last executing test programs: 58.651357832s ago: executing program 1 (id=115): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000070601046b3b0123000000000500000a05"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 57.289186135s ago: executing program 1 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000740)=[@request_death], 0x0, 0x0, 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000060) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./sys\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='sy', 0x2) 57.121506619s ago: executing program 1 (id=127): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x8001, 0x0, 0x0, [], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6}) 56.981609082s ago: executing program 1 (id=130): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000700)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff}}) 56.966200713s ago: executing program 1 (id=132): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = request_key(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = mq_open(&(0x7f0000000800)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00\xfa\xf8\xac:\xbam\xa8\x87\x94\x17\xf5Mw\xb4\x04\x9fu\x9f\x16\xben\xab\xfadz^', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r0, 0x0, 0xca}, &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'blake2b-160-generic\x00'}}, &(0x7f0000000480), &(0x7f0000000580)=""/202) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r7, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x7}, 0x14}}, 0x0) mq_notify(r4, &(0x7f0000000240)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}) 54.807903785s ago: executing program 1 (id=148): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(0x0, 0x0, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x20, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x167) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 39.487751066s ago: executing program 32 (id=148): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(0x0, 0x0, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x20, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x167) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 23.279986147s ago: executing program 2 (id=290): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000800)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4040084) 23.025574603s ago: executing program 2 (id=292): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/210) 19.791914412s ago: executing program 2 (id=301): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0xbe, 0x81, 0xc, 0xb, 0x54, 0x5}}]}}]}, 0x148}}, 0x2004809c) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1, 0x5}]}]}}, 0x0, 0x32}, 0x28) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r4, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 16.224076318s ago: executing program 2 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x278, 0x2, 0x1, 0x0, @irqchip={0x5, 0x1}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.45365887s ago: executing program 2 (id=310): socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(r3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000080)=0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf251a0000"], 0x28}, 0x1, 0x0, 0x0, 0x4040015}, 0x4000) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.725475666s ago: executing program 2 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='slave-24c02 ', 0xc) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 8.849176506s ago: executing program 4 (id=343): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000004000000040000000200000000dd"], 0x50) 8.771772358s ago: executing program 4 (id=344): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) 7.717133803s ago: executing program 4 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000480000000400000021"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000340), 0xb47, r0}, 0x38) 7.473178229s ago: executing program 4 (id=351): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)='0', 0xffe0, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 7.402365861s ago: executing program 5 (id=352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendfile(0xffffffffffffffff, r0, &(0x7f00000004c0)=0x5964, 0x57) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x6d, 0x5, 0x383, 0x8, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8000, 0x401, 0x1}}) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xd1, 0x1ff, 0x1ff, 0x0, r6, 0x4, '\x00', r7, r8, 0x0, 0x0, 0x4, 0x7}, 0x50) read$midi(r6, &(0x7f00000001c0)=""/70, 0xffffffd8) 7.285602714s ago: executing program 4 (id=353): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) mlockall(0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x31) 3.71604906s ago: executing program 3 (id=360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x40000094}]}) 3.521805635s ago: executing program 0 (id=361): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.494761055s ago: executing program 3 (id=362): openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000004c0)={'comedi_test\x00', [0x100, 0xf, 0xd0, 0xfffffffe, 0x10001, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0xfffffffc, 0x8, 0x1, 0x401, 0xffff, 0x1, 0x9, 0xb, 0xfe9, 0x401, 0x0, 0x2, 0x3, 0x9, 0x48, 0x9, 0x2, 0x6a77, 0x5, 0x400, 0x8]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000200006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 3.429337987s ago: executing program 5 (id=363): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 3.31159176s ago: executing program 0 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4000009a}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.29477041s ago: executing program 5 (id=365): r0 = openat$sndseq(0xffffff9c, &(0x7f00000002c0), 0x121080) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000300)={{0x6, 0x6}, 'port0\x00', 0x1, 0x0, 0xa, 0x3, 0x6, 0x40, 0x4, 0x0, 0x65114a14e1412d4d, 0xa}) 3.131138654s ago: executing program 5 (id=366): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x980912}) r2 = socket(0x2b, 0x1, 0x1) listen(r2, 0x5) accept4$phonet_pipe(r2, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40804) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000280)=@setlink={0x30, 0x13, 0x501, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10002, 0x30}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000018}, 0xc000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r11], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.059094056s ago: executing program 3 (id=367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000640)="2e1221b23bb601c477d3df163e75963d86dd606712e9000c118db0049d28b31c32a790343c48040000db6c51f77e9e146261f3a8b1ec04498100", 0x3a}, {&(0x7f0000000240)="ebb806538511cde8", 0x8}], 0x2) 3.057419936s ago: executing program 0 (id=368): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x40000000, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r2, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180)="8ee2c7597d84f5c9b980634c213fe996c235e1e8abd2832b676761907d79193cd74b758c36dfef2fe87180a1c7e7d74f4f7f62dc33a04822c8c8cd1e722b05189d76393850497faeb8b1e6a27840519f9005b733ca7d677b2e24df820c75e567f483d94784a331a4b1a6653cfceb43ded4eeaa0579024712a5431e109898c19ecd10d30867afe7d3f0ff0c781c375b8a08aef101c7a0989019af8645fdb01c670753735c47", 0xa5) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 2.320630624s ago: executing program 0 (id=369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 2.319984724s ago: executing program 4 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket(0x10, 0x803, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000040)={{}, {0x20, 0xfc}, 0x0, 0x4}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c000000ec05010400000000000000000300000605000100070000000c000300686173683a6970000d000300686173683a6e65740000000011000300686173683a69702c706f727400000000050005000500000011000300686173683a6e65742c6e65740000000005000100070000000c00030068617368"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) shutdown(r5, 0x1) sendto$inet(r5, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[], 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="71c4c8020591", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) 2.298410764s ago: executing program 3 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x1) chdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/speed\x00', 0x0, 0x0) 2.159803458s ago: executing program 5 (id=372): clock_getres(0x4531edd1b3b0c2f9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = syz_io_uring_setup(0x3967, &(0x7f0000000500)={0x0, 0xe09a, 0x2, 0x3, 0x14}, &(0x7f0000000480), &(0x7f00000005c0), 0x0) mmap(&(0x7f00000b1000/0x1000)=nil, 0x1000, 0x9, 0x13, r1, 0x152d3000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000300)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000800a900000000000000000000000000000000010000000000000000000000000000ffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac14144000000000000000000000000000000000ffffffff0000000024ffffff000000000000000000"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa0000000000000000f9ffffffffffffff0000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b000200043500000a000200fe880000000000000000000000000101fc000000000000000000000000000000fe8000000000000000000000000000bbffffffff0000000000000000000000006c0100000000000002000a"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=')\x00') keyctl$setperm(0x5, r8, 0x10900) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r9, &(0x7f0000000500)="ffffffffffff00000000000188ca", 0xe) 1.377288296s ago: executing program 3 (id=373): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, r9, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x20000}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000080) r10 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) fsetxattr$security_ima(r10, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.072087874s ago: executing program 0 (id=374): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x101300) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 145.479917ms ago: executing program 3 (id=375): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x8, 0xfff7}, &(0x7f0000000840)=0x88) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) r3 = socket$rds(0x15, 0x5, 0x0) connect$rds(r3, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dir(0xffffff9c, &(0x7f0000000040)='./config/target/core/rd_mcp_0\x00', 0x202, 0x73) faccessat(r4, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x94) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)="6e6a6b0c002300000000006a899bde425361612e36", 0x15) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x2e8, 