last executing test programs: 7m8.879835511s ago: executing program 3 (id=713): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000004"]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000600)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r5}}, 0x18) 7m5.899080127s ago: executing program 3 (id=724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getregset(0x4204, r1, 0x3, &(0x7f0000000040)={&(0x7f0000000380)=""/206, 0xce}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000002f40)={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) 7m4.35826679s ago: executing program 3 (id=728): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 7m3.216948988s ago: executing program 3 (id=734): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x141083, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x408e41, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}}, 0x24000840) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 7m1.987960017s ago: executing program 3 (id=739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 7m0.275469043s ago: executing program 3 (id=742): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x22, "4b721b782a17a7b6a00d923e3f7fdafda2073830fb8cfb34eb7cbd173e61bd850519"}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendto$inet(r5, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000006ffc)=0xd90, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r9, @ANYRES32, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(r8, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) 6m43.803408934s ago: executing program 32 (id=742): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x22, "4b721b782a17a7b6a00d923e3f7fdafda2073830fb8cfb34eb7cbd173e61bd850519"}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendto$inet(r5, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000006ffc)=0xd90, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r9, @ANYRES32, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(r8, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) 1m38.572041969s ago: executing program 4 (id=1844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0xffff, {{0xa, 0x4e24, 0x10, @empty, 0x6}}, 0x1}, 0x90) 1m37.343355598s ago: executing program 4 (id=1847): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x138) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x10, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000000, 0x0, 0x0, 0x8000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800}, 0x50) semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m36.255193174s ago: executing program 4 (id=1853): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1m34.071567907s ago: executing program 4 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d93df0600000000000000000000002369e0ac", 0x15}, {&(0x7f0000000140)="7c0004", 0x3}], 0x2) 1m33.25184706s ago: executing program 4 (id=1865): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000250075f2b5f5a40fb03fdf62004fbdf000"/43], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@fallback=r0, 0x2e, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000001080), &(0x7f00000010c0)=[0x0], 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000003f80)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80003ec0, 0xfeffff07, 0x0, 0x80003ef0, 0x80003f20], 0xf9ffff00, 0x0, &(0x7f0000003ec0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1000000, 0xffffffffffffffff}]}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) gettid() socket$inet_icmp(0x2, 0x2, 0x1) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 1m29.527311056s ago: executing program 4 (id=1877): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mq_open(0x0, 0x40, 0x189, &(0x7f0000000980)={0x0, 0x7, 0x10001, 0x8}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x3, 0x0, 0x0) move_pages(r2, 0x7, &(0x7f0000000040)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 1m13.123003256s ago: executing program 33 (id=1877): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mq_open(0x0, 0x40, 0x189, &(0x7f0000000980)={0x0, 0x7, 0x10001, 0x8}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x3, 0x0, 0x0) move_pages(r2, 0x7, &(0x7f0000000040)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 8.609042077s ago: executing program 5 (id=2093): socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20048195) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x68040200) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0xee, @local, 0x8}, 0x1c) socket(0x1d, 0x2, 0x6) 8.563222088s ago: executing program 0 (id=2094): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x20048000) 8.363311121s ago: executing program 0 (id=2096): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x1, 0xd, &(0x7f0000000040)="0f114def84b22dde27e442f1a7", 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 7.702803791s ago: executing program 6 (id=2097): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000250075f2b5f5a4"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@fallback=r0, 0x2e, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000001080), &(0x7f00000010c0)=[0x0], 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000003f80)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80003ec0, 0xfeffff07, 0x0, 0x80003ef0, 0x80003f20], 0xf9ffff00, 0x0, &(0x7f0000003ec0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1000000, 0xffffffffffffffff}]}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) gettid() socket$inet_icmp(0x2, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 7.571262623s ago: executing program 1 (id=2098): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x2f, 0x0, &(0x7f0000000200)=[0x0]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_uring_enter(r1, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 6.303712553s ago: executing program 0 (id=2100): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 6.265982594s ago: executing program 5 (id=2101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getregset(0x4204, r1, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, 0x0, 0x0) 6.265142004s ago: executing program 6 (id=2102): unshare(0x60600) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x201, 0x1000001b, 0xffffffffffffffff, 0x0) 5.991406998s ago: executing program 1 (id=2103): memfd_secret(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) 5.484234615s ago: executing program 1 (id=2104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 5.483484785s ago: executing program 2 (id=2105): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r2) 5.395208537s ago: executing program 6 (id=2106): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) 5.284434909s ago: executing program 2 (id=2107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) unshare(0x62040200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2d, 'cpuacct'}, {0x2b, 'cpuacct'}, {0x2d, 'net'}, {0x2d, 'rlimit'}, {0x2d, 'memory'}, {0x2d, 'net'}, {0x2d, 'cpuset'}]}, 0x34) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000180)=0x7ff57fc4, 0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500050002000000050004000100000005000100060000000c00078008000640000000000900020073797a300000000010000300686173683a69702c6d616300a20fe3"], 0x54}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) 4.199703525s ago: executing program 5 (id=2108): socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 4.183438405s ago: executing program 1 (id=2109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, 0x0, 0x20000000) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 4.139108736s ago: executing program 6 (id=2110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20008800) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2f, &(0x7f0000000080), 0x24) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x511000, 0x0) ioctl$HIDIOCGRAWPHYS(r8, 0x80404805, &(0x7f0000000180)) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.091590127s ago: executing program 0 (id=2111): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.102153292s ago: executing program 0 (id=2112): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in6=@remote, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0x10000}}, 0xf8}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) socket$unix(0x1, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) 3.063565783s ago: executing program 1 (id=2113): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x2f, 0x0, &(0x7f0000000200)=[0x0]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_uring_enter(r1, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 2.983284464s ago: executing program 6 (id=2114): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_io_uring_setup(0x6f13, &(0x7f0000000280)={0x0, 0x6636, 0x10100, 0x2, 0x38b}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2.932782565s ago: executing program 6 (id=2115): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x2}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) 2.641778939s ago: executing program 2 (id=2116): timer_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x36, &(0x7f0000007940)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.57706191s ago: executing program 5 (id=2117): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r2) 2.441560962s ago: executing program 1 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) pipe(&(0x7f0000000600)) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}]}}]}, 0x40}}, 0x0) 1.645705095s ago: executing program 2 (id=2119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getregset(0x4204, r1, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, 0x0, 0x0) 1.614041015s ago: executing program 5 (id=2120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 456.152653ms ago: executing program 2 (id=2121): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000e80)="120e", 0x2}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x0) 251.180236ms ago: executing program 2 (id=2122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x1150bdc9068b6e6, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b0", 0x1}], 0x1}, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, 0x0, 0x0) 156.359597ms ago: executing program 5 (id=2123): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 0s ago: executing program 0 (id=2124): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7d, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xfffffffc, 0xfffffffe, 0x3}, &(0x7f0000000240)=0x14) kernel console output (not intermixed with test programs): ady [ 53.712132][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.719161][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.731958][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.741540][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.778726][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.787750][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.796673][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.807542][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.817580][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.826288][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.835690][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.844541][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.868534][ T4171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.879934][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.896070][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.903987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.912643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.922100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.931150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.939610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.947844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.956188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.964730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.973399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.999971][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.011071][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.018719][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.027280][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.056412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.069863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.081911][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.111391][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.125055][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.137304][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.144428][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.155680][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.164632][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.173847][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.183139][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.190239][ T4251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.210813][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.229648][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.275521][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.284759][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.294733][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.305349][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.315186][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.325313][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.335016][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.344129][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.356085][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.370736][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.392325][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.401579][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.410561][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.419016][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.427872][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.434944][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.442983][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.452075][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.460559][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.467593][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.475430][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.483460][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.491037][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.499621][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.508110][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.525924][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.536720][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.545321][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.556101][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.567022][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.581147][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.590708][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.598156][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.607313][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.617469][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.630232][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.642374][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.656712][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.664739][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.674178][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.682851][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.691951][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.711042][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.719700][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.733987][ T4179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.745372][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.779473][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.788788][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.806112][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.813220][ T430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.827003][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.835380][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.843844][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.852705][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.861865][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.868909][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.877151][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.885721][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.896166][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.904823][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.913679][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.922477][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.931625][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.939831][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 54.939936][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.946030][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 54.958575][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.966430][ T4211] Bluetooth: hci3: command 0x041b tx timeout [ 54.972809][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 54.976525][ T4176] device veth0_vlan entered promiscuous mode [ 55.009803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.018107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.035584][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 55.040978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.058497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.068149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.077179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.087330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.096639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.111588][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.124153][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.132600][ T4171] device veth0_vlan entered promiscuous mode [ 55.151092][ T4176] device veth1_vlan entered promiscuous mode [ 55.160580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.169097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.177275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.185211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.194498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.203236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.211593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.219001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.238560][ T4171] device veth1_vlan entered promiscuous mode [ 55.251538][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.287369][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.295950][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.313476][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.342931][ T4176] device veth0_macvtap entered promiscuous mode [ 55.364586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.380787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.394852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.419978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.428689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.452306][ T4176] device veth1_macvtap entered promiscuous mode [ 55.471237][ T4171] device veth0_macvtap entered promiscuous mode [ 55.478286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.487540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.496861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.510173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.536257][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.547744][ T4171] device veth1_macvtap entered promiscuous mode [ 55.560806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.574852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.585209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.599686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.607966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.622808][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.631870][ T4174] device veth0_vlan entered promiscuous mode [ 55.646686][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.658285][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.670619][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.679637][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.687055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.695494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.703954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.712335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.720051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.728487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.737138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.745936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.757605][ T4176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.766974][ T4176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.776547][ T4176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.785474][ T4176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.801041][ T4174] device veth1_vlan entered promiscuous mode [ 55.810798][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.821888][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.832938][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.872852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.881322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.889210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.901523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.912268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.921247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.933295][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.942590][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.951339][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.960318][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.976985][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.985677][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.012783][ T4174] device veth0_macvtap entered promiscuous mode [ 56.031820][ T4179] device veth0_vlan entered promiscuous mode [ 56.038388][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.046683][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.056599][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.065512][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.074213][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.082799][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.091154][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.107896][ T4174] device veth1_macvtap entered promiscuous mode [ 56.123370][ T4168] device veth0_vlan entered promiscuous mode [ 56.137129][ T4179] device veth1_vlan entered promiscuous mode [ 56.159416][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.171858][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.182206][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.191206][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.243544][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.257233][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.270513][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.281238][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.293714][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.302358][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.310724][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.318343][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.326448][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.335563][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.346370][ T4168] device veth1_vlan entered promiscuous mode [ 56.368057][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.369198][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.387815][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.399628][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.409660][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.420249][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.431621][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.468717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.476998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.485926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.495133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.503951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.523634][ T4174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.533025][ T4174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.542043][ T4174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.551003][ T4174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.561578][ T4179] device veth0_macvtap entered promiscuous mode [ 56.580202][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.588313][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.598538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.612436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.626504][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.631547][ T4179] device veth1_macvtap entered promiscuous mode [ 56.640489][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.650441][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.658348][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.721357][ T4168] device veth0_macvtap entered promiscuous mode [ 56.729483][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.749054][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.768927][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.791953][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.811050][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.825368][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.835316][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.846411][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.872412][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.911903][ T4168] device veth1_macvtap entered promiscuous mode [ 56.968460][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.998542][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.020786][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 57.030334][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 57.067944][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 57.077559][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.098774][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 57.115948][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.124647][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.151044][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 57.178335][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.199771][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.240666][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.263115][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.285800][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.305549][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.322952][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.334675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.387124][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.405534][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.478702][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.501976][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.528932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.542620][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.616585][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.631105][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 57.640479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.691986][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.724386][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.753985][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.818178][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.834818][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.847594][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.863330][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.873566][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.899880][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.910083][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.920752][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.935569][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.975854][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.987189][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.024599][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.035272][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.059291][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.069123][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.089325][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.108470][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.118851][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.136927][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.148069][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.163901][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.183031][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.209279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.219363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 