last executing test programs: 4.759837974s ago: executing program 4 (id=491): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.21465897s ago: executing program 4 (id=506): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0xffffd000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 4.151956582s ago: executing program 4 (id=509): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @multicast1}, &(0x7f0000000140)=0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a0108000000000000000002000000090002007379"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="8b67f73793fb7012824944a600410303160f627753b28c5500d914d4eedc5950be87f5d6337b34844dc2c407cb6ecf2e93fa3cefbdf0c1c2be09d4"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) socket(0x10, 0x803, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 3.294610279s ago: executing program 4 (id=530): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000140)={0x20, 0xe, 0x1, 'r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.735768916s ago: executing program 4 (id=543): openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100007f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2.62049165s ago: executing program 4 (id=544): r0 = add_key$user(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000001bc0), 0x2) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000006480)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x5dd, &(0x7f0000001dc0)="$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") r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) unshare(0x4020400) getpeername$unix(r5, 0x0, 0x0) read$watch_queue(r1, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r0) 2.196317433s ago: executing program 3 (id=556): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04", 0x12) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550d, 0x0) r4 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x314}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x0) 1.9684138s ago: executing program 3 (id=561): r0 = openat$comedi(0xffffff9c, &(0x7f0000000480)='/dev/comedi4\x00', 0x80a000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, &(0x7f0000000700)={0x0, 0x30000, 0xffffffff, 0xa, 0x80, 0x7a, 0x2, 0x7, 0x0, 0x9, 0x4, 0x1, &(0x7f0000000040), 0x0, 0x0}) 1.808488124s ago: executing program 3 (id=564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x20040884) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0xffffffffffffffdf, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r3, &(0x7f000000a440), 0x1, 0x12020, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000100)=0x7, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}, 0xffffffffffffff74) 1.747269197s ago: executing program 1 (id=566): socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, 0x0) 1.64029466s ago: executing program 1 (id=568): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.640217669s ago: executing program 0 (id=569): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000000000080012000300000008001100ff070000080010000000020008000f"], 0x54}}, 0x0) 1.566350342s ago: executing program 0 (id=571): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) 1.514000683s ago: executing program 1 (id=572): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04", 0x12) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, 0x0) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080), 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x314}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x0) 1.460368755s ago: executing program 0 (id=573): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @multicast1}, &(0x7f0000000140)=0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a0108000000000000000002000000090002007379"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="8b67f73793fb7012824944a600410303160f627753b28c5500d914d4eedc5950be87f5d6337b34844dc2c407cb6ecf2e93fa3cefbdf0c1c2be09d4"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) socket(0x10, 0x803, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 1.414152236s ago: executing program 2 (id=574): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0x5dc8, &(0x7f00000005c0)={0x0, 0xc52d, 0x40, 0x0, 0x277}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setns(r3, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.342778719s ago: executing program 2 (id=575): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|ui\xa2b\x8f\xee\x1c\xc5=^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1.248584022s ago: executing program 1 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='trusted.syz\x00') write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) 1.200244513s ago: executing program 1 (id=577): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x88, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x19, 0x1, "020000000400000126000400"}, {0x18, 0x2, "0033e4756e009263e712da3df208"}, {0x18, 0x1, "45976e75e433"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, 0x0}, 0x20) r3 = socket(0x80000000000000a, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 1.140252505s ago: executing program 2 (id=578): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 272.683882ms ago: executing program 3 (id=579): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) epoll_create1(0x80000) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) 272.495751ms ago: executing program 1 (id=580): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/224, 0xe0}], 0x1}, 0x2}], 0x1, 0x0, 0x0) 272.030351ms ago: executing program 0 (id=581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000140)={0x38, r1, 0x1, 0x50bd29, 0x25dfdc03, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008}, 0x8010) 202.360734ms ago: executing program 2 (id=582): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x25, &(0x7f0000000000)=ANY=[], 0x1000f) 140.632326ms ago: executing program 3 (id=583): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x40, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) 140.504546ms ago: executing program 0 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@newlink={0x60, 0x10, 0x401, 0x400005, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 102.383407ms ago: executing program 2 (id=585): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0x5dc8, &(0x7f00000005c0)={0x0, 0xc52d, 0x40, 0x0, 0x277}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setns(r3, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 84.566348ms ago: executing program 3 (id=586): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04", 0x12) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, 0x0) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080), 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x314}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x0) 648.47µs ago: executing program 0 (id=587): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00020004"], 0x50) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 0s ago: executing program 2 (id=588): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. syzkaller login: [ 61.453026][ T4176] cgroup: Unknown subsys name 'net' [ 61.597589][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.104200][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.465113][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.548404][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.652926][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 64.706706][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.718318][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.726787][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.759101][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.766404][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.774901][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.782653][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.789729][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.798094][ T4189] device bridge_slave_0 entered promiscuous mode [ 64.808707][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.815884][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.823988][ T4189] device bridge_slave_1 entered promiscuous mode [ 64.863516][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 64.893366][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.900738][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.908728][ T4200] device bridge_slave_0 entered promiscuous mode [ 64.918851][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.934719][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.956599][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.965952][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.974214][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.982540][ T4200] device bridge_slave_1 entered promiscuous mode [ 64.995084][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 