last executing test programs: 9.812463641s ago: executing program 0 (id=11): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404705352200000102030109022000010100c0010904000002000000000705020200020007058202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0547 2235\n\x00', 0xa) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000500)=@usbdevfs_driver={0x0, 0xc0205564, &(0x7f0000000600)="01014000000000"}) 8.083282773s ago: executing program 3 (id=23): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f00000028c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32], 0x41, 0x2cb, &(0x7f0000000800)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 7.583715856s ago: executing program 3 (id=29): syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x20, 0x2, 0x200, "d569e80e1000fa449676000000a82917fb00000000a663004000000400", 0x7f0800}) 7.38452398s ago: executing program 1 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 6.259022608s ago: executing program 3 (id=32): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000600)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb8, @a_listen={0x9, 0x3, 0x5, 0x80, 0x0, 0x7, 0x9, "", 0x8, 0x5, 0x1, 0x4, 0xac, "38ae7d99651d2f2aef65ae64eb6ad5f8c49402b118a36ad73e5b6c7ab6f3bd61d2b46412d175bcb1f2b69b8ce01d2af82983633fa0e029a67033a4adf0a050561a63b51578160a333a5ade290e3e6b0d08b34801fc799054846fe83283b6a4e7619c3ccaa0a1b030a69c14765af6d1c30328b36ef6e8d0f93beb60cd7758554bc5592ddd89b73c842883c8b6c89e3ecc739ef7321e978ef23202eb73c3eb018ca25097366b1878577db6c0b6"}}, 0xbb) 5.299752961s ago: executing program 2 (id=38): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 5.299488291s ago: executing program 2 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r4, 0x0, 0x40000c0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) openat$dir(0xffffffffffffff9c, 0x0, 0x216006, 0x90) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000009, 0x8c0002) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.356181894s ago: executing program 0 (id=40): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r1, &(0x7f0000000240)=""/164, 0x131, 0x131) 4.336964414s ago: executing program 2 (id=42): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.223387067s ago: executing program 2 (id=43): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) getpgid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) socket$packet(0x11, 0x3, 0x300) r6 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 4.178318248s ago: executing program 0 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r1, 0x21, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x8804) 4.178122088s ago: executing program 4 (id=45): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @meta={0x44564956, 0x2a34dc90, 0xddc, 0xe9ac, 0x6d3edb1e}}) 4.121201499s ago: executing program 4 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r7 = add_key$user(&(0x7f0000002300), 0x0, &(0x7f0000000540), 0x0, r6) keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r7, r5}, &(0x7f0000000440)=""/206, 0xce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x1000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.503603583s ago: executing program 1 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x82) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 1.503347013s ago: executing program 2 (id=48): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x10, 0x0, 0xf, 0x0, {0x0, 0x9}, {0x350, 0x20003}, {0xf4ef, 0x0, 0x1}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x7fffffff, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x3}) 1.460531704s ago: executing program 0 (id=49): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.444224034s ago: executing program 3 (id=50): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1.243682089s ago: executing program 1 (id=51): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000004c0)="bd34", 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r1) 1.239228599s ago: executing program 0 (id=52): socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020}, 0x2082) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) 1.184097211s ago: executing program 2 (id=53): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404705352200000102030109022000010100c0010904000002000000000705020200020007058202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0547 2235\n\x00', 0xa) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000500)=@usbdevfs_driver={0x0, 0xc0205564, &(0x7f0000000600)="01014000000000"}) 1.083731703s ago: executing program 3 (id=54): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x2}, {0x8, 0x1a, 0x0, 0x0, 0x1}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.028282914s ago: executing program 4 (id=55): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) 893.634798ms ago: executing program 4 (id=56): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x7fd8}], 0x20}, 0x40040) sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="ab9b44", 0x3}], 0x1}, 0x40884) 758.194481ms ago: executing program 1 (id=57): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 757.959281ms ago: executing program 4 (id=58): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x48, &(0x7f00000006c0)={[{@errors_remount}, {@auto_da_alloc}, {@bh}, {@init_itable_val={'init_itable', 0x3d, 0xff}}]}, 0x6, 0x50a, &(0x7f00000018c0)="$eJzs3c1vVF0ZAPDnTju0lEKLslATAyqKhjD9ABrCxrLRGEJiJK5cQG2HpukM03RKpJVFWbonkcSV/gnuXJiwcuHOne7c4MIElfiGvsm7mDf3zqUd+jnQj0k7v19ye+85d7jPOTOcc+YeuD0BdK1LEbEaEaci4mFEDOX5Sb7FZHNLX/fu7bPptbfPppNoNO7/N8nOp3nR8mdSZ/Jr9kfEz34c8ctka9z68sr8VKVSXszTI0vVhZH68sq1uUKeMz4xNjF66/rN8QOr68XqH9/8aO7uz//8p2++/tvqD36dFmvwN2ezc631OEjNqhdjsCWvNyLuHkawDunN//5w/KSt7SsR8e2s/Q9FT/ZpAgAnWaMxFI2h1jQAcNKl9/+DkRRK+VzAYBQKpVJzDu9CDBQqtfrS1aHak8czkc1hDUex8GiuUh7N5wqHo5ik6bHseCM9/kH6Rfl6RJyPiBd9p7PzpelaZaaTX3wAoIud2TT+f9bXHP8BgBOuv9MFAACOnPEfALqP8R8Aus9HjP+eDgSAE8L9PwB0H+M/AHSfPcf/50dTDgDgSPz03r10a6w1f//1+9/UfW2mXJ8vVZ9Ml6Zriwul2VpttlIuTTcae12vUqstjN1YT9aXVx5Ua08eLz2Yq07Nlh+Ui4dZGQCgLecvvvpHOuiv3j6dbdGyloOxGk62QqcLAHRMT6cLAHSM53mge7Vxj28aAE64bZbo/cCO/0XopcVf4bi68nXz/9Ct9jP/b+4AjrdPm///4YGXAzh6xnDoXo1GYs1/AOgy5viBj/73/zv5/uXhlAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOg8FsSwqlbC3w1fRnoVSKOBsRw1FMHs1VyqMRcS4i/t5X7EvTY50uNACwT4V/J/n6X1eGLg9uPnsq+bwv20fEr353/7dPp5aWFsfS/P/1Teb5Sy/z/PFTHakBANBicmtWc5zO9y038u/ePpt+vx1lEd/caS4umsZdy7fmmd7ozfb9UYyIgf8nebop/b7ScwDxV59HxNc26v+0JcJgNgfSXPl0c/w09tlDiL/x/m+OX/ggfiE7l+6L2Xvx1QMoC3SbV3ea/WTe9tImlre/QlzK9tu3//6sh9q/tP9L+5K1Lf1fYb3/69kSP8na/KX19O4leXPjLz/ZktkYap57HvGN3u3iJ+vxk+373+LlNuv4z1066sbvI65sW//3K1JXs252ZKm6MFJfXrk2V52aLc+WH4+PT4xNjN66fnN8JJujbv7863Yx/nP76rmd4qf1H9ghfv/u9Y/vtln/P3zx8Bff2iX+97+z/ed/YZf46Zj4vTbjTw1Mblm+uzX+zA713+Pzj6ttxn/9r5WZNl8KAByB+vLK/FSlUl7c4yD9rrnXaxwc3cHpiDioC8ZqxEEVLJuUiIj9XCeJjr+9Diqd7pmAw7bR6DtdEgAAAAAAAAAAAAAAYCf15ZX5vk9+WiuG23kKrdN1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OT6MgAA//9Mj8T8") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 