58.257492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.528375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.685933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.760154][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.771222][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.781094][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.795675][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.823786][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.832295][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.849545][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.866153][ T4293] overlayfs: unrecognized mount option "workdir" or missing value [ 58.870506][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.894367][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.929059][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.050178][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.090422][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.098291][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.100044][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 59.115136][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 59.122054][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.796052][ T4304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.822767][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 59.833231][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 59.850139][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 60.008436][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.017619][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.049128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.228311][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.238860][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.293452][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 60.302643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.537603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.559780][ T4311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.605291][ T4311] usb 1-1: Using ep0 maxpacket: 8 [ 61.901428][ T4311] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 61.915797][ T4311] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.099523][ T4311] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.123630][ T4315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 62.158785][ T4311] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.170096][ T4311] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.738227][ T4311] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.748067][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.763552][ T26] Bluetooth: hci4: command 0x0405 tx timeout [ 63.022443][ T4311] usb 1-1: usb_control_msg returned -71 [ 63.032604][ T4311] usbtmc 1-1:16.0: can't read capabilities [ 63.065622][ T4311] usb 1-1: USB disconnect, device number 2 [ 63.395088][ T4350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.809539][ T4292] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.859818][ T4373] hfsplus: unable to find HFS+ superblock [ 65.039467][ T4292] usb 2-1: device descriptor read/64, error -71 [ 65.987155][ T4292] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.441103][ T4292] usb 2-1: device descriptor read/64, error -71 [ 66.569521][ T4292] usb usb2-port1: attempt power cycle [ 66.886767][ T4397] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.28' sets config #0 [ 67.173702][ T4406] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.253103][ T4409] binder: 4398:4409 ioctl c0306201 0 returned -14 [ 69.739905][ T4311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 70.935508][ T4311] usb 2-1: device descriptor read/64, error -71 [ 71.195425][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.204195][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.446088][ T4458] hfsplus: unable to find HFS+ superblock [ 71.453001][ T4311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 75.170136][ T4305] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.619978][ T4305] usb 1-1: device descriptor read/64, error -71 [ 76.375749][ T1336] cfg80211: failed to load regulatory.db [ 76.462527][ T4305] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.795327][ T4305] usb 1-1: device descriptor read/64, error -71 [ 76.977759][ T4305] usb usb1-port1: attempt power cycle [ 77.611775][ T4305] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.204826][ T4305] usb 1-1: device not accepting address 5, error -71 [ 84.535607][ T4636] qrtr: Invalid version 6 [ 84.795038][ T4634] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.803450][ T4634] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.140281][ T1336] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 87.801514][ T4662] binder: 4661:4662 ioctl 4018620d 0 returned -22 [ 87.969506][ T1336] usb 2-1: Using ep0 maxpacket: 8 [ 88.001618][ T4662] binder: 4661:4662 ioctl c0306201 200000000240 returned -11 [ 88.101459][ T1336] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 88.142710][ T1336] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.278876][ T1336] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.438452][ T1336] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.847967][ T1336] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.077940][ T4685] qrtr: Invalid version 6 [ 89.208257][ T1336] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.374524][ T1336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.839500][ T1336] usb 2-1: usb_control_msg returned -71 [ 89.849304][ T1336] usbtmc 2-1:16.0: can't read capabilities [ 90.113201][ T1336] usb 2-1: USB disconnect, device number 7 [ 91.732592][ T4715] binder: 4712:4715 ioctl 4018620d 0 returned -22 [ 92.886530][ T4734] qrtr: Invalid version 6 [ 92.968840][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 97.699646][ T4762] could not allocate digest TFM handle tgr128-generic [ 97.820252][ T4774] binder: 4773:4774 ioctl 4018620d 0 returned -22 [ 100.395001][ T4813] binder: BINDER_SET_CONTEXT_MGR already set [ 100.441403][ T4813] binder: 4812:4813 ioctl 4018620d 200000000040 returned -16 [ 101.787555][ T4837] xt_HMARK: proto mask must be zero with L3 mode [ 102.065749][ T4842] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 102.074598][ T4842] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 102.083727][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 104.267643][ T4859] overlayfs: missing 'lowerdir' [ 104.458482][ T4862] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.484620][ T4862] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.245424][ T4873] binder_alloc: 4869: binder_alloc_buf, no vma [ 108.120106][ T4903] overlayfs: missing 'lowerdir' [ 109.793433][ T4928] binder_alloc: 4927: binder_alloc_buf, no vma [ 109.836208][ T4918] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 109.859904][ T4918] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.618237][ T4953] overlayfs: missing 'lowerdir' [ 112.774483][ T4950] sched: RT throttling activated [ 116.505405][ T4292] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.726040][ T5005] overlayfs: missing 'lowerdir' [ 116.789362][ T4292] usb 2-1: Using ep0 maxpacket: 16 [ 116.939877][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.019482][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.039641][ T4292] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 117.078768][ T5012] 8021q: VLANs not supported on ip6gre0 [ 117.110508][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.141371][ T4292] usb 2-1: config 0 descriptor?? [ 120.249547][ T4292] usbhid 2-1:0.0: can't add hid device: -71 [ 120.263648][ T4292] usbhid: probe of 2-1:0.0 failed with error -71 [ 120.280517][ T4185] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 120.290350][ T4185] CPU: 1 PID: 4185 Comm: kworker/u5:8 Not tainted 5.15.186-syzkaller #0 [ 120.298684][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.308746][ T4185] Workqueue: hci0 hci_rx_work [ 120.313461][ T4185] Call Trace: [ 120.316734][ T4185] [ 120.319663][ T4185] dump_stack_lvl+0x168/0x230 [ 120.324350][ T4185] ? show_regs_print_info+0x20/0x20 [ 120.329556][ T4185] ? load_image+0x3b0/0x3b0 [ 120.334076][ T4185] sysfs_create_dir_ns+0x252/0x280 [ 120.339190][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 120.344220][ T4185] ? sysfs_warn_dup+0xa0/0xa0 [ 120.348898][ T4185] ? le_conn_complete_evt+0xcbc/0x1590 [ 120.354367][ T4185] ? hci_event_packet+0xe05/0x12f0 [ 120.359480][ T4185] ? process_one_work+0x863/0x1000 [ 120.364598][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 120.369803][ T4185] kobject_add_internal+0x662/0xd00 [ 120.375016][ T4185] kobject_add+0x152/0x210 [ 120.379437][ T4185] ? kobject_init+0x1d0/0x1d0 [ 120.384120][ T4185] ? klist_children_get+0x50/0x50 [ 120.389144][ T4185] ? get_device_parent+0x121/0x3f0 [ 120.394255][ T4185] device_add+0x483/0xfb0 [ 120.398595][ T4185] hci_conn_add_sysfs+0xd1/0x1e0 [ 120.403547][ T4185] le_conn_complete_evt+0xcbc/0x1590 [ 120.408857][ T4185] ? cs_le_create_conn+0x5e0/0x5e0 [ 120.413981][ T4185] ? __mutex_trylock_common+0x14f/0x250 [ 120.419538][ T4185] hci_le_meta_evt+0x289/0x3b80 [ 120.424395][ T4185] ? hci_event_packet+0x36d/0x12f0 [ 120.429510][ T4185] ? hci_event_packet+0x2e2/0x12f0 [ 120.434622][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 120.439662][ T4185] ? hci_remote_host_features_evt+0x280/0x280 [ 120.445733][ T4185] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 120.451368][ T4185] ? mark_lock+0x94/0x320 [ 120.455692][ T4185] ? mutex_unlock+0x10/0x10 [ 120.460189][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 120.466160][ T4185] ? lock_chain_count+0x20/0x20 [ 120.471014][ T4185] ? __rwlock_init+0x140/0x140 [ 120.475767][ T4185] hci_event_packet+0xe05/0x12f0 [ 120.480696][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 120.485909][ T4185] ? rcu_lock_release+0x20/0x20 [ 120.490751][ T4185] ? hci_send_to_monitor+0x9c/0x4a0 [ 120.495933][ T4185] hci_rx_work+0x255/0xa10 [ 120.500344][ T4185] process_one_work+0x863/0x1000 [ 120.505286][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 120.510905][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 120.516176][ T4185] ? _raw_spin_lock_irq+0xab/0xe0 [ 120.521185][ T4185] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 120.526539][ T4185] ? wq_worker_running+0x97/0x170 [ 120.531544][ T4185] worker_thread+0xaa8/0x12a0 [ 120.536201][ T4185] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 120.542077][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 120.547264][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 120.552883][ T4185] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 120.558771][ T4185] kthread+0x436/0x520 [ 120.562823][ T4185] ? rcu_lock_release+0x20/0x20 [ 120.567652][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 120.572228][ T4185] ret_from_fork+0x1f/0x30 [ 120.576644][ T4185] [ 120.585885][ T4185] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.599215][ T4185] Bluetooth: hci0: failed to register connection device [ 120.613757][ T4292] usb 2-1: USB disconnect, device number 8 [ 120.827584][ T5047] qrtr: Invalid version 6 [ 120.948756][ T5038] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 120.969614][ T5045] hfsplus: unable to find HFS+ superblock [ 120.975555][ T5038] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 121.075409][ T5050] overlayfs: missing 'lowerdir' [ 125.870367][ T5086] overlayfs: missing 'lowerdir' [ 126.184631][ T5093] qrtr: Invalid version 6 [ 126.523225][ T5107] hfsplus: unable to find HFS+ superblock [ 126.770371][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 129.068186][ T5127] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.112414][ T5127] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.132477][ T5147] qrtr: Invalid version 6 [ 131.137729][ T5147] Zero length message leads to an empty skb [ 131.385967][ T5134] loop2: detected capacity change from 0 to 32768 [ 131.489403][ T4241] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.109549][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.169632][ T4241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.182507][ T4241] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.192470][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.329500][ T7] usb 1-1: device descriptor read/64, error -71 [ 132.392405][ T4241] usb 5-1: config 0 descriptor?? [ 132.466428][ T5167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 132.611805][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.618220][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.619314][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.839580][ T4241] usbhid 5-1:0.0: can't add hid device: -71 [ 132.848332][ T4241] usbhid: probe of 5-1:0.0 failed with error -71 [ 132.889578][ T7] usb 1-1: device descriptor read/64, error -71 [ 133.022152][ T7] usb usb1-port1: attempt power cycle [ 133.051975][ T4241] usb 5-1: USB disconnect, device number 2 [ 134.079314][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.180146][ T7] usb 1-1: device descriptor read/8, error -71 [ 134.259555][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.501887][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.827352][ T7] usb 1-1: device not accepting address 10, error -71 [ 134.857317][ T7] usb usb1-port1: unable to enumerate USB device [ 136.675609][ T5200] qrtr: Invalid version 6 [ 142.253408][ T5249] qrtr: Invalid version 6 [ 143.533946][ T5269] xt_HMARK: proto mask must be zero with L3 mode [ 144.733816][ T5268] binder_alloc: 5266: binder_alloc_buf, no vma [ 144.822267][ T5273] netlink: 'syz.0.278': attribute type 2 has an invalid length. [ 144.830055][ T5273] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 144.837821][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 146.449481][ T4325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.502392][ T4325] usb 4-1: device descriptor read/64, error -71 [ 148.913737][ T5308] qrtr: Invalid version 6 [ 148.989539][ T4325] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 150.278935][ T5323] binder_alloc: 5315: binder_alloc_buf, no vma [ 150.840469][ T5338] xt_HMARK: proto mask must be zero with L3 mode [ 151.120815][ T5345] qrtr: Invalid version 6 [ 152.170366][ T5341] netlink: 'syz.1.298': attribute type 2 has an invalid length. [ 152.186044][ T5341] netlink: 'syz.1.298': attribute type 1 has an invalid length. [ 152.644194][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 152.815497][ T5331] loop0: detected capacity change from 0 to 32768 [ 154.045602][ T4185] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 154.137675][ T5372] binder_alloc: 5370: binder_alloc_buf, no vma [ 154.160442][ T4325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.361418][ T4325] usb 5-1: device descriptor read/64, error -71 [ 154.512090][ T5381] hfsplus: unable to find HFS+ superblock [ 154.653425][ T4325] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.849458][ T4325] usb 5-1: device descriptor read/64, error -71 [ 154.857139][ T5387] qrtr: Invalid version 6 [ 154.970204][ T4325] usb usb5-port1: attempt power cycle [ 155.184608][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 155.215344][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 155.379348][ T4325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.479711][ T4325] usb 5-1: device descriptor read/8, error -71 [ 156.222865][ T4325] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.479545][ T4325] usb 5-1: device not accepting address 7, error -71 [ 156.486492][ T4325] usb usb5-port1: unable to enumerate USB device [ 157.400812][ T5403] loop0: detected capacity change from 0 to 32768 [ 158.333479][ T5429] xt_HMARK: proto mask must be zero with L3 mode [ 159.178579][ T5438] qrtr: Invalid version 6 [ 159.721363][ T5443] netlink: 'syz.4.324': attribute type 2 has an invalid length. [ 159.735605][ T5443] netlink: 'syz.4.324': attribute type 1 has an invalid length. [ 159.771708][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 160.956830][ T5456] binder: 5455:5456 ioctl c0306201 200000000240 returned -11 [ 161.229419][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.999545][ T7] usb 1-1: device descriptor read/64, error -71 [ 163.089313][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.330712][ T7] usb 1-1: device descriptor read/64, error -71 [ 163.453264][ T7] usb usb1-port1: attempt power cycle [ 163.511738][ T5471] capability: warning: `syz.1.333' uses deprecated v2 capabilities in a way that may be insecure [ 164.331739][ T5478] hfsplus: unable to find HFS+ superblock [ 164.679378][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.809426][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 164.906760][ T5487] qrtr: Invalid version 6 [ 164.944523][ T7] usb 1-1: config 0 has no interfaces? [ 165.129509][ T7] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 165.138581][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.180570][ T7] usb 1-1: Product: syz [ 165.380505][ T7] usb 1-1: Manufacturer: syz [ 165.748694][ T5484] loop3: detected capacity change from 0 to 32768 [ 165.758179][ T7] usb 1-1: SerialNumber: syz [ 165.764794][ T7] usb 1-1: config 0 descriptor?? [ 165.799563][ T5494] binder: BINDER_SET_CONTEXT_MGR already set [ 165.820597][ T5494] binder: 5493:5494 ioctl 4018620d 200000000040 returned -16 [ 165.938762][ T5494] binder: 5493:5494 ioctl c0306201 200000000240 returned -11 [ 165.994841][ T5497] binder: 5493:5497 unknown command 0 [ 166.008946][ T5497] binder: 5493:5497 ioctl c0306201 2000000003c0 returned -22 [ 166.033616][ T4185] Bluetooth: hci3: Unknown advertising packet type: 0x4b00 [ 166.036899][ T4311] usb 1-1: USB disconnect, device number 13 [ 169.272449][ T5533] qrtr: Invalid version 6 [ 171.946694][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 172.105410][ T5580] hfsplus: unable to find HFS+ superblock [ 173.541722][ T5606] ALSA: mixer_oss: invalid index 40000 [ 175.273218][ T5585] loop2: detected capacity change from 0 to 32768 [ 175.650977][ T4311] Bluetooth: hci1: command 0x0406 tx timeout [ 175.660767][ T4311] Bluetooth: hci3: command 0x0406 tx timeout [ 175.679831][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 175.687495][ T4311] Bluetooth: hci0: command 0x0406 tx timeout [ 175.693951][ T4311] Bluetooth: hci2: command 0x0406 tx timeout [ 176.846276][ T5626] binder: BINDER_SET_CONTEXT_MGR already set [ 176.860151][ T5626] binder: 5625:5626 ioctl 4018620d 200000000040 returned -16 [ 180.653187][ T5667] hub 9-0:1.0: USB hub found [ 180.658501][ T5667] hub 9-0:1.0: 1 port detected [ 181.577296][ T5687] binder_alloc: 5686: binder_alloc_buf, no vma [ 183.338016][ T5725] hfsplus: unable to find HFS+ superblock [ 185.680256][ T5744] binder_alloc: 5742: binder_alloc_buf, no vma [ 187.086354][ T5780] binder: 5770:5780 ioctl c0306201 0 returned -14 [ 189.607059][ T5779] loop4: detected capacity change from 0 to 32768 [ 189.636697][ T5798] netlink: 'syz.3.413': attribute type 2 has an invalid length. [ 190.481990][ T13] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 190.570199][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 190.658776][ T5810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.751908][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 190.997751][ T7] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 191.028575][ T7] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 191.048553][ T5823] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.067812][ T13] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 191.094383][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.126508][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.164968][ T13] usb 1-1: Product: syz [ 191.187980][ T13] usb 1-1: Manufacturer: syz [ 191.211344][ T13] usb 1-1: SerialNumber: syz [ 191.443421][ T13] usb 1-1: config 0 descriptor?? [ 191.449747][ T7] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 191.512997][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.655605][ T13] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 191.688421][ T7] usb 4-1: Product: syz [ 191.709240][ T7] usb 4-1: Manufacturer: syz [ 191.714307][ T7] usb 4-1: SerialNumber: syz [ 191.728648][ T7] usb 4-1: config 0 descriptor?? [ 191.827199][ T5798] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 192.655341][ T5837] input: syz0 as /devices/virtual/input/input5 [ 192.842436][ T7] usb 1-1: USB disconnect, device number 14 [ 193.031139][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 193.078369][ T5846] hfsplus: unable to find HFS+ superblock [ 193.301587][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 193.380024][ T5848] xt_HMARK: proto mask must be zero with L3 mode [ 193.401433][ T4292] usb 4-1: USB disconnect, device number 4 [ 193.437321][ T13] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 193.480352][ T13] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 193.507380][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.713690][ T13] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 194.236994][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.357163][ T13] usb 2-1: Product: syz [ 194.361408][ T13] usb 2-1: Manufacturer: syz [ 194.366039][ T13] usb 2-1: SerialNumber: syz [ 194.381892][ T13] usb 2-1: config 0 descriptor?? [ 194.416544][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.422901][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.435155][ T13] powermate: probe of 2-1:0.0 failed with error -22 [ 194.901927][ T5859] netlink: 'syz.4.424': attribute type 2 has an invalid length. [ 194.909602][ T5859] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 194.917325][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 195.450446][ T5860] ODEBUG: Out of memory. ODEBUG disabled [ 196.238220][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 196.506087][ T5864] delete_channel: no stack [ 197.638583][ T7] usb 2-1: USB disconnect, device number 9 [ 198.117794][ T4241] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.449018][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 198.641506][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.658527][ T4241] usb 4-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 198.705651][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.756615][ T4241] usb 4-1: config 0 descriptor?? [ 199.583688][ T4241] saitek 0003:0738:1705.0001: hidraw0: USB HID v0.83 Device [HID 0738:1705] on usb-dummy_hcd.3-1/input0 [ 199.608966][ T5908] tmpfs: Unknown parameter 'usrquota' [ 199.785128][ T5887] loop1: detected capacity change from 0 to 32768 [ 199.789465][ T4241] usb 4-1: USB disconnect, device number 5 [ 200.807151][ T4220] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 200.861197][ T5911] fido_id[5911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 200.928778][ T5927] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.036227][ T4220] usb 3-1: device descriptor read/64, error -71 [ 201.324932][ T4220] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 201.538713][ T4220] usb 3-1: device descriptor read/64, error -71 [ 201.667492][ T4220] usb usb3-port1: attempt power cycle [ 202.209370][ T4220] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 202.371534][ T5943] capability: warning: `syz.4.449' uses 32-bit capabilities (legacy support in use) [ 203.004654][ T4220] usb 3-1: device descriptor read/8, error -71 [ 203.011103][ T5943] netlink: 'syz.4.449': attribute type 3 has an invalid length. [ 203.854364][ T5956] hfsplus: unable to find HFS+ superblock [ 209.326675][ T6002] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.115526][ T6020] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 211.064068][ T4311] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 211.470387][ T4311] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.494395][ T4311] usb 4-1: config 0 has no interface number 0 [ 211.520324][ T4311] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 211.659623][ T4311] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 211.673341][ T4311] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.688111][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.363051][ T4311] usb 4-1: config 0 descriptor?? [ 212.389940][ T6026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.415644][ T4311] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 212.496580][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 212.635880][ T4311] usb 4-1: USB disconnect, device number 6 [ 213.554865][ T13] usb 3-1: device descriptor read/64, error -71 [ 213.865269][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.517330][ T13] usb 3-1: device descriptor read/64, error -71 [ 214.668445][ T13] usb usb3-port1: attempt power cycle [ 214.718441][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.976761][ T5158] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 215.300652][ T6066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.317392][ T4241] wlan1: authenticate with 08:02:11:00:00:00 [ 215.332511][ T4241] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 215.344524][ T9] wlan1: authenticated [ 215.351601][ T4241] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 215.363338][ T4323] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 215.363382][ T6060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.374801][ T4323] wlan1: associated [ 215.408757][ T6060] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 215.650969][ T5158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.711209][ T5158] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.778612][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 215.809543][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.268583][ T5158] usb 4-1: config 0 descriptor?? [ 216.274115][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 216.409868][ T13] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 216.464231][ T13] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 216.676921][ T5158] usbhid 4-1:0.0: can't add hid device: -71 [ 216.849970][ T5158] usbhid: probe of 4-1:0.0 failed with error -71 [ 216.898157][ T13] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.914951][ T5158] usb 4-1: USB disconnect, device number 7 [ 216.979069][ T13] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.016980][ T13] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.132605][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.439259][ T6096] process 'syz.4.492' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 218.563711][ T6103] qrtr: Invalid version 6 [ 218.606693][ T13] usb 3-1: GET_CAPABILITIES returned 0 [ 218.613007][ T13] usbtmc 3-1:16.0: can't read capabilities [ 219.359610][ T6105] ax25_connect(): syz.4.492 uses autobind, please contact jreuter@yaina.de [ 219.501708][ T13] usb 3-1: USB disconnect, device number 8 [ 219.641125][ T5158] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 219.818142][ T6126] binder: 6112:6126 ioctl c0306201 0 returned -14 [ 219.937275][ T5158] usb 4-1: device descriptor read/64, error -71 [ 221.065810][ T5158] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.373714][ T6145] qrtr: Invalid version 6 [ 221.837190][ T5158] usb 4-1: device descriptor read/64, error -71 [ 221.969611][ T5158] usb usb4-port1: attempt power cycle [ 224.305783][ T6176] binder: 6171:6176 ioctl c0306201 0 returned -14 [ 225.838601][ T5158] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 226.201875][ T5158] usb 3-1: device descriptor read/64, error -71 [ 226.490493][ T5158] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 227.470217][ T5158] usb 3-1: device descriptor read/64, error -71 [ 227.606144][ T5158] usb usb3-port1: attempt power cycle [ 227.698598][ T4292] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 227.719081][ T6227] binder: 6219:6227 ioctl c0306201 0 returned -14 [ 228.126704][ T4292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.318720][ T4292] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 228.328349][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.336471][ T4292] usb 2-1: Product: syz [ 228.339936][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 228.340811][ T4292] usb 2-1: Manufacturer: syz [ 228.352830][ T4292] usb 2-1: SerialNumber: syz [ 228.360226][ T4292] usb 2-1: config 0 descriptor?? [ 228.575808][ T6233] device syzkaller1 entered promiscuous mode [ 228.703435][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 229.986532][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.039533][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.068637][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.093050][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 230.118131][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.062615][ T7] usb 5-1: config 0 descriptor?? [ 231.108958][ T7] usb 5-1: can't set config #0, error -71 [ 231.117063][ T7] usb 5-1: USB disconnect, device number 8 [ 231.155598][ T4325] usb 2-1: USB disconnect, device number 10 [ 232.110299][ T6252] binder: BINDER_SET_CONTEXT_MGR already set [ 232.137232][ T6260] ALSA: mixer_oss: invalid index 40000 [ 233.048008][ T6252] binder: 6251:6252 ioctl 4018620d 200000000040 returned -16 [ 234.346838][ T6275] binder: 6263:6275 ioctl c0306201 0 returned -14 [ 235.620255][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.654467][ T6294] dlm: plock device version mismatch: kernel (1.2.0), user (576339969.32690.0) [ 236.323116][ T6294] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 236.332703][ T6294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 236.342243][ T6294] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 236.394623][ T6294] syz.2.547 (6294) used greatest stack depth: 20744 bytes left [ 236.402646][ T25] audit: type=1800 audit(1751344294.806:2): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.547" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 236.657332][ T7] usb 2-1: device descriptor read/64, error -71 [ 