474][ T4265] device veth0_macvtap entered promiscuous mode [ 82.561779][ T4265] device veth1_macvtap entered promiscuous mode [ 82.578884][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.587550][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.596029][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.605898][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.622220][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.635739][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.653460][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.664955][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.676567][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.685213][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.696980][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.716660][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.728091][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.743691][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.751407][ T4267] device veth0_vlan entered promiscuous mode [ 82.765568][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.774939][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.784224][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.793710][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.806507][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.817071][ T4271] device veth0_vlan entered promiscuous mode [ 82.828636][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.840370][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.852947][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.869885][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.879762][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.899077][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.910477][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.920198][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.927702][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.936916][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.947390][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.954220][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 82.958640][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 82.962580][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 82.968120][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 82.975422][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 82.987082][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995972][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.017344][ T4267] device veth1_vlan entered promiscuous mode [ 83.031847][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.051186][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.067130][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.076510][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.091477][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.112985][ T4271] device veth1_vlan entered promiscuous mode [ 83.187995][ T4267] device veth0_macvtap entered promiscuous mode [ 83.221925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.235784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.245575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.260418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.269755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.279100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.288111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.299731][ T4267] device veth1_macvtap entered promiscuous mode [ 83.337216][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.349763][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.359189][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.425190][ T4271] device veth0_macvtap entered promiscuous mode [ 83.452680][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.483104][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.484743][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.508157][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.508478][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.536122][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.553022][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.566625][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.585397][ T4271] device veth1_macvtap entered promiscuous mode [ 83.597819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.606437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.615607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.630326][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.641345][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.652641][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.664521][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.677460][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.702369][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.716254][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.737911][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.757162][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.767885][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.787251][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.797477][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.809211][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.821342][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.858058][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.867623][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.877607][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.879954][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.894195][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.903363][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.920179][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.929504][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.939589][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.963093][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.973926][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.984624][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.996584][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.009217][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.020447][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.032035][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.051457][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.063420][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.096188][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.107293][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.118866][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.127833][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.137512][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.147162][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.207466][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.262348][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.270995][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.288531][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.289616][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.366188][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.402088][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.416512][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.429633][ T4266] device veth0_vlan entered promiscuous mode [ 84.436608][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.464813][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.481883][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.511524][ T4266] device veth1_vlan entered promiscuous mode [ 84.545352][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.570687][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.589232][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.624823][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.665501][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.693498][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.737733][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.798979][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.847570][ T4266] device veth0_macvtap entered promiscuous mode [ 85.029359][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 85.037398][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 85.037760][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 85.038051][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 85.038132][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 85.117516][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.306628][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.365136][ T4266] device veth1_macvtap entered promiscuous mode [ 85.410091][ T4390] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.436905][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.446161][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.515140][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.616874][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.647995][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.667666][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.878175][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.909367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.917885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.926301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 85.934718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 85.943124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 86.000983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 86.009550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 86.018181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 86.026757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 86.035332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.464463][ T22] cfg80211: failed to load regulatory.db [ 87.561241][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.630108][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.655711][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.678093][ T4411] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.708133][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.858584][ T4409] input: syz0 as /devices/virtual/input/input5 [ 87.881931][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.981816][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.996939][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.046965][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.057310][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.087540][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.099914][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.116310][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.154248][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.173059][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.184079][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.206300][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.219279][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.245116][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.792928][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 88.873371][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.908520][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.937788][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.963727][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.021863][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131302][ T4428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.236264][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.403740][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.070798][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.196441][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.667404][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.699539][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.723896][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.743957][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.088891][ T4454] ======================================================= [ 92.088891][ T4454] WARNING: The mand mount option has been deprecated and [ 92.088891][ T4454] and is ignored by this kernel. Remove the mand [ 92.088891][ T4454] option from the mount to silence this warning. [ 92.088891][ T4454] ======================================================= [ 92.123802][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.770176][ T4454] overlayfs: unrecognized mount option "smackfsroot=FIRMWARE_CHECK" or missing value [ 97.965234][ T4531] overlayfs: overlapping lowerdir path [ 98.030135][ T4533] syz.4.34[4533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.030256][ T4533] syz.4.34[4533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.083302][ T4540] overlayfs: failed to clone upperpath [ 100.408366][ T4311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.569081][ T126] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.691491][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 100.755573][ T4348] Process accounting resumed [ 101.465732][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 101.566918][ T126] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 101.634224][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.879161][ T126] usb 1-1: config 0 descriptor?? [ 101.987417][ T4548] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 102.312871][ T4311] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 102.321223][ T4311] usb 4-1: config 0 has no interface number 0 [ 102.338523][ T4311] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 102.357890][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 102.374796][ T4311] usb 4-1: Product: syz [ 102.393440][ T4558] Process accounting resumed [ 102.399677][ T4311] usb 4-1: Manufacturer: syz [ 102.407335][ T4311] usb 4-1: config 0 descriptor?? [ 102.484690][ T4563] Zero length message leads to an empty skb [ 102.598909][ T126] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 102.636344][ T4311] usb 4-1: USB disconnect, device number 2 [ 103.581548][ T4548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.673709][ T4548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.650279][ T126] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 107.107007][ T4593] overlayfs: overlapping lowerdir path [ 107.895879][ T4561] usb 1-1: USB disconnect, device number 2 [ 111.630874][ T4617] sched: RT throttling activated [ 111.712043][ T4620] overlayfs: missing 'lowerdir' [ 113.493584][ T4640] overlayfs: failed to clone upperpath [ 113.948402][ T4377] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.148615][ T4377] usb 2-1: Using ep0 maxpacket: 16 [ 114.164777][ T4377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 114.230295][ T4377] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 114.240027][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.248131][ T4377] usb 2-1: Product: syz [ 114.262955][ T4377] usb 2-1: Manufacturer: syz [ 114.267679][ T4377] usb 2-1: SerialNumber: syz [ 114.335130][ T4377] usb 2-1: config 0 descriptor?? [ 114.419163][ T4377] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.429193][ T4377] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 114.814039][ T4662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72'. [ 114.932041][ T4666] ubi31: attaching mtd0 [ 114.955199][ T4666] ubi31: scanning is finished [ 114.969465][ T4666] ubi31: empty MTD device detected [ 115.137251][ T4377] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 116.068731][ T4666] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 116.076372][ T4666] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 116.134911][ T4377] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 116.155100][ T4666] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 116.165711][ T4377] em28xx 2-1:0.0: board has no eeprom [ 116.208448][ T4666] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 116.226266][ T4666] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 116.272875][ T4377] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 116.278396][ T4666] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 116.288884][ T4377] em28xx 2-1:0.0: dvb set to bulk mode. [ 116.296631][ T4311] em28xx 2-1:0.0: Binding DVB extension [ 116.314963][ T4666] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4190006613 [ 116.338065][ T4377] usb 2-1: USB disconnect, device number 2 [ 116.376550][ T4666] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 116.386623][ T4377] em28xx 2-1:0.0: Disconnecting em28xx [ 116.443253][ T4673] ubi31: background thread "ubi_bgt31d" started, PID 4673 [ 116.560855][ T4684] ------------[ cut here ]------------ [ 116.566551][ T4684] WARNING: CPU: 0 PID: 4684 at arch/x86/kvm/x86.c:11216 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 116.576978][ T4684] Modules linked in: [ 116.581057][ T4684] CPU: 0 PID: 4684 Comm: syz.3.79 Not tainted syzkaller #0 [ 116.588363][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.598541][ T4684] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 116.605047][ T4684] Code: e8 57 23 c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 1c 23 c1 00 e9 ce e5 ff ff e8 f2 06 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 116.625059][ T4684] RSP: 0018:ffffc9000508fc48 EFLAGS: 00010283 [ 116.631246][ T4684] RAX: ffffffff810fc92e RBX: ffff888077cf0000 RCX: 0000000000080000 [ 116.639467][ T4684] RDX: ffffc9000e222000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 116.647476][ T4684] RBP: ffff888057296000 R08: dffffc0000000000 R09: fffffbfff215c26a [ 116.655532][ T4684] R10: fffffbfff215c26a R11: 1ffffffff215c269 R12: ffff888077cf02f4 [ 116.663593][ T4684] R13: ffff888077cf00d8 R14: dffffc0000000000 R15: 0000000000000000 [ 116.671695][ T4684] FS: 00007fd5d11456c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 116.680734][ T4684] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.687333][ T4684] CR2: 000000110c392fe3 CR3: 000000005929a000 CR4: 00000000003526f0 [ 116.695400][ T4684] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.703458][ T4684] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.711508][ T4684] Call Trace: [ 116.714908][ T4684] [ 116.717853][ T4684] ? mutex_lock_nested+0x10/0x10 [ 116.722888][ T4684] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 116.728718][ T4684] kvm_vcpu_ioctl+0x887/0xb80 [ 116.733439][ T4684] ? xa_release+0x50/0x50 [ 116.737831][ T4684] ? __fget_files+0x28/0x4d0 [ 116.742579][ T4684] ? bpf_lsm_file_ioctl+0x5/0x10 [ 116.747559][ T4684] ? security_file_ioctl+0x7c/0xa0 [ 116.752766][ T4684] ? xa_release+0x50/0x50 [ 116.757219][ T4684] __se_sys_ioctl+0xfa/0x170 [ 116.761914][ T4684] do_syscall_64+0x4c/0xa0 [ 116.766369][ T4684] ? clear_bhb_loop+0x60/0xb0 [ 116.771245][ T4684] ? clear_bhb_loop+0x60/0xb0 [ 116.775955][ T4684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.781941][ T4684] RIP: 0033:0x7fd5d038ebe9 [ 116.786485][ T4684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.806184][ T4684] RSP: 002b:00007fd5d1145038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.814688][ T4684] RAX: ffffffffffffffda RBX: 00007fd5d05c5fa0 RCX: 00007fd5d038ebe9 [ 116.822751][ T4684] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 116.830801][ T4684] RBP: 00007fd5d0411e19 R08: 0000000000000000 R09: 0000000000000000 [ 116.838855][ T4684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.846880][ T4684] R13: 00007fd5d05c6038 R14: 00007fd5d05c5fa0 R15: 00007fff2a3fc888 [ 116.854980][ T4684] [ 116.858051][ T4684] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.865357][ T4684] CPU: 0 PID: 4684 Comm: syz.3.79 Not tainted syzkaller #0 [ 116.872564][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.882664][ T4684] Call Trace: [ 116.885944][ T4684] [ 116.888879][ T4684] dump_stack_lvl+0x168/0x22e [ 116.893564][ T4684] ? memcpy+0x3c/0x60 [ 116.897555][ T4684] ? show_regs_print_info+0x12/0x12 [ 116.902759][ T4684] ? load_image+0x3b0/0x3b0 [ 116.907277][ T4684] panic+0x2c9/0x710 [ 116.911218][ T4684] ? bpf_jit_dump+0xd0/0xd0 [ 116.915746][ T4684] __warn+0x2f8/0x4f0 [ 116.919758][ T4684] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 116.925572][ T4684] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 116.931398][ T4684] report_bug+0x2ba/0x4f0 [ 116.935733][ T4684] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 116.941550][ T4684] handle_bug+0x3a/0x70 [ 116.945710][ T4684] exc_invalid_op+0x16/0x40 [ 116.950219][ T4684] asm_exc_invalid_op+0x16/0x20 [ 116.955072][ T4684] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 116.961513][ T4684] Code: e8 57 23 c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 1c 23 c1 00 e9 ce e5 ff ff e8 f2 06 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 116.981180][ T4684] RSP: 0018:ffffc9000508fc48 EFLAGS: 00010283 [ 116.987253][ T4684] RAX: ffffffff810fc92e RBX: ffff888077cf0000 RCX: 0000000000080000 [ 116.995256][ T4684] RDX: ffffc9000e222000 RSI: 00000000000003c0 RDI: 00000000000003c1 [ 117.003273][ T4684] RBP: ffff888057296000 R08: dffffc0000000000 R09: fffffbfff215c26a [ 117.011267][ T4684] R10: fffffbfff215c26a R11: 1ffffffff215c269 R12: ffff888077cf02f4 [ 117.019272][ T4684] R13: ffff888077cf00d8 R14: dffffc0000000000 R15: 0000000000000000 [ 117.027351][ T4684] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 117.033237][ T4684] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 117.039084][ T4684] ? mutex_lock_nested+0x10/0x10 [ 117.044049][ T4684] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 117.049886][ T4684] kvm_vcpu_ioctl+0x887/0xb80 [ 117.054601][ T4684] ? xa_release+0x50/0x50 [ 117.058949][ T4684] ? __fget_files+0x28/0x4d0 [ 117.063559][ T4684] ? bpf_lsm_file_ioctl+0x5/0x10 [ 117.068506][ T4684] ? security_file_ioctl+0x7c/0xa0 [ 117.073636][ T4684] ? xa_release+0x50/0x50 [ 117.077970][ T4684] __se_sys_ioctl+0xfa/0x170 [ 117.082574][ T4684] do_syscall_64+0x4c/0xa0 [ 117.086991][ T4684] ? clear_bhb_loop+0x60/0xb0 [ 117.091678][ T4684] ? clear_bhb_loop+0x60/0xb0 [ 117.096359][ T4684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.102272][ T4684] RIP: 0033:0x7fd5d038ebe9 [ 117.106689][ T4684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.126311][ T4684] RSP: 002b:00007fd5d1145038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.134740][ T4684] RAX: ffffffffffffffda RBX: 00007fd5d05c5fa0 RCX: 00007fd5d038ebe9 [ 117.142726][ T4684] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 117.150707][ T4684] RBP: 00007fd5d0411e19 R08: 0000000000000000 R09: 0000000000000000 [ 117.158700][ T4684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.166720][ T4684] R13: 00007fd5d05c6038 R14: 00007fd5d05c5fa0 R15: 00007fff2a3fc888 [ 117.174714][ T4684] [ 117.178876][ T4684] Kernel Offset: disabled [ 117.183273][ T4684] Rebooting in 86400 seconds..