last executing test programs: 20.918043956s ago: executing program 1 (id=191): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xf4, 0x0, 0x7fff0026}]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 20.589330022s ago: executing program 1 (id=195): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x20000d728, 0x0, 0x0, 0x7, 0x0, 0x18, 0x68, 0x6a}) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x1}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vcan0\x00', 0x400}) setrlimit(0x5, &(0x7f0000000280)={0x0, 0x2}) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ab, 0x4, 0x0, 0x400251}, 0x0, &(0x7f0000000040)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000380), 0x4) setresuid(0x0, r1, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000340)) 20.425860385s ago: executing program 1 (id=198): add_key$user(0x0, 0x0, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc3", 0x89, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe0301"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000200)) 16.902771294s ago: executing program 1 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2001080, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 16.651905179s ago: executing program 1 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) open(0x0, 0x14d27e, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 15.772940685s ago: executing program 1 (id=222): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x20000d728, 0x0, 0x0, 0x7, 0x0, 0x18, 0x68, 0x6a}) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x1}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vcan0\x00', 0x400}) setrlimit(0x5, &(0x7f0000000280)={0x0, 0x2}) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ab, 0x4, 0x0, 0x400251}, 0x0, &(0x7f0000000040)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000380), 0x4) setresuid(0x0, r1, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000340)) 15.53202861s ago: executing program 32 (id=222): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x20000d728, 0x0, 0x0, 0x7, 0x0, 0x18, 0x68, 0x6a}) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x1}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vcan0\x00', 0x400}) setrlimit(0x5, &(0x7f0000000280)={0x0, 0x2}) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ab, 0x4, 0x0, 0x400251}, 0x0, &(0x7f0000000040)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000380), 0x4) setresuid(0x0, r1, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000340)) 10.131373284s ago: executing program 0 (id=245): r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x8ba, 0x20800) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r3 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) close_range(r3, r2, 0x2) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x406, r4) getsockopt$inet6_udp_int(r5, 0x11, 0x68, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x1, @pix={0x7, 0xffffffff, 0x3234564e, 0x4, 0x138e, 0x6, 0x5, 0x5, 0x0, 0x4, 0x0, 0x5}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="80040000000000000a000100aaaaaaaaaa150000080004"], 0x318}}, 0x20040800) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000340004eccb2bec80300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xff8e32d59ddfe960) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r10 = dup(r9) r11 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r11, 0xee72) sendfile(r10, r11, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000180)=0x19) prctl$PR_SET_IO_FLUSHER(0x4c, 0x2) 8.868672829s ago: executing program 0 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="f43df5093fc38ff8a54d508f5ad89d22daae2c8ac407d87d949ded6cda15921c58f5fa6b754dcce7ce", 0x29}, {&(0x7f0000000380)="d42c5861115c23078a8db418a44507b19377c8e1203eda233b2d159fb9d782e169028328beb6de73ec9f24baebb2d93b02960f13463ec804f6b6bca6dc29804b733d76d9ba92f1efc625ae3d11a9e713a3cf089522c53ede58d8dc80b9b82b51f84231", 0x63}], 0x2, &(0x7f0000000a00)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @hopopts_2292={{0xd38, 0x29, 0x36, {0x87, 0x1a3, '\x00', [@ra={0x5, 0x2, 0xf5fa}, @generic={0x1, 0xd04, "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"}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x2b, 0x8, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0xca, 0x1d, "190ceec227b604d34c8ddd4b52f6274e3d26bad54ebdfe241cc8f97b1b"}, @jumbo={0xc2, 0x4, 0xffffff7f}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0xc0}, @jumbo={0xc2, 0x4, 0x7}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x88, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x10}, @pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x5e, 0x4c3, [0x9d6, 0x10000, 0x5, 0x8, 0xdf7, 0x7, 0x1ff, 0x4]}}, @pad1]}}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}}, @generic={0x5, 0x8d, "488e9843d783610ddd59a0b74ee806269f6462b79fe38afd54625b216ffae5f084918d6c00afa36324fb68fc6d5cdb886b405131bae50bf250ff1160966d41853b1667e35b25f51565e1e64dda27267f121644419905a1465f25b48e28d85345bcdf4a04028bc150332933d7d534030d1248f7785ea7fd2b5951e261ca25002e045a0c12a5a2a1cac0a223fe06"}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0xfffffff2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}], 0xf20}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c, &(0x7f0000000400)}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002d00)="3757ea62f338ec7d280b7f05544a8fb8c65e41a99fd5e2f8c579cd0b552d10de58bdd34ba5f32995ec8542205d5046812a571f10255c9b858330b1f14c94edc720f8bedca8bfbeb3a52bc3c6772f97c2e2336c7fbf9a4a00dde3a268dd60bb70b0f4db9bc4fdb157b0c677585a47ce6910ba79f490428da636f95a97a886774cfc74b3a7ee721a79b75e34598ebbbe01bea5505824625442420bb68f5ee82ae3f3278d7ec8fbc4fbead121897922d1e4667f4dbad24545f20edcf6134e0f8b603096a13a5995ec55ae449b80fee2adc42c5d6e9cecf2ca6aaee4faff716e0907df9fb8a0c9c7608bbb06e4bb002957992ef700dbece92548ed992da8f93bab064979afb554e1784d888f03db89ed22669056485a5bcb14847dedd07e3d68e6e82ebf02865b9f74a7611fd3f90ac35909590aee380c59b555bae11347179b74b3471db5edec846815bb26e25b770c16c1616245a364a6c49a7a05961ade79a3c44d7a0869240bebe26235aa2b57e0ab75dccaa25b9ff19763d1b824bc3876d89a055fcfec894a5bb115d553037f69fa08c17bb66f891633f20a51009943233b9e70ea6d3271d77a6ac99ff7a38e8cd9ba818030492de047aa88a1dba67ba9fe36543802d065ed629824fc347b8f770b1bc511ae19f9b06b49705bfaa4d641bcc347a82cfbef6ce0a3946c905887b1fa578de44a169800e6f017f8e22dc5948a17ed8c870353848ac2eb38a6eade546c99555946970a1a5736214906349ad8d94f95656713d63b92fbdebc102f9016a088a9ffbc7ec16ca4e8856b2f7639129aa8eef6f9121e52b4e0eed945290a2fe732ec434e6aed7068a4f4fc56a1048ced4d194bc439dc5123eda6f90bea656d316a238f24a83e0604b05b3041ff5968bf0432b016484fc98784e914d9810d7ff703f22470f54824cfdee1c7c6a0986d301a0080585f2f47cad81ece1778c9dae61ed1dd692dccbcd8584d6b08d50349fc89ae5c1cf547df38f871fffa36ee4a130ff1cd2d9313f29498927f94dd0207c3088f78b89d8b142a23a7a4b5885f95427a699801505d43af23ae4afbef41b195ee7e1b6212115dfbd0c238815c4f9779f0973b475a499876999ee24bf4fa69b59d30f7949f2cf770067abdca0416479c05ac03025305a1a641dfd9bc829e9a1e7f28629f854622f860ef6a26309f90abc89feed1e5fc449aa2791b823f64b53531ac9bf8a34c66bdf034f7d7e08e26f37ea461a62004f0d6a1da767849524c565f2925157f47b3ad65d02e294cc3b271180f21e822a2051f4165fd5bf01c82323f21a7115d7ab13a8b04c4223eacae2f917d4624bd05f4e244deb4e8f6f16d9f3499da468d39b89e3a8df79760b5afbed95451b8bce6de4309b195bc33acc6e5186fc0b9b7dd6ea4a96de6831346fc0f858346e742b3bf063474a83ef9ac9b33b265d7ca7327d8ad78c3a6ee897b1a6b166faf6490f2590784729edffd064ececd28990cac47ab319a96d35edb6b06847aafdf108d4f9840e0627461a145d30be4add9fef1c0e6443aad7031433499f1ab64727938852d120f58d197ecc429a7985527f2256a870686da1f066093d14f8b8af23303bda49ddf3a3a2c72b9677688e30b757c5c96ecb45deaa5085ff3d4ff5fe5a4d7ecec9c33d0ffa5635e5d5b600f0934077556e50e1bab26652004b51e826f11ffcde2552e875b6527ca9afc48dc427f000e29e1893de99e4d6322d7c3c3bd8285943d68fa6bcff7f0c874b3f1896a9907866e632c1d8a16cab2a4cad73cdfb502dcad4d867134861c8076171006dba5168a7d9825028c2007d493ba0490cf05972fff30fbe4cb7bf2d277a41a738ca4ac6f2a5178836cd4cd48195ebf9b562d1f9fdb43c31a2ab060e22f0e14f3677c9ca27abbe88517fdc136884d757daf295b346f09f385a95f72f5c98770c6c7848a9581fdd548da2de7833e1a3fd49c813bbde020a569261300ca486f80821e925ffa2daa189d043e42b9566d238ce65f7a1d02d7cb8e196d44a37e72fc62ff6aebf9e44c8b9df73045f30926fa4fe1ef314b10f95e299dea8b1b563561ba7a125e658bd289265e3cf34ebe18a1aa836283f1e4cabb00b532f099ba8200e8d83cca3942a33829951bbba33a8dc212728d3b0da6afc929797b334ce5e4eb7f4e3d30b31638514a947233caaf0894562a99ab0a6dc276d9eb82117474c753dfd65d3e4fce3abef37b2b31a29150f86b2b488b8bb334020e409f81942d31cd80540d0b8e4385b1aa9d3df75df2b5925adaaa305ba9ae3090c311aa5d693bb24c47225034e2e8cc997433da8d60e0f71f2b5777e49d05707327d83335520b42d8e048c8e6ef7bb678c7017f064fc21e5f92ace2f83b0e0c8cffa58415c53a1afc8ad72060623d853bbf5da1dd9429d76edb37ef180cf4a55d34e3f56f9ba27b21410659b85297d37d30fe7d5c6be1c054ee7dd002036b0cc353d0f55bc447fcad1fffbe1add9928a6a6be92e36eb9e1e58daf29b7d5757438cef87919fe9b9ccb47790392f2b4ca7450df9b370104665b914d0a120945bfadafbb3dcdc7f8e5d7d52ba7d5ecf6ff607738e6344b378a10625bf17cb8c8a68deb6bf4a55582d9630433cff9eedf518d240a52265f056ead3656e9b8dbcaf7e530b9be6e7402bb6e00f134aef3ceb1bcb1cbe53e176ecb8252df515064decc9815660651317a5483c4d7c7a1361588dc47f5204d9411a6990600e7a429b395e02928e4ae1563b585dc2f4e5cb32494248ac1dc0d633ab8c925e60c8f6a56c22e9b32526b6405f09ef366cc7015e13d7f8a1b673389da7617a37cc439d8f700f99130c9c6cceb64dee64e78feac1b081102968a4bc8e7d3e20c9a1dc1f1a9274213ea6110566b1be05078a90e0360136b6814eb823ff9ea7dbb78c5138b51de685fdbfbf16d63bfe06eefb396e4936b1ee9a309fce668a26839591c8ca0a7f6b49368d2a0b74c1f634d2d94341ff1f13ba8a70f2f3318944cf1404175a9b709cb085857370a4a84bcea660a00f12d148b5864846e760958e607acfca17069a79c3ec34059056b4da1df902e208b22d248c4460897a22ae680cc4f627ad53823c97cc88a4e7e6291fba6118f2b2ada5d321e2085d664a7bd902f0c8af70ae3b55835351e45481687ffeb761aee7837f0366275bfb34b5c251bf56a4a697586546457be51b93fccb356606c62b3b48f70c8fb10371888ea4bf78bc846b30cb9a808b787ac4f86e2e35eb92cfb80fe77e5e79fb5c7f53a2edaf7184090b502a8bd484f5e838725bb1a2c84143017aa5ece0e67dc3866d32db7ad5e3ef1b601f157bfefdefecd43e215c268f873fa25c84e9c73254c405a9932ac1376e469a99329c03321c00dcad0e4dbc5f4d23329742b59aaa490583b70a51509f5781445b1dbc44695324b665ce02e11ae81e99870ca1fd524f78b90907bb0fdd00de6e831afbdb4b9eb5e197c8eebb39b48515a27c548d3cfefe953ec10c75290ca6bf521c08eecdc8ffad81f15be8264bb7ec5bc9f66231b7336b31498d9de3dc77fcd45cf059d68c7f12e9fe0e9f3bd0c807ffe639b5a770be6cbe665b95748108c66496f99f0dfbf4d7c3e6f2726d925fad7a1de33c993940f8a3eac0945c6bc66d6c1a58019f1202cfb2bcccd5de5b0a6963f284864b7910c619bd3bea8484d090fab58603f30a30452370c9efbd63c9ed10a0359557929c6b517c5225d86b965a44d0a6287d436a3ab767a8224bc84e8cabdff92d41fa40006b54e9f548b085d8407dc8a35a595febcfa511305bc8c5da7b1cfc467509118b409c41a872e3a21918f245d87a7c4afd8b0f3c8dd91042dd8da6c5864c3e81f77aec87f2bf511f20863f2cea12b06f933d8a9fb2e5d90bb980aad18f2714b050331061d6a7f052be76d58de29637479a101b5776a0d5d52a19f8d944ba6ff6a1c141fac385638e1b9a3c8df64e4c58a485de10ccbe6743b67c47c8eba75b623f53acf9f34b0d12fdd8cf91468e8d9dd26113d987f60b5359dc6f808f5d9a56c882046c238a84f262ceaa47f07b671d0d915f2332a0bfb01987f73547077492bee9e2e9767418949587912bae101c9afa999767f4f5806b8dc8934aa174eca71d1856d92c2b571879188054ff058a7c9bb21e1d2b384a3b3bc531644676e0b692b74a8af52f6738d4ffe70bfa3651dd5fbcacc2c12fa2960e9df2c9883d4e71f480a5d073fc2fbaec0029ba07a25d1b2ef5b8a8e73fe283a6634bd9c7231844269d9edb2f0a671d66c73cef4ae25bdb161e45f17cbeb689e9cb28c2d0221ef050a1db2b34877f44683515c424d370419e6aaffd34881a792097fec9caf53cd19775825349c9551695d2853696a49708e430bf85103f02e96ec7df21d2fdc1f8df1bfea1cd646df827b6dcb9570bdcbd30b68093a7f4428ce258f86fff7129c3cb63ecf497b3b98624b0818633330c4c56a5ec654718c3b61ea36acdc4e761053ee55a2bc450cbfdd7982094e9b387ac59c9d53ca77735b07c7b9d16a06826509658fdf8a1b018eb25e15b455750a735ea13812a3858e9544985258c538cc2bd3edc0ec29b2cc5fcdadf441b36cba779395c28d82c3c4abc66cc09470c01f25d7673efbde197c5cad4243bef242082f403dbbedf36f7d0418873c383544403d71bb26fee646060cf92dc10f13d5c7d0c7b5fde68f454da4cc21f0aac10535567bc8af292bc85973b0f5fc4d8dc7b54d01f1205353912d51ea740a4046dab64f73bf4a2862d0091c1604455b1c81a356c08fa736552a339981210901173b7027e7e72b154190b726e272ee6febe4bd9de49a984b9a30ef76ff27c796d2d9ea54ba0039fefb0542bc19ede34a15c4285337642cee221cfa415ca3718aff2840a403e5e3608b72c69a87f26c39d82078533e1e57c2099616022631d16924ccbe3661fccfd07ae50fd7edbeaa0d39c6027cd56c633f3c82b9843b57e29e5901372b491902545037344b3c4f720f85c868e8e1f94910af63bd2f1801588726614e715bb4e56a3fe9e20a5317f7fbdb9a6216383c8753", 