last executing test programs: 2m2.210318635s ago: executing program 1 (id=106): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r3, 0x8990, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m57.236804914s ago: executing program 1 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r4) 1m55.125472006s ago: executing program 1 (id=117): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b8c8d9ab8666efbafc0c66b82500000066ef6666f20f070f20c06635080000000f22c066b8682d866c0f23d80f21f86635c00000e00f23f80f78d9363e0f44a400900f216eba4000ec0f09baf80c66b814915b8966efbafc0c66b89e00000066ef", 0x65}], 0x1, 0x11, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x4, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0xff4, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a1c000000000a0103000000000000000001"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m50.991324619s ago: executing program 1 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x83, 0x3, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0x5, 0x4, 0xe9, 0x8, 0xfe, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.732099545s ago: executing program 1 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x810, r3, 0x7adf2000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 1m45.627539119s ago: executing program 1 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) 1m30.320978192s ago: executing program 32 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) 13.428711897s ago: executing program 2 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 12.564389573s ago: executing program 3 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) 10.957625795s ago: executing program 3 (id=340): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x823e}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket$inet6(0xa, 0x3, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) 9.920083396s ago: executing program 2 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)="a672", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c) shutdown(r1, 0x1) 9.474265547s ago: executing program 2 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/245, 0xf5, 0x4) 8.492883974s ago: executing program 2 (id=346): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 8.491801568s ago: executing program 0 (id=347): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b8c8d9ab8666efbafc0c66b82500000066ef6666f20f070f20c06635080000000f22c066b8682d866c0f23d80f21f86635c00000e00f23f80f78d9363e0f44a400900f216eba4000ec0f09baf80c66b814915b8966efbafc0c66b89e00000066ef", 0x65}], 0x1, 0x11, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x4, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0xff4, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a1c000000000a0103000000000000000001"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.290075559s ago: executing program 2 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) 7.602073767s ago: executing program 3 (id=350): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa241, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 7.424485745s ago: executing program 3 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r4) 7.344251452s ago: executing program 4 (id=352): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) tkill(r3, 0xb) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 7.031742226s ago: executing program 0 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000280)="a672", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c) shutdown(r3, 0x1) 5.917272063s ago: executing program 4 (id=354): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 5.332029567s ago: executing program 4 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/245, 0xf5, 0x4) 5.330165523s ago: executing program 3 (id=356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002b80)=ANY=[@ANYBLOB="df"], 0x50}, 0x1, 0x0, 0x0, 0x851}, 0x4028000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.196870751s ago: executing program 0 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 4.116464619s ago: executing program 4 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) 2.597101312s ago: executing program 2 (id=359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_stats}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000100000000000006040000000061"], &(0x7f0000002900)=""/4109, 0x29, 0x100d, 0x1}, 0x28) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x202800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1862, 0x0) socket(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.794894669s ago: executing program 3 (id=360): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "e02ae099"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.633161873s ago: executing program 0 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = inotify_init1(0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) 1.34539718s ago: executing program 4 (id=362): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b8c8d9ab8666efbafc0c66b82500000066ef6666f20f070f20c06635080000000f22c066b8682d866c0f23d80f21f86635c00000e00f23f80f78d9363e0f44a400900f216eba4000ec0f09baf80c66b814915b8966efbafc0c66b89e00000066ef", 0x65}], 0x1, 0x11, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x4, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0xff4, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a1c000000000a0103000000000000000001"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 456.483554ms ago: executing program 4 (id=363): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) tkill(r3, 0xb) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 456.190686ms ago: executing program 0 (id=364): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 0s ago: executing program 0 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 74.957820][ T5584] cgroup: Unknown subsys name 'net' [ 75.229054][ T5584] cgroup: Unknown subsys name 'cpuset' [ 