0x40000, 0x198, 0x2e8, 0x198, 0x3b0, 0x358, 0x358, 0x3b0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00', {}, {}, 0x2f}, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 'team_slave_1\x00', 'wlan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6}, {0x2, 0x2, 0x2}, 0x2, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f00000036c0)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@device_b, {0x1, 0x20}, @value=@ver_80211n={0x0, 0x3de, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0xd, @default, 0x22, @void, @void, @val={0x3, 0x1, 0x38}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x51}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40400}, 0x10) 9.356269ms ago: executing program 0 (id=376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x4}, {0x10, 0x0, 0x8}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x0, 0x0) read(r5, &(0x7f0000000140)=""/9, 0xffffff64) read$FUSE(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x800, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 0s ago: executing program 5 (id=377): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000680)='1', 0x1) io_setup(0x6, &(0x7f0000000540)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000300)={0x5, 0x0, [{0xa, 0x1, 0x1, 0x0, @sint={0x3, 0x6}}, {0x6, 0x4, 0x1, 0x0, @msi={0xd, 0x8, 0x55, 0x9}}, {0x3, 0x7, 0x0, 0x0, @adapter={0xfffffffffffffffd, 0x1, 0x42d, 0x9, 0x10001}}, {0x2, 0x4, 0x0, 0x0, @irqchip={0x0, 0x4}}, {0x73b, 0x5, 0x1, 0x0, @irqchip={0x7, 0x5}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x0, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000006c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r8, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4d2b, @loopback, 0xffffff6e}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfe2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000008) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 62.066976][ T4172] cgroup: Unknown subsys name 'net' [ 62.198655][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.755227][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.743362][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.784278][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.801837][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.866250][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.881287][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 65.943931][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.951395][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.960847][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.998877][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.007811][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.017139][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.060547][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.068431][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.076734][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.098137][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.114441][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.121558][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.133444][ T4194] device bridge_slave_0 entered promiscuous mode [ 66.141273][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.151873][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.161035][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.176053][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.198528][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.205748][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.213750][ T4194] device bridge_slave_1 entered promiscuous mode [ 66.234285][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.241375][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.249379][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.263212][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.270316][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.279072][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.314377][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.323969][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.331037][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.340404][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.347681][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.355277][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.363116][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.372010][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.383883][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.395591][ T4191] team0: Port device team_slave_0 added [ 66.410932][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.435189][ T4191] team0: Port device team_slave_1 added [ 66.450660][ T4194] team0: Port device team_slave_0 added [ 66.491376][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.502141][ T4194] team0: Port device team_slave_1 added [ 66.510337][ T4187] team0: Port device team_slave_0 added [ 66.519418][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.537730][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.555206][ T4187] team0: Port device team_slave_1 added [ 66.569420][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.580072][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.587619][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.615248][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.645873][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.653779][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.681841][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.702448][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.709555][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.736903][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.757518][ T4186] team0: Port device team_slave_0 added [ 66.764771][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.771938][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.798940][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.827687][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.834878][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.861480][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.875489][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.882915][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.909526][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.922676][ T4186] team0: Port device team_slave_1 added [ 66.938999][ T4185] team0: Port device team_slave_0 added [ 66.947619][ T4185] team0: Port device team_slave_1 added [ 66.987720][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.995373][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.028314][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.035473][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.062295][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.083240][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.091207][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.117771][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.135629][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.142988][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.169531][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.191248][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.198384][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.224973][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.243647][ T4194] device hsr_slave_0 entered promiscuous mode [ 67.250969][ T4194] device hsr_slave_1 entered promiscuous mode [ 67.258298][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.266508][ T4194] Cannot create hsr debugfs directory [ 67.275640][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.282833][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.289429][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.297110][ T4191] Cannot create hsr debugfs directory [ 67.388177][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.395439][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.404253][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.412656][ T4186] Cannot create hsr debugfs directory [ 67.424070][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.431197][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 67.442761][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 67.449603][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.457427][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 67.490465][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.498676][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.507164][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.518914][ T4185] Cannot create hsr debugfs directory [ 67.783795][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.802936][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.812930][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.830402][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.881160][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.910341][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.949461][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.961866][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.979649][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.997690][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.016953][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.029112][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.039817][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.061448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.073976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.105134][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.124467][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.149163][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.159049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.168306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.179352][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.186820][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.196533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.207770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.216679][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.223880][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.240216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.265723][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.277931][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.288024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.298076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.337337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