0xe00}], 0x1}}], 0x3, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=@framed={{}, [@map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7}, 0x94) 6.765361759s ago: executing program 3 (id=258): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000880}, 0x20040010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffac1, 0x3}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x8091) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5.055979542s ago: executing program 3 (id=259): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b14, 0x0) 4.681861029s ago: executing program 0 (id=262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x6e, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x16, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES8=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 3.827849266s ago: executing program 4 (id=266): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) 3.716102778s ago: executing program 0 (id=268): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f00000007c0)={0x0, 0x20, 0x10, 0x6dd, 0x10, 0xffffffff, 0xffffffff, 0xf32, 0x100, 0x7f, 0x1, 0x7, &(0x7f0000000000)=[0x4], 0x1, 0x0}) 3.601904651s ago: executing program 4 (id=269): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 3.477139493s ago: executing program 0 (id=270): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 2.704255138s ago: executing program 4 (id=272): syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) fstat(r2, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 2.459314313s ago: executing program 4 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 2.449122723s ago: executing program 3 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000024d564b"]) 2.228479917s ago: executing program 4 (id=277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x6e, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x16, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES8=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 2.167933148s ago: executing program 3 (id=278): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000008c0)={0x2, 0x0, {&(0x7f0000000a40)=""/166, 0xf0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) 2.08489682s ago: executing program 3 (id=280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000240)={0x32, @local, 0x4e21, 0x4, 'lc\x00', 0x11, 0xe, 0x8}, 0x2c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500"/18], 0x40}}, 0x80) 1.811843955s ago: executing program 2 (id=281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1.53185426s ago: executing program 2 (id=282): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="b75603608dd66606f0f888eb00636808f291ef1803c4153006f4ec05e00cae094a69a5778dbd6037bd928c94"], 0x2c}, 0x1, 0x0, 0x0, 0x20044890}, 0x14004881) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1.233827676s ago: executing program 4 (id=283): syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000000009040000037105"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x12) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.03426004s ago: executing program 3 (id=284): syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790509050e0320200980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80050000) ppoll(&(0x7f0000001280)=[{r0, 0x68}], 0x1, &(0x7f00000012c0), 0x0, 0x0) 899.918502ms ago: executing program 2 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x4, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="af0a", 0x2}], 0x1}}], 0x1, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 834.804374ms ago: executing program 2 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00"], 0xfdef) 542.687149ms ago: executing program 2 (id=287): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000001c0)={0x1, 0x1, 0x3, 0x5, 0x197, &(0x7f0000000280)}) 353.350823ms ago: executing program 2 (id=288): creat(&(0x7f0000000100)='./file0\x00', 0x100) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, 0x0) r4 = open$dir(0x0, 0x20200, 0x41) close_range(r0, r4, 0x2) 0s ago: executing program 0 (id=289): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 56.942228][ T4171] cgroup: Unknown subsys name 'net' [ 57.058071][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.529906][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.033749][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.056577][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.118899][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.160761][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.236800][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.250447][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.257648][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.266359][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.281918][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.289001][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.297028][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.316195][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.323507][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.331256][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.350488][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.357680][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.366014][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.417865][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.425183][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.433351][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.463220][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.472585][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.479672][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.487836][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.496933][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.511219][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.520638][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.528372][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.536656][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.545594][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.582424][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.589517][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.597626][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.644141][ T4188] team0: Port device team_slave_0 added [ 60.652474][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.672460][ T4187] team0: Port device team_slave_0 added [ 60.686711][ T4188] team0: Port device team_slave_1 added [ 60.694408][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.710954][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.718163][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.726431][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.735311][ T4187] team0: Port device team_slave_1 added [ 60.741190][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.748581][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.756759][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.765335][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.811095][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.831166][ T4182] team0: Port device team_slave_0 added [ 60.860798][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.868014][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.894373][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.907884][ T4182] team0: Port device team_slave_1 added [ 60.914480][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.921439][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.947630][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.960505][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.981400][ T4191] team0: Port device team_slave_0 added [ 60.987894][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.995213][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.021232][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.041387][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.048467][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.074629][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.087236][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.105380][ T4191] team0: Port device team_slave_1 added [ 61.129162][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.137782][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.164042][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.209696][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.217095][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.243455][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.271078][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.278222][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.304900][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.329776][ T4183] team0: Port device team_slave_0 added [ 61.348861][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.355688][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.363506][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.370463][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.396666][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.410848][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.418230][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.425092][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.433137][ T4188] Cannot create hsr debugfs directory [ 61.439975][ T4183] team0: Port device team_slave_1 added [ 61.488132][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.495276][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.521796][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.567257][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.574154][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.580720][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.588431][ T4182] Cannot create hsr debugfs directory [ 61.594697][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.602362][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.628503][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.650847][ T4191] device hsr_slave_0 entered promiscuous mode [ 61.657624][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.664422][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.672418][ T4191] Cannot create hsr debugfs directory [ 