65.012659][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.055981][ T4189] team0: Port device team_slave_0 added [ 65.069273][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.093813][ T4189] team0: Port device team_slave_1 added [ 65.106423][ T4193] team0: Port device team_slave_0 added [ 65.114421][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.152400][ T4193] team0: Port device team_slave_1 added [ 65.186430][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.197124][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.205247][ T4195] device bridge_slave_0 entered promiscuous mode [ 65.223047][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.230287][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.256694][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.288399][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.296690][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.305073][ T4195] device bridge_slave_1 entered promiscuous mode [ 65.314533][ T4200] team0: Port device team_slave_0 added [ 65.323009][ T4200] team0: Port device team_slave_1 added [ 65.335832][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.343066][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.369217][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.381208][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.388176][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.414183][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.425864][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.433482][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.442080][ T4196] device bridge_slave_0 entered promiscuous mode [ 65.467514][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.474663][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.500762][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.525199][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.532491][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.540427][ T4196] device bridge_slave_1 entered promiscuous mode [ 65.562901][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.569902][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.596719][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.610611][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.617679][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.644111][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.664030][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.708776][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.719782][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.738048][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.753855][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.761713][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.791465][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.798374][ T4189] device hsr_slave_1 entered promiscuous mode [ 65.805966][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.814109][ T4189] Cannot create hsr debugfs directory [ 65.842198][ T4196] team0: Port device team_slave_0 added [ 65.851852][ T4200] device hsr_slave_0 entered promiscuous mode [ 65.858685][ T4200] device hsr_slave_1 entered promiscuous mode [ 65.865903][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.873570][ T4200] Cannot create hsr debugfs directory [ 65.897271][ T4195] team0: Port device team_slave_0 added [ 65.904392][ T4196] team0: Port device team_slave_1 added [ 65.912413][ T4195] team0: Port device team_slave_1 added [ 65.939557][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.946763][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.973144][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.020288][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.027977][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.054384][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.074275][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.081834][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.108326][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.144131][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.152943][ T4178] Bluetooth: hci0: command 0x0409 tx timeout [ 66.159763][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.186028][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.231596][ T4195] device hsr_slave_0 entered promiscuous mode [ 66.238719][ T4195] device hsr_slave_1 entered promiscuous mode [ 66.245867][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.253672][ T4195] Cannot create hsr debugfs directory [ 66.310904][ T4178] Bluetooth: hci1: command 0x0409 tx timeout [ 66.320641][ T2303] Bluetooth: hci3: command 0x0409 tx timeout [ 66.326742][ T2303] Bluetooth: hci4: command 0x0409 tx timeout [ 66.336185][ T2303] Bluetooth: hci2: command 0x0409 tx timeout [ 66.358837][ T4196] device hsr_slave_0 entered promiscuous mode [ 66.367906][ T4196] device hsr_slave_1 entered promiscuous mode [ 66.374973][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.382988][ T4196] Cannot create hsr debugfs directory [ 66.572288][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.599631][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.628577][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.642807][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.679382][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.688584][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.706319][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.721606][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.794870][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.805037][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.815605][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.834479][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.897914][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.925304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.935840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.948942][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.962568][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.973362][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.994185][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.025627][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.034888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.045051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.054464][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.061752][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.071572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.080413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.089117][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.096230][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.104898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.114415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.144964][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.153144][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.177165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.185444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.194025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.205634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.216601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.229064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.248420][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.261232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.275803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.284461][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.291579][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.300226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.310114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.320224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.332050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.341485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.352634][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.359754][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.370026][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.383275][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.395199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.404343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.415658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.425102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.437698][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.449609][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.466305][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.479539][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.488780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.499488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.507804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.565544