756.537441ms ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={0x0, 0x35, 0x29}, 0x0, &(0x7f00000004c0)="bf9e9014b97efb7cdd465f6584f32f0c9749b395fa8f398903e4495ed655d120463c9efdfa73b20fb0684d4008ffb413ee053491d4", &(0x7f0000000480)=""/41) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 439.929929ms ago: executing program 1 (id=60): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) 217.675294ms ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='nonexistent_udc\n\x00', 0x10) close(r4) 111.559877ms ago: executing program 1 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='hd3ss3220 0x47\x00', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x47\x00', 0x5) 0s ago: executing program 4 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x5c, {"48b881769ab8e4dd127c0f23d80f21f835000000a00f23f80f20c035020000000f22c00f01cb460f306644de2c580f0766b80e010f00d80f3566ba610066b8015e66ef664b0f3a164a02aa"}}], 0x74}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 60.597590][ T4176] cgroup: Unknown subsys name 'net' [ 60.728912][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.218124][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.647173][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 63.663141][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.717694][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.750502][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 63.790137][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.887060][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.894850][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.903565][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.912418][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.919837][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.927959][ T4195] device bridge_slave_0 entered promiscuous mode [ 63.946612][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.953902][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.961953][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.978027][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.985629][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.993827][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.001620][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.008866][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.017077][ T4195] device bridge_slave_1 entered promiscuous mode [ 64.036655][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.043950][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.051860][ T4192] device bridge_slave_1 entered promiscuous mode [ 64.108300][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.124858][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.131909][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.140178][ T4200] device bridge_slave_0 entered promiscuous mode [ 64.149392][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.161135][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.170371][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.177537][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.185701][ T4194] device bridge_slave_0 entered promiscuous mode [ 64.194905][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.204911][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.211981][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.220610][ T4200] device bridge_slave_1 entered promiscuous mode [ 64.235952][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.257773][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.265224][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.273533][ T4194] device bridge_slave_1 entered promiscuous mode [ 64.281807][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.311495][ T4188] team0: Port device team_slave_0 added [ 64.338681][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.348912][ T4188] team0: Port device team_slave_1 added [ 64.358049][ T4192] team0: Port device team_slave_0 added [ 64.367214][ T4195] team0: Port device team_slave_0 added [ 64.380377][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.403549][ T4192] team0: Port device team_slave_1 added [ 64.409984][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.417082][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.443069][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.456392][ T4195] team0: Port device team_slave_1 added [ 64.463902][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.499233][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.506321][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.532372][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.545487][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.567451][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.574673][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.600886][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.616787][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.623907][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.649986][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.673826][ T4200] team0: Port device team_slave_0 added [ 64.681031][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.688444][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.714931][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.727705][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.734750][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.760903][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.788208][ T4200] team0: Port device team_slave_1 added [ 64.827865][ T4194] team0: Port device team_slave_0 added [ 64.841009][ T4194] team0: Port device team_slave_1 added [ 