61.691925][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 61.700236][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 61.708233][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.714654][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 61.720751][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 61.807217][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.814177][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.820689][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.832602][ T4183] Cannot create hsr debugfs directory [ 62.071931][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.088067][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.097775][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.108493][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.159586][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.195885][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.208361][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.226179][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.271945][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.286614][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.311490][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.320749][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.347677][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.382886][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.399283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.409289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.426886][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.439401][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.450278][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.483810][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.493364][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.502627][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.509822][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.519778][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.528358][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.589005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.600121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.609897][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.617280][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.626863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.637997][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.648835][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.666215][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.676927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.688401][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.710064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.718254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.726392][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.743752][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.752900][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.773965][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.806064][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.813343][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.821354][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.831482][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.840417][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.849982][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.868664][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.877486][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.896076][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.919774][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.928810][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.938053][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.947193][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.954316][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.963065][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.971850][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.980415][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.991037][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.003218][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.014465][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.024331][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.031404][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.087841][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.098372][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.110410][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.125980][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.136066][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.145790][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.154854][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.163791][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.173389][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.182409][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.190965][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.202060][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.211218][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.220397][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.227527][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.253449][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.268099][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.277673][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.296598][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.314901][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.348311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.358904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.376679][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.383857][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.394406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.403199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.412851][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.419922][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.427648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.436736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.446790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.455372][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.462495][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.470987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.480338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.502624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.510224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.518668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.531710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.553692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.569150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.581548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.597580][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.617264][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.642971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.653389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.663408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.672523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.680921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.690956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.699736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.709151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.717655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.726137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.737612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.746403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.756731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.762461][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 63.765127][ T4247] Bluetooth: hci2: command 0x041b tx timeout [ 63.781698][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 63.786879][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.799309][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 63.805964][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 63.810913][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.826162][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.838002][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.856075][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.864599][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.873081][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.888258][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.899342][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.907043][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.954610][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.970028][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.979395][ T562] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.986575][ T562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.001431][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.011030][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.020256][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.027410][ T562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.036175][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.045504][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.054428][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.067175][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.078768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.091179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.134162][ T4187] device veth0_vlan entered promiscuous mode [ 64.140883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.173642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.192272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.201332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.219013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.229686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.250071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.275855][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.286303][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.308215][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.326830][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.347416][ T4187] device veth1_vlan entered promiscuous mode [ 64.359882][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.375489][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.384451][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.393963][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.406274][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.416291][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.424982][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.433721][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.452726][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.473073][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.486847][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.532353][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.548493][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.573911][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.583527][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.631992][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.641163][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.653764][ T4187] device veth0_macvtap entered promiscuous mode [ 64.678637][ T4182] device veth0_vlan entered promiscuous mode [ 64.686319][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.695223][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.703548][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.711272][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.720214][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.734789][ T4187] device veth1_macvtap entered promiscuous mode [ 64.769801][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.778811][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.788598][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.798813][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.807401][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.815205][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.824274][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.836657][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.845355][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.859250][ T4182] device veth1_vlan entered promiscuous mode [ 64.869251][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.877795][ T4191] device veth0_vlan entered promiscuous mode [ 64.898604][ T4191] device veth1_vlan entered promiscuous mode [ 64.915567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.926424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.935656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.944386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.952964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.961271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.979781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.989135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.000944][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.023621][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.039086][ T4182] device veth0_macvtap entered promiscuous mode [ 65.047621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.057744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.067639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.076513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.085400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.094526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.103894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.112820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.122938][ T4191] device veth0_macvtap entered promiscuous mode [ 65.131149][ T4188] device veth0_vlan entered promiscuous mode [ 65.142241][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.151209][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.160827][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.170027][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.195438][ T4182] device veth1_macvtap entered promiscuous mode [ 65.204297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.213117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.221262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.229676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.240190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.262031][ T4188] device veth1_vlan entered promiscuous mode [ 65.281446][ T4183] device veth0_vlan entered promiscuous mode [ 65.292474][ T4191] device veth1_macvtap entered promiscuous mode [ 65.329467][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.350521][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.363583][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.370991][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.379734][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.388941][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.398047][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.407621][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.416051][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.453076][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.467089][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.477322][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.488107][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.499893][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.509468][ T4183] device veth1_vlan entered promiscuous mode [ 65.517342][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.529214][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.540533][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.551404][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.560480][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.569342][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.578430][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.597246][ T4188] device veth0_macvtap entered promiscuous mode [ 65.623212][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.631290][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.640761][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.649764][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.658754][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.668842][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.678069][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.687280][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.707231][ T4188] device veth1_macvtap entered promiscuous mode [ 65.742834][ T562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.750840][ T562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.769459][ T4183] device veth0_macvtap entered promiscuous mode [ 65.786483][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.798648][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.810220][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.821017][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.833395][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.841151][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.849285][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 65.851004][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.862353][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 65.864348][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.869259][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 65.877281][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.889603][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 65.892365][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.897333][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 65.906593][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.920073][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.930426][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.946228][ T4183] device veth1_macvtap entered promiscuous mode [ 65.963386][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.972396][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.973562][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.980405][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.989635][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.006826][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.035725][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.044204][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.078625][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.090635][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.102354][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.113380][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.123471][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.136279][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.147929][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.157107][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.170757][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.181338][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.192496][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.202582][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.213921][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.224460][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.235343][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.249741][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.272920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.289855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.300207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.323921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.338594][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.350144][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.350147][ T4292] loop2: detected capacity change from 0 to 512 [ 66.382168][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.391007][ T4292] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.417216][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.420527][ T4292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.434946][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.452852][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.465081][ T4292] EXT4-fs (loop2): 1 truncate cleaned up [ 66.467111][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.483109][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.494230][ T4292] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,journal_ioprio=0x0000000000000006,init_itable,,errors=continue. Quota mode: none. [ 66.518284][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.529020][ T4292] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #2: comm syz.2.3: Siphash requires key [ 66.531426][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.556810][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.568252][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.579111][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.589299][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.600013][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.612922][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.636466][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.647268][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.656515][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.665910][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.698943][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.708880][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.718161][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728714][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.878215][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.882883][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.887606][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.906101][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.914899][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.923794][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.678459][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.893234][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.906026][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.922550][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 67.984927][ T4305] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 68.010130][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 