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.576878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.589786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.598840][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.605994][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.615406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.625321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.634320][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.641448][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.649852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.659448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.668649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.678399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.687750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.697974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.707833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.738377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.756868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.770183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.782295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.814922][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.830656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.839839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.854471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.864518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.873726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.884432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.892753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.902343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.949506][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.965088][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.982581][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.993951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.005168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.019654][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.035441][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.069346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.087087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.102360][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.149148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.162114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.182270][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.189429][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.198398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.207664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.217014][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.224159][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.232636][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 68.241045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.275324][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.287317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.299054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.310036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.339115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.351021][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.363948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.373188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.382037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.391015][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 68.397451][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 68.401370][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 68.409509][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 68.413389][ T4189] device veth0_vlan entered promiscuous mode [ 68.429708][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.448960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.458201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.466561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.476362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.485771][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.494150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.502498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.511166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.519836][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.532985][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.564815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.578632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.588405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.603789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.613346][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.620502][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.628946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.638500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.647513][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.654654][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.663759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.673528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.681505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.689004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.708442][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.727276][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.739925][ T4189] device veth1_vlan entered promiscuous mode [ 68.758031][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.774735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.787008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.800894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.809479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.822864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.831831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.859942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.870158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.940731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.949292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.973098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.984205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.994286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.004244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.013936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.023287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.044083][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.054660][ T4189] device veth0_macvtap entered promiscuous mode [ 69.068091][ T4189] device veth1_macvtap entered promiscuous mode [ 69.077080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.086729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.096281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.104924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.117025][ T4193] device veth0_vlan entered promiscuous mode [ 69.157942][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.168768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.181606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.189881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.209086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.220096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.233793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.257181][ T4193] device veth1_vlan entered promiscuous mode [ 69.267880][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.297103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.307664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.318779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.329068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.338490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.347319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.356408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.383461][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.392995][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.402943][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.412607][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.426922][ T4200] device veth0_vlan entered promiscuous mode [ 69.447885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.456736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.466240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.482701][ T4193] device veth0_macvtap entered promiscuous mode [ 69.495573][ T4200] device veth1_vlan entered promiscuous mode [ 69.532444][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.539677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.555744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.565081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.573559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.586215][ T4193] device veth1_macvtap entered promiscuous mode [ 69.624146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.636402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.667756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.678280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.704994][ T4200] device veth0_macvtap entered promiscuous mode [ 69.721007][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.732061][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.744350][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.764320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.773690][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.783389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.792710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.802076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.810925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.819698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.843534][ T4200] device veth1_macvtap entered promiscuous mode [ 69.853215][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.865368][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.877177][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.893376][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.915833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.925142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.934102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.943342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.952180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.963424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.972051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.981367][ T4195] device veth0_vlan entered promiscuous mode [ 69.988839][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.999052][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.008934][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.019207][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.068482][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.077840][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.095363][ T4195] device veth1_vlan entered promiscuous mode [ 70.108019][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.119445][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.131497][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.142886][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.156900][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.182024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.192226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.200266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.209373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.219382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.228687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.253102][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.265492][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.275962][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.286574][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.297984][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.311198][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 70.327609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.347272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.357518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.366897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.375970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.385152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.394258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.404343][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.413318][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.422386][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.431980][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.446674][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.452832][ T4196] device veth0_vlan entered promiscuous mode [ 70.460922][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.471626][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 70.481405][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 70.491263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.515164][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 70.522820][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 70.530008][ T4196] device veth1_vlan entered promiscuous mode [ 70.558678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.572228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.588562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.600856][ T4195] device veth0_macvtap entered promiscuous mode [ 70.630583][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.638629][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.661824][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.670203][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.679451][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.692202][ T4195] device veth1_macvtap entered promiscuous mode [ 70.717565][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.728606][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.740545][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.752044][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.762638][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.773395][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.786473][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.831725][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.849813][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.865498][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.875512][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.892201][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.904989][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.915574][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.926341][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.936457][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.948292][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.961174][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.984375][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.994037][ T4196] device veth0_macvtap entered promiscuous mode [ 71.008196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.019721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.023526][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.035203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.055707][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.067985][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.084849][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.095152][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.114221][ T4196] device veth1_macvtap entered promiscuous mode [ 71.127710][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.137211][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.168972][ T4266] device syzkaller0 entered promiscuous mode [ 71.228524][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.249134][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.261579][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.263667][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.280988][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.291689][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.292465][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.298379][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.309017][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.327338][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.337324][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.348709][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.363444][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.391534][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.411383][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.426765][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.458441][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.517578][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.529428][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.541205][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.557706][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.562634][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.579941][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.598752][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.609675][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.619757][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.630383][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.642119][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.663144][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.678273][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.689245][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.715564][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.739706][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.753434][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.765124][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.853632][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.890258][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.001307][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.041368][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.042291][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.049230][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.113879][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.137426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.223924][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.232454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.246652][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.271166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.402338][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 