.350551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.360143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.370700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.380216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.389835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.399310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.424841][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.437691][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.451835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.460574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.487001][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.503924][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.540142][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.552756][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.570853][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.593545][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.621066][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.639481][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.647698][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.658963][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.669652][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.680663][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.688176][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.696698][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.710237][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.720587][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.745680][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.755734][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.765625][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.775366][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.782654][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.791715][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.802412][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.821580][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.854202][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.861735][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.870726][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.880886][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.891412][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.900769][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.910107][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.917558][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.926067][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.934665][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.951387][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.960876][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.970460][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.979573][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.991215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.000689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.009357][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.016479][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.054925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.064539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.073866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.083340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.091925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.104418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.114089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.126405][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.138015][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.149241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.157753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.191149][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.221151][ T4191] device veth0_vlan entered promiscuous mode [ 69.239058][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.249340][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.261819][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.271868][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.281364][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.289404][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.303443][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.315257][ T4191] device veth1_vlan entered promiscuous mode [ 69.336929][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.349887][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.359302][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.371050][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.388952][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.397431][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.414632][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.439143][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.446606][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.456773][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.468520][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.477578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.486246][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.493460][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.501311][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.503853][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 69.514397][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.515915][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 69.529571][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.530148][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 69.536908][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.537355][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.544393][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 69.557133][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.559434][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 69.572161][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.589131][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.605207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.617385][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.631064][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.640451][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.659875][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.670385][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.684608][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.693449][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.704706][ T4191] device veth0_macvtap entered promiscuous mode [ 69.724615][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.733647][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.741811][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.759347][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.768008][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.775477][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.783698][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.795045][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.803504][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.810581][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.818677][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.827825][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.836982][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.846838][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.868213][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.879602][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.896477][ T4191] device veth1_macvtap entered promiscuous mode [ 69.908417][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.926147][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.940413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.952383][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.963694][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.973346][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.981830][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.993874][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.003255][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.010991][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.021453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.030805][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.050325][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.072951][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.081526][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.100455][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.111680][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.151655][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.170105][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.178296][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.189372][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.200357][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.209419][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.220591][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.270082][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.289468][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.303792][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.328895][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.339235][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.356468][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.366113][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.387981][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.398611][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.408046][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.418283][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.483423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.490925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.502140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.518864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.528155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.537220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.551637][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.567515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.576179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.588111][ T4187] device veth0_vlan entered promiscuous mode [ 70.610061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.618321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.647629][ T4186] device veth0_vlan