64.855011][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.861982][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.888601][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.905501][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.912369][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.922901][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.929647][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.936694][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.944703][ T4192] Cannot create hsr debugfs directory [ 64.969476][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.976713][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.002700][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.038333][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.045868][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.072162][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.102185][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.109867][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.135956][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.151098][ T4195] device hsr_slave_0 entered promiscuous mode [ 65.157953][ T4195] device hsr_slave_1 entered promiscuous mode [ 65.164749][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.172306][ T4195] Cannot create hsr debugfs directory [ 65.248524][ T4200] device hsr_slave_0 entered promiscuous mode [ 65.255974][ T4200] device hsr_slave_1 entered promiscuous mode [ 65.263594][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.271268][ T4200] Cannot create hsr debugfs directory [ 65.277781][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 65.297984][ T4194] device hsr_slave_0 entered promiscuous mode [ 65.305425][ T4194] device hsr_slave_1 entered promiscuous mode [ 65.312043][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.319731][ T4194] Cannot create hsr debugfs directory [ 65.352651][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 65.353180][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 65.362027][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 65.432666][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 65.605402][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.618095][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.627652][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.641837][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.697867][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.711682][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.731274][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.753432][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.765914][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.774788][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.793923][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.815376][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.857805][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.889780][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.899971][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.909338][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.973987][ T4200] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.991459][ T4200] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.004561][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.022206][ T4200] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.031613][ T4200] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.070324][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.080270][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.095011][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.125232][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.143060][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.152415][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.164425][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.171706][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.185008][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.200954][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.209685][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.218112][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.227181][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.236933][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.245981][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.253147][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.281441][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.293617][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.308050][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.316205][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.324616][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.335015][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.343987][ T636] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.351103][ T636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.360166][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.373282][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.395322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.404455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.414980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.424950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.434156][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.441260][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.449844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.459869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.468733][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.475863][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.484621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.494498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.503269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.511277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.520812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.540757][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.553465][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.564951][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.574011][ T3095] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.581091][ T3095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.589138][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.601586][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.609610][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.619040][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.628365][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.644432][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.654177][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.663540][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.674390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.684828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.723627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.731566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.742087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.750698][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.757838][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.767524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.778087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.786983][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.794106][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.802309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.811534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.820894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.831749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.840665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.849750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.858650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.867548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.889705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.899571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.909270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.918370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.936878][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.951676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.960252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.972194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.981013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.991010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.999631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.008273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.016962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.025996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.036318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.050487][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.061317][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.085505][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.106970][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.116047][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.127338][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.145486][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.159459][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.171163][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.181051][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.193590][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.235534][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.255139][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.277603][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.308085][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.317863][ T636] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.325003][ T636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.340456][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.350194][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.359067][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 67.373085][ T636] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.380178][ T636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.394166][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.413270][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.441609][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 67.449391][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.462712][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 67.469749][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.484124][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.492673][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 67.503883][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.513161][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 67.531453][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.556220][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.566385][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.576393][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.586819][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.601730][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.610144][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.625267][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.638199][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.649708][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.675849][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.702966][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.710461][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.727771][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.744493][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.751963][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.778722][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.805533][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.818948][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.884738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.904498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.921566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.930751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.956904][ T4188] device veth0_vlan entered promiscuous mode [ 67.970330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.979381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.001776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.019995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.050477][ T4195] device veth0_vlan entered promiscuous mode [ 68.071004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.088483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.101109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.109276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.118761][ T4188] device veth1_vlan entered promiscuous mode [ 68.148393][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.161857][ T4195] device