72.510456][ T4300] loop3: detected capacity change from 0 to 4096 [ 72.551419][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 72.560618][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 72.567741][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 72.573924][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 72.780657][ T7] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 72.797269][ T4309] loop0: detected capacity change from 0 to 64 [ 72.961501][ T4309] attempt to access beyond end of device [ 72.961501][ T4309] loop0: rw=0, want=1026, limit=64 [ 73.027414][ T4309] Buffer I/O error on dev loop0, logical block 512, async page read [ 73.050753][ T4309] attempt to access beyond end of device [ 73.050753][ T4309] loop0: rw=0, want=113154, limit=64 [ 73.111168][ T4309] Buffer I/O error on dev loop0, logical block 56576, async page read [ 73.170836][ T7] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 73.197348][ T4309] attempt to access beyond end of device [ 73.197348][ T4309] loop0: rw=0, want=1026, limit=64 [ 73.210716][ T7] usb 3-1: config 0 has no interface number 0 [ 73.225582][ T7] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 73.236611][ T4309] Buffer I/O error on dev loop0, logical block 512, async page read [ 73.258855][ T4309] attempt to access beyond end of device [ 73.258855][ T4309] loop0: rw=0, want=113154, limit=64 [ 73.271271][ T7] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 73.306576][ T7] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 73.312092][ T4309] Buffer I/O error on dev loop0, logical block 56576, async page read [ 73.350126][ T7] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.389462][ T7] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 73.420035][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.466899][ T7] usb 3-1: config 0 descriptor?? [ 73.501645][ T4297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.508938][ T4297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.583855][ T7] ldusb 3-1:0.55: Interrupt in endpoint not found [ 73.688199][ T4327] loop4: detected capacity change from 0 to 7 [ 73.766694][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 73.809743][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.820723][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.829288][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.840287][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 73.860483][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 73.931658][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.942653][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 74.010813][ T4337] netlink: 51 bytes leftover after parsing attributes in process `syz.0.24'. [ 74.030381][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 74.041382][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 74.072847][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 74.083875][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 74.264983][ T2303] usb 3-1: USB disconnect, device number 2 [ 74.454538][ T4264] kernel write not supported for file /12/net/snmp (pid: 4264 comm: kworker/0:6) [ 74.565246][ T4354] tipc: Failed to remove unknown binding: 66,0,0/0:842368525/842368527 [ 74.580053][ T4357] tipc: Failed to remove unknown binding: 66,0,0/0:2167301801/2167301802 [ 74.596781][ T4357] tipc: Failed to remove unknown binding: 66,0,0/0:2167301801/2167301802 [ 74.624191][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 74.686233][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 75.096461][ T4203] Bluetooth: hci1: hcon ffff8880796ce000 sent 1 < count 35 [ 75.447882][ T21] Bluetooth: hci4: command 0x2021 tx timeout [ 75.601664][ T4401] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.790750][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.830673][ T4264] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 75.919610][ T4411] binder_alloc: 4410: binder_alloc_buf, no vma [ 76.115102][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 76.197445][ T4264] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 76.231559][ T4264] usb 2-1: config 0 has no interface number 0 [ 76.237721][ T4264] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 76.254890][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 76.267176][ T4264] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 76.316552][ T4264] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 76.338005][ T4264] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.352056][ T4425] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 76.391737][ T4264] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 76.411144][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.437229][ T4264] usb 2-1: config 0 descriptor?? [ 76.471515][ T4398] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 76.481244][ T4398] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 76.481410][ T21] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 76.495906][ T4264] ldusb 2-1:0.55: Interrupt in endpoint not found [ 76.514302][ T21] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 76.555425][ T21] usb 4-1: Product: syz [ 76.581237][ T21] usb 4-1: Manufacturer: syz [ 76.598380][ T21] usb 4-1: SerialNumber: syz [ 76.617748][ T21] usb 4-1: config 0 descriptor?? [ 76.641582][ T4397] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.657454][ T4428] loop2: detected capacity change from 0 to 4096 [ 76.665150][ T21] hub 4-1:0.0: bad descriptor, ignoring hub [ 76.672324][ T21] hub: probe of 4-1:0.0 failed with error -5 [ 76.698154][ T4428] ntfs3: Unknown parameter 'nocase' [ 77.003499][ T21] usb 2-1: USB disconnect, device number 2 [ 77.180641][ T4264] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.430877][ T4264] usb 3-1: Using ep0 maxpacket: 32 [ 77.535079][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.543305][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.560823][ T4264] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 77.568951][ T4264] usb 3-1: config 0 has no interface number 0 [ 77.751027][ T4264] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 77.766197][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.775378][ T4264] usb 3-1: Product: syz [ 77.779724][ T4264] usb 3-1: Manufacturer: syz [ 77.789403][ T4264] usb 3-1: SerialNumber: syz [ 77.807886][ T4264] usb 3-1: config 0 descriptor?? [ 77.857968][ T4264] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 78.035513][ T4232] usb 4-1: USB disconnect, device number 2 [ 78.071618][ T4264] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 78.115826][ T4264] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 78.270087][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.324411][ T4458] Cannot find del_set index 0 as target [ 78.347784][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.606684][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 79.128772][ T4440] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.138776][ T4440] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.148523][ T4440] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.159143][ T4440] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.170652][ T4477] netlink: 216 bytes leftover after parsing attributes in process `syz.3.76'. [ 79.395598][ T21] usb 3-1: USB disconnect, device number 3 [ 79.400678][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 79.437179][ T21] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 79.488153][ T21] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 79.563111][ T21] quatech2 3-1:0.51: device disconnected [ 79.611593][ T4486] loop0: detected capacity change from 0 to 512 [ 79.722758][ T4486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.746482][ T4486] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.768201][ T4496] loop4: detected capacity change from 0 to 128 [ 79.876928][ T4496] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 80.027167][ T4500] device syzkaller0 entered promiscuous mode [ 80.044084][ T4502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.85'. [ 80.355985][ T4511] netlink: 'syz.2.85': attribute type 12 has an invalid length. [ 81.489260][ T4200] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 81.519130][ T4200] FAT-fs (loop4): Filesystem has been set read-only [ 81.553145][ T4535] loop0: detected capacity change from 0 to 512 [ 81.631654][ T4535] EXT4-fs (loop0): Ignoring removed nobh option [ 81.880536][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.244849][ T4540] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 83.252382][ T4540] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.275233][ T4535] EXT4-fs (loop0): Ignoring removed oldalloc option [ 83.597312][ T4535] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 83.641497][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.99'. [ 83.655555][ T4535] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.97: invalid indirect mapped block 256 (level 1) [ 83.691755][ T4551] netlink: 'syz.4.99': attribute type 12 has an invalid length. [ 83.712102][ T4535] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.97: invalid indirect mapped block 2683928664 (level 1) [ 83.737993][ T4535] EXT4-fs (loop0): 1 truncate cleaned up [ 83.748538][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 83.891047][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.906458][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.916383][ T21] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 83.925955][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.936080][ T21] usb 3-1: config 0 descriptor?? [ 84.097061][ T4569] loop0: detected capacity change from 0 to 128 [ 84.164289][ T4569] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 84.483488][ T21] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 5/7 [ 84.520993][ T21] pyra 0003:1E7D:2CF6.0001: parse failed [ 84.526714][ T21] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -22 [ 84.645641][ T4577] loop1: detected capacity change from 0 to 1024 [ 84.685050][ T4232] usb 3-1: USB disconnect, device number 4 [ 84.868090][ T4587] process 'syz.4.112' launched './file0' with NULL argv: empty string added [ 85.079863][ T4599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.119'. [ 85.112517][ T4599] netlink: 'syz.4.119': attribute type 12 has an invalid length. [ 85.203610][ T4607] overlayfs: missing 'lowerdir' [ 85.218529][ T4607] overlayfs: failed to resolve '/ma_cm': -2 [ 85.287253][ T4611] loop2: detected capacity change from 0 to 128 [ 85.342975][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.415524][ T4611] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 86.360543][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 86.643238][ T1107] cfg80211: failed to load regulatory.db [ 87.720627][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.766089][ T4630] loop2: detected capacity change from 0 to 7 [ 87.820720][ T4232] usb 4-1: config 4 interface 0 has no altsetting 0 [ 87.840243][ T4181] Dev loop2: unable to read RDB block 7 [ 87.852548][ T4181] loop2: unable to read partition table [ 87.858391][ T4181] loop2: partition table beyond EOD, truncated [ 87.885197][ T4630] Dev loop2: unable to read RDB block 7 [ 87.922099][ T4630] loop2: unable to read partition table [ 87.950668][ T4630] loop2: partition table beyond EOD, truncated [ 87.991602][ T4630] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.080593][ T4232] usb 4-1: string descriptor 0 read error: -71 [ 88.086878][ T4232] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 88.107100][ T4232] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 88.173034][ T4232] usb 4-1: can't set config #4, error -71 [ 88.184983][ T4232] usb 4-1: USB disconnect, device number 3 [ 88.331579][ T4651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.135'. [ 88.387412][ T4655] netlink: 'syz.2.135': attribute type 12 has an invalid length. [ 88.525885][ T4661] loop1: detected capacity change from 0 to 128 [ 88.564966][ T4661] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 90.065652][ T4672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.140'. [ 90.876810][ T4678] loop4: detected capacity change from 0 to 2048 [ 90.889049][ T4682] TCP: TCP_TX_DELAY enabled [ 91.029290][ T4678] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.168234][ T4696] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 91.215475][ T4700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.234283][ T4696] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 78 with error 28 [ 91.260626][ T4696] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.260626][ T4696] [ 91.280818][ T4696] EXT4-fs (loop4): Total free blocks count 0 [ 91.301864][ T4696] EXT4-fs (loop4): Free/Dirty block details [ 91.307884][ T4696] EXT4-fs (loop4): free_blocks=66060288 [ 91.324157][ T4696] EXT4-fs (loop4): dirty_blocks=80 [ 91.329337][ T4696] EXT4-fs (loop4): Block reservation details [ 91.347321][ T4696] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 91.466722][ T4709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.155'. [ 91.505906][ T4709] netlink: 'syz.0.155': attribute type 12 has an invalid length. [ 91.583331][ T4627] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 91.597175][ T4716] fuse: Bad value for 'fd' [ 91.605766][ T4627] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.605766][ T4627] [ 91.793831][ T4728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.162'. [ 93.144322][ T4749] fuse: Bad value for 'fd' [ 93.366709][ T4765] loop4: detected capacity change from 0 to 128 [ 93.384183][ T4767] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 93.418759][ T4769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.179'. [ 93.443849][ T4769] netlink: 'syz.2.179': attribute type 12 has an invalid length. [ 93.608144][ T4774] loop4: detected capacity change from 0 to 4096 [ 93.822379][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 93.867119][ T4781] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 93.895364][ T4781] device syzkaller0 entered promiscuous mode [ 93.906242][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.173495][ T4792] loop4: detected capacity change from 0 to 128 [ 94.258568][ T4792] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 94.380653][ T4238] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.660312][ T4816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.200'. [ 94.671711][ T4816] netlink: 'syz.4.200': attribute type 12 has an invalid length. [ 94.790845][ T4238] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.799531][ T4238] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 94.814319][ T4238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.823675][ T4238] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 94.884002][ T4825] netlink: 76 bytes leftover after parsing attributes in process `syz.2.201'. [ 94.970930][ T4238] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.980580][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.988741][ T4238] usb 4-1: Product: syz [ 94.994391][ T4238] usb 4-1: Manufacturer: syz [ 95.020782][ T4790] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.046641][ T4238] cdc_wdm 4-1:1.0: skipping garbage [ 95.060472][ T4238] cdc_wdm 4-1:1.0: skipping garbage [ 95.065748][ T4238] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 95.099173][ T4835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 95.166985][ T4837] fuse: Bad value for 'fd' [ 95.252508][ T4264] usb 4-1: USB disconnect, device number 4 [ 95.647898][ T4868] fuse: Bad value for 'fd' [ 95.900071][ T4888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.225'. [ 95.936316][ T4888] netlink: 'syz.3.225': attribute type 12 has an invalid length. [ 96.883488][ T4921] loop3: detected capacity change from 0 to 1764 [ 96.923593][ T4203] Bluetooth: Unexpected continuation frame (len 32) [ 97.209220][ T4933] fuse: Bad value for 'fd' [ 98.372904][ T4949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.251'. [ 98.416256][ T4949] netlink: 'syz.0.251': attribute type 12 has an invalid length. [ 98.625034][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.884939][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 99.165570][ T7] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 99.185081][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.212831][ T7] usb 4-1: Product: syz [ 99.224217][ T7] usb 4-1: Manufacturer: syz [ 99.239100][ T7] usb 4-1: SerialNumber: syz [ 99.257652][ T7] usb 4-1: config 0 descriptor?? [ 99.312255][ T7] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 99.341467][ T7] usb 4-1: Detected FT-X [ 