75.284462][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.915182][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.252807][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.305774][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.317306][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.333196][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.337078][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.358754][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.360752][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.363673][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.369151][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.369555][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.371042][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.371752][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.375999][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.377470][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.377824][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.380291][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.380698][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.393756][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.397061][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.400474][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.402657][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.406770][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.422417][ T4910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.468748][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.469457][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.425802][ T5610] Bluetooth: hci0: command tx timeout [ 81.504021][ T5610] Bluetooth: hci3: command tx timeout [ 81.504144][ T5610] Bluetooth: hci2: command tx timeout [ 81.584016][ T4910] Bluetooth: hci1: command tx timeout [ 81.584159][ T4910] Bluetooth: hci4: command tx timeout [ 81.589725][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.590512][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.591596][ T5596] bridge_slave_0: entered allmulticast mode [ 81.627044][ T5596] bridge_slave_0: entered promiscuous mode [ 81.705535][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.705910][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.706059][ T5596] bridge_slave_1: entered allmulticast mode [ 81.708559][ T5596] bridge_slave_1: entered promiscuous mode [ 81.846501][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.846615][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.847080][ T5603] bridge_slave_0: entered allmulticast mode [ 81.848545][ T5603] bridge_slave_0: entered promiscuous mode [ 81.900871][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.901178][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.901288][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.901799][ T5603] bridge_slave_1: entered allmulticast mode [ 81.903303][ T5603] bridge_slave_1: entered promiscuous mode [ 81.949151][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.094522][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.094636][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.094739][ T5598] bridge_slave_0: entered allmulticast mode [ 82.096127][ T5598] bridge_slave_0: entered promiscuous mode [ 82.137492][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.154267][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.154384][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.154503][ T5598] bridge_slave_1: entered allmulticast mode [ 82.155873][ T5598] bridge_slave_1: entered promiscuous mode [ 82.156879][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.156995][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.157082][ T5597] bridge_slave_0: entered allmulticast mode [ 82.158467][ T5597] bridge_slave_0: entered promiscuous mode [ 82.162293][ T5596] team0: Port device team_slave_0 added [ 82.166506][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.166900][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.167021][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.167158][ T5599] bridge_slave_0: entered allmulticast mode [ 82.169597][ T5599] bridge_slave_0: entered promiscuous mode [ 82.193598][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.194943][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.195481][ T5597] bridge_slave_1: entered allmulticast mode [ 82.198579][ T5597] bridge_slave_1: entered promiscuous mode [ 82.203654][ T5596] team0: Port device team_slave_1 added [ 82.222063][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.222171][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.222310][ T5599] bridge_slave_1: entered allmulticast mode [ 82.226826][ T5599] bridge_slave_1: entered promiscuous mode [ 82.322832][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.350633][ T5603] team0: Port device team_slave_0 added [ 82.366868][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.369194][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.370351][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.370359][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.370372][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.375249][ T5603] team0: Port device team_slave_1 added [ 82.379433][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.434469][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.436933][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.436945][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.436968][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.463703][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.538340][ T5598] team0: Port device team_slave_0 added [ 82.553623][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.553637][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.553659][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.580691][ T5598] team0: Port device team_slave_1 added [ 82.585754][ T5597] team0: Port device team_slave_0 added [ 82.587387][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.587399][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.587422][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.591207][ T5599] team0: Port device team_slave_0 added [ 82.629749][ T5597] team0: Port device team_slave_1 added [ 82.649314][ T5599] team0: Port device team_slave_1 added [ 82.703176][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.703186][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.703198][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.717383][ T5596] hsr_slave_0: entered promiscuous mode [ 82.718694][ T5596] hsr_slave_1: entered promiscuous mode [ 