veth1_vlan entered promiscuous mode [ 68.178366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.188019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.199875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.221382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.230655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.242377][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.263417][ T4188] device veth0_macvtap entered promiscuous mode [ 68.294124][ T4188] device veth1_macvtap entered promiscuous mode [ 68.310068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.319456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.328580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.338352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.347366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.361906][ T4195] device veth0_macvtap entered promiscuous mode [ 68.384497][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.406716][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.417285][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.428073][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.436930][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.446155][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.455798][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.465033][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.475657][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.484824][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.507734][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.517883][ T4195] device veth1_macvtap entered promiscuous mode [ 68.530150][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.538552][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.548309][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.558745][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.567586][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.576367][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.584688][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.599502][ T4192] device veth0_vlan entered promiscuous mode [ 68.611048][ T4200] device veth0_vlan entered promiscuous mode [ 68.620970][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.633341][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.641789][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.652133][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.662978][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.671835][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.680851][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.690016][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.702382][ T4194] device veth0_vlan entered promiscuous mode [ 68.718704][ T4200] device veth1_vlan entered promiscuous mode [ 68.727643][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.735984][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.744826][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.753230][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.761101][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.781527][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.793896][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.805872][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.814570][ T4192] device veth1_vlan entered promiscuous mode [ 68.841955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.850459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.859063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.869539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.878760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.888399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.899006][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.909693][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.922015][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.945608][ T4200] device veth0_macvtap entered promiscuous mode [ 68.971428][ T4200] device veth1_macvtap entered promiscuous mode [ 68.982176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.990862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.999309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.007808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.017090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.028922][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.038579][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.049073][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.058382][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.087681][ T4194] device veth1_vlan entered promiscuous mode [ 69.107796][ T4192] device veth0_macvtap entered promiscuous mode [ 69.121655][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.130704][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.140842][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.158572][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.169719][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.179645][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.191978][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.205303][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.228670][ T4192] device veth1_macvtap entered promiscuous mode [ 69.247311][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.256022][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.264857][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.280711][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.291688][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.303253][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.314414][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.326762][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.369782][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.384898][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.400088][ T4200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.409389][ T4200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.419851][ T4200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.428873][ T4200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.438199][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 69.457451][ T4194] device veth0_macvtap entered promiscuous mode [ 