99.520679][ T7] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 99.769175][ T4951] udc-core: couldn't find an available UDC or it's busy [ 99.781330][ T4951] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.921381][ T4991] fuse: Bad value for 'fd' [ 100.057272][ T7] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.247802][ T7] usb 4-1: USB disconnect, device number 5 [ 100.309531][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.319893][ T5002] fuse: Bad value for 'fd' [ 100.342095][ T7] ftdi_sio 4-1:0.0: device disconnected [ 100.405199][ T5006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.274'. [ 100.423419][ T5006] netlink: 'syz.0.274': attribute type 12 has an invalid length. [ 100.522865][ T5011] overlayfs: failed to clone upperpath [ 100.859111][ T5026] ======================================================= [ 100.859111][ T5026] WARNING: The mand mount option has been deprecated and [ 100.859111][ T5026] and is ignored by this kernel. Remove the mand [ 100.859111][ T5026] option from the mount to silence this warning. [ 100.859111][ T5026] ======================================================= [ 101.254741][ T5046] loop3: detected capacity change from 0 to 4096 [ 101.272403][ T5046] ntfs3: Unknown parameter 'nocase' [ 101.317137][ T5057] fuse: Bad value for 'fd' [ 101.658236][ T5077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.303'. [ 101.694771][ T5077] netlink: 'syz.2.303': attribute type 12 has an invalid length. [ 101.801984][ T5091] fuse: Bad value for 'fd' [ 101.884148][ T5099] overlayfs: failed to clone upperpath [ 102.050655][ T1107] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.337404][ T5131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 102.366277][ T5131] bond1 (unregistering): Released all slaves [ 102.461381][ T1107] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 102.490689][ T1107] usb 4-1: config 0 has no interface number 0 [ 102.497078][ T1107] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 102.518011][ T1107] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.630328][ T5150] fuse: Bad value for 'fd' [ 102.750825][ T1107] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 102.764794][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.775495][ T1107] usb 4-1: Product: syz [ 102.780119][ T1107] usb 4-1: Manufacturer: syz [ 102.786578][ T1107] usb 4-1: SerialNumber: syz [ 102.795041][ T1107] usb 4-1: config 0 descriptor?? [ 102.810884][ T5084] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.841934][ T1107] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 102.878854][ T1107] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 102.939142][ T5164] capability: warning: `syz.4.325' uses 32-bit capabilities (legacy support in use) [ 103.123702][ T5174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.330'. [ 103.138013][ T5174] netlink: 'syz.2.330': attribute type 12 has an invalid length. [ 103.223054][ T5182] fuse: Bad value for 'fd' [ 103.241405][ T5183] netlink: 'syz.3.306': attribute type 2 has an invalid length. [ 103.249311][ T5183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.306'. [ 104.182852][ T5233] fuse: Bad value for 'fd' [ 104.334042][ T5241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.358'. [ 104.347942][ T5241] netlink: 'syz.4.358': attribute type 12 has an invalid length. [ 104.421100][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 104.726359][ T7] usb 4-1: USB disconnect, device number 6 [ 104.746952][ T7] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 104.778923][ T7] cyberjack 4-1:0.69: device disconnected [ 104.906368][ T5258] loop3: detected capacity change from 0 to 64 [ 104.953314][ T5260] netlink: 64 bytes leftover after parsing attributes in process `syz.2.364'. [ 105.039535][ T5264] fuse: Bad value for 'fd' [ 105.166001][ T5270] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 106.308213][ T5304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.382'. [ 106.404543][ T5313] netlink: 'syz.4.382': attribute type 12 has an invalid length. [ 106.820481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 106.849094][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 106.990325][ T5326] fuse: Bad value for 'fd' [ 107.192763][ T4264] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 107.242497][ T4264] Bluetooth: hci2: Injecting HCI hardware error event [ 107.329842][ T146] Bluetooth: hci2: hardware error 0x00 [ 107.881603][ T5335] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 107.975951][ T5340] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 107.990601][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 108.130079][ T5352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.403'. [ 108.146710][ T5352] netlink: 'syz.0.403': attribute type 12 has an invalid length. [ 108.230524][ T4238] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.490538][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 108.620807][ T4238] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.822303][ T4238] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.834028][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.842664][ T4238] usb 4-1: Product: syz [ 108.847237][ T4238] usb 4-1: Manufacturer: syz [ 108.852270][ T4238] usb 4-1: SerialNumber: syz [ 108.860139][ T4238] usb 4-1: config 0 descriptor?? [ 108.890873][ T5337] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.911938][ T4238] hub 4-1:0.0: bad descriptor, ignoring hub [ 108.918097][ T5397] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 108.918294][ T4238] hub: probe of 4-1:0.0 failed with error -5 [ 108.949802][ T5399] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 108.996577][ T5399] bond1 (unregistering): Released all slaves [ 109.537213][ T5420] fuse: Bad value for 'fd' [ 109.802109][ T5429] syz.2.432 uses obsolete (PF_INET,SOCK_PACKET) [ 109.872800][ T5431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.433'. [ 109.897640][ T5431] netlink: 'syz.1.433': attribute type 12 has an invalid length. [ 110.716303][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 111.002019][ T5472] overlayfs: failed to clone upperpath [ 111.094597][ T5479] fuse: Bad value for 'fd' [ 111.138788][ T5482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.452'. [ 111.148971][ T5482] netlink: 'syz.1.452': attribute type 12 has an invalid length. [ 111.704979][ T5498] tmpfs: Unknown parameter 'usrquota' [ 111.910188][ T5505] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 111.958588][ T5507] fuse: Bad value for 'fd' [ 112.027020][ T5513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.466'. [ 112.203595][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 112.257556][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 112.382355][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 112.428851][ T5542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.475'. [ 112.449174][ T5542] netlink: 'syz.2.475': attribute type 12 has an invalid length. [ 112.608613][ T5556] netlink: 164 bytes leftover after parsing attributes in process `syz.4.481'. [ 112.743987][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 113.565649][ T5627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.509'. [ 113.576174][ T5627] netlink: 'syz.4.509': attribute type 12 has an invalid length. [ 113.694087][ T21] usb 4-1: USB disconnect, device number 7 [ 113.744074][ T5631] loop3: detected capacity change from 0 to 128 [ 113.818524][ T5631] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 113.877600][ T5635] overlayfs: failed to clone upperpath [ 114.309275][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 114.320218][ T5666] netlink: 48 bytes leftover after parsing attributes in process `syz.0.526'. [ 114.338906][ T5666] netlink: 'syz.0.526': attribute type 13 has an invalid length. [ 114.548743][ T5683] tipc: Started in network mode [ 114.554641][ T5683] tipc: Node identity ac14140f, cluster identity 4711 [ 114.563625][ T5683] tipc: Enabled bearer , priority 10 [ 114.733136][ T5691] fuse: Bad value for 'fd' [ 114.800485][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 114.810495][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 114.820468][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 114.830467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 114.840466][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 114.933201][ T5697] netlink: 'syz.2.540': attribute type 12 has an invalid length. [ 115.381843][ T5726] overlayfs: failed to clone upperpath [ 115.684237][ T4232] tipc: Node number set to 2886997007 [ 116.189983][ T5769] sctp: [Deprecated]: syz.2.570 (pid 5769) Use of int in max_burst socket option deprecated. [ 116.189983][ T5769] Use struct sctp_assoc_value instead [ 116.296785][ T5776] netlink: 'syz.0.573': attribute type 12 has an invalid length. [ 117.761934][ T4201] Bluetooth: hci3: Unknown advertising packet type: 0x3f00 [ 