238.278240][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 238.292921][ T1110] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 238.649064][ T6321] binder: 6311:6321 ioctl c0306201 0 returned -14 [ 239.338495][ T1110] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 239.346780][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 239.562339][ T6322] ALSA: mixer_oss: invalid index 40000 [ 241.214841][ T1110] usb 5-1: config 0 has no interface number 0 [ 241.607059][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 241.634545][ T1110] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.645884][ T7] usb 2-1: can't read configurations, error -71 [ 241.652724][ T7] usb usb2-port1: attempt power cycle [ 241.703636][ T1110] usb 5-1: string descriptor 0 read error: -71 [ 241.710244][ T1110] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 241.719611][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.749423][ T1110] usb 5-1: config 0 descriptor?? [ 241.783742][ T1110] usb 5-1: can't set config #0, error -71 [ 241.798574][ T1110] usb 5-1: USB disconnect, device number 9 [ 242.259808][ T1336] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 242.484031][ T1336] usb 1-1: device descriptor read/64, error -71 [ 242.782970][ T1336] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 243.798574][ T1336] usb 1-1: device descriptor read/64, error -71 [ 244.340677][ T1336] usb usb1-port1: attempt power cycle [ 244.782229][ T1336] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 244.932213][ T1336] usb 1-1: device descriptor read/8, error -71 [ 245.643607][ T6385] ALSA: mixer_oss: invalid index 40000 [ 247.248893][ T6388] qrtr: Invalid version 6 [ 247.292186][ T6390] xt_HMARK: proto mask must be zero with L3 mode [ 248.676863][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 249.947912][ T6407] device syzkaller1 entered promiscuous mode [ 250.733397][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 250.753701][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 251.474422][ T5158] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 252.009007][ T5158] usb 1-1: device descriptor read/64, error -71 [ 252.279686][ T6432] ALSA: mixer_oss: invalid index 40000 [ 252.297655][ T5158] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 252.926645][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 252.969616][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 253.090716][ T5158] usb 1-1: device descriptor read/64, error -71 [ 253.229113][ T5158] usb usb1-port1: attempt power cycle [ 253.773614][ T5158] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 253.912092][ T5158] usb 1-1: device descriptor read/8, error -71 [ 255.077344][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 255.137921][ T4305] Bluetooth: hci5: command 0x1009 tx timeout [ 255.387211][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 255.687121][ T21] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 255.707504][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.757789][ T21] usb 5-1: Product: syz [ 255.778472][ T21] usb 5-1: Manufacturer: syz [ 255.791913][ T21] usb 5-1: SerialNumber: syz [ 255.823847][ T21] usb 5-1: config 0 descriptor?? [ 255.982406][ T21] gspca_main: se401-2.14.0 probing 047d:5003 [ 256.563342][ T21] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 256.596758][ T21] se401: probe of 5-1:0.0 failed with error -71 [ 256.802314][ T21] usb 5-1: USB disconnect, device number 10 [ 258.498728][ T7] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 259.674598][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 260.230279][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.230334][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.288989][ T7] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.298256][ T7] usb 3-1: config 1 has no interface number 1 [ 260.304357][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 261.374250][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.384287][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.553355][ T7] usb 3-1: Product: syz [ 262.207912][ T7] usb 3-1: can't set config #1, error -71 [ 262.216914][ T7] usb 3-1: USB disconnect, device number 12 [ 263.458942][ T6538] hfsplus: unable to find HFS+ superblock [ 263.878341][ T6541] team0: No ports can be present during mode change [ 268.821225][ T6583] ALSA: mixer_oss: invalid index 40000 [ 269.445432][ T4305] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 270.476481][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 271.029556][ C1] hrtimer: interrupt took 46346 ns [ 271.455348][ T4305] usb 5-1: unable to read config index 0 descriptor/all [ 271.573196][ T4305] usb 5-1: can't read configurations, error -71 [ 274.717566][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 274.758804][ T7] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 275.699762][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.715162][ T7] usb 1-1: config 0 has no interface number 0 [ 275.740820][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 275.758396][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 275.769931][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.790852][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.801741][ T7] usb 1-1: config 0 descriptor?? [ 275.832492][ T6635] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 276.740763][ T7] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 276.752866][ T7] usb 1-1: USB disconnect, device number 23 [ 277.503246][ T4325] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 277.538299][ T7] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 278.275005][ T6683] ALSA: mixer_oss: invalid index 40000 [ 278.714508][ T4325] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 278.749308][ T4325] usb 3-1: config 0 has no interface number 0 [ 278.792042][ T4325] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 278.844660][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.948389][ T4325] usb 3-1: config 0 descriptor?? [ 279.045618][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.572302][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 279.588670][ T7] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 279.597847][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.598314][ T4325] hub 3-1:0.3: bad descriptor, ignoring hub [ 279.607462][ T7] usb 4-1: config 0 descriptor?? [ 279.627151][ T4325] hub: probe of 3-1:0.3 failed with error -5 [ 279.767692][ T4325] sierra 3-1:0.3: Sierra USB modem converter detected [ 279.840374][ T4325] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 281.184775][ T4325] usb 3-1: USB disconnect, device number 13 [ 281.403584][ T4325] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 281.413323][ T4325] sierra 3-1:0.3: device disconnected [ 281.565666][ T7] konepure 0003:1E7D:2DB4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 282.911999][ T4241] usb 4-1: USB disconnect, device number 11 [ 284.294331][ T6728] fido_id[6728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 284.508172][ T6748] ALSA: mixer_oss: invalid index 40000 [ 285.491774][ T6762] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 285.499622][ T6762] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 285.507419][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 286.056315][ T6764] kvm [6760]: vcpu1, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 286.603144][ T6775] binder: 6772:6775 ioctl c0306201 0 returned -14 [ 287.219862][ T6727] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 287.249428][ T6727] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 289.741756][ T6777] hid-generic 0000:0000:0000.0003: pid 6777 passed too short report [ 290.163184][ T6825] binder: 6817:6825 ioctl c0306201 0 returned -14 [ 290.826808][ T6830] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 290.853610][ T6830] CIFS mount error: No usable UNC path provided in device string! [ 290.853610][ T6830] [ 290.864066][ T6830] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 293.030167][ T6852] ALSA: mixer_oss: invalid index 40000 [ 294.889160][ T6877] CIFS mount error: No usable UNC path provided in device string! [ 294.889160][ T6877] [ 294.931839][ T6877] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 296.053593][ T6896] device sit1 entered promiscuous mode [ 297.976541][ T6914] binder: 6905:6914 ioctl c0306201 0 returned -14 [ 302.832241][ T6967] xt_hashlimit: size too large, truncated to 1048576 [ 302.875302][ T6967] xt_hashlimit: overflow, try lower: 3/0 [ 303.410232][ T6983] netlink: 'syz.2.749': attribute type 2 has an invalid length. [ 303.418102][ T6983] netlink: 'syz.2.749': attribute type 1 has an invalid length. [ 303.426763][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 304.398840][ T6988] ALSA: mixer_oss: invalid index 40000 [ 305.644383][ T6999] binder: 6993:6999 ioctl c0306201 0 returned -14 [ 306.386214][ T7018] netlink: 'syz.2.762': attribute type 2 has an invalid length. [ 306.393982][ T7018] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 306.401708][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 306.571480][ T7020] device team_slave_0 entered promiscuous mode [ 306.577990][ T7020] device team_slave_1 entered promiscuous mode [ 306.754079][ T7020] device vlan2 entered promiscuous mode [ 306.828050][ T7020] device team0 entered promiscuous mode [ 307.074351][ T7026] ALSA: mixer_oss: invalid index 40000 [ 307.380717][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.592791][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.681050][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.830453][ T7028] device bridge_slave_0 left promiscuous mode [ 307.838192][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.988566][ T7033] binder: 7032:7033 ioctl c0306201 0 returned -14 [ 308.204946][ T7028] device bridge_slave_1 left promiscuous mode [ 308.222526][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 308.429883][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.507407][ T7028] bond0: (slave bond_slave_0): Releasing backup interface [ 308.614651][ T7028] bond0: (slave bond_slave_1): Releasing backup interface [ 308.663959][ T7028] team0: Port device team_slave_0 removed [ 308.683023][ T7028] team0: Port device team_slave_1 removed [ 308.689119][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.696838][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.714349][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.721884][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.751657][ T7049] netlink: 'syz.0.772': attribute type 9 has an invalid length. [ 308.762888][ T7049] netlink: 'syz.0.772': attribute type 7 has an invalid length. [ 308.770721][ T7049] netlink: 'syz.0.772': attribute type 8 has an invalid length. [ 308.795340][ T7028] syz.4.763 (7028) used greatest stack depth: 20672 bytes left [ 309.424336][ T7066] ALSA: mixer_oss: invalid index 40000 [ 310.497870][ T7075] ALSA: mixer_oss: invalid index 40000 [ 312.384979][ T7092] netlink: 196 bytes leftover after parsing attributes in process `syz.2.785'. [ 312.407383][ T7088] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 312.449803][ T7092] tc_dump_action: action bad kind [ 312.454887][ T7088] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 314.130535][ T7108] ALSA: mixer_oss: invalid index 40000 [ 316.574996][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 316.587395][ T7129] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 316.886175][ T7141] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 316.888415][ T7147] netlink: 'syz.2.798': attribute type 16 has an invalid length. [ 316.906164][ T7141] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 316.933135][ T7147] netlink: 'syz.2.798': attribute type 17 has an invalid length. [ 316.996951][ T7147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.012452][ T7147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.110690][ T7147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.148226][ T7155] ALSA: mixer_oss: invalid index 40000 [ 318.042893][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 319.928774][ T7171] chnl_net:caif_netlink_parms(): no params data found [ 320.397117][ T6727] Bluetooth: hci5: command 0x0409 tx timeout [ 320.949823][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.006368][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.089688][ T7171] device bridge_slave_0 entered promiscuous mode [ 321.174848][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.183484][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.200590][ T7171] device bridge_slave_1 entered promiscuous mode [ 321.300164][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.343586][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.434384][ T7171] team0: Port device team_slave_0 added [ 321.452310][ T7171] team0: Port device team_slave_1 added [ 321.501619][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.535434][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.632934][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.666675][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.688147][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.728101][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.772069][ T7171] device hsr_slave_0 entered promiscuous mode [ 321.785023][ T7171] device hsr_slave_1 entered promiscuous mode [ 321.791794][ T7171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.829634][ T7171] Cannot create hsr debugfs directory [ 322.936447][ T6727] Bluetooth: hci5: command 0x041b tx timeout [ 323.173178][ T7171] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 323.182878][ T7171] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 323.192575][ T7171] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.205359][ T7171] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 324.073070][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.112689][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.127573][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.139729][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.180828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.190453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.198862][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.205959][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.275979][ T7246] hfsplus: unable to find HFS+ superblock [ 324.283939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.296835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.353631][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.360711][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.370721][ T7250] syz.4.832 sent an empty control message without MSG_MORE. [ 324.390572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.412404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.428839][ T7244] device batadv_slave_1 entered