69.460860][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.471726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.480452][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.489712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.499349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.510738][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.514424][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 69.527513][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 69.534594][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.535246][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 69.551570][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.562353][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.572498][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.583351][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.593881][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 69.597510][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.623999][ T4194] device veth1_macvtap entered promiscuous mode [ 69.631236][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.640739][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.650078][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.659138][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.690471][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.702088][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.714023][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.724726][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.734698][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.745176][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.757020][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.779060][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.791954][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.802142][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.813596][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.824514][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.835594][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.847097][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.857863][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.869346][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.878122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.887247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.896367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.905579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.916867][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.926987][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.936575][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.945583][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.963228][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.974090][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.984211][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.995080][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.004993][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.015657][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.025762][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.037132][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.049063][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.062720][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.070603][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.083237][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.091374][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.112737][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.120602][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.129522][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.138472][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.161727][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.171390][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.180859][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.189687][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.226749][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.241554][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.279787][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.366803][ T636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.381874][ T636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.400889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.430529][ T636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.459216][ T636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.503347][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.511435][ T1269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.528645][ T1269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.556089][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.573987][ T3088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.592127][ T3088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.621761][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.637922][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.637945][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.668728][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.684116][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.739211][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.776473][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.867601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.990011][ T4280] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 71.110907][ T4283] loop2: detected capacity change from 0 to 512 [ 71.178850][ T4283] EXT4-fs (loop2): inline encryption not supported [ 71.207190][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.213807][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.228175][ T4289] user requested TSC rate below hardware speed [ 71.291017][ T4286] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.301336][ T4286] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 71.367575][ T4283] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000080,inlinecrypt,,errors=continue. Quota mode: writeback. [ 71.416723][ T4283] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.477070][ T4283] capability: warning: `syz.2.7' uses 32-bit capabilities (legacy support in use) [ 71.513688][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 71.585474][ T4299] udc-core: couldn't find an available UDC or it's busy [ 71.596353][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 