82.760779][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.760792][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.760815][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.762863][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.762875][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.762897][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.796157][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.796171][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.796194][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.798653][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.798666][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.798689][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.840403][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.840416][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.840439][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.862527][ T5603] hsr_slave_0: entered promiscuous mode [ 82.863658][ T5603] hsr_slave_1: entered promiscuous mode [ 82.865926][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 82.866412][ T5603] Cannot create hsr debugfs directory [ 83.027750][ T5598] hsr_slave_0: entered promiscuous mode [ 83.028497][ T5598] hsr_slave_1: entered promiscuous mode [ 83.029055][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 83.029071][ T5598] Cannot create hsr debugfs directory [ 83.092465][ T5597] hsr_slave_0: entered promiscuous mode [ 83.093213][ T5597] hsr_slave_1: entered promiscuous mode [ 83.093697][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 83.093724][ T5597] Cannot create hsr debugfs directory [ 83.129528][ T5599] hsr_slave_0: entered promiscuous mode [ 83.130277][ T5599] hsr_slave_1: entered promiscuous mode [ 83.130772][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 83.130788][ T5599] Cannot create hsr debugfs directory [ 83.514450][ T5610] Bluetooth: hci0: command tx timeout [ 83.594434][ T5610] Bluetooth: hci2: command tx timeout [ 83.594462][ T5610] Bluetooth: hci3: command tx timeout [ 83.664057][ T4910] Bluetooth: hci4: command tx timeout [ 83.664085][ T4910] Bluetooth: hci1: command tx timeout [ 84.414947][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.456356][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.467945][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.508250][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.512498][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.549226][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.590864][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.607979][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.782247][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.809505][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.827106][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.869165][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.882415][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.906927][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.926474][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.966560][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.072082][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.108314][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.121753][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.149750][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.152941][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.175079][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.205725][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.238042][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.359673][ T5599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.398719][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.403204][ T5599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.429700][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.433133][ T5599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.477911][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.511357][ T5599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.536633][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.572359][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.594815][ T5610] Bluetooth: hci0: command tx timeout [ 85.674496][ T5610] Bluetooth: hci3: command tx timeout [ 85.674523][ T5610] Bluetooth: hci2: command tx timeout [ 85.677117][ T5603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.707055][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.720523][ T5603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.746688][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.755420][ T4910] Bluetooth: hci1: command tx timeout [ 85.755447][ T4910] Bluetooth: hci4: command tx timeout [ 85.767813][ T5603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.797336][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.800393][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.803339][ T5603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.818677][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.860337][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.860439][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.907296][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.913794][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.939137][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.025195][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.061801][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.061899][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.071173][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.110722][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.111536][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.176565][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.232735][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.232840][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.289618][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.321570][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.321694][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.499344][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.505555][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.556220][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.569469][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.670241][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.670369][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.693857][ T31] cfg80211: failed to load regulatory.db [ 86.785599][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.838186][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.838309][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.933673][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.936830][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.282688][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.609258][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.664022][ T5610] Bluetooth: hci0: command tx timeout [ 87.745131][ T5610] Bluetooth: hci2: command tx timeout [ 87.745161][ T5610] Bluetooth: hci3: command tx timeout [ 87.824055][ T4910] Bluetooth: hci4: command tx timeout [ 87.824062][ T5610] Bluetooth: hci1: command tx timeout [ 87.824767][ T5596] veth0_vlan: entered promiscuous mode [ 87.897499][ T5596] veth1_vlan: entered promiscuous mode [ 87.933323][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.051595][ T5598] veth0_vlan: entered promiscuous mode [ 88.139814][ T5598] veth1_vlan: entered promiscuous mode [ 88.155526][ T5596] veth0_macvtap: entered promiscuous mode [ 88.178140][ T5596] veth1_macvtap: entered promiscuous mode [ 88.291576][ T5597] veth0_vlan: entered promiscuous mode [ 88.309123][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.326966][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.358728][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.359827][ T5598] veth0_macvtap: entered promiscuous mode [ 88.361743][ T5597] veth1_vlan: entered promiscuous mode [ 88.392449][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.412452][ T5598] veth1_macvtap: entered promiscuous mode [ 88.443411][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.461903][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.495646][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.500442][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.669665][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.762962][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.931899][ T5597] veth0_macvtap: entered promiscuous mode [ 88.978700][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.988099][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.009888][ T5597] veth1_macvtap: entered promiscuous mode [ 89.013982][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.036266][ T5599] veth0_vlan: entered promiscuous mode [ 89.039602][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.219716][ T5599] veth1_vlan: entered promiscuous mode [ 89.261353][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.261376][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.366724][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.442473][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.477637][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.477655][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.502564][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.532775][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.552361][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.573630][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.611891][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.611909][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.715835][ T5603] veth0_vlan: entered promiscuous mode [ 89.890417][ T5599] veth0_macvtap: entered promiscuous mode [ 89.923275][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.923294][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.965518][ T5603] veth1_vlan: entered promiscuous mode [ 89.983682][ T5599] veth1_macvtap: entered promiscuous mode [ 90.349989][ T5795] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.382333][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.469983][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.470002][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.470707][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.555332][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.560860][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.600897][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.601501][ T5603] veth0_macvtap: entered promiscuous mode [ 90.627391][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.795400][ T5603] veth1_macvtap: entered promiscuous mode [ 90.825443][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.825461][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.923549][ T5801] random: crng reseeded on system resumption [ 92.109590][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.194985][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.256123][ T1137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.307129][ T1137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.308544][ T1137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.313284][ T1137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.418095][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.418111][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.745319][ T5814] syzkaller1: entered promiscuous mode [ 92.745344][ T5814] syzkaller1: entered allmulticast mode [ 92.799324][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.799337][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.265154][ T37] audit: type=1326 audit(1785440750.067:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5817 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67c206e019 code=0x0 [ 93.748125][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.748144][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.273284][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.273302][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.354198][ T821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.428537][ T821] usb 2-1: device descriptor read/all, error -71 [ 101.486430][ T5885] evm: overlay not supported [ 103.823501][ T5890] vlan2: entered promiscuous mode [ 103.823522][ T5890] bridge0: entered promiscuous mode [ 121.298631][ T6012] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 134.956380][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.956470][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.316105][ T5728] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.571379][ T5728] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 146.571408][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.571426][ T5728] usb 5-1: Product: syz [ 146.571439][ T5728] usb 5-1: Manufacturer: syz [ 146.571453][ T5728] usb 5-1: SerialNumber: syz [ 148.105907][ T5728] usb 5-1: can't set config #1, error -71 [ 148.223329][ T5728] usb 5-1: USB disconnect, device number 2 [ 152.940599][ T6232] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 162.008728][ T6312] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.499234][ T37] audit: type=1326 audit(1785440836.