promiscuous mode [ 324.453839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.474968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.506867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.543063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.590451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.622005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.639483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.658932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.677099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.694576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.719007][ T7243] device batadv_slave_1 left promiscuous mode [ 324.733347][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.176068][ T4242] Bluetooth: hci5: command 0x040f tx timeout [ 325.247385][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.270597][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.299147][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.756903][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.779868][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.782330][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.966412][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.984694][ T7282] xt_ecn: cannot match TCP bits for non-tcp packets [ 326.007415][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.043539][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.081447][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.119270][ T7171] device veth0_vlan entered promiscuous mode [ 326.179137][ T7171] device veth1_vlan entered promiscuous mode [ 326.318964][ T7171] device veth0_macvtap entered promiscuous mode [ 326.738126][ T7171] device veth1_macvtap entered promiscuous mode [ 326.746904][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.808011][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.843866][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.852630][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.905114][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.950957][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.985630][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.996376][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.006861][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.017321][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.027396][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.056412][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.094139][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.130584][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.174018][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.209988][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.239530][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.274814][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.305966][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.343393][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.386693][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.417381][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.420585][ T4241] Bluetooth: hci5: command 0x0419 tx timeout [ 327.463026][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.502546][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.553524][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.603355][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.636452][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.675292][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.836882][ T7171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.867638][ T7171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.927307][ T7171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.103651][ T7171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.756685][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.779533][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.969078][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.999364][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.008140][ T7303] netlink: 'syz.4.845': attribute type 2 has an invalid length. [ 329.015905][ T7303] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 329.023566][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 329.050393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.079055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.948574][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 331.052503][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.854'. [ 331.818766][ T7340] netlink: 'syz.2.856': attribute type 2 has an invalid length. [ 331.826534][ T7340] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 331.834246][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 334.100952][ T7367] device bond0 entered promiscuous mode [ 334.112033][ T7367] device bond_slave_0 entered promiscuous mode [ 334.119241][ T7367] device bond_slave_1 entered promiscuous mode [ 334.133498][ T7367] device macvlan1 entered promiscuous mode [ 334.140950][ T7367] device hsr1 entered promiscuous mode [ 334.160502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 334.215555][ T7368] syz.5.867 uses obsolete (PF_INET,SOCK_PACKET) [ 334.759961][ T7380] CIFS mount error: No usable UNC path provided in device string! [ 334.759961][ T7380] [ 334.771080][ T7380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 336.129853][ T7394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.876'. [ 338.130692][ T7423] CIFS mount error: No usable UNC path provided in device string! [ 338.130692][ T7423] [ 338.140875][ T7423] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 342.765874][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 343.178509][ T7489] team0 (unregistering): Port device team_slave_0 removed [ 343.214539][ T7489] team0 (unregistering): Port device team_slave_1 removed [ 346.223925][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'. [ 346.494822][ T4325] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 346.583259][ T7537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.725074][ T4325] usb 6-1: device descriptor read/64, error -71 [ 347.037933][ T4325] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 347.262481][ T4325] usb 6-1: device descriptor read/64, error -71 [ 347.391029][ T4325] usb usb6-port1: attempt power cycle [ 349.088262][ T4325] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 349.357708][ T4325] usb 6-1: device descriptor read/8, error -71 [ 349.545795][ T7573] netlink: 'syz.1.934': attribute type 10 has an invalid length. [ 349.557778][ T7570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.933'. [ 350.540772][ T7573] device veth0_vlan left promiscuous mode [ 350.694745][ T7573] device veth0_vlan entered promiscuous mode [ 350.754098][ T7573] team0: Device veth0_vlan failed to register rx_handler [ 350.852739][ T7573] syz.1.934 (7573) used greatest stack depth: 19936 bytes left [ 351.185918][ T7603] CIFS mount error: No usable UNC path provided in device string! [ 351.185918][ T7603] [ 351.196056][ T7603] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 351.792648][ T7608] netlink: 104 bytes leftover after parsing attributes in process `syz.2.945'. [ 351.924056][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.5.947'. [ 353.085475][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 353.105168][ T7644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 353.327776][ T4322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.479300][ T4322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.497100][ T7657] CIFS mount error: No usable UNC path provided in device string! [ 353.497100][ T7657] [ 353.507444][ T7657] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 353.867600][ T4322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.922235][ T4322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.267078][ T7676] xt_bpf: check failed: parse error [ 357.703879][ T4322] device hsr_slave_0 left promiscuous mode [ 357.754507][ T4322] device hsr_slave_1 left promiscuous mode [ 357.829819][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.890268][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.978716][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.073774][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.251056][ T4322] device bridge_slave_1 left promiscuous mode [ 358.321939][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.433463][ T4322] device bridge_slave_0 left promiscuous mode [ 358.471842][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.646988][ T4322] device veth1_macvtap left promiscuous mode [ 358.653474][ T4322] device veth0_macvtap left promiscuous mode [ 358.663005][ T4322] device veth1_vlan left promiscuous mode [ 358.669006][ T4322] device veth0_vlan left promiscuous mode [ 358.843237][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 358.858957][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 358.872130][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.890927][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.953575][ T4322] bond0 (unregistering): Released all slaves [ 359.059908][ T7769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.580718][ T7820] netlink: 'syz.1.1003': attribute type 2 has an invalid length. [ 362.588535][ T7820] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 362.596389][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 365.136404][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 365.424444][ T7873] netlink: 'syz.1.1017': attribute type 2 has an invalid length. [ 365.432326][ T7873] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 365.440191][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 366.652983][ T7880] device wlan0 entered promiscuous mode [ 366.845931][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 366.863027][ T7892] batman_adv: batadv0: Adding interface: dummy0 [ 366.969662][ T7892] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.572869][ T7892] batman_adv: batadv0: Interface activated: dummy0 [ 369.202604][ T7927] netlink: 'syz.0.1031': attribute type 2 has an invalid length. [ 369.210468][ T7927] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 369.218327][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 369.937815][ T7936] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 371.574234][ T7970] ALSA: mixer_oss: invalid index 40000 [ 373.444350][ T7984] netlink: 'syz.4.1046': attribute type 2 has an invalid length. [ 373.452149][ T7984] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 373.460042][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 374.412207][ T7994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.482279][ T7994] bridge0: port 1(bond1) entered blocking state [ 374.488586][ T7994] bridge0: port 1(bond1) entered disabled state [ 374.542566][ T7994] device bond1 entered promiscuous mode [ 374.571209][ T7994] bridge0: port 1(bond1) entered blocking state [ 374.577572][ T7994] bridge0: port 1(bond1) entered forwarding state [ 374.803731][ T4324] bridge0: port 1(bond1) entered disabled state [ 374.813742][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1051'. [ 374.825563][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'. [ 374.837562][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 374.847820][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.909081][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 375.055792][ T7999] device dummy0 entered promiscuous mode [ 375.074539][ T7999] device team0 entered promiscuous mode [ 375.137199][ T7999] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 375.204031][ T7999] Cannot create hsr debugfs directory [ 375.223417][ T7999] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 375.323205][ T7999] bridge0: port 2(hsr1) entered blocking state [ 375.332955][ T7999] bridge0: port 2(hsr1) entered disabled state [ 375.340439][ T7999] device hsr1 entered promiscuous mode [ 375.346922][ T7999] bridge0: port 2(hsr1) entered blocking state [ 375.353156][ T7999] bridge0: port 2(hsr1) entered forwarding state [ 375.418581][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 375.889348][ T8042] netlink: 'syz.4.1060': attribute type 2 has an invalid length. [ 375.897416][ T8042] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 375.905461][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 376.522136][ T8043] ALSA: mixer_oss: invalid index 40000 [ 377.853189][ T8046] binder: BINDER_SET_CONTEXT_MGR already set [ 377.959527][ T8046] binder: 8045:8046 ioctl 4018620d 200000000040 returned -16 [ 377.970248][ T8046] binder: 8045:8046 ioctl c0306201 200000000240 returned -11 [ 378.636870][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1073'. [ 380.138899][ T8120] ALSA: mixer_oss: invalid index 40000 [ 382.358228][ T8148] netlink: 'syz.0.1088': attribute type 2 has an invalid length. [ 382.366108][ T8148] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 382.374052][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 383.308740][ T8156] CIFS mount error: No usable UNC path provided in device string! [ 383.308740][ T8156] [ 383.318833][ T8156] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 383.456607][ T8167] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 386.998774][ T8224] netlink: 'syz.1.1100': attribute type 2 has an invalid length. [ 387.006631][ T8224] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 387.014596][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 387.688016][ T8237] binder: BINDER_SET_CONTEXT_MGR already set [ 387.705022][ T8237] binder: 8235:8237 ioctl 4018620d 200000000040 returned -16 [ 387.744987][ T8240] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 390.050629][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 391.211826][ T8294] netlink: 'syz.1.1117': attribute type 2 has an invalid length. [ 391.219864][ T8294] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 391.227731][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 391.459983][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.604283][ T8320] ALSA: mixer_oss: invalid index 40000 [ 394.667941][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 398.359563][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 399.786105][ T8423] netlink: 'syz.4.1148': attribute type 2 has an invalid length. [ 399.793950][ T8423] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 399.801900][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 400.637828][ T8426] hfsplus: unable to find HFS+ superblock [ 402.860906][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 404.314538][ T8487] netlink: 'syz.5.1161': attribute type 2 has an invalid length. [ 404.322405][ T8487] netlink: 'syz.5.1161': attribute type 1 has an invalid length. [ 404.330348][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1161'. [ 407.690985][ T8534] hfsplus: unable to find HFS+ superblock [ 407.741592][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 410.583059][ T5158] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 410.786070][ T5158] usb 6-1: device descriptor read/64, error -71 [ 411.074644][ T5158] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 411.876427][ T5158] usb 6-1: device descriptor read/64, error -71 [ 412.052869][ T5158] usb usb6-port1: attempt power cycle [ 412.173594][ T8602] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 412.181486][ T8602] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 412.189355][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 446.264796][ T8956] binder: 8955:8956 ioctl c0306201 0 returned -14 [ 447.392003][ T8980] hfsplus: unable to find HFS+ superblock [ 455.622387][ T4211] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 456.551978][ T4211] usb 2-1: device descriptor read/64, error -71 [ 457.152729][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.386657][ T4211] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 459.325791][ T9079] hfsplus: unable to find HFS+ superblock [ 469.064362][ T9162] binder: 9134:9162 ioctl c0306201 0 returned -14 [ 469.245064][ T9169] hfsplus: unable to find HFS+ superblock [ 471.926915][ T4241] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 472.182196][ T4241] usb 5-1: device descriptor read/64, error -71 [ 472.481518][ T4241] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 473.090950][ T4241] usb 5-1: device descriptor read/64, error -71 [ 473.219366][ T4241] usb usb5-port1: attempt power cycle [ 473.892656][ T4241] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 474.128281][ T4241] usb 5-1: device descriptor read/8, error -71 [ 474.438302][ T4241] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 474.769479][ T4241] usb 5-1: device descriptor read/8, error -71 [ 475.050026][ T4241] usb usb5-port1: unable to enumerate USB device [ 479.913459][ T9275] hfsplus: unable to find HFS+ superblock [ 480.981536][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 492.382877][ T9416] binder: 9405:9416 ioctl c0306201 0 returned -14 [ 493.477603][ T9422] hfsplus: unable to find HFS+ superblock [ 498.049652][ T9469] binder: 9456:9469 ioctl c0306201 0 returned -14 [ 498.952712][ T9482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1392'. [ 506.520648][ T7822] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 506.819797][ T7822] usb 3-1: device descriptor read/64, error -71 [ 507.140529][ T7822] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 507.366657][ T7822] usb 3-1: device descriptor read/64, error -71 [ 507.504107][ T7822] usb usb3-port1: attempt power cycle [ 507.846404][ T9585] ALSA: mixer_oss: invalid index 40000 [ 508.059963][ T7822] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 509.492396][ T7822] usb 3-1: device not accepting address 16, error -71 [ 509.673357][ T9594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1419'. [ 512.804766][ T9624] ALSA: mixer_oss: invalid index 40000 [ 514.156185][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 514.527764][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 514.923516][ T21] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 515.158436][ T21] usb 3-1: device descriptor read/64, error -71 [ 515.202878][ T9639] ALSA: mixer_oss: invalid index 40000 [ 516.655126][ T21] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 516.970184][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1433'. [ 517.205574][ T21] usb 3-1: device descriptor read/64, error -71 [ 517.357827][ T21] usb usb3-port1: attempt power cycle [ 519.650845][ T9686] ALSA: mixer_oss: invalid index 40000 [ 520.647042][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'. [ 521.295847][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'. [ 522.825560][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.228368][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1462'. [ 527.393412][ T9767] ALSA: mixer_oss: invalid index 40000 [ 529.420609][ T9793] binder: 9792:9793 ioctl c0306201 0 returned -14 [ 529.691784][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1475'. [ 529.700991][ T9800] netlink: 'syz.4.1475': attribute type 2 has an invalid length. [ 529.708833][ T9800] netlink: 'syz.4.1475': attribute type 1 has an invalid length. [ 531.020554][ T4551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.055629][ T4551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.429630][ T13] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 531.814402][ T13] usb 5-1: device descriptor read/64, error -71 [ 531.891614][ T9818] ALSA: mixer_oss: invalid index 40000 [ 532.317181][ T13] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 532.798455][ T13] usb 5-1: device descriptor read/64, error -71 [ 532.809830][ T9836] binder: 9835:9836 ioctl c0306201 0 returned -14 [ 533.514074][ T13] usb usb5-port1: attempt power cycle [ 534.955330][ T9862] ALSA: mixer_oss: invalid index 40000 [ 537.755457][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1506'. [ 537.764726][ T9897] netlink: 'syz.5.1506': attribute type 2 has an invalid length. [ 537.772578][ T9897] netlink: 'syz.5.1506': attribute type 1 has an invalid length. [ 538.527469][ T9900] MPTCP: addr_signal error, rm_addr=1 [ 539.010028][ T9922] binder: 9914:9922 ioctl c0306201 0 returned -14 [ 539.211556][ T9923] ALSA: mixer_oss: invalid index 40000 [ 540.065586][ T9932] netlink: 'syz.4.1517': attribute type 10 has an invalid length. [ 540.139363][ T9932] device veth0_vlan left promiscuous mode [ 540.165654][ T9932] device veth0_vlan entered promiscuous mode [ 540.235915][ T9932] team0: Device veth0_vlan failed to register rx_handler [ 541.241148][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 541.250291][ T9949] netlink: 'syz.2.1521': attribute type 2 has an invalid length. [ 541.258461][ T9949] netlink: 'syz.2.1521': attribute type 1 has an invalid length. [ 542.268484][ T9961] binder: 9958:9961 ioctl c0306201 0 returned -14 [ 543.311750][ T9969] ALSA: mixer_oss: invalid index 40000 [ 543.976400][ T9982] netlink: 'syz.0.1533': attribute type 20 has an invalid length. [ 544.683934][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 544.693081][ T9993] netlink: 'syz.0.1535': attribute type 2 has an invalid length. [ 544.701017][ T9993] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 545.816953][T10000] binder: 9998:10000 ioctl c0306201 0 returned -14 [ 546.890692][T10012] ALSA: mixer_oss: invalid index 40000 [ 549.335336][T10026] device syzkaller1 entered promiscuous mode [ 549.392901][T10022] MPTCP: addr_signal error, add_addr=1, echo=0 [ 549.617704][T10031] batman_adv: batadv0: Adding interface: dummy0 [ 549.683904][T10031] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.722481][T10031] batman_adv: batadv0: Interface activated: dummy0 [ 551.652381][T10059] ALSA: mixer_oss: invalid index 40000 [ 553.679963][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 556.799663][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1566'. [ 557.156692][T10100] ALSA: mixer_oss: invalid index 40000 [ 557.470930][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 558.034156][T10110] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1572'. [ 559.691223][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 561.467631][T10148] ALSA: mixer_oss: invalid index 40000 [ 562.982422][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 563.166741][T10180] binder: 10169:10180 ioctl c0306201 0 returned -14 [ 564.053063][T10192] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.218798][T10197] ALSA: mixer_oss: invalid index 40000 [ 566.898738][T10241] binder: 10229:10241 ioctl c0306201 0 returned -14 [ 567.639795][T10244] ALSA: mixer_oss: invalid index 40000 [ 567.728948][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1622'. [ 568.367383][T10268] device xfrm1 entered promiscuous mode [ 568.419674][T10268] xt_hashlimit: size too large, truncated to 1048576 [ 569.948747][T10287] binder: 10281:10287 ioctl c0306201 0 returned -14 [ 570.622596][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 572.382465][T10311] ALSA: mixer_oss: invalid index 40000 [ 574.406801][T10330] binder: 10323:10330 ioctl c0306201 0 returned -14 [ 575.443984][T10341] ALSA: mixer_oss: invalid index 40000 [ 576.789875][ T21] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 576.968102][T10356] ALSA: mixer_oss: invalid index 40000 [ 577.024997][ T21] usb 6-1: device descriptor read/64, error -71 [ 577.313727][ T21] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 577.527549][ T21] usb 6-1: device descriptor read/64, error -71 [ 577.666971][ T21] usb usb6-port1: attempt power cycle [ 578.799691][ T21] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 579.805980][T10373] binder: 10370:10373 ioctl c0306201 0 returned -14 [ 580.974870][ T21] usb 6-1: device descriptor read/8, error -71 [ 581.452739][T10393] ALSA: mixer_oss: invalid index 40000 [ 583.000417][T10412] binder: 10406:10412 ioctl c0306201 0 returned -14 [ 583.583579][T10421] xt_connbytes: Forcing CT accounting to be enabled [ 583.604488][T10421] set match dimension is over the limit! [ 588.518787][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.753530][T10554] netlink: 'syz.5.1723': attribute type 10 has an invalid length. [ 591.788818][T10554] batman_adv: batadv0: Interface deactivated: dummy0 [ 591.841978][T10554] batman_adv: batadv0: Removing interface: dummy0 [ 591.923786][T10554] team0: Port device dummy0 added [ 592.002899][T10555] netlink: 'syz.5.1723': attribute type 10 has an invalid length. [ 592.147976][T10555] team0: Port device dummy0 removed [ 592.170153][T10555] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 594.075047][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 596.383724][T10616] ALSA: mixer_oss: invalid index 40000 [ 596.785655][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 597.013781][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 598.579816][T10650] ALSA: mixer_oss: invalid index 40000 [ 599.392848][T10655] batman_adv: batadv0: Adding interface: dummy0 [ 599.429477][T10655] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.556379][T10655] batman_adv: batadv0: Interface activated: dummy0 [ 600.021343][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1760'. [ 601.648913][T10703] ALSA: mixer_oss: invalid index 40000 [ 604.465979][T10723] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1773'. [ 604.840490][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 605.870456][T10746] ALSA: mixer_oss: invalid index 40000 [ 610.936224][T10802] ALSA: mixer_oss: invalid index 40000 [ 611.070666][ C1] Unknown status report in ack skb [ 612.955709][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 614.638368][T10859] netlink: 'syz.4.1813': attribute type 16 has an invalid length. [ 614.672298][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1813'. [ 616.428186][T10872] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 616.824019][T10872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.590579][T10903] binder: 10892:10903 ioctl c0306201 0 returned -14 [ 618.599090][T10903] binder: 10892:10903 ioctl c0306201 0 returned -14 [ 620.683235][T10918] device xfrm1 entered promiscuous mode [ 622.680960][T10945] binder: 10939:10945 ioctl c0306201 0 returned -14 [ 622.688622][T10945] binder: 10939:10945 ioctl c0306201 0 returned -14 [ 624.899418][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 626.765548][T10998] binder: 10989:10998 ioctl c0306201 0 returned -14 [ 626.773456][T10998] binder: 10989:10998 ioctl c0306201 0 returned -14 [ 628.453341][T11021] netlink: 'syz.5.1863': attribute type 5 has an invalid length. [ 630.719069][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'. [ 633.087457][T11058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.934718][T11058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.043594][T11058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.217580][T11058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.373234][T11058] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.390731][T11058] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.459772][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 635.538586][T11058] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.598698][T11058] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.677284][T11146] hfsplus: unable to find HFS+ superblock [ 640.599273][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 646.466311][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 651.133330][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1923'. [ 653.061221][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 654.191560][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.726305][T11242] chnl_net:caif_netlink_parms(): no params data found [ 655.465779][ T6727] Bluetooth: hci2: command 0x041b tx timeout [ 655.891791][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 657.058225][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.165678][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.181166][T11242] device bridge_slave_0 entered promiscuous mode [ 657.190047][T11242] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.197389][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.206176][T11242] device bridge_slave_1 entered promiscuous mode [ 657.610928][ T9687] Bluetooth: hci2: command 0x040f tx timeout [ 657.689285][T11242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.718477][T11242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.617891][T11242] team0: Port device team_slave_0 added [ 658.774141][T11242] team0: Port device team_slave_1 added [ 658.892103][T11242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.063216][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.089201][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.111427][T11242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.260513][T11242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.267626][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.170391][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 660.178065][T11242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.605953][T11242] device hsr_slave_0 entered promiscuous mode [ 660.645726][T11242] device hsr_slave_1 entered promiscuous mode [ 660.683726][T11242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.723061][T11242] Cannot create hsr debugfs directory [ 661.315721][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'. [ 661.863745][T11242] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 661.923712][T11242] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 661.958706][T11242] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 661.981177][T11242] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 662.418169][T11376] hfsplus: unable to find HFS+ superblock [ 