entered promiscuous mode [ 70.659284][ T4187] device veth1_vlan entered promiscuous mode [ 70.678656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.687999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.696764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.705162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.748358][ T4186] device veth1_vlan entered promiscuous mode [ 70.765332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.775459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.785262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.805098][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.828442][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.851840][ T4185] device veth0_vlan entered promiscuous mode [ 70.864130][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.880199][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.901413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.910039][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.920045][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.929224][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.939312][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.951278][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.959666][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.971883][ T4187] device veth0_macvtap entered promiscuous mode [ 71.019695][ T4187] device veth1_macvtap entered promiscuous mode [ 71.040071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.064390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.081604][ T4186] device veth0_macvtap entered promiscuous mode [ 71.096206][ T4185] device veth1_vlan entered promiscuous mode [ 71.102980][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.118423][ T4186] device veth1_macvtap entered promiscuous mode [ 71.122851][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.138182][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.151427][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.165911][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.188959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.200296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.211196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.220396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.230377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.256031][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.268502][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.285190][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.302780][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.316510][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.327041][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.338299][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.356602][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.366786][ T4185] device veth0_macvtap entered promiscuous mode [ 71.374293][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.383882][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.393281][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.402278][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.413125][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.421912][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.432771][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.443838][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.450909][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.453040][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.467398][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.477019][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.486613][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.504271][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.522468][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.538917][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.558188][ T26] audit: type=1400 audit(1787312084.209:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=4266 comm="syz.2.3" name="p" offset=58 [ 71.574844][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.586814][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 71.593506][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 71.599315][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.623594][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 71.627719][ T4185] device veth1_macvtap entered promiscuous mode [ 71.633572][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 71.655898][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.665146][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 71.666647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.687979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.697652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.706933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.719294][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.728467][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.738455][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.255319][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.660370][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.679440][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.692722][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.711043][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.726601][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.748375][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.752692][ T4275] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.760774][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.821622][ T4194] device veth0_vlan entered promiscuous mode [ 72.853279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.879110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.897965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.908662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.920403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.929314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.977981][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.990292][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.004153][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.015563][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.026811][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.038483][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.051538][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.093021][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.104402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.117531][ T4194] device veth1_vlan entered promiscuous mode [ 73.162843][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.182716][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.185128][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.191571][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.191607][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.370232][ T4194] device veth0_macvtap entered promiscuous mode [ 73.389476][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.400223][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.411279][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.434215][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.443250][ T4194] device veth1_macvtap entered promiscuous mode [ 73.452014][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.503965][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.518437][ T4283] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.523753][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.533504][ T4283] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 73.563578][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.563862][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.571972][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.580198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.601540][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.614054][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.625746][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.643299][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.659784][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.670089][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 73.670166][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 73.670222][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 73.724277][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.735815][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.746480][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 73.752971][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 73.765061][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.780631][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.793911][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.811978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.835615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.853820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.871643][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.885619][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.896418][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.907448][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.926578][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.939080][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.954989][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.970056][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.991170][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.016719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.022749][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.041043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.062855][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.083250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.135211][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.151270][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.161881][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.171508][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.207836][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.262600][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.276167][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.325545][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.333421][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.357541][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.488847][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.514202][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.556802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.607586][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.631248][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.655819][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.368979][ T4258] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.389895][ T4258] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.668576][ T4229] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 75.702322][ T4229] wiimote 0005:057E:0306.0001: New device registered [ 75.788907][ T4324] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 75.835721][ T4324] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.204318][ T4350] usb usb8: usbfs: process 4350 (syz.1.21) did not claim interface 0 before use [ 76.310912][ T4229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.552489][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 76.672443][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.782405][ T1108] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 76.808976][ T1108] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 76.830343][ T1108] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 76.852914][ T4229] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 76.870923][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.880440][ T1108] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 76.901854][ T4229] usb 3-1: Product: syz [ 76.906925][ T4229] usb 3-1: Manufacturer: syz [ 76.913695][ T4229] usb 3-1: SerialNumber: syz [ 77.170536][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 77.201165][ T4328] wiimote 0005:057E:0306.0001: Device removed [ 77.239498][ T4229] usb 3-1: USB disconnect, device number 2 [ 77.274045][ T4370] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 77.289150][ T4370] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 77.307313][ T4370] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 77.422531][ T4230] Bluetooth: hci0: command 0x0c20 tx timeout [ 77.428829][ T4230] Bluetooth: hci5: command 0x1003 tx timeout [ 77.441040][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 77.616161][ T4381] Config c/1 of g1 needs at least one function. [ 77.624142][ T4381] udc usbip-vudc.0: failed to start g1: -22 [ 77.796715][ T4385] Zero length message leads to an empty skb [ 80.107228][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 80.112248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.125759][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 80.132270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.152262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.352345][ T4229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.370792][ T4419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.34'. [ 80.624382][ T13] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 81.065850][ T13] Bluetooth: hci3: Injecting HCI hardware error event [ 81.278840][ T4201] Bluetooth: hci3: hardware error 0x00 [ 81.322309][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 81.442630][ T4229] usb 2-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 81.458873][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.474307][ T4229] usb 2-1: config 0 descriptor?? [ 81.526444][ T4229] usblcd 2-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 81.765287][ T4411] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.33'. [ 82.142422][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 82.731158][ T4437] kvm: MONITOR instruction emulated as NOP! [ 82.878193][ T13] usb 2-1: USB disconnect, device number 2 [ 84.165352][ T4452] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.192456][ T4452] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.752929][ T4474] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.255553][ T4490] kvm: pic: level sensitive irq not supported [ 86.372291][ T4281] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 86.427496][ T4281] wiimote 0005:057E:0306.0002: New device registered [ 86.652332][ T4239] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.674293][ T4506] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.693212][ T4506] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.799094][ T1111] cfg80211: failed to load regulatory.db [ 86.892712][ T4239] usb 2-1: Using ep0 maxpacket: 8 [ 87.003334][ T26] audit: type=1400 audit(1787312099.659:3): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=4524 comm="syz.3.61" name="p" offset=58 [ 87.027807][ T4239] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.232474][ T4239] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 87.247134][ T4258] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.283079][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.291903][ T4239] usb 2-1: Product: syz [ 87.308247][ T4239] usb 2-1: Manufacturer: syz [ 87.337723][ T4239] usb 2-1: SerialNumber: syz [ 88.151483][ T4281] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 88.175584][ T4281] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 88.243437][ T4500] wiimote 0005:057E:0306.0002: Device removed [ 88.293483][ T4239] usb 2-1: USB disconnect, device number 3 [ 88.516970][ T4281] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input10 [ 88.572676][ T4281] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8 [ 89.262592][ T7] Bluetooth: hci0: command 0x0c20 tx timeout [ 89.268744][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 89.275697][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 90.547305][ T4574] kvm: pic: level sensitive irq not supported [ 90.748332][ T4586] usb usb8: usbfs: process 4586 (syz.2.72) did not claim interface 0 before use [ 91.772444][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 91.778722][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 92.000931][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.323278][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.427210][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.573792][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.738654][ T4599] chnl_net:caif_netlink_parms(): no params data found [ 93.162460][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.169574][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.221925][ T4599] device bridge_slave_0 entered promiscuous mode [ 93.260299][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.292481][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.320519][ T4599] device bridge_slave_1 entered promiscuous mode [ 93.404315][ T4599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.440777][ T4599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.506054][ T4599] team0: Port device team_slave_0 added [ 93.536390][ T4599] team0: Port device team_slave_1 added [ 93.590326][ T4599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.599623][ T4599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.635837][ T4599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.670318][ T4599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.680130][ T4599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.708318][ T4599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.789801][ T4599] device hsr_slave_0 entered promiscuous mode [ 93.807333][ T4599] device hsr_slave_1 entered promiscuous mode [ 93.823009][ T4599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.830783][ T4599] Cannot create hsr debugfs directory [ 93.838873][ T4281] Bluetooth: hci5: command 0x1009 tx timeout [ 94.360905][ T155] device hsr_slave_0 left promiscuous mode [ 94.368681][ T155] device hsr_slave_1 left promiscuous mode [ 94.375684][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.383907][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.392737][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 94.393475][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.407397][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.416333][ T155] device bridge_slave_1 left promiscuous mode [ 94.424485][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.440112][ T155] device bridge_slave_0 left promiscuous mode [ 94.448580][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.473582][ T155] device veth1_macvtap left promiscuous mode [ 94.479855][ T155] device veth0_macvtap left promiscuous mode [ 94.486089][ T155] device veth1_vlan left promiscuous mode [ 94.492054][ T155] device veth0_vlan left promiscuous mode [ 94.686040][ T155] team0 (unregistering): Port device team_slave_1 removed [ 94.702734][ T155] team0 (unregistering): Port device team_slave_0 removed [ 94.719949][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.741083][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.814546][ T155] bond0 (unregistering): Released all slaves [ 95.060416][ T4599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.078089][ T4599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.091378][ T4599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.124061][ T4599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.263018][ T4599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.290122][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.304813][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.321291][ T4599] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.383183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.396632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.423264][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.430394][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.465832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.496752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.525657][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.532946][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.579020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.613192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.622825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.674019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.687104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.713906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.722926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.743810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.767844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.800256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.837739][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.853600][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.870889][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.180650][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.196939][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.215053][ T4599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.471652][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.480442][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 96.495644][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.532887][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.542152][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.556499][ T4599] device veth0_vlan entered promiscuous mode [ 96.564325][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.572971][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.586437][ T4599] device veth1_vlan entered promiscuous mode [ 96.619484][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.637280][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.650499][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.663911][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.684382][ T4599] device veth0_macvtap entered promiscuous mode [ 96.708067][ T4599] device veth1_macvtap entered promiscuous mode [ 96.741276][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.753474][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.768733][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.780552][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.791016][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.802791][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.814209][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.825508][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.837198][ T4599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.848074][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.857840][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.866459][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.875553][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.886801][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.898143][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.911478][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.929133][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.940444][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.951752][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.962844][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.973637][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.985144][ T4599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.997579][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.006569][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.019535][ T4599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.035432][ T4599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.045138][ T4599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.054686][ T4599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.155888][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.178073][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.218483][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.227050][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.235311][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.245194][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.800075][ T4698] usb usb8: usbfs: process 4698 (syz.3.87) did not claim interface 0 before use [ 98.552965][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 98.675350][ T4713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 99.737754][ T4727] 9pnet: Insufficient options for proto=fd [ 99.806264][ T4258] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.830007][ T4258] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.917607][ T4738] fuse: Bad value for 'user_id' [ 99.927999][ T4738] netlink: 32 bytes leftover after parsing attributes in process `syz.3.103'. [ 100.308749][ T4745] 9pnet: p9_fd_create_tcp (4745): problem connecting socket to 127.0.0.1 [ 100.327922][ T4747] netlink: 52 bytes leftover after parsing attributes in process `syz.3.107'. [ 100.713472][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 101.159859][ T26] audit: type=1326 audit(1787312113.809:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4779 comm="syz.0.122" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b7202f0d9 code=0x0 [ 101.822741][ T4233] Bluetooth: hci5: command 0x1003 tx timeout [ 101.830820][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 101.902555][ T4233] Bluetooth: hci0: command 0x0c20 tx timeout [ 102.398769][ T4808] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 104.292198][ C0] sched: RT throttling activated [ 104.301074][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 104.315900][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 104.352245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 104.372252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 104.392257][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 104.422289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 104.631068][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 104.686089][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 104.762363][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.809791][ T4845] ceph: No mds server is up or the cluster is laggy [ 104.851747][ T4862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.150'. [ 104.956481][ T4864] jffs2: notice: (4864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.961021][ T4865] device bridge1 entered promiscuous mode [ 105.136688][ T4872] device syzkaller0 entered promiscuous mode [ 105.212498][ T13] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.232975][ T13] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 105.259167][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.312598][ T4850] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.340608][ T13] opticon 2-1:1.0: opticon converter detected [ 105.403346][ T13] usb 2-1: opticon converter now attached to ttyUSB0 [ 106.152140][ T4850] tmpfs: Unknown parameter 'quota' [ 106.392395][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 108.457992][ T13] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.839817][ T4918] jffs2: notice: (4918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 112.770562][ T4942] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 112.936317][ T4934] overlayfs: unrecognized mount option "/v98PIx@Q3}g{.$߂ ugG1e [ 130.529481][ T4203] dump_stack_lvl+0x188/0x250 [ 130.534179][ T4203] ? show_regs_print_info+0x20/0x20 [ 130.539911][ T4203] ? load_image+0x410/0x410 [ 130.544518][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 130.549885][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 130.554582][ T4203] ? kthread+0x42e/0x520 [ 130.558862][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 130.564101][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 130.569343][ T4203] kobject_add+0x160/0x230 [ 130.573801][ T4203] ? kobject_init+0x1c0/0x1c0 [ 130.578588][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 130.584093][ T4203] ? klist_children_get+0x50/0x50 [ 130.589180][ T4203] ? get_device_parent+0x121/0x3e0 [ 130.594301][ T4203] device_add+0x470/0x1050 [ 130.598856][ T4203] ? device_initialize+0x2a5/0x4d0 [ 130.604103][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 130.609258][ T4203] le_conn_complete_evt+0xc2e/0x14d0 [ 130.616626][ T4203] ? cs_le_create_conn+0x5e0/0x5e0 [ 130.622042][ T4203] ? __mutex_trylock_common+0x15c/0x260 [ 130.628624][ T4203] hci_le_meta_evt+0xd36/0x3ca0 [ 130.633724][ T4203] ? hci_event_packet+0x363/0x1310 [ 130.639000][ T4203] ? __lock_acquire+0x7b50/0x7b50 [ 130.644624][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 130.651091][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 130.656846][ T4203] ? mark_lock+0x94/0x320 [ 130.661375][ T4203] ? mutex_unlock+0x10/0x10 [ 130.665925][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.672370][ T4203] ? lock_chain_count+0x20/0x20 [ 130.677452][ T4203] ? __rwlock_init+0x140/0x140 [ 130.682586][ T4203] hci_event_packet+0xe0b/0x1310 [ 130.688558][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 130.693523][ T4203] ? rcu_lock_release+0x20/0x20 [ 130.698753][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 130.704112][ T4203] hci_rx_work+0x255/0xa10 [ 130.708774][ T4203] process_one_work+0x867/0xff0 [ 130.714071][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 130.719720][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 130.725016][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 130.730373][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 130.736115][ T4203] ? wq_worker_running+0x97/0x170 [ 130.741420][ T4203] worker_thread+0xad7/0x12a0 [ 130.746277][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 130.752264][ T4203] kthread+0x42e/0x520 [ 130.756347][ T4203] ? rcu_lock_release+0x20/0x20 [ 130.761536][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 130.766316][ T4203] ret_from_fork+0x1f/0x30 [ 130.770875][ T4203] [ 130.780145][ T4203] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.795197][ T4203] Bluetooth: hci0: failed to register connection device [ 131.031104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.049101][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.120727][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.130509][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.163920][ T5064] device veth0_vlan entered promiscuous mode [ 131.181595][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.200248][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.235637][ T5064] device veth1_vlan entered promiscuous mode [ 131.643676][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.707999][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.800461][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.895819][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.993513][ T5064] device veth0_macvtap entered promiscuous mode [ 132.053155][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.115707][ T5064] device veth1_macvtap entered promiscuous mode [ 