68.172730][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 68.251428][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 68.307247][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 68.565291][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.582620][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.666187][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.674745][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.713446][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.754346][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.781209][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.788811][ T1406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.831697][ T1406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.856004][ T4310] loop0: detected capacity change from 0 to 512 [ 68.884372][ T1406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.919154][ T1406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.924548][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.939355][ T1406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.948050][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.975326][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.011137][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.018357][ T4310] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 69.026915][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.035580][ T4310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 69.052682][ T4310] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.059716][ T4310] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.070037][ T4310] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 69.071362][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.079549][ T4310] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.079592][ T4310] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 69.117362][ T4310] EXT4-fs (loop0): 1 truncate cleaned up [ 69.129158][ T4310] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.160968][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.164189][ T4310] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 69.342027][ T4316] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 69.351955][ T4316] device bridge1 entered promiscuous mode [ 70.551383][ T26] audit: type=1326 audit(1758579483.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 71.228381][ T26] audit: type=1326 audit(1758579483.530:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 71.286124][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.292771][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.323558][ T26] audit: type=1326 audit(1758579483.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 71.350185][ T26] audit: type=1326 audit(1758579483.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 71.427400][ T4341] loop2: detected capacity change from 0 to 1024 [ 71.682517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.691691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 71.823318][ T4345] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 71.833506][ T4345] device bridge1 entered promiscuous mode [ 71.862265][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.871408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.881059][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.890241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.899953][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.908962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 71.918757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 71.927951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 72.710731][ T26] audit: type=1326 audit(1758579483.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 72.733756][ T26] audit: type=1326 audit(1758579483.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 72.779066][ T26] audit: type=1326 audit(1758579483.690:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 72.815630][ T26] audit: type=1326 audit(1758579483.850:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 72.874611][ T4341] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.889828][ T4341] EXT4-fs (loop2): inline encryption not supported [ 73.039322][ T26] audit: type=1326 audit(1758579483.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6b9c95aec9 code=0x7ffc0000 [ 73.231243][ T4362] loop3: detected capacity change from 0 to 1024 [ 73.267156][ T4341] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 73.294248][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.353608][ T4364] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 73.489730][ T4362] EXT4-fs (loop3): Test dummy encryption mode enabled [ 73.624393][ T4362] EXT4-fs (loop3): inline encryption not supported [ 73.772974][ T4362] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 73.866307][ T4370] device veth0 entered promiscuous mode [ 74.249089][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 75.503583][ T4387] loop2: detected capacity change from 0 to 1024 [ 75.702326][ T4387] ======================================================= [ 75.702326][ T4387] WARNING: The mand mount option has been deprecated and [ 75.702326][ T4387] and is ignored by this kernel. Remove the mand [ 75.702326][ T4387] option from the mount to silence this warning. [ 75.702326][ T4387] ======================================================= [ 75.885797][ T4387] EXT4-fs (loop2): Ignoring removed oldalloc option [ 75.921034][ T4387] EXT4-fs (loop2): Ignoring removed bh option [ 75.947979][ T4387] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 80.124835][ T4426] xt_hashlimit: max too large, truncated to 1048576 [ 80.158569][ T4428] loop0: detected capacity change from 0 to 1024 [ 80.217769][ T4428] EXT4-fs (loop0): Test dummy encryption mode enabled [ 80.230236][ T4428] EXT4-fs (loop0): inline encryption not supported [ 80.239097][ T4432] loop4: detected capacity change from 0 to 1024 [ 80.292319][ T4428] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 80.322446][ T4432] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.329312][ T4432] EXT4-fs (loop4): inline encryption not supported [ 80.422824][ T4432] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 80.535796][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.711592][ C0] sched: RT throttling activated [ 83.676282][ T4460] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 83.685725][ T4460] device bridge1 entered promiscuous mode [ 87.313556][ T13] cfg80211: failed to load regulatory.db [ 87.544075][ T4485] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 88.429048][ T4494] loop4: detected capacity change from 0 to 1024 [ 88.644342][ T4494] EXT4-fs (loop4): Test dummy encryption mode enabled [ 88.651236][ T4494] EXT4-fs (loop4): inline encryption not supported [ 89.574843][ T4494] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 89.724607][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.927842][ T4519] netlink: 80 bytes leftover after parsing attributes in process `syz.1.46'. [ 90.951786][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 91.514788][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.541794][ T1108] usb 1-1: device descriptor read/all, error -71 [ 92.005756][ T4233] usb 4-1: Using ep0 maxpacket: 32 [ 92.199307][ T4233] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.260976][ T4233] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 92.403419][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.433859][ T4233] usb 4-1: config 0 descriptor?? [ 92.708404][ T4537] netlink: 64 bytes leftover after parsing attributes in process `syz.2.53'. [ 93.083505][ T4233] kye 0003:0458:5015.0001: hidraw0: USB HID v10.00 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 93.303468][ T4233] kye 0003:0458:5015.0001: tablet-enabling feature report not found [ 93.941548][ T4233] kye 0003:0458:5015.0001: tablet enabling failed [ 93.960820][ T4233] usb 4-1: USB disconnect, device number 2 [ 94.117975][ T4551] fido_id[4551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 94.158270][ T4552] loop3: detected capacity change from 0 to 512 [ 95.109068][ T4552] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 95.182632][ T4552] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.257537][ T4565] loop2: detected capacity change from 0 to 512 [ 95.366688][ T4565] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.409668][ T4565] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.511259][ T4552] Zero length message leads to an empty skb [ 95.659129][ T4574] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.201394][ T4593] syz.4.67[4593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.201521][ T4593] syz.4.67[4593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.216261][ T4597] syz.1.68[4597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.264967][ T4597] syz.1.68[4597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.326940][ T4597] syz.1.68[4597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.414822][ T4597] syz.1.68[4597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.297912][ T4608] loop1: detected capacity change from 0 to 1024 [ 100.812966][ T4608] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.888939][ T4608] EXT4-fs (loop1): inline encryption not supported [ 100.964179][ T4608] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 102.714967][ T4643] syz.0.80[4643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.716019][ T4643] syz.0.80[4643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.731684][ T4644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.77'. [ 103.290546][ T4651] loop4: detected capacity change from 0 to 1024 [ 103.405241][ T4651] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.439754][ T4651] EXT4-fs (loop4): inline encryption not supported [ 103.497354][ T4651] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 106.144930][ T4710] netlink: 36 bytes leftover after parsing attributes in process `syz.4.95'. [ 107.858092][ T4730] loop0: detected capacity change from 0 to 16 [ 107.984455][ T4730] erofs: (device loop0): mounted with root inode @ nid 36. [ 110.645544][ T4730] attempt to access beyond end of device [ 110.645544][ T4730] loop0: rw=0, want=24, limit=16 [ 110.770962][ T4730] attempt to access beyond end of device [ 110.770962][ T4730] loop0: rw=524288, want=32, limit=16 [ 110.881343][ T4730] attempt to access beyond end of device [ 110.881343][ T4730] loop0: rw=524288, want=24, limit=16 [ 111.093915][ T4761] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET) [ 112.615156][ T4773] loop2: detected capacity change from 0 to 1024 [ 112.871251][ T4773] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.932169][ T4773] EXT4-fs (loop2): inline encryption not supported [ 113.082276][ T4773] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 114.772437][ T4803] loop0: detected capacity change from 0 to 1024 [ 114.923257][ T4803] EXT4-fs (loop0): Ignoring removed nobh option [ 114.951953][ T4803] EXT4-fs (loop0): Ignoring removed bh option [ 114.958171][ T4803] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.027196][ T4803] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 117.565006][ T4830] 9pnet_virtio: no channels available for device syz [ 118.052089][ T4842] netlink: 76 bytes leftover after parsing attributes in process `syz.0.131'. [ 118.112026][ T4226] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.511807][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 118.632027][ T4226] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.686579][ T4226] usb 4-1: config 0 has no interface number 0 [ 118.901383][ T4226] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 119.001255][ T4226] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 119.720838][ T4226] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.043859][ T4226] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 120.113898][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.384164][ T4226] usb 4-1: config 0 descriptor?? [ 120.474186][ T4226] ldusb 4-1:0.55: Interrupt in endpoint not found [ 121.501431][ T4864] loop4: detected capacity change from 0 to 1024 [ 121.558594][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.571224][ T4798] usb 4-1: USB disconnect, device number 3 [ 121.630614][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.638279][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.651413][ T4865] device bridge_slave_0 left promiscuous mode [ 121.660156][ T4865] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.757246][ T4864] EXT4-fs (loop4): Test dummy encryption mode enabled [ 121.792650][ T4864] EXT4-fs (loop4): inline encryption not supported [ 121.954886][ T4865] device bridge_slave_1 left promiscuous mode [ 122.187524][ T4865] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.470716][ T4864] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 122.497528][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.771340][ T4865] bond0: (slave bond_slave_0): Releasing backup interface [ 122.806052][ T4865] bond0: (slave bond_slave_1): Releasing backup interface [ 124.004202][ T4865] team0: Port device team_slave_0 removed [ 124.895461][ T4865] team0: Port device team_slave_1 removed [ 124.955117][ T4865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.072239][ T4865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.194441][ T4865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.303263][ T4865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.476330][ T4865] syz.0.139 (4865) used greatest stack depth: 21152 bytes left [ 125.569296][ T4868] netlink: 'syz.0.139': attribute type 10 has an invalid length. [ 125.617202][ T4868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.781142][ T4868] team0: Port device bond0 added [ 125.886935][ T4868] syz.0.139 (4868) used greatest stack depth: 21024 bytes left [ 126.261771][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 126.427774][ T4199] Bluetooth: hci4: hardware error 0x08 [ 126.474058][ T4872] team0 (unregistering): Port device bond0 removed [ 127.689521][ T4922] ODEBUG: Out of memory. ODEBUG disabled [ 127.739706][ T4929] loop4: detected capacity change from 0 to 1024 [ 127.930725][ T4929] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.942329][ T4929] EXT4-fs (loop4): inline encryption not supported [ 128.036762][ T4929] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 129.823796][ T4953] loop4: detected capacity change from 0 to 1024 [ 129.860133][ T4953] EXT4-fs (loop4): Test dummy encryption mode enabled [ 130.025378][ T4953] EXT4-fs (loop4): inline encryption not supported [ 130.149404][ T4953] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 132.092666][ T4985] netlink: 128 bytes leftover after parsing attributes in process `syz.2.171'. [ 132.495121][ T4990] loop3: detected capacity change from 0 to 1024 [ 132.621286][ T4990] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.724489][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730930][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.897180][ T4990] EXT4-fs (loop3): inline encryption not supported [ 134.678788][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 134.771678][ T4226] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.787245][ T5002] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.955644][ T5009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.895717][ T4226] usb 1-1: Using ep0 maxpacket: 8 [ 135.938301][ T5014] md2: error: bitmap file must be a regular file [ 135.967376][ T5013] block device autoloading is deprecated and will be removed. [ 135.984693][ T5009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.000287][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 136.000303][ T26] audit: type=1326 audit(1758579548.950:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.4.180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f502009aec9 code=0x0 [ 136.031766][ T4226] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.050332][ T4226] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.072006][ T4226] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.099056][ T4226] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.145493][ T4226] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.169189][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.250832][ T5009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.491774][ T4226] usb 1-1: GET_CAPABILITIES returned 0 [ 136.497408][ T4226] usbtmc 1-1:16.0: can't read capabilities [ 136.517452][ T5009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.741760][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.752357][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.761433][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.770510][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.779589][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.788705][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.797773][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.806852][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.815927][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.824995][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.834072][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.843247][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.852338][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.861430][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.870597][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 136.879702][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 136.890254][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.091325][ T5009] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.096405][ T1345] usb 1-1: USB disconnect, device number 4 [ 137.145406][ T5009] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.160457][ T5009] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.177639][ T5009] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.869445][ T5059] capability: warning: `syz.3.193' uses 32-bit capabilities (legacy support in use) [ 140.291673][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.346419][ T26] audit: type=1800 audit(1758579553.310:23): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.201" name="/" dev="fuse" ino=1 res=0 errno=0 [ 140.469417][ T5084] tipc: Started in network mode [ 140.488977][ T5084] tipc: Node identity 660020c7ef12, cluster identity 4711 [ 140.501529][ T5084] tipc: Enabled bearer , priority 0 [ 140.590217][ T5084] tipc: Resetting bearer [ 140.603387][ T5083] tipc: Disabling bearer [ 140.689481][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 141.531819][ T1108] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 141.553688][ T1108] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.574033][ T1108] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.584228][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.662945][ T1108] usbtmc 2-1:16.0: bulk endpoints not found [ 141.762873][ T5107] tipc: Enabled bearer , priority 0 [ 141.781420][ T5107] netlink: 'syz.3.212': attribute type 2 has an invalid length. [ 141.789254][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 141.798869][ T5107] netlink: 'syz.3.212': attribute type 2 has an invalid length. [ 141.806984][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 141.820310][ T5106] tipc: Resetting bearer [ 141.885912][ T5106] tipc: Disabling bearer [ 141.897669][ T4302] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.931853][ T4199] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 142.158800][ T5115] program syz.3.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.199092][ T5115] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 142.217269][ T5115] kernel profiling enabled (shift: 63) [ 142.224721][ T5115] profiling shift: 63 too large [ 142.751864][ T4302] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.769624][ T4302] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 142.806467][ T4302] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.835583][ T4302] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 142.868378][ T4302] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 143.011929][ T4302] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.027767][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.036637][ T4302] usb 5-1: Product: syz [ 143.040976][ T4302] usb 5-1: Manufacturer: syz [ 143.314199][ T21] usb 2-1: USB disconnect, device number 2 [ 143.522686][ T4302] cdc_wdm 5-1:1.0: skipping garbage [ 143.528039][ T4302] cdc_wdm 5-1:1.0: skipping garbage [ 143.542388][ T4302] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 143.548358][ T4302] cdc_wdm 5-1:1.0: Unknown control protocol [ 143.651635][ T1345] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.578006][ T5136] device batadv_slave_1 entered promiscuous mode [ 144.730092][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.741748][ T1345] usb 4-1: Using ep0 maxpacket: 8 [ 144.782932][ T5138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.812777][ T5138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.831853][ T5138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.861866][ T1345] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 144.869359][ T1345] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.918780][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.931986][ T1345] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 145.036968][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.071854][ T1345] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 145.079329][ T1345] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 145.101354][ T1345] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 145.135588][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.182442][ T4798] usb 5-1: USB disconnect, device number 2 [ 145.211794][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 145.221921][ T1345] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 145.229728][ T1345] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 145.270575][ T1345] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 145.531814][ T1345] usb 4-1: string descriptor 0 read error: -22 [ 145.538529][ T1345] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.610869][ T1345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.842961][ T1345] adutux 4-1:168.0: interrupt endpoints not found [ 145.860751][ T1345] usb 4-1: USB disconnect, device number 4 [ 146.333170][ T5185] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 147.056630][ T5190] loop3: detected capacity change from 0 to 1024 [ 147.094848][ T5190] EXT4-fs (loop3): Test dummy encryption mode enabled [ 147.152483][ T5190] EXT4-fs (loop3): inline encryption not supported [ 147.280316][ T5190] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 