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6363 comm="syz.3.151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2332e5e019 code=0x0 [ 180.430742][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.469561][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.479428][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.482887][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.738690][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.044061][ T5327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 183.265123][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 183.394060][ T5327] usb 4-1: Using ep0 maxpacket: 32 [ 183.396304][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.396334][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.396370][ T5327] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.396390][ T5327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.432381][ T5327] usb 4-1: config 0 descriptor?? [ 183.831106][ T4910] Bluetooth: hci5: command tx timeout [ 184.190096][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 184.190147][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 184.218420][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 184.218449][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.218467][ T10] usb 3-1: Product: syz [ 184.218480][ T10] usb 3-1: Manufacturer: syz [ 184.218493][ T10] usb 3-1: SerialNumber: syz [ 184.486096][ T5327] hub 4-1:0.0: USB hub found [ 184.521054][ T10] usb 3-1: config 0 descriptor?? [ 184.522478][ T6415] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.522617][ T6415] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.529313][ T5327] hub 4-1:0.0: 1 port detected [ 184.739012][ T6415] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.739188][ T6415] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.156183][ T5327] usb 4-1: USB disconnect, device number 2 [ 185.161245][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 185.395297][ T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 185.443149][ T10] usb 3-1: USB disconnect, device number 2 [ 186.383641][ T4910] Bluetooth: hci5: command tx timeout [ 188.467909][ T4910] Bluetooth: hci5: command tx timeout [ 190.946755][ T4910] Bluetooth: hci5: command tx timeout [ 192.867058][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 192.867083][ T6487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.177'. [ 193.116519][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.226943][ T6498] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 197.323035][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.291754][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.291824][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.822088][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.482644][ T6557] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.312212][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.312325][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.312517][ T6395] bridge_slave_0: entered allmulticast mode [ 201.337879][ T6395] bridge_slave_0: entered promiscuous mode [ 201.398669][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.398789][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.399015][ T6395] bridge_slave_1: entered allmulticast mode [ 201.438486][ T6395] bridge_slave_1: entered promiscuous mode [ 202.419136][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.586716][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.646984][ T6574] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 203.927107][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.144968][ T6395] team0: Port device team_slave_0 added [ 204.161068][ T6395] team0: Port device team_slave_1 added [ 204.595466][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.595483][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.595507][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.600661][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.600677][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.600701][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.453307][ T6395] hsr_slave_0: entered promiscuous mode [ 205.463614][ T6395] hsr_slave_1: entered promiscuous mode [ 205.473668][ T6395] debugfs: 'hsr0' already exists in 'hsr' [ 205.473691][ T6395] Cannot create hsr debugfs directory [ 206.177830][ T13] bridge_slave_1: left allmulticast mode [ 206.178105][ T13] bridge_slave_1: left promiscuous mode [ 206.264070][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.287175][ T4910] Bluetooth: hci1: command 0x0406 tx timeout [ 208.296059][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 208.302065][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 208.349646][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 208.752999][ T13] bridge_slave_0: left allmulticast mode [ 208.753034][ T13] bridge_slave_0: left promiscuous mode [ 208.753262][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.674774][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.746889][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.779119][ T13] bond0 (unregistering): Released all slaves [ 211.919151][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 211.965973][ T6624] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 211.966016][ T6624] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 211.966035][ T6624] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 211.986918][ T37] audit: type=1800 audit(1785440868.767:4): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.209" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 215.813632][ T6683] ±ÿ: renamed from team_slave_1 (while UP) [ 215.892021][ T5736] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 216.072159][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 216.073682][ T5736] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.073706][ T5736] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 