132.328872][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.711074][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.756278][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.827234][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.840131][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.865101][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.876205][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883368][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.922338][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.972437][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.002247][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.038875][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.061290][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.087090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.161637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.205003][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.397052][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.407380][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.428089][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.740513][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.795769][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.806321][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.818431][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.853615][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.872511][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.953381][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.000157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.030476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.074730][ T5064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.108764][ T5064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.127459][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 134.132255][ T5064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.137757][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 134.155214][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.166869][ T4203] Workqueue: hci4 hci_rx_work [ 134.171888][ T4203] Call Trace: [ 134.175643][ T4203] [ 134.178868][ T4203] dump_stack_lvl+0x188/0x250 [ 134.183732][ T5064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.183792][ T4203] ? show_regs_print_info+0x20/0x20 [ 134.198992][ T4203] ? load_image+0x410/0x410 [ 134.205136][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 134.210862][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 134.215628][ T4203] ? kthread+0x42e/0x520 [ 134.220013][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 134.225383][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 134.230797][ T4203] kobject_add+0x160/0x230 [ 134.237797][ T4203] ? kobject_init+0x1c0/0x1c0 [ 134.242809][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 134.248138][ T4203] ? klist_children_get+0x50/0x50 [ 134.253287][ T4203] ? get_device_parent+0x121/0x3e0 [ 134.258634][ T4203] device_add+0x470/0x1050 [ 134.263309][ T4203] ? device_initialize+0x2a5/0x4d0 [ 134.268659][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 134.273906][ T4203] le_conn_complete_evt+0xc2e/0x14d0 [ 134.279352][ T4203] ? cs_le_create_conn+0x5e0/0x5e0 [ 134.284527][ T4203] ? __mutex_trylock_common+0x15c/0x260 [ 134.290268][ T4203] hci_le_meta_evt+0xd36/0x3ca0 [ 134.296447][ T4203] ? hci_event_packet+0x363/0x1310 [ 134.301616][ T4203] ? __lock_acquire+0x7b50/0x7b50 [ 134.306803][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 134.313386][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 134.319252][ T4203] ? mark_lock+0x94/0x320 [ 134.323804][ T4203] ? mutex_unlock+0x10/0x10 [ 134.328375][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 134.334677][ T4203] ? lock_chain_count+0x20/0x20 [ 134.339694][ T4203] ? __rwlock_init+0x140/0x140 [ 134.344596][ T4203] hci_event_packet+0xe0b/0x1310 [ 134.349849][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 134.354756][ T4203] ? rcu_lock_release+0x20/0x20 [ 134.360044][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 134.365373][ T4203] hci_rx_work+0x255/0xa10 [ 134.369949][ T4203] process_one_work+0x867/0xff0 [ 134.374858][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 134.380629][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 134.385998][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 134.391064][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 134.396774][ T4203] ? wq_worker_running+0x97/0x170 [ 134.401840][ T4203] worker_thread+0xad7/0x12a0 [ 134.406576][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 134.412516][ T4203] kthread+0x42e/0x520 [ 134.416622][ T4203] ? rcu_lock_release+0x20/0x20 [ 134.421795][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 134.426615][ T4203] ret_from_fork+0x1f/0x30 [ 134.431089][ T4203] [ 134.442511][ T4203] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.456872][ T4203] Bluetooth: hci4: failed to register connection device [ 134.616854][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.662265][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.775275][ T5327] ODEBUG: Out of memory. ODEBUG disabled [ 135.092615][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.146896][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.217666][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.373662][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.053841][ T5341] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 136.088374][ T5338] loop5: detected capacity change from 0 to 4096 [ 136.290499][ T5338] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 136.449561][ T26] audit: type=1400 audit(1787312149.099:10): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=5359 comm="syz.4.296" name="p" offset=79 [ 136.542505][ T4231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.782451][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 136.798630][ T5372] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 136.814236][ T5373] tmpfs: Unknown parameter 'quota' [ 137.912779][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.007338][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.247475][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.500751][ T4231] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.778977][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.174970][ T4229] usb 2-1: USB disconnect, device number 4 [ 139.223098][ T4231] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.436776][ T4231] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.662850][ T4231] usb 3-1: Manufacturer: syz [ 139.765318][ T4229] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 139.920922][ T4231] usb 3-1: config 0 descriptor?? [ 139.932507][ T4229] opticon 2-1:1.0: device disconnected [ 139.943740][ T4231] usb 3-1: can't set config #0, error -71 [ 139.953257][ T4231] usb 3-1: USB disconnect, device number 3 [ 140.132223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 140.152208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 140.172216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 142.673097][ T5064] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 142.797399][ T5404] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 142.861760][ T5406] gadgetfs: bound to dummy_udc driver [ 142.880262][ T5404] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 143.152348][ T4233] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 143.172360][ C0] gadgetfs: connected [ 143.177042][ T4233] gadgetfs: disconnected [ 143.422270][ C0] gadgetfs: connected [ 143.522351][ T4233] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.455080][ T5406] gadgetfs: suspended from state 3 [ 144.598509][ T4233] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 144.638368][ T5406] gadgetfs: disconnected [ 144.690222][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.923203][ T4233] usb 1-1: can't set config #1, error -71 [ 145.098425][ T4233] usb 1-1: USB disconnect, device number 2 [ 145.308332][ T4229] Bluetooth: hci3: command 0x0405 tx timeout [ 147.422343][ T2452] cec-vivid-000-vid-cap0: message 0f 87 00 00 00 timed out [ 148.001687][ T5453] device syzkaller0 entered promiscuous mode [ 148.744147][ T5469] jffs2: notice: (5469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.007556][ T4898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.112884][ T4898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.244343][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 149.354476][ T4898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.442336][ T4196] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.499517][ T4898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.552306][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 149.712369][ T4196] usb 4-1: Using ep0 maxpacket: 16 [ 149.802360][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 149.924248][ T4231] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 149.938105][ T4231] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 149.971584][ T4231] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 150.006872][ T4231] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 150.042501][ T4196] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 150.049228][ T4231] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.065106][ T4196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.093878][ T4196] usb 4-1: Product: syz [ 150.098106][ T4196] usb 4-1: Manufacturer: syz [ 150.116758][ T4196] usb 4-1: SerialNumber: syz [ 150.252341][ T4231] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 150.291764][ T4231] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 150.337612][ T4231] usb 6-1: Product: syz [ 150.342698][ T4231] usb 6-1: Manufacturer: syz [ 150.347443][ T4231] usb 6-1: SerialNumber: syz [ 150.396302][ T4231] usb 6-1: config 0 descriptor?? [ 150.414669][ T4196] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 150.434184][ T4231] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 150.495450][ T4196] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.503669][ T4231] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 150.570266][ T4196] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 150.609636][ T4196] usb 4-1: media controller created [ 150.690751][ T5526] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 150.732512][ T4196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.818294][ T4231] usb 6-1: USB disconnect, device number 2 [ 150.832108][ T5526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.870186][ T5486] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 150.924275][ T4231] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 150.971214][ T5483] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 151.042512][ T4196] zl10353_read_register: readreg error (reg=127, ret==-110) [ 151.043690][ T5483] bond1: (slave batadv1): making interface the new active one [ 151.098388][ T5483] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 151.177381][ T4196] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 151.275871][ T5530] bond1 (unregistering): (slave batadv1): Releasing active interface [ 151.334859][ T5530] bond1 (unregistering): Released all slaves [ 151.489537][ T4251] usb 4-1: USB disconnect, device number 2 [ 152.117885][ T5563] 9pnet_virtio: no channels available for device syz [ 152.228120][ T4898] device hsr_slave_0 left promiscuous mode [ 152.315765][ T4898] device