662.549535][T11242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.641704][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 662.653107][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.674339][T11242] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.709693][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.740874][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.780818][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.787979][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.859563][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.984841][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 663.092380][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.207149][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.214316][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.443382][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 663.891003][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 663.912537][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 663.962953][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 664.021417][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 664.032039][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 664.041737][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 664.070045][T11242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 664.104185][T11242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.219399][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 664.264892][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 664.414450][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 664.427759][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 664.790841][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 665.244762][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.256838][T11397] ALSA: mixer_oss: invalid index 40000 [ 665.274513][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.345409][T11242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.065574][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 666.477350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 666.490656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 666.827096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 666.861659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 666.918385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 666.934940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 666.959387][T11242] device veth0_vlan entered promiscuous mode [ 667.032128][T11242] device veth1_vlan entered promiscuous mode [ 667.075816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 667.128489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 667.361484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.453606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.719832][T11242] device veth0_macvtap entered promiscuous mode [ 667.804765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.205165][T11242] device veth1_macvtap entered promiscuous mode [ 668.787240][T11441] ALSA: mixer_oss: invalid index 40000 [ 668.923896][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.987253][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.028985][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.066704][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.092554][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.124607][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.164254][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.186411][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.209912][T11242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.218366][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 669.238366][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 669.249873][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.262024][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.283339][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.477806][T11451] hfsplus: unable to find HFS+ superblock [ 669.486825][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.535217][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.654221][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.665568][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.677372][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.689107][T11242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.708290][T11242] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.759752][T11242] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.778797][T11242] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.801106][T11242] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.828297][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 669.852201][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 669.984245][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.021668][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.049225][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.053007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 670.071482][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.100525][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 671.175067][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 672.193830][T11474] batman_adv: batadv0: Adding interface: dummy0 [ 672.835512][T11474] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.860803][ C0] vkms_vblank_simulate: vblank timer overrun [ 673.486040][T11474] batman_adv: batadv0: Interface activated: dummy0 [ 674.391089][T11497] ALSA: mixer_oss: invalid index 40000 [ 676.014266][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1985'. [ 677.341783][T11530] hfsplus: unable to find HFS+ superblock [ 681.096435][T11564] ALSA: mixer_oss: invalid index 40000 [ 681.605071][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 687.105987][T11623] ALSA: mixer_oss: invalid index 40000 [ 689.036010][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 694.454906][T11676] ALSA: mixer_oss: invalid index 40000 [ 695.589640][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2026'. [ 696.184045][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 696.577135][T11683] netlink: 'syz.1.2027': attribute type 7 has an invalid length. [ 700.146809][T11732] ALSA: mixer_oss: invalid index 40000 [ 701.343088][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2039'. [ 702.641874][T11754] netlink: 'syz.2.2044': attribute type 7 has an invalid length. [ 703.376905][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.407401][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.494700][T11761] batman_adv: batadv0: Adding interface: gretap1 [ 703.525060][T11761] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.581985][T11761] batman_adv: batadv0: Interface activated: gretap1 [ 704.230601][T11776] IPVS: length: 209 != 24 [ 707.943203][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.988004][T11754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.259231][T11754] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.268294][T11754] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.277605][T11754] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.286549][T11754] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.390895][T11754] syz.2.2044 (11754) used greatest stack depth: 19520 bytes left [ 708.652300][T11820] netlink: 'syz.0.2067': attribute type 9 has an invalid length. [ 708.675518][T11820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2067'. [ 710.227868][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 710.334081][T11854] batman_adv: batadv0: Interface deactivated: dummy0 [ 710.356044][T11854] batman_adv: batadv0: Removing interface: dummy0 [ 711.992703][T11874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2087'. [ 712.044575][T11874] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.147229][T11874] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.154419][T11874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.251868][T11243] Bluetooth: hci2: link tx timeout [ 713.257455][T11243] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 714.166791][T11243] Bluetooth: hci2: link tx timeout [ 714.171920][T11243] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 714.179767][T11243] Bluetooth: hci2: link tx timeout [ 714.184878][T11243] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 714.192680][T11243] Bluetooth: hci2: link tx timeout [ 714.197843][T11243] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 714.205591][T11243] Bluetooth: hci2: link tx timeout [ 714.210728][T11243] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 714.288209][ T4212] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 715.438884][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 715.464955][T11906] fido_id[11906]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 718.700623][ T4212] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 719.964639][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.612593][T11989] ------------[ cut here ]------------ [ 721.667052][T11989] WARNING: CPU: 1 PID: 11989 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 721.739940][T11989] Modules linked in: [ 721.824246][T11989] CPU: 1 PID: 11989 Comm: syz.5.2123 Not tainted 5.15.186-syzkaller #0 [ 721.926144][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 722.224895][T11989] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 722.230331][T11989] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 35 bf ff 0f 0b e9 62 fe ff ff e8 59 35 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 c4 df 68 8d 80 e1 07 80 c1 03 38 c1 [ 722.395926][T11989] RSP: 0018:ffffc900037cfac8 EFLAGS: 00010283 [ 722.402071][T11989] RAX: ffffffff81b88db7 RBX: 0000200000400000 RCX: 0000000000080000 [ 722.451054][T11989] RDX: ffffc90015a38000 RSI: 0000000000000061 RDI: 0000000000000062 [ 722.459097][T11989] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f6fca98 [ 722.540901][T11989] R10: ffffed100f6fca98 R11: 1ffff1100f6fca97 R12: ffff8880247c4e08 [ 722.581986][T11989] R13: dffffc0000000000 R14: ffff8880247c4d68 R15: ffff888029cb3340 [ 722.610020][T11989] FS: 00007f27d39ba6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 722.631152][T11989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.640991][T11989] CR2: 00007ff1c68bdd10 CR3: 0000000056465000 CR4: 00000000003506f0 [ 722.663414][T11989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 722.693115][T11989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 722.711067][T11989] Call Trace: [ 722.714367][T11989] [ 722.719856][T11989] __vma_adjust+0x6a9/0x1c20 [ 722.724523][T11989] __split_vma+0x34b/0x410 [ 722.733474][T11989] __do_munmap+0x375/0xdc0 [ 722.737936][T11989] mremap_to+0x306/0x6b0 [ 722.744589][T11989] __se_sys_mremap+0x418/0x990 [ 722.753650][T11989] ? __x64_sys_mremap+0xc0/0xc0 [ 722.758542][T11989] ? lock_chain_count+0x20/0x20 [ 722.765859][T11989] ? lockdep_hardirqs_on+0x94/0x140 [ 722.775564][T11989] ? __x64_sys_mremap+0x1c/0xc0 [ 722.780447][T11989] do_syscall_64+0x4c/0xa0 [ 722.788294][T11989] ? clear_bhb_loop+0x30/0x80 [ 722.797287][T11989] ? clear_bhb_loop+0x30/0x80 [ 722.801989][T11989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.808575][T11989] RIP: 0033:0x7f27d5b52929 [ 722.813317][T11989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.833303][T11989] RSP: 002b:00007f27d39ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 722.842009][T11989] RAX: ffffffffffffffda RBX: 00007f27d5d79fa0 RCX: 00007f27d5b52929 [ 722.850278][T11989] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 722.858330][T11989] RBP: 00007f27d5bd4b39 R08: 0000200000a00000 R09: 0000000000000000 [ 722.866405][T11989] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 722.874391][T11989] R13: 0000000000000000 R14: 00007f27d5d79fa0 R15: 00007fff9f37adc8 [ 722.888083][T11989] [ 722.891171][T11989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 722.898442][T11989] CPU: 0 PID: 11989 Comm: syz.5.2123 Not tainted 5.15.186-syzkaller #0 [ 722.906675][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 722.916726][T11989] Call Trace: [ 722.920003][T11989] [ 722.922930][T11989] dump_stack_lvl+0x168/0x230 [ 722.927610][T11989] ? show_regs_print_info+0x20/0x20 [ 722.932803][T11989] ? load_image+0x3b0/0x3b0 [ 722.937314][T11989] panic+0x2c9/0x7f0 [ 722.941212][T11989] ? bpf_jit_dump+0xd0/0xd0 [ 722.945726][T11989] ? hugetlb_split+0x237/0x2a0 [ 722.950488][T11989] __warn+0x248/0x2b0 [ 722.954480][T11989] ? hugetlb_split+0x237/0x2a0 [ 722.959253][T11989] report_bug+0x1b7/0x2e0 [ 722.963569][T11989] handle_bug+0x3a/0x70 [ 722.967712][T11989] exc_invalid_op+0x16/0x40 [ 722.972199][T11989] asm_exc_invalid_op+0x16/0x20 [ 722.977024][T11989] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 722.982374][T11989] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 35 bf ff 0f 0b e9 62 fe ff ff e8 59 35 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 c4 df 68 8d 80 e1 07 80 c1 03 38 c1 [ 723.001958][T11989] RSP: 0018:ffffc900037cfac8 EFLAGS: 00010283 [ 723.008007][T11989] RAX: ffffffff81b88db7 RBX: 0000200000400000 RCX: 0000000000080000 [ 723.015978][T11989] RDX: ffffc90015a38000 RSI: 0000000000000061 RDI: 0000000000000062 [ 723.023926][T11989] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f6fca98 [ 723.031875][T11989] R10: ffffed100f6fca98 R11: 1ffff1100f6fca97 R12: ffff8880247c4e08 [ 723.039825][T11989] R13: dffffc0000000000 R14: ffff8880247c4d68 R15: ffff888029cb3340 [ 723.047775][T11989] ? hugetlb_split+0x237/0x2a0 [ 723.052520][T11989] ? hugetlb_split+0x237/0x2a0 [ 723.057255][T11989] __vma_adjust+0x6a9/0x1c20 [ 723.061860][T11989] __split_vma+0x34b/0x410 [ 723.066277][T11989] __do_munmap+0x375/0xdc0 [ 723.070674][T11989] mremap_to+0x306/0x6b0 [ 723.074894][T11989] __se_sys_mremap+0x418/0x990 [ 723.079636][T11989] ? __x64_sys_mremap+0xc0/0xc0 [ 723.084462][T11989] ? lock_chain_count+0x20/0x20 [ 723.089290][T11989] ? lockdep_hardirqs_on+0x94/0x140 [ 723.094460][T11989] ? __x64_sys_mremap+0x1c/0xc0 [ 723.099283][T11989] do_syscall_64+0x4c/0xa0 [ 723.103672][T11989] ? clear_bhb_loop+0x30/0x80 [ 723.108320][T11989] ? clear_bhb_loop+0x30/0x80 [ 723.112973][T11989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 723.118859][T11989] RIP: 0033:0x7f27d5b52929 [ 723.123252][T11989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.142838][T11989] RSP: 002b:00007f27d39ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 723.151228][T11989] RAX: ffffffffffffffda RBX: 00007f27d5d79fa0 RCX: 00007f27d5b52929 [ 723.159180][T11989] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 723.167131][T11989] RBP: 00007f27d5bd4b39 R08: 0000200000a00000 R09: 0000000000000000 [ 723.175099][T11989] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 723.183045][T11989] R13: 0000000000000000 R14: 00007f27d5d79fa0 R15: 00007fff9f37adc8 [ 723.190998][T11989] [ 723.194184][T11989] Kernel Offset: disabled [ 723.198735][T11989] Rebooting in 86400 seconds..