71.622904][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 71.643524][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 71.689764][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 71.874742][ T4309] device syzkaller0 entered promiscuous mode [ 71.897428][ T4315] Zero length message leads to an empty skb [ 71.905042][ T4317] file system registered [ 71.934977][ T4317] No source specified [ 71.952272][ T4309] tipc: Started in network mode [ 71.962330][ T4309] tipc: Node identity 4a1a02cf200e, cluster identity 4711 [ 71.975865][ T4309] tipc: Enabled bearer , priority 0 [ 72.019787][ T4309] tipc: Resetting bearer [ 72.148770][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.193348][ T4308] tipc: Resetting bearer [ 72.215316][ T4324] loop3: detected capacity change from 0 to 512 [ 72.247702][ T4308] tipc: Disabling bearer [ 72.324246][ T4324] EXT4-fs (loop3): Test dummy encryption mode enabled [ 72.336312][ T4324] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.18: inode has both inline data and extents flags [ 72.350754][ T4324] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.18: couldn't read orphan inode 15 (err -117) [ 72.363152][ T4324] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 72.409060][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.445244][ T4331] loop1: detected capacity change from 0 to 512 [ 72.483645][ T4331] ======================================================= [ 72.483645][ T4331] WARNING: The mand mount option has been deprecated and [ 72.483645][ T4331] and is ignored by this kernel. Remove the mand [ 72.483645][ T4331] option from the mount to silence this warning. [ 72.483645][ T4331] ======================================================= [ 72.535207][ T4324] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 72.559405][ T4331] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.19: invalid block [ 72.725634][ T4331] EXT4-fs (loop1): Remounting filesystem read-only [ 72.758096][ T4331] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.19: invalid indirect mapped block 4294967295 (level 1) [ 73.034718][ T4331] EXT4-fs (loop1): Remounting filesystem read-only [ 73.107033][ T4331] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.19: invalid indirect mapped block 4294967295 (level 1) [ 73.187833][ T4331] EXT4-fs (loop1): Remounting filesystem read-only [ 73.209158][ T4331] EXT4-fs (loop1): 2 truncates cleaned up [ 73.238546][ T4331] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,resuid=0x0000000000000000,. Quota mode: writeback. [ 73.302862][ T4231] usb 1-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 73.312206][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.326764][ T4231] usb 1-1: Product: syz [ 73.330991][ T4231] usb 1-1: Manufacturer: syz [ 73.335666][ T4231] usb 1-1: SerialNumber: syz [ 73.403746][ T4350] loop3: detected capacity change from 0 to 128 [ 73.409376][ T4231] usbtest 1-1:1.0: EZ-USB device [ 73.425635][ T4231] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 73.449774][ T4350] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.570455][ T4350] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.622041][ T4355] loop4: detected capacity change from 0 to 1024 [ 73.703578][ T4355] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.969615][ T4355] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 74.962525][ C0] sched: RT throttling activated [ 75.063386][ T4376] input: syz1 as /devices/virtual/input/input5 [ 75.087447][ T4355] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 75.171052][ T4355] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 20 with error 28 [ 75.200956][ T4355] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.200956][ T4355] [ 75.241855][ T4355] EXT4-fs (loop4): Total free blocks count 0 [ 75.290244][ T4355] EXT4-fs (loop4): Free/Dirty block details [ 75.299607][ T4385] loop2: detected capacity change from 0 to 256 [ 75.314712][ T4355] EXT4-fs (loop4): free_blocks=20480 [ 75.320311][ T4355] EXT4-fs (loop4): dirty_blocks=240 [ 75.339138][ T4355] EXT4-fs (loop4): Block reservation details [ 75.346155][ T4355] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 75.406933][ T3088] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 75.499088][ T3088] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.499088][ T3088] [ 75.760476][ T21] usb 1-1: USB disconnect, device number 2 [ 77.063793][ T4410] process 'syz.4.41' launched './file0' with NULL argv: empty string added [ 78.421113][ T4379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.511478][ T4424] ODEBUG: Out of memory. ODEBUG disabled [ 80.230665][ T4424] Set syz1 is full, maxelem 65536 reached [ 80.418932][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.460994][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.468888][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.578651][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.641786][ T4459] loop4: detected capacity change from 0 to 512 [ 80.711926][ T4459] EXT4-fs (loop4): Ignoring removed bh option [ 80.760967][ T4459] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc,bh,init_itable=0x00000000000000ff,. Quota mode: writeback. [ 80.849007][ T4459] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.947873][ T26] audit: type=1326 audit(1784930092.585:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 80.971703][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.983846][ T26] audit: type=1326 audit(1784930092.625:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.007622][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.018475][ T4459] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.58: invalid size [ 81.030274][ T26] audit: type=1326 audit(1784930092.625:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.065009][ T26] audit: type=1326 audit(1784930092.625:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.073085][ T4459] EXT4-fs (loop4): Remounting filesystem read-only [ 81.088674][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.095073][ T26] audit: type=1326 audit(1784930092.645:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.125343][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.135168][ T26] audit: type=1326 audit(1784930092.645:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.158923][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.199786][ T26] audit: type=1326 