hsr_slave_1 left promiscuous mode [ 152.357299][ T4898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.374201][ T4898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.446479][ T4898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.468393][ T4898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.483691][ T5573] 9pnet_virtio: no channels available for device syz [ 152.503147][ T4898] device bridge_slave_1 left promiscuous mode [ 152.532102][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.632941][ T4898] device bridge_slave_0 left promiscuous mode [ 152.639865][ T4898] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.692825][ T5539] trusted_key: encrypted_key: hex blob is missing [ 152.789280][ T4898] device veth1_macvtap left promiscuous mode [ 152.863783][ T4898] device veth0_macvtap left promiscuous mode [ 152.944518][ T4898] device veth1_vlan left promiscuous mode [ 153.012055][ T4898] device veth0_vlan left promiscuous mode [ 154.705297][ T4898] team0 (unregistering): Port device team_slave_1 removed [ 154.761931][ T4898] team0 (unregistering): Port device team_slave_0 removed [ 154.796276][ T4898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.850045][ T4898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.080621][ T4898] bond0 (unregistering): Released all slaves [ 155.171485][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 155.195491][ T5581] device bridge_slave_1 left promiscuous mode [ 155.209791][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.235643][ T5581] device bridge_slave_0 left promiscuous mode [ 155.250394][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.376088][ T5592] tipc: Started in network mode [ 155.381895][ T5592] tipc: Node identity 32ad5622b0e, cluster identity 4711 [ 155.390891][ T5592] tipc: Enabled bearer , priority 10 [ 155.502746][ T5589] tipc: Resetting bearer [ 155.606356][ T5589] tipc: Disabling bearer [ 155.851006][ T5606] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 156.302027][ T5623] device syzkaller1 entered promiscuous mode [ 156.410276][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.366'. [ 156.445732][ T5625] device hsr_slave_0 left promiscuous mode [ 156.473955][ T5625] device hsr_slave_1 left promiscuous mode [ 156.570880][ T5627] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 156.669575][ T5627] device bond1 entered promiscuous mode [ 156.694373][ T5627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.736515][ T5630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.753770][ T5630] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 156.776294][ T5630] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 156.801451][ T5630] bond1: (slave xfrm1): making interface the new active one [ 156.828046][ T5630] device xfrm1 entered promiscuous mode [ 156.852002][ T5630] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 156.897991][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 158.124373][ T5649] tipc: Started in network mode [ 158.129454][ T5649] tipc: Node identity a2753b047cff, cluster identity 4711 [ 158.137243][ T5649] tipc: Enabled bearer , priority 10 [ 158.183755][ T5647] tipc: Resetting bearer [ 158.312470][ T5660] process 'syz.3.373' launched '/dev/fd/9' with NULL argv: empty string added [ 158.735588][ T5647] tipc: Disabling bearer [ 159.282559][ T5671] [ 159.284950][ T5671] ====================================================== [ 159.292005][ T5671] WARNING: possible circular locking dependency detected [ 159.299181][ T5671] syzkaller #0 Not tainted [ 159.303736][ T5671] ------------------------------------------------------ [ 159.310915][ T5671] syz.3.375/5671 is trying to acquire lock: [ 159.316907][ T5671] ffff888145d9daa0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 159.328419][ T5671] [ 159.328419][ T5671] but task is already holding lock: [ 159.335805][ T5671] ffff888021dbdd20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 159.344897][ T5671] [ 159.344897][ T5671] which lock already depends on the new lock. [ 159.344897][ T5671] [ 159.355319][ T5671] [ 159.355319][ T5671] the existing dependency chain (in reverse order) is: [ 159.364353][ T5671] [ 159.364353][ T5671] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 159.372207][ T5671] __mutex_lock_common+0x1e5/0x2400 [ 159.378226][ T5671] mutex_lock_nested+0x17/0x20 [ 159.383539][ T5671] tcm_set_name+0x26/0x90 [ 159.388411][ T5671] function_make+0x195/0x350 [ 159.393554][ T5671] configfs_mkdir+0x511/0x9e0 [ 159.398979][ T5671] vfs_mkdir+0x386/0x570 [ 159.403894][ T5671] do_mkdirat+0x1dd/0x5c0 [ 159.409136][ T5671] __x64_sys_mkdirat+0x85/0x90 [ 159.414552][ T5671] do_syscall_64+0x4c/0xa0 [ 159.419636][ T5671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.426100][ T5671] [ 159.426100][ T5671] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 159.434398][ T5671] __mutex_lock_common+0x1e5/0x2400 [ 159.440164][ T5671] mutex_lock_nested+0x17/0x20 [ 159.445558][ T5671] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 159.452502][ T5671] configfs_symlink+0x5a4/0x13b0 [ 159.457997][ T5671] vfs_symlink+0x245/0x3d0 [ 159.463838][ T5671] do_symlinkat+0x1ab/0x6b0 [ 159.468875][ T5671] __x64_sys_symlinkat+0x95/0xa0 [ 159.474339][ T5671] do_syscall_64+0x4c/0xa0 [ 159.479297][ T5671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.485722][ T5671] [ 159.485722][ T5671] -> #0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 159.495173][ T5671] __lock_acquire+0x2c66/0x7b50 [ 159.500573][ T5671] lock_acquire+0x19e/0x400 [ 159.505838][ T5671] down_write+0x38/0x60 [ 159.510521][ T5671] configfs_depend_item_unlocked+0x14f/0x430 [ 159.517128][ T5671] usbg_make_tpg+0x1f3/0x580 [ 159.522239][ T5671] target_fabric_make_tpg+0xa0/0x6d0 [ 159.528058][ T5671] configfs_mkdir+0x511/0x9e0 [ 159.533282][ T5671] vfs_mkdir+0x386/0x570 [ 159.538063][ T5671] do_mkdirat+0x1dd/0x5c0 [ 159.542937][ T5671] __x64_sys_mkdirat+0x85/0x90 [ 159.548255][ T5671] do_syscall_64+0x4c/0xa0 [ 159.553289][ T5671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.559738][ T5671] [ 159.559738][ T5671] other info that might help us debug this: [ 159.559738][ T5671] [ 159.569985][ T5671] Chain exists of: [ 159.569985][ T5671] &sb->s_type->i_mutex_key#23 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 159.569985][ T5671] [ 159.584776][ T5671] Possible unsafe locking scenario: [ 159.584776][ T5671] [ 159.592233][ T5671] CPU0 CPU1 [ 159.597623][ T5671] ---- ---- [ 159.603090][ T5671] lock(&opts->dep_lock); [ 159.607510][ T5671] lock(gadget_subsys.su_mutex); [ 159.615053][ T5671] lock(&opts->dep_lock); [ 159.622016][ T5671] lock(&sb->s_type->i_mutex_key#23); [ 159.627479][ T5671] [ 159.627479][ T5671] *** DEADLOCK *** [ 159.627479][ T5671] [ 159.635618][ T5671] 5 locks held by syz.3.375/5671: [ 159.640755][ T5671] #0: ffff888141baa460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 159.650011][ T5671] #1: ffff88805e8af3f0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 159.660833][ T5671] #2: ffffffff8cc23ef0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 159.673623][ T5671] #3: ffffffff8cf21628 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 159.683293][ T5671] #4: ffff888021dbdd20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 159.693001][ T5671] [ 159.693001][ T5671] stack backtrace: [ 159.698987][ T5671] CPU: 1 PID: 5671 Comm: syz.3.375 Not tainted syzkaller #0 [ 159.708989][ T5671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.719071][ T5671] Call Trace: [ 159.722358][ T5671] [ 159.725294][ T5671] dump_stack_lvl+0x188/0x250 [ 159.729984][ T5671] ? load_image+0x410/0x410 [ 159.734494][ T5671] ? show_regs_print_info+0x20/0x20 [ 159.739707][ T5671] ? print_circular_bug+0x12b/0x1a0 [ 159.745443][ T5671] check_noncircular+0x296/0x330 [ 159.750473][ T5671] ? look_up_lock_class+0x71/0x110 [ 159.755812][ T5671] ? add_chain_block+0x9b0/0x9b0 [ 159.760772][ T5671] ? lockdep_lock+0xf1/0x1f0 [ 159.765510][ T5671] ? mark_lock+0x94/0x320 [ 159.769846][ T5671] ? mark_lock+0x94/0x320 [ 159.774265][ T5671] ? _find_first_zero_bit+0xd1/0xf0 [ 159.779471][ T5671] __lock_acquire+0x2c66/0x7b50 [ 159.784436][ T5671] ? verify_lock_unused+0x140/0x140 [ 159.789655][ T5671] ? __mutex_trylock_common+0x15c/0x260 [ 159.795227][ T5671] ? rcu_lock_release+0x20/0x20 [ 159.800092][ T5671] lock_acquire+0x19e/0x400 [ 159.804607][ T5671] ? configfs_depend_item_unlocked+0x14f/0x430 [ 159.810889][ T5671] ? __might_sleep+0xf0/0xf0 [ 159.815658][ T5671] ? __kasan_kmalloc+0xc6/0xe0 [ 159.820425][ T5671] ? read_lock_is_recursive+0x10/0x10 [ 159.826022][ T5671] ? mutex_lock_io_nested+0x60/0x60 [ 159.831250][ T5671] down_write+0x38/0x60 [ 159.835417][ T5671] ? configfs_depend_item_unlocked+0x14f/0x430 [ 159.841593][ T5671] configfs_depend_item_unlocked+0x14f/0x430 [ 159.847604][ T5671] usbg_make_tpg+0x1f3/0x580 [ 159.852247][ T5671] ? mutex_lock_io_nested+0x60/0x60 [ 159.857582][ T5671] ? usbg_drop_tport+0x20/0x20 [ 159.862349][ T5671] ? vscnprintf+0x80/0x80 [ 159.866686][ T5671] target_fabric_make_tpg+0xa0/0x6d0 [ 159.871973][ T5671] ? target_fabric_release_wwn+0xa0/0xa0 [ 159.877610][ T5671] configfs_mkdir+0x511/0x9e0 [ 159.882296][ T5671] vfs_mkdir+0x386/0x570 [ 159.886567][ T5671] do_mkdirat+0x1dd/0x5c0 [ 159.890922][ T5671] ? vfs_mkdir+0x570/0x570 [ 159.895389][ T5671] __x64_sys_mkdirat+0x85/0x90 [ 159.900334][ T5671] do_syscall_64+0x4c/0xa0 [ 159.904762][ T5671] ? clear_bhb_loop+0x30/0x80 [ 159.909451][ T5671] ? clear_bhb_loop+0x30/0x80 [ 159.914133][ T5671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.920118][ T5671] RIP: 0033:0x7fa56ece80d9 [ 159.924558][ T5671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.944184][ T5671] RSP: 002b:00007fa56cf40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 159.952610][ T5671] RAX: ffffffffffffffda RBX: 00007fa56ef6ffa0 RCX: 00007fa56ece80d9 [ 159.960593][ T5671] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 159.968575][ T5671] RBP: 00007fa56ed7f024 R08: 0000000000000000 R09: 0000000000000000 [ 159.976561][ T5671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.984630][ T5671] R13: 00007fa56ef70038 R14: 00007fa56ef6ffa0 R15: 00007fffec9ddde8 [ 159.992918][ T5671] [ 160.002726][ T26] audit: type=1800 audit(1787312172.649:11): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.375" name="nexus" dev="configfs" ino=65979 res=0 errno=0 [ 160.065665][ T5671] Missing 'naa.' prefix [ 160.877972][ T26] audit: type=1800 audit(1787312173.529:12): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.377" name="MaxPower" dev="configfs" ino=60401 res=0 errno=0 [ 160.952465][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 160.993840][ T5699] netlink: 'syz.5.377': attribute type 2 has an invalid length.