117.762015][ T4201] Bluetooth: hci3: Unknown advertising packet type: 0xf300 [ 117.774153][ T4201] ================================================================== [ 117.789785][ T4201] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 117.797653][ T4201] Read of size 1 at addr ffff88807c793401 by task kworker/u5:4/4201 [ 117.805665][ T4201] [ 117.808047][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 117.815628][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.825754][ T4201] Workqueue: hci3 hci_rx_work [ 117.830500][ T4201] Call Trace: [ 117.833815][ T4201] [ 117.836781][ T4201] dump_stack_lvl+0x188/0x250 [ 117.841500][ T4201] ? show_regs_print_info+0x20/0x20 [ 117.846743][ T4201] ? load_image+0x400/0x400 [ 117.851286][ T4201] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 117.856886][ T4201] print_address_description+0x60/0x2d0 [ 117.862480][ T4201] ? hci_le_meta_evt+0x1324/0x3c90 [ 117.867637][ T4201] kasan_report+0xdf/0x130 [ 117.872099][ T4201] ? hci_le_meta_evt+0x1324/0x3c90 [ 117.877255][ T4201] hci_le_meta_evt+0x1324/0x3c90 [ 117.882255][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 117.888368][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 117.894141][ T4201] ? mark_lock+0x94/0x320 [ 117.898512][ T4201] ? mutex_unlock+0x10/0x10 [ 117.903059][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 117.909088][ T4201] ? lock_chain_count+0x20/0x20 [ 117.913986][ T4201] ? __rwlock_init+0x140/0x140 [ 117.918794][ T4201] hci_event_packet+0xe48/0x1370 [ 117.923773][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 117.929132][ T4201] ? rcu_lock_release+0x20/0x20 [ 117.934037][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 117.939284][ T4201] hci_rx_work+0x255/0xa10 [ 117.943773][ T4201] process_one_work+0x85f/0x1010 [ 117.948761][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 117.954436][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 117.959776][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.964837][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.970427][ T4201] ? wq_worker_running+0x97/0x170 [ 117.975506][ T4201] worker_thread+0xaa6/0x1290 [ 117.980235][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 117.985487][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.991437][ T4201] kthread+0x436/0x520 [ 117.995552][ T4201] ? rcu_lock_release+0x20/0x20 [ 118.000446][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 118.005081][ T4201] ret_from_fork+0x1f/0x30 [ 118.009555][ T4201] [ 118.012611][ T4201] [ 118.014978][ T4201] Allocated by task 5818: [ 118.019356][ T4201] __kasan_kmalloc+0xb5/0xf0 [ 118.024845][ T4201] __alloc_skb+0x22c/0x750 [ 118.029293][ T4201] vhci_write+0xbc/0x450 [ 118.033569][ T4201] vfs_write+0x745/0xd60 [ 118.037842][ T4201] ksys_write+0x152/0x260 [ 118.042209][ T4201] do_syscall_64+0x4c/0xa0 [ 118.046658][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.052584][ T4201] [ 118.054927][ T4201] The buggy address belongs to the object at ffff88807c793000 [ 118.054927][ T4201] which belongs to the cache kmalloc-1k of size 1024 [ 118.069014][ T4201] The buggy address is located 1 bytes to the right of [ 118.069014][ T4201] 1024-byte region [ffff88807c793000, ffff88807c793400) [ 118.082765][ T4201] The buggy address belongs to the page: [ 118.088449][ T4201] page:ffffea0001f1e400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c790 [ 118.098647][ T4201] head:ffffea0001f1e400 order:3 compound_mapcount:0 compound_pincount:0 [ 118.107010][ T4201] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 118.115038][ T4201] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 118.123657][ T4201] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 118.132260][ T4201] page dumped because: kasan: bad access detected [ 118.138694][ T4201] page_owner tracks the page as allocated [ 118.144439][ T4201] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 144, ts 72788994177, free_ts 72735558306 [ 118.162900][ T4201] get_page_from_freelist+0x1bbd/0x1ca0 [ 118.168497][ T4201] __alloc_pages+0x1ee/0x480 [ 118.173125][ T4201] new_slab+0xc0/0x4b0 [ 118.177228][ T4201] ___slab_alloc+0x80a/0xdd0 [ 118.181853][ T4201] __kmalloc+0x1cd/0x330 [ 118.186130][ T4201] ieee802_11_parse_elems_crc+0xb3/0x10b0 [ 118.191903][ T4201] ieee80211_bss_info_update+0x751/0xa70 [ 118.197580][ T4201] ieee80211_ibss_rx_queued_mgmt+0x1700/0x2ab0 [ 118.203779][ T4201] ieee80211_iface_work+0x70e/0xc60 [ 118.209013][ T4201] cfg80211_wiphy_work+0x221/0x260 [ 118.214160][ T4201] process_one_work+0x85f/0x1010 [ 118.219138][ T4201] worker_thread+0xaa6/0x1290 [ 118.223856][ T4201] kthread+0x436/0x520 [ 118.227952][ T4201] ret_from_fork+0x1f/0x30 [ 118.232407][ T4201] page last free stack trace: [ 118.237109][ T4201] free_unref_page_prepare+0x637/0x6c0 [ 118.242607][ T4201] free_unref_page+0x8f/0x2a0 [ 118.247323][ T4201] __unfreeze_partials+0x1a5/0x200 [ 118.252492][ T4201] put_cpu_partial+0x12d/0x190 [ 118.257290][ T4201] qlist_free_all+0x35/0x90 [ 118.261819][ T4201] kasan_quarantine_reduce+0x150/0x160 [ 118.267308][ T4201] __kasan_slab_alloc+0x2f/0xd0 [ 118.272214][ T4201] slab_post_alloc_hook+0x4c/0x380 [ 118.277500][ T4201] kmem_cache_alloc+0x100/0x290 [ 118.282389][ T4201] getname_flags+0xb5/0x500 [ 118.286926][ T4201] user_path_at_empty+0x2a/0x190 [ 118.291902][ T4201] __x64_sys_umount+0xf9/0x170 [ 118.296704][ T4201] do_syscall_64+0x4c/0xa0 [ 118.301165][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.307089][ T4201] [ 118.309414][ T4201] Memory state around the buggy address: [ 118.315045][ T4201] ffff88807c793300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.320535][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 118.323124][ T4201] ffff88807c793380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.340206][ T4201] >ffff88807c793400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.340611][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 118.348272][ T4201] ^ [ 118.348287][ T4201] ffff88807c793480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.360520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 118.361215][ T4201] ffff88807c793500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.386291][ T4201] ================================================================== [ 118.394438][ T4201] Disabling lock debugging due to kernel taint [ 118.405357][ T4201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.412607][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 118.421585][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.431770][ T4201] Workqueue: hci3 hci_rx_work [ 118.436491][ T4201] Call Trace: [ 118.439799][ T4201] [ 118.442756][ T4201] dump_stack_lvl+0x188/0x250 [ 118.447465][ T4201] ? show_regs_print_info+0x20/0x20 [ 118.452691][ T4201] ? load_image+0x400/0x400 [ 118.457232][ T4201] panic+0x2e5/0x810 [ 118.461160][ T4201] ? bpf_jit_dump+0xd0/0xd0 [ 118.465696][ T4201] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 118.471958][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 118.476849][ T4201] ? hci_le_meta_evt+0x1324/0x3c90 [ 118.481995][ T4201] check_panic_on_warn+0x80/0xa0 [ 118.486978][ T4201] ? hci_le_meta_evt+0x1324/0x3c90 [ 118.492115][ T4201] end_report+0x6d/0xf0 [ 118.496298][ T4201] kasan_report+0x102/0x130 [ 118.500840][ T4201] ? hci_le_meta_evt+0x1324/0x3c90 [ 118.505988][ T4201] hci_le_meta_evt+0x1324/0x3c90 [ 118.510965][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 118.517059][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 118.522723][ T4201] ? mark_lock+0x94/0x320 [ 118.527080][ T4201] ? mutex_unlock+0x10/0x10 [ 118.531630][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 118.537640][ T4201] ? lock_chain_count+0x20/0x20 [ 118.542528][ T4201] ? __rwlock_init+0x140/0x140 [ 118.547322][ T4201] hci_event_packet+0xe48/0x1370 [ 118.552396][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 118.557630][ T4201] ? rcu_lock_release+0x20/0x20 [ 118.562512][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 118.567742][ T4201] hci_rx_work+0x255/0xa10 [ 118.572198][ T4201] process_one_work+0x85f/0x1010 [ 118.577170][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 118.582833][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 118.588256][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 118.593306][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.598881][ T4201] ? wq_worker_running+0x97/0x170 [ 118.603945][ T4201] worker_thread+0xaa6/0x1290 [ 118.608654][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 118.613904][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 118.619831][ T4201] kthread+0x436/0x520 [ 118.623927][ T4201] ? rcu_lock_release+0x20/0x20 [ 118.628805][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 118.633429][ T4201] ret_from_fork+0x1f/0x30 [ 118.637877][ T4201] [ 118.641186][ T4201] Kernel Offset: disabled [ 118.645533][ T4201] Rebooting in 86400 seconds..