audit(1784930092.645:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.223584][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.230524][ T7] usb 3-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 81.260605][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.281381][ T7] usb 3-1: Product: syz [ 81.291085][ T7] usb 3-1: Manufacturer: syz [ 81.296712][ T4468] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 81.306027][ T7] usb 3-1: SerialNumber: syz [ 81.306406][ T4471] udc-core: couldn't find an available UDC or it's busy [ 81.312721][ T26] audit: type=1326 audit(1784930092.645:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.341358][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.366046][ T26] audit: type=1326 audit(1784930092.645:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.389944][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.406492][ T7] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 81.418257][ T7] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 81.426713][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 81.433956][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 81.438659][ T4468] i2c i2c-0: delete_device: Deleting device hd3ss3220 at 0x47 [ 81.444036][ T7] Workqueue: usb_hub_wq hub_event [ 81.456574][ T7] RIP: 0010:usbtest_probe+0x516/0xcb0 [ 81.461984][ T7] Code: 50 fb 45 85 ff 78 0a e8 e8 76 50 fb e9 92 00 00 00 48 8b 04 24 4c 8d 78 0a 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 bf 06 00 00 45 0f b6 3f 44 89 fe 83 e6 01 [ 81.481626][ T7] RSP: 0018:ffffc90000cc6fc0 EFLAGS: 00010202 [ 81.487732][ T7] RAX: 0000000000000001 RBX: ffff88807751d000 RCX: dffffc0000000000 [ 81.495723][ T7] RDX: 0000000000000002 RSI: 00000000ffffffff RDI: 00000000ffffffff [ 81.503706][ T7] RBP: 1ffff1100ed045db R08: 000000000000001c R09: ffffffff810047ff [ 81.511697][ T7] R10: 0000000000000002 R11: 00000000afa6265f R12: ffff888076822e00 [ 81.519679][ T7] R13: 1ffff1100ed045c0 R14: ffff888076822ed8 R15: 000000000000000a [ 81.527670][ T7] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 81.536608][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.543200][ T7] CR2: 0000001b32a16ff8 CR3: 000000007df5e000 CR4: 00000000003506f0 [ 81.551287][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.559292][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.567321][ T7] Call Trace: [ 81.570621][ T7] [ 81.573582][ T7] usb_probe_interface+0x5be/0xae0 [ 81.578733][ T7] ? usb_register_driver+0x3c0/0x3c0 [ 81.584043][ T7] really_probe+0x276/0xc70 [ 81.588563][ T7] ? pm_runtime_barrier+0x147/0x1c0 [ 81.593778][ T7] __driver_probe_device+0x1f5/0x390 [ 81.599174][ T7] driver_probe_device+0x4f/0x420 [ 81.604216][ T7] __device_attach_driver+0x2b0/0x500 [ 81.609603][ T7] ? deferred_probe_work_func+0x230/0x230 [ 81.615361][ T7] bus_for_each_drv+0x184/0x210 [ 81.620222][ T7] ? deferred_probe_work_func+0x230/0x230 [ 81.626035][ T7] ? subsys_find_device_by_id+0x360/0x360 [ 81.631775][ T7] __device_attach+0x2a7/0x480 [ 81.636556][ T7] ? device_attach+0x20/0x20 [ 81.641157][ T7] bus_probe_device+0xba/0x1d0 [ 81.645938][ T7] device_add+0xbcf/0x1050 [ 81.650363][ T7] usb_set_configuration+0x19d5/0x2030 [ 81.655851][ T7] usb_generic_driver_probe+0x89/0x150 [ 81.661330][ T7] usb_probe_device+0x126/0x250 [ 81.666193][ T7] ? usb_register_device_driver+0x230/0x230 [ 81.672097][ T7] really_probe+0x276/0xc70 [ 81.676613][ T7] ? pm_runtime_barrier+0x147/0x1c0 [ 81.681837][ T7] __driver_probe_device+0x1f5/0x390 [ 81.687151][ T7] driver_probe_device+0x4f/0x420 [ 81.692193][ T7] __device_attach_driver+0x2b0/0x500 [ 81.697576][ T7] ? deferred_probe_work_func+0x230/0x230 [ 81.703304][ T7] bus_for_each_drv+0x184/0x210 [ 81.708167][ T7] ? deferred_probe_work_func+0x230/0x230 [ 81.713894][ T7] ? subsys_find_device_by_id+0x360/0x360 [ 81.719633][ T7] __device_attach+0x2a7/0x480 [ 81.724413][ T7] ? device_attach+0x20/0x20 [ 81.729014][ T7] ? kobject_uevent_env+0x36c/0x890 [ 81.734229][ T7] bus_probe_device+0xba/0x1d0 [ 81.739016][ T7] device_add+0xbcf/0x1050 [ 81.743440][ T7] usb_new_device+0x9f6/0x15d0 [ 81.748214][ T7] ? usb_disconnect+0x8a0/0x8a0 [ 81.753068][ T7] ? _raw_spin_unlock_irq+0x1f/0x40 [ 81.758280][ T7] ? lockdep_hardirqs_on+0x94/0x140 [ 81.763490][ T7] hub_event+0x2b8d/0x5260 [ 81.767950][ T7] ? hub_post_resume+0x120/0x120 [ 81.772896][ T7] ? read_lock_is_recursive+0x10/0x10 [ 81.778292][ T7] ? _raw_spin_unlock_irq+0x1f/0x40 [ 81.783503][ T7] process_one_work+0x867/0xff0 [ 81.788375][ T7] ? worker_detach_from_pool+0x240/0x240 [ 81.794022][ T7] ? lockdep_hardirqs_off+0x70/0x100 [ 81.799321][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 81.804347][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 81.809905][ T7] ? wq_worker_running+0x97/0x170 [ 81.814958][ T7] worker_thread+0xad7/0x12a0 [ 81.819665][ T7] kthread+0x42e/0x520 [ 81.823768][ T7] ? rcu_lock_release+0x20/0x20 [ 81.828631][ T7] ? kthread_blkcg+0xd0/0xd0 [ 81.833229][ T7] ret_from_fork+0x1f/0x30 [ 81.837671][ T7] [ 81.840713][ T7] Modules linked in: [ 81.844708][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.877301][ T26] audit: type=1326 audit(1784930092.645:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb2aa103e99 code=0x7ffc0000 [ 81.939189][ T7] ---[ end trace 7865e06346287ffe ]--- [ 81.944811][ T7] RIP: 0010:usbtest_probe+0x516/0xcb0 [ 81.950508][ T7] Code: 50 fb 45 85 ff 78 0a e8 e8 76 50 fb e9 92 00 00 00 48 8b 04 24 4c 8d 78 0a 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 bf 06 00 00 45 0f b6 3f 44 89 fe 83 e6 01 [ 81.970871][ T7] RSP: 0018:ffffc90000cc6fc0 EFLAGS: 00010202 [ 81.977191][ T7] RAX: 0000000000000001 RBX: ffff88807751d000 RCX: dffffc0000000000 [ 81.985607][ T7] RDX: 0000000000000002 RSI: 00000000ffffffff RDI: 00000000ffffffff [ 81.993944][ T7] RBP: 1ffff1100ed045db R08: 000000000000001c R09: ffffffff810047ff [ 82.002051][ T7] R10: 0000000000000002 R11: 00000000afa6265f R12: ffff888076822e00 [ 82.010216][ T7] R13: 1ffff1100ed045c0 R14: ffff888076822ed8 R15: 000000000000000a [ 82.018352][ T7] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 82.027907][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.034554][ T7] CR2: 00007f0066a39ff8 CR3: 000000007e2c8000 CR4: 00000000003506f0 [ 82.042971][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.051031][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.059130][ T7] Kernel panic - not syncing: Fatal exception [ 82.065316][ T7] Kernel Offset: disabled [ 82.069662][ T7] Rebooting in 86400 seconds..