147.337238][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.442030][ T4302] Bluetooth: hci1: command 0x0409 tx timeout [ 147.519893][ T5155] chnl_net:caif_netlink_parms(): no params data found [ 147.835627][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.911717][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.919986][ T5155] device bridge_slave_0 entered promiscuous mode [ 148.002500][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.024540][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.053518][ T5155] device bridge_slave_1 entered promiscuous mode [ 148.150258][ T5155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.308389][ T5155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.445826][ T5155] team0: Port device team_slave_0 added [ 148.484102][ T5155] team0: Port device team_slave_1 added [ 148.517769][ T1345] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.576095][ T154] device hsr_slave_0 left promiscuous mode [ 148.652168][ T154] device hsr_slave_1 left promiscuous mode [ 148.659552][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.696621][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.733110][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.791807][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.814756][ T154] device bridge_slave_1 left promiscuous mode [ 148.841980][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.891861][ T154] device bridge_slave_0 left promiscuous mode [ 148.898147][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.906052][ T1345] usb 4-1: config 0 has no interfaces? [ 148.961516][ T154] device veth1_macvtap left promiscuous mode [ 148.978573][ T154] device veth0_macvtap left promiscuous mode [ 148.987189][ T154] device veth1_vlan left promiscuous mode [ 149.002180][ T154] device veth0_vlan left promiscuous mode [ 149.078611][ T1345] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 149.108178][ T1345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.147766][ T1345] usb 4-1: Product: syz [ 149.173758][ T1345] usb 4-1: Manufacturer: syz [ 149.178412][ T1345] usb 4-1: SerialNumber: syz [ 149.212381][ T1345] usb 4-1: config 0 descriptor?? [ 149.535385][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 149.871787][ T5255] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 150.441874][ T154] team0 (unregistering): Port device team_slave_1 removed [ 150.510163][ T154] team0 (unregistering): Port device team_slave_0 removed [ 150.554763][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.571289][ T5267] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 150.610561][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.849609][ T154] bond0 (unregistering): Released all slaves [ 151.005392][ T5260] netlink: 700 bytes leftover after parsing attributes in process `syz.0.245'. [ 151.041020][ T1108] usb 4-1: USB disconnect, device number 5 [ 151.055322][ T5155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.079527][ T5155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.180639][ T5155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.217589][ T5155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.229112][ T5155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.269954][ T5155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.454754][ T5155] device hsr_slave_0 entered promiscuous mode [ 151.496535][ T5155] device hsr_slave_1 entered promiscuous mode [ 151.558832][ T5155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.600301][ T5155] Cannot create hsr debugfs directory [ 151.611862][ T4798] Bluetooth: hci1: command 0x040f tx timeout [ 153.045632][ T5305] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 153.432368][ T5155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.504515][ T5155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.681170][ T5310] device syzkaller1 entered promiscuous mode [ 153.688714][ T4261] Bluetooth: hci1: command 0x0419 tx timeout [ 155.404463][ T5155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.433898][ T5155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.712873][ T4226] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.749249][ T5155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.867868][ T5155] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.903606][ T5340] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 155.940142][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.965079][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.014103][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.037099][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.069996][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.077250][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.091815][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 156.131277][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.158593][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.192725][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.218445][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.225675][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.242114][ T4226] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.266055][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.266764][ T4226] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.331704][ T4226] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.334762][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.378960][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.402973][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.405882][ T4226] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.460697][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.469475][ T4226] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.486708][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.496059][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.513974][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.566685][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.624200][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.664811][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.729479][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.763151][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.863840][ T4226] usb 4-1: GET_CAPABILITIES returned 0 [ 156.869394][ T4226] usbtmc 4-1:16.0: can't read capabilities [ 157.360848][ T1345] usb 4-1: USB disconnect, device number 6 [ 158.006499][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.035904][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.106387][ T5155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.619046][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.651753][ T4226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.659149][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.672905][ T4290] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 159.709467][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.728879][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.770664][ T5155] device veth0_vlan entered promiscuous mode [ 159.792553][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.810929][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.832825][ T5155] device veth1_vlan entered promiscuous mode [ 159.911780][ T4226] usb 5-1: Using ep0 maxpacket: 16 [ 159.917626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.958304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.967100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.003229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.034557][ T5155] device veth0_macvtap entered promiscuous mode [ 160.048010][ T4226] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.063749][ T5155] device veth1_macvtap entered promiscuous mode [ 160.070236][ T4226] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.071785][ T4290] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 160.121501][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.138588][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.141902][ T4290] usb 4-1: config 0 has no interface number 0 [ 160.149762][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.174828][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.185577][ T4290] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 160.193142][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.211674][ T4226] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 160.225995][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.226880][ T4290] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 8224, setting to 8 [ 160.242844][ T4226] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 160.260007][ T5155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.277807][ T4226] usb 5-1: Manufacturer: syz [ 160.284446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.302996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.320172][ T4290] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 160.322403][ T4226] usb 5-1: config 0 descriptor?? [ 160.339701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.361740][ T4290] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.366160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.401733][ T4290] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 160.441518][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.465640][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.476920][ T4290] usb 4-1: config 0 descriptor?? [ 160.488858][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.499372][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.516505][ T5426] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.524248][ T5426] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.531404][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.549845][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.553561][ T4290] ldusb 4-1:0.55: Interrupt in endpoint not found [ 160.560594][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.603569][ T5155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.649044][ T5448] ================================================================== [ 160.657531][ T5448] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 160.665297][ T5448] Write of size 4 at addr ffff88805cbfb7b8 by task syz.0.289/5448 [ 160.673290][ T5448] [ 160.675662][ T5448] CPU: 1 PID: 5448 Comm: syz.0.289 Not tainted syzkaller #0 [ 160.682965][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.693048][ T5448] Call Trace: [ 160.696371][ T5448] [ 160.699405][ T5448] dump_stack_lvl+0x168/0x230 [ 160.704101][ T5448] ? show_regs_print_info+0x20/0x20 [ 160.709318][ T5448] ? load_image+0x3b0/0x3b0 [ 160.713839][ T5448] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 160.719229][ T5448] print_address_description+0x60/0x2d0 [ 160.724873][ T5448] ? ax25_dev_device_down+0x35e/0x520 [ 160.730252][ T5448] kasan_report+0xdf/0x130 [ 160.734678][ T5448] ? ax25_dev_device_down+0x35e/0x520 [ 160.740058][ T5448] ? kfree+0xef/0x2a0 [ 160.744053][ T5448] kasan_check_range+0x27b/0x290 [ 160.749055][ T5448] ax25_dev_device_down+0x35e/0x520 [ 160.754353][ T5448] ax25_device_event+0x4b4/0x4f0 [ 160.759301][ T5448] raw_notifier_call_chain+0xcb/0x160 [ 160.764688][ T5448] __dev_notify_flags+0x178/0x2d0 [ 160.769815][ T5448] ? __dev_change_flags+0x6a0/0x6a0 [ 160.775026][ T5448] ? __dev_change_flags+0x4bb/0x6a0 [ 160.780249][ T5448] ? dev_get_flags+0x1c0/0x1c0 [ 160.785036][ T5448] ? do_raw_spin_unlock+0x11d/0x230 [ 160.790262][ T5448] dev_change_flags+0xe3/0x1a0 [ 160.795044][ T5448] dev_ifsioc+0x147/0xe70 [ 160.799387][ T5448] ? dev_ioctl+0x54e/0xe50 [ 160.803812][ T5448] ? dev_ioctl+0xe50/0xe50 [ 160.808263][ T5448] ? apparmor_capable+0x12c/0x190 [ 160.813405][ T5448] ? full_name_hash+0x8e/0xe0 [ 160.818101][ T5448] dev_ioctl+0x55f/0xe50 [ 160.822367][ T5448] ? _copy_from_user+0x111/0x170 [ 160.827324][ T5448] sock_do_ioctl+0x222/0x2f0 [ 160.832062][ T5448] ? sock_show_fdinfo+0xb0/0xb0 [ 160.836959][ T5448] sock_ioctl+0x4ed/0x6e0 [ 160.841313][ T5448] ? sock_poll+0x3f0/0x3f0 [ 160.845780][ T5448] ? bpf_lsm_file_ioctl+0x5/0x10 [ 160.850743][ T5448] ? security_file_ioctl+0x7c/0xa0 [ 160.855875][ T5448] ? sock_poll+0x3f0/0x3f0 [ 160.860312][ T5448] __se_sys_ioctl+0xfa/0x170 [ 160.864920][ T5448] do_syscall_64+0x4c/0xa0 [ 160.869351][ T5448] ? clear_bhb_loop+0x30/0x80 [ 160.874037][ T5448] ? clear_bhb_loop+0x30/0x80 [ 160.878721][ T5448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.884638][ T5448] RIP: 0033:0x7efe4e5e5ec9 [ 160.889064][ T5448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.908675][ T5448] RSP: 002b:00007efe4c84d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.917111][ T5448] RAX: ffffffffffffffda RBX: 00007efe4e83cfa0 RCX: 00007efe4e5e5ec9 [ 160.925087][ T5448] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 160.933066][ T5448] RBP: 00007efe4e668f91 R08: 0000000000000000 R09: 0000000000000000 [ 160.941065][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.949151][ T5448] R13: 00007efe4e83d038 R14: 00007efe4e83cfa0 R15: 00007fffadd47d78 [ 160.957164][ T5448] [ 160.960197][ T5448] [ 160.962539][ T5448] Allocated by task 5152: [ 160.966869][ T5448] __kasan_kmalloc+0xb5/0xf0 [ 160.971723][ T5448] ax25_dev_device_up+0x50/0x580 [ 160.976712][ T5448] ax25_device_event+0x483/0x4f0 [ 160.981698][ T5448] raw_notifier_call_chain+0xcb/0x160 [ 160.987111][ T5448] __dev_notify_flags+0x178/0x2d0 [ 160.992156][ T5448] dev_change_flags+0xe3/0x1a0 [ 160.996931][ T5448] dev_ifsioc+0x147/0xe70 [ 161.001277][ T5448] dev_ioctl+0x55f/0xe50 [ 161.005534][ T5448] sock_do_ioctl+0x222/0x2f0 [ 161.010130][ T5448] sock_ioctl+0x4ed/0x6e0 [ 161.014468][ T5448] __se_sys_ioctl+0xfa/0x170 [ 161.019062][ T5448] do_syscall_64+0x4c/0xa0 [ 161.023479][ T5448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.029381][ T5448] [ 161.031728][ T5448] Freed by task 5448: [ 161.035710][ T5448] kasan_set_track+0x4b/0x70 [ 161.040305][ T5448] kasan_set_free_info+0x1f/0x40 [ 161.045248][ T5448] ____kasan_slab_free+0xd5/0x110 [ 161.050274][ T5448] slab_free_freelist_hook+0xea/0x170 [ 161.055648][ T5448] kfree+0xef/0x2a0 [ 161.059460][ T5448] ax25_dev_device_down+0x1c0/0x520 [ 161.064667][ T5448] ax25_device_event+0x4b4/0x4f0 [ 161.069611][ T5448] raw_notifier_call_chain+0xcb/0x160 [ 161.074988][ T5448] __dev_notify_flags+0x178/0x2d0 [ 161.080016][ T5448] dev_change_flags+0xe3/0x1a0 [ 161.084780][ T5448] dev_ifsioc+0x147/0xe70 [ 161.089113][ T5448] dev_ioctl+0x55f/0xe50 [ 161.093356][ T5448] sock_do_ioctl+0x222/0x2f0 [ 161.097957][ T5448] sock_ioctl+0x4ed/0x6e0 [ 161.102290][ T5448] __se_sys_ioctl+0xfa/0x170 [ 161.106889][ T5448] do_syscall_64+0x4c/0xa0 [ 161.111313][ T5448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.117213][ T5448] [ 161.119537][ T5448] Last potentially related work creation: [ 161.125251][ T5448] kasan_save_stack+0x35/0x60 [ 161.129935][ T5448] kasan_record_aux_stack+0xb8/0x100 [ 161.135320][ T5448] kvfree_call_rcu+0x10a/0x7c0 [ 161.140088][ T5448] ip_fib_net_exit+0x2f1/0x330 [ 161.144854][ T5448] cleanup_net+0x6f0/0xb80 [ 161.149275][ T5448] process_one_work+0x863/0x1000 [ 161.154214][ T5448] worker_thread+0xaa8/0x12a0 [ 161.158895][ T5448] kthread+0x436/0x520 [ 161.162968][ T5448] ret_from_fork+0x1f/0x30 [ 161.167401][ T5448] [ 161.169774][ T5448] Second to last potentially related work creation: [ 161.176356][ T5448] kasan_save_stack+0x35/0x60 [ 161.181038][ T5448] kasan_record_aux_stack+0xb8/0x100 [ 161.186352][ T5448] insert_work+0x54/0x3d0 [ 161.190683][ T5448] __queue_work+0x9c5/0xd50 [ 161.195200][ T5448] queue_work_on+0x11d/0x1d0 [ 161.199793][ T5448] call_usermodehelper_exec+0x26b/0x460 [ 161.205339][ T5448] __request_module+0x3df/0x910 [ 161.210199][ T5448] crypto_alg_mod_lookup+0xe6/0x6d0 [ 161.215399][ T5448] crypto_alloc_tfm_node+0x149/0x330 [ 161.220684][ T5448] fscrypt_init_hkdf+0x89/0x270 [ 161.225543][ T5448] add_master_key+0xde/0x790 [ 161.230137][ T5448] fscrypt_add_test_dummy_key+0xd7/0x1b0 [ 161.235782][ T5448] fscrypt_set_test_dummy_encryption+0x2eb/0x6b0 [ 161.242204][ T5448] ext4_set_test_dummy_encryption+0x12f/0x220 [ 161.248291][ T5448] parse_options+0xdeb/0x27e0 [ 161.252970][ T5448] ext4_fill_super+0x200c/0x9a60 [ 161.257910][ T5448] mount_bdev+0x287/0x3c0 [ 161.262255][ T5448] legacy_get_tree+0xe6/0x180 [ 161.266936][ T5448] vfs_get_tree+0x88/0x270 [ 161.271352][ T5448] do_new_mount+0x24a/0xa40 [ 161.275862][ T5448] __se_sys_mount+0x2d6/0x3c0 [ 161.280542][ T5448] do_syscall_64+0x4c/0xa0 [ 161.285186][ T5448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.291084][ T5448] [ 161.293411][ T5448] The buggy address belongs to the object at ffff88805cbfb700 [ 161.293411][ T5448] which belongs to the cache kmalloc-192 of size 192 [ 161.307465][ T5448] The buggy address is located 184 bytes inside of [ 161.307465][ T5448] 192-byte region [ffff88805cbfb700, ffff88805cbfb7c0) [ 161.320831][ T5448] The buggy address belongs to the page: [ 161.326466][ T5448] page:ffffea000172fec0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cbfb [ 161.336623][ T5448] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 161.344182][ T5448] raw: 00fff00000000200 0000000000000000 0000000100000001 ffff888016841a00 [ 161.352780][ T5448] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 161.361358][ T5448] page dumped because: kasan: bad access detected [ 161.367779][ T5448] page_owner tracks the page as allocated [ 161.373734][ T5448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4346, ts 72288138262, free_ts 20959257107 [ 161.389720][ T5448] get_page_from_freelist+0x1b77/0x1c60 [ 161.395287][ T5448] __alloc_pages+0x1e1/0x470 [ 161.399878][ T5448] new_slab+0xb6/0x4b0 [ 161.403949][ T5448] ___slab_alloc+0x81e/0xdf0 [ 161.408544][ T5448] __kmalloc_node+0x200/0x3b0 [ 161.413220][ T5448] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 161.419032][ T5448] slab_post_alloc_hook+0xba/0x380 [ 161.424143][ T5448] kmem_cache_alloc+0x100/0x290 [ 161.429001][ T5448] __d_alloc+0x2a/0x6f0 [ 161.433252][ T5448] d_alloc_pseudo+0x19/0x70 [ 161.437756][ T5448] alloc_file_pseudo+0xc8/0x1f0 [ 161.442609][ T5448] sock_alloc_file+0xb3/0x240 [ 161.447291][ T5448] __sys_socket+0x11d/0x170 [ 161.451794][ T5448] __x64_sys_socket+0x76/0x80 [ 161.456473][ T5448] do_syscall_64+0x4c/0xa0 [ 161.460894][ T5448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.466796][ T5448] page last free stack trace: [ 161.471470][ T5448] free_unref_page_prepare+0x637/0x6c0 [ 161.476958][ T5448] free_unref_page+0x94/0x280 [ 161.481649][ T5448] free_contig_range+0x96/0xf0 [ 161.486419][ T5448] destroy_args+0x100/0xa20 [ 161.490926][ T5448] debug_vm_pgtable+0x318/0x370 [ 161.495785][ T5448] do_one_initcall+0x1ee/0x680 [ 161.500554][ T5448] do_initcall_level+0x137/0x1f0 [ 161.505489][ T5448] do_initcalls+0x4b/0x90 [ 161.509827][ T5448] kernel_init_freeable+0x3ce/0x560 [ 161.515062][ T5448] kernel_init+0x19/0x1b0 [ 161.519392][ T5448] ret_from_fork+0x1f/0x30 [ 161.523813][ T5448] [ 161.526141][ T5448] Memory state around the buggy address: [ 161.531785][ T5448] ffff88805cbfb680: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 161.539846][ T5448] ffff88805cbfb700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 161.547906][ T5448] >ffff88805cbfb780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 161.555965][ T5448] ^ [ 161.561860][ T5448] ffff88805cbfb800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.569928][ T5448] ffff88805cbfb880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 161.577984][ T5448] ================================================================== [ 161.586037][ T5448] Disabling lock debugging due to kernel taint [ 161.598238][ T5448] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 161.605482][ T5448] CPU: 0 PID: 5448 Comm: syz.0.289 Tainted: G B syzkaller #0 [ 161.614245][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.624298][ T5448] Call Trace: [ 161.627577][ T5448] [ 161.630540][ T5448] dump_stack_lvl+0x168/0x230 [ 161.635234][ T5448] ? show_regs_print_info+0x20/0x20 [ 161.640435][ T5448] ? load_image+0x3b0/0x3b0 [ 161.644943][ T5448] panic+0x2c9/0x7f0 [ 161.648840][ T5448] ? bpf_jit_dump+0xd0/0xd0 [ 161.653345][ T5448] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 161.659243][ T5448] ? _raw_spin_unlock+0x40/0x40 [ 161.664096][ T5448] ? ax25_dev_device_down+0x35e/0x520 [ 161.669473][ T5448] check_panic_on_warn+0x80/0xa0 [ 161.674414][ T5448] ? ax25_dev_device_down+0x35e/0x520 [ 161.679787][ T5448] end_report+0x6d/0xf0 [ 161.683945][ T5448] kasan_report+0x102/0x130 [ 161.688452][ T5448] ? ax25_dev_device_down+0x35e/0x520 [ 161.693823][ T5448] ? kfree+0xef/0x2a0 [ 161.697803][ T5448] kasan_check_range+0x27b/0x290 [ 161.702747][ T5448] ax25_dev_device_down+0x35e/0x520 [ 161.708049][ T5448] ax25_device_event+0x4b4/0x4f0 [ 161.712991][ T5448] raw_notifier_call_chain+0xcb/0x160 [ 161.718365][ T5448] __dev_notify_flags+0x178/0x2d0 [ 161.723393][ T5448] ? __dev_change_flags+0x6a0/0x6a0 [ 161.728593][ T5448] ? __dev_change_flags+0x4bb/0x6a0 [ 161.733793][ T5448] ? dev_get_flags+0x1c0/0x1c0 [ 161.738588][ T5448] ? do_raw_spin_unlock+0x11d/0x230 [ 161.743791][ T5448] dev_change_flags+0xe3/0x1a0 [ 161.748559][ T5448] dev_ifsioc+0x147/0xe70 [ 161.752894][ T5448] ? dev_ioctl+0x54e/0xe50 [ 161.757316][ T5448] ? dev_ioctl+0xe50/0xe50 [ 161.761732][ T5448] ? apparmor_capable+0x12c/0x190 [ 161.766761][ T5448] ? full_name_hash+0x8e/0xe0 [ 161.771439][ T5448] dev_ioctl+0x55f/0xe50 [ 161.775691][ T5448] ? _copy_from_user+0x111/0x170 [ 161.780637][ T5448] sock_do_ioctl+0x222/0x2f0 [ 161.785233][ T5448] ? sock_show_fdinfo+0xb0/0xb0 [ 161.790091][ T5448] sock_ioctl+0x4ed/0x6e0 [ 161.794423][ T5448] ? sock_poll+0x3f0/0x3f0 [ 161.798848][ T5448] ? bpf_lsm_file_ioctl+0x5/0x10 [ 161.803793][ T5448] ? security_file_ioctl+0x7c/0xa0 [ 161.808925][ T5448] ? sock_poll+0x3f0/0x3f0 [ 161.813352][ T5448] __se_sys_ioctl+0xfa/0x170 [ 161.817957][ T5448] do_syscall_64+0x4c/0xa0 [ 161.822388][ T5448] ? clear_bhb_loop+0x30/0x80 [ 161.827070][ T5448] ? clear_bhb_loop+0x30/0x80 [ 161.831761][ T5448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.837675][ T5448] RIP: 0033:0x7efe4e5e5ec9 [ 161.842094][ T5448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.861705][ T5448] RSP: 002b:00007efe4c84d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.870151][ T5448] RAX: ffffffffffffffda RBX: 00007efe4e83cfa0 RCX: 00007efe4e5e5ec9 [ 161.878134][ T5448] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 161.886115][ T5448] RBP: 00007efe4e668f91 R08: 0000000000000000 R09: 0000000000000000 [ 161.894090][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.902069][ T5448] R13: 00007efe4e83d038 R14: 00007efe4e83cfa0 R15: 00007fffadd47d78 [ 161.910248][ T5448] [ 161.913542][ T5448] Kernel Offset: disabled [ 161.917879][ T5448] Rebooting in 86400 seconds..