216.073758][ T5736] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 216.093251][ T5736] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 216.093413][ T5736] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 216.093438][ T5736] usb 4-1: config 1 interface 1 has no altsetting 0 [ 216.240886][ T5736] usb 4-1: string descriptor 0 read error: -22 [ 216.241024][ T5736] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 216.241047][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.580972][ T6701] 8021q: VLANs not supported on vxcan0 [ 217.007894][ T5736] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 217.394774][ T5327] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 217.774078][ T5327] usb 3-1: Using ep0 maxpacket: 32 [ 217.789083][ T5327] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 217.789112][ T5327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.789130][ T5327] usb 3-1: Product: syz [ 217.789143][ T5327] usb 3-1: Manufacturer: syz [ 217.789156][ T5327] usb 3-1: SerialNumber: syz [ 219.233251][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 219.392922][ T6395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.319170][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.524910][ T5327] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.524993][ T5327] usb 3-1: MIDIStreaming interface descriptor not found [ 221.556767][ T6395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.651579][ T5736] usb 4-1: USB disconnect, device number 3 [ 221.709229][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.721352][ T6395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.996885][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.012053][ T6395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.134476][ T5327] usb 3-1: USB disconnect, device number 3 [ 222.323478][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.696583][ T13] hsr_slave_0: left promiscuous mode [ 222.738283][ T13] hsr_slave_1: left promiscuous mode [ 222.771426][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.771520][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.915618][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.915645][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.097974][ T6770] udevd[6770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 223.160241][ T13] veth1_macvtap: left promiscuous mode [ 223.160540][ T13] veth0_macvtap: left promiscuous mode [ 223.160833][ T13] veth1_vlan: left promiscuous mode [ 223.161205][ T13] veth0_vlan: left promiscuous mode [ 223.704061][ T197] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 223.758173][ T6763] mmap: syz.2.240 (6763) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 223.856489][ T197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.856523][ T197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.856557][ T197] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 223.856684][ T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.011706][ T197] usb 4-1: config 0 descriptor?? [ 224.556123][ T197] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 224.556169][ T197] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 224.556196][ T197] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 224.860851][ T197] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 225.148342][ T197] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized [ 225.829898][ T197] usb 4-1: USB disconnect, device number 4 [ 226.665248][ T6806] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 227.705156][ T13] team0 (unregistering): Port device team_slave_1 removed [ 227.775262][ T13] team0 (unregistering): Port device team_slave_0 removed [ 228.837235][ T6846] ±ÿ: renamed from team_slave_1 (while UP) [ 230.319574][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.391979][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.411829][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.411936][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.413766][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.442417][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.446304][ T6865] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 232.673260][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 235.288614][ T6908] ±ÿ: renamed from team_slave_1 (while UP) [ 237.281426][ T6943] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 238.444510][ T6956] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 239.005303][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 239.031873][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.553189][ T6995] ±ÿ: renamed from team_slave_1 (while UP) [ 242.430474][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.467398][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.472323][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.488841][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.530254][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.910719][ T7026] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 244.156979][ T7031] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 244.710893][ T59] Bluetooth: hci3: command tx timeout [ 246.374778][ T7064] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 246.784101][ T59] Bluetooth: hci3: command tx timeout [ 247.539377][ T7081] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 248.864053][ T59] Bluetooth: hci3: command tx timeout [ 248.987737][ T7105] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 251.146723][ T7136] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 251.152458][ T59] Bluetooth: hci3: command tx timeout [ 253.055801][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.055923][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.056149][ T6993] bridge_slave_0: entered allmulticast mode [ 253.071078][ T6993] bridge_slave_0: entered promiscuous mode [ 253.155332][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.155455][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.157468][ T6993] bridge_slave_1: entered allmulticast mode [ 253.263432][ T6993] bridge_slave_1: entered promiscuous mode [ 253.864192][ T6993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.893968][ T6993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.000126][ T6993] team0: Port device team_slave_0 added [ 254.047532][ T6993] team0: Port device team_slave_1 added [ 254.582715][ T6993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.582730][ T6993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.582749][ T6993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.640733][ T6993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.640750][ T6993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.640773][ T6993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.841396][ T7193] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 255.324246][ T1137] bridge_slave_1: left allmulticast mode [ 255.324289][ T1137] bridge_slave_1: left promiscuous mode [ 255.324562][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.837446][ T1137] bridge_slave_0: left allmulticast mode [ 255.837477][ T1137] bridge_slave_0: left promiscuous mode [ 255.840501][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.888483][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.888552][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.577641][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.766424][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.900662][ T1137] bond0 (unregistering): Released all slaves [ 263.228361][ T6993] hsr_slave_0: entered promiscuous mode [ 263.231677][ T6993] hsr_slave_1: entered promiscuous mode [ 263.234245][ T6993] debugfs: 'hsr0' already exists in 'hsr' [ 263.234273][ T6993] Cannot create hsr debugfs directory [ 263.271041][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 268.769444][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.783294][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.789046][ T7310] bridge0: entered allmulticast mode [ 269.034069][ T5728] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 269.250077][ T5728] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 269.250133][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.250157][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.250191][ T5728] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 269.250212][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.346109][ T5728] usb 4-1: config 0 descriptor?? [ 269.638242][ T7316] bridge_slave_1: left allmulticast mode [ 269.670674][ T7316] bridge_slave_1: left promiscuous mode [ 269.694977][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.014111][ T5728] logitech 0003:046D:C29C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 270.391028][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 270.392641][ T5728] logitech 0003:046D:C29C.0002: no inputs found [ 271.389443][ T7316] bridge_slave_0: left allmulticast mode [ 271.389481][ T7316] bridge_slave_0: left promiscuous mode [ 271.389715][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.517632][ T7335] ================================================================== [ 271.517647][ T7335] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 271.517678][ T7335] Read of size 5 at addr ffff888020eaaea0 by task fido_id/7335 [ 271.517694][ T7335] [ 271.517713][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: fido_id Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 271.517739][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.517757][ T7335] Call Trace: [ 271.517765][ T7335] [ 271.517773][ T7335] dump_stack_lvl+0xe8/0x150 [ 271.517804][ T7335] print_address_description+0x55/0x1e0 [ 271.517833][ T7335] ? report_descriptor_read+0xb5/0x100 [ 271.517853][ T7335] print_report+0x58/0x70 [ 271.517878][ T7335] kasan_report+0x117/0x150 [ 271.517901][ T7335] ? report_descriptor_read+0xb5/0x100 [ 271.517925][ T7335] kasan_check_range+0x264/0x2c0 [ 271.517947][ T7335] ? report_descriptor_read+0xb5/0x100 [ 271.517969][ T7335] __asan_memcpy+0x29/0x70 [ 271.517998][ T7335] report_descriptor_read+0xb5/0x100 [ 271.518021][ T7335] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 271.518040][ T7335] kernfs_fop_read_iter+0x435/0x6a0 [ 271.518069][ T7335] vfs_read+0x59e/0xa90 [ 271.518102][ T7335] ? __pfx_vfs_read+0x10/0x10 [ 271.518126][ T7335] ? do_sys_openat2+0x14e/0x200 [ 271.518144][ T7335] ? kmem_cache_free+0x187/0x6c0 [ 271.518172][ T7335] ksys_read+0x156/0x270 [ 271.518196][ T7335] ? __pfx_ksys_read+0x10/0x10 [ 271.518223][ [ 271.518223][ T7335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.518243][ T7335] do_syscall_64+0x174/0x580 [ 271.518266][ T7335] ? trace_irq_disable+0x3b/0x140 [ 271.518285][ T7335] ? clear_bhb_loop+0x40/0x90 [ 271.518309][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.518328][ T7335] RIP: 0033:0x7f30567cc407 [ 271.518349][ T7335] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 271.518365][ T7335] RSP: 002b:00007ffe79dda220 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 271.518392][ T7335] RAX: ffffffffffffffda RBX: 00007f30566de880 RCX: 00007f30567cc407 [ 271.518406][ T7335] RDX: 0000000000001000 RSI: 00007ffe79dda270 RDI: 0000000000000004 [ 271.518419][ T7335] RBP: 0000562fd0913730 R08: 0000000000000000 R09: 0000000000000000 [ 271.518431][ T7335] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562fd0912930 [ 271.518444][ T7335] R13: 00007ffe79dda270 R14: 0000000000000004 R15: 0000562fb52e74d8 [ 271.518465][ T7335] [ 271.518472][ T7335] [ 271.518476][ T7335] Allocated by task 5728: [ 271.518485][ T7335] kasan_save_track+0x3e/0x80 [ 271.518503][ T7335] __kasan_kmalloc+0x93/0xb0 [ 271.518521][ T7335] __kmalloc_node_track_caller_noprof+0x57f/0x7c0 [ 271.518541][ T7335] kmemdup_noprof+0x2b/0x70 [ 271.518564][ T7335] hid_open_report+0x1fa/0xf00 [ 271.518590][ T7335] lg_probe+0x2ae/0x8c0 [ 271.518607][ T7335] hid_device_probe+0x42c/0x7c0 [ 271.518622][ T7335] really_probe+0x254/0xae0 [ 271.518647][ T7335] __driver_probe_device+0x1e8/0x360 [ 271.518670][ T7335] driver_probe_device+0x4f/0x240 [ 271.518694][ T7335] __device_attach_driver+0x270/0x410 [ 271.518719][ T7335] bus_for_each_drv+0x25b/0x2f0 [ 271.518736][ T7335] __device_attach+0x2c7/0x450 [ 271.518758][ T7335] device_initial_probe+0xa1/0xd0 [ 271.518781][ T7335] bus_probe_device+0x12d/0x220 [ 271.518798][ T7335] device_add+0x7d7/0xb80 [ 271.518818][ T7335] hid_add_device+0x272/0x3e0 [ 271.518834][ T7335] usbhid_probe+0x9dc/0xde0 [ 271.518859][ T7335] usb_probe_interface+0x653/0xc60 [ 271.518879][ T7335] really_probe+0x254/0xae0 [ 271.518901][ T7335] __driver_probe_device+0x1e8/0x360 [ 271.518924][ T7335] driver_probe_device+0x4f/0x240 [ 271.518948][ T7335] __device_attach_driver+0x270/0x410 [ 271.518973][ T7335] bus_for_each_drv+0x25b/0x2f0 [ 271.518990][ T7335] __device_attach+0x2c7/0x450 [ 271.519012][ T7335] device_initial_probe+0xa1/0xd0 [ 271.519035][ T7335] bus_probe_device+0x12d/0x220 [ 271.519052][ T7335] device_add+0x7d7/0xb80 [ 271.519071][ T7335] usb_set_configuration+0x1ad8/0x2180 [ 271.519090][ T7335] usb_generic_driver_probe+0x8d/0x150 [ 271.519114][ T7335] usb_probe_device+0x1c3/0x3b0 [ 271.519133][ T7335] really_probe+0x254/0xae0 [ 271.519157][ T7335] __driver_probe_device+0x1e8/0x360 [ 271.519180][ T7335] driver_probe_device+0x4f/0x240 [ 271.519204][ T7335] __device_attach_driver+0x270/0x410 [ 271.519229][ T7335] bus_for_each_drv+0x25b/0x2f0 [ 271.519246][ T7335] __device_attach+0x2c7/0x450 [ 271.519268][ T7335] device_initial_probe+0xa1/0xd0 [ 271.519290][ T7335] bus_probe_device+0x12d/0x220 [ 271.519307][ T7335] device_add+0x7d7/0xb80 [ 271.519326][ T7335] usb_new_device+0x98d/0x1610 [ 271.519351][ T7335] hub_event+0x28cf/0x4cf0 [ 271.519368][ T7335] process_scheduled_works+0xa8e/0x14e0 [ 271.519388][ T7335] worker_thread+0xa47/0xfb0 [ 271.519408][ T7335] kthread+0x388/0x470 [ 271.519433][ T7335] ret_from_fork+0x514/0xb70 [ 271.519460][ T7335] ret_from_fork_asm+0x1a/0x30 [ 271.519476][ T7335] [ 271.519481][ T7335] The buggy address belongs to the object at ffff888020eaaea0 [ 271.519481][ T7335] which belongs to the cache kmalloc-8 of size 8 [ 271.519496][ T7335] The buggy address is located 0 bytes inside of [ 271.519496][ T7335] freed 8-byte region [ffff888020eaaea0, ffff888020eaaea8) [ 271.519515][ T7335] [ 271.519519][ T7335] The buggy address belongs to the physical page: [ 271.519540][ T7335] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20eaa [ 271.519557][ T7335] flags: 0x80000000000000(node=0|zone=1) [ 271.519575][ T7335] page_type: f5(slab) [ 271.519592][ T7335] raw: 0080000000000000 ffff88813ffb1500 dead000000000100 dead000000000122 [ 271.519608][ T7335] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 271.519618][ T7335] page dumped because: kasan: bad access detected [ 271.519630][ T7335] page_owner tracks the page as allocated [ 271.519637][ T7335] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3154237159, free_ts 0 [ 271.519668][ T7335] post_alloc_hook+0x1f9/0x250 [ 271.519684][ T7335] get_page_from_freelist+0x262a/0x26a0 [ 271.519705][ T7335] __alloc_frozen_pages_noprof+0x18d/0x380 [ 271.519726][ T7335] allocate_slab+0x79/0x5e0 [ 271.519749][ T7335] refill_objects+0x2d8/0x350 [ 271.519773][ T7335] __pcs_replace_empty_main+0x330/0x690 [ 271.519796][ T7335] __kmalloc_noprof+0x544/0x780 [ 271.519812][ T7335] acpi_ns_internalize_name+0x2da/0x3f0 [ 271.519834][ T7335] acpi_ns_get_node_unlocked+0x186/0x480 [ 271.519855][ T7335] acpi_ns_get_node+0x76/0xc0 [ 271.519875][ T7335] acpi_get_handle+0x18c/0x290 [ 271.519896][ T7335] acpi_has_method+0x8c/0xe0 [ 271.519914][ T7335] acpi_attr_is_visible+0x357/0x520 [ 271.519938][ T7335] internal_create_group+0x5ed/0x1180 [ 271.519957][ T7335] sysfs_create_groups+0x59/0x120 [ 271.519974][ T7335] device_add_attrs+0x1b1/0x600 [ 271.519994][ T7335] page_owner free stack trace missing [ 271.520001][ T7335] [ 271.520005][ T7335] Memory state around the buggy address: [ 271.520015][ T7335] ffff888020eaad80: 02 fc fc fc 00 fc fc fc 07 fc fc fc 07 fc fc fc [ 271.520027][ T7335] ffff888020eaae00: 05 fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 271.520040][ T7335] >ffff888020eaae80: 07 fc fc fc fb fc fc fc 07 fc fc fc 07 fc fc fc [ 271.520049][ T7335] ^ [ 271.520059][ T7335] ffff888020eaaf00: 07 fc fc fc 07 fc fc fc 07 fc fc fc 05 fc fc fc [ 271.520072][ T7335] ffff888020eaaf80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 271.520081][ T7335] ================================================================== [ 271.670902][ T7335] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.670922][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: fido_id Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 271.670945][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.670957][ T7335] Call Trace: [ 271.670964][ T7335] [ 271.670971][ T7335] vpanic+0x56c/0xa60 [ 271.670996][ T7335] ? __pfx_vpanic+0x10/0x10 [ 271.671015][ T7335] ? __pfx___schedule+0x10/0x10 [ 271.671037][ T7335] panic+0xc5/0xd0 [ 271.671054][ T7335] ? __pfx_panic+0x10/0x10 [ 271.671073][ T7335] ? preempt_schedule_common+0x82/0xd0 [ 271.671103][ T7335] ? report_descriptor_read+0xb5/0x100 [ 271.671125][ T7335] check_panic_on_warn+0x89/0xb0 [ 271.671144][ T7335] ? report_descriptor_read+0xb5/0x100 [ 271.671165][ T7335] end_report+0x73/0x170 [ 271.671187][ T7335] ? report_descriptor_read+0xb5/0x100 [ 271.671207][ T7335] kasan_report+0x128/0x150 [ 271.671229][ T7335] ? report_descriptor_read+0xb5/0x100 [ 271.671254][ T7335] kasan_check_range+0x264/0x2c0 [ 271.671276][ T7335] ? report_descriptor_read+0xb5/0x100 [ 271.671298][ T7335] __asan_memcpy+0x29/0x70 [ 271.671326][ T7335] report_descriptor_read+0xb5/0x100 [ 271.671346][ T7335] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 271.671364][ T7335] kernfs_fop_read_iter+0x435/0x6a0 [ 271.671393][ T7335] vfs_read+0x59e/0xa90 [ 271.671420][ T7335] ? __pfx_vfs_read+0x10/0x10 [ 271.671444][ T7335] ? do_sys_openat2+0x14e/0x200 [ 271.671461][ T7335] ? kmem_cache_free+0x187/0x6c0 [ 271.671490][ T7335] ksys_read+0x156/0x270 [ 271.671513][ T7335] ? __pfx_ksys_read+0x10/0x10 [ 271.671540][ T7335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.671559][ T7335] do_syscall_64+0x174/0x580 [ 271.671582][ T7335] ? trace_irq_disable+0x3b/0x140 [ 271.671600][ T7335] ? clear_bhb_loop+0x40/0x90 [ 271.671621][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.671640][ T7335] RIP: 0033:0x7f30567cc407 [ 271.671657][ T7335] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 271.671672][ T7335] RSP: 002b:00007ffe79dda220 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 271.671692][ T7335] RAX: ffffffffffffffda RBX: 00007f30566de880 RCX: 00007f30567cc407 [ 271.671706][ T7335] RDX: 0000000000001000 RSI: 00007ffe79dda270 RDI: 0000000000000004 [ 271.671718][ T7335] RBP: 0000562fd0913730 R08: 0000000000000000 R09: 0000000000000000 [ 271.671730][ T7335] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562fd0912930 [ 271.671743][ T7335] R13: 00007ffe79dda270 R14: 0000000000000004 R15: 0000562fb52e74d8 [ 271.671764][ T7335] [ 271.672035][ T7335] Kernel Offset: disabled