last executing test programs: 1m47.870543642s ago: executing program 3 (id=4): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001d0007010000000000000000017c"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1c8, 0xfdef) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m46.023290759s ago: executing program 3 (id=6): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e24, @private=0xa010101}}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000002c0)={@broadcast}, &(0x7f0000000180)=0xb) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150021cb700000010961b090000000000000109022d00010010000009040002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0xc06e, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f000052e000/0x2000)=nil) unshare(0x8020200) ioctl$BLKTRACESTOP(r2, 0x1269, 0x604000000000000) socket$netlink(0x10, 0x3, 0x1f) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x9a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) 1m44.477058457s ago: executing program 3 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x580}}, 0x0) close(0x3) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) close(0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x9) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) close(0x3) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81) finit_module(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x103, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000040)={r3}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000540)=0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002c0000000000069078ac1e0001ac1414aa9404000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0500000000c73d02"], 0x0) 12.793289095s ago: executing program 2 (id=460): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0001000100000000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf250e0000000400800031007f003e01012a010300060202020202022a01052d1a0008020400000000000000ff007f00040000000100060000000d00000069002a002663065110c966c8932480770acd1a9da81cf32313140a9cc9651d6de3773f082e9bf265d46038452850dc55563dded3a6c8191fd20aa32795d661808228229525f481f9887a6e3063d7fe51d9fa6c22d229c757e320b540acf54530be2955174f203a9cb800000039002a0065125050505050500802110000000802110000002503010bf4821a02080504000000080211000000feffffffffffff7f01000000000000000c000f00dd06b6c65e1322a3"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x2008810) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x6, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x260580, 0x0) faccessat(r2, &(0x7f0000000340)='./file1\x00', 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x100, 0x14, 0x2ac}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x2, 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) write$FUSE_INIT(r8, &(0x7f0000001200)={0x50}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 12.790893385s ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = gettid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x401}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r4, 0x0, 0x2, 0x4}}, 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ptrace$poke(0x4, r1, 0x0, 0x7) r5 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) fcntl$setlease(r5, 0x400, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d27, 0x6f0d, 0x1, 0x0, 0x4}) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r8, @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.995753967s ago: executing program 4 (id=464): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) listen(0xffffffffffffffff, 0x6) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x8905, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 10.978206538s ago: executing program 2 (id=465): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x4aa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, 0x0}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 9.799611051s ago: executing program 2 (id=466): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3495, 0x8cb5, 0x0, 0x0, 0x0) 9.647994876s ago: executing program 1 (id=467): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.480477502s ago: executing program 1 (id=468): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r\x00', 0x2}], 0x1}, 0x4) 9.247242934s ago: executing program 5 (id=471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000300)=0x1, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) 8.735180573s ago: executing program 2 (id=472): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000056b94e22dc4916cb4e400000005000000000000000000"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1a6f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}}, 0x0) 8.733901794s ago: executing program 1 (id=473): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) 6.632077125s ago: executing program 1 (id=474): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) 4.356484683s ago: executing program 2 (id=476): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000274c0340ab056000061100000001"], 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 3.031963189s ago: executing program 0 (id=477): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d8000000200081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ptrace$setregs(0xd, r3, 0x8, &(0x7f0000000240)="ec1f542688a15f82ba697f7f48a94c66e95f96a284dbd7eb94fbd77a5cc3ca536c581a74") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000380)=""/135, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10000004, 0x101}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x2000009}, 0x94) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2a, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18fd08fd6b600a00000000000000ffff4b870920ffff54495c53efa781ac9a84e09c2479ffe885100000f8ffff956025c95ddfa65ced550000ffdf0000eb00"], 0x0, 0x10000, 0x0, &(0x7f0000000240), 0x40f00, 0x40, '\x00', 0x0, @fallback=0xe, r1, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x9, 0x9, 0x3}, 0x10, r6, r1, 0x1, &(0x7f0000000440)=[r1, r1, r1, r1, r1], &(0x7f0000000480)=[{0x1, 0x2, 0xc, 0x8}], 0x10, 0xfffffbff}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 2.91610735s ago: executing program 4 (id=478): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x100000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.29457954s ago: executing program 0 (id=479): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f00000001c0)='iso9660\x00', 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) read$dsp(r1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x105000, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) 1.855850152s ago: executing program 1 (id=480): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0xa, 0x5, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) pselect6(0x40, &(0x7f0000001080)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 1.855498552s ago: executing program 0 (id=481): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) 1.46178807s ago: executing program 0 (id=482): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4660, 0x800, 0x3, 0x2b2}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3495, 0x8cb5, 0x0, 0x0, 0x0) 1.154590419s ago: executing program 2 (id=483): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000380), 0x400020, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) 716.096301ms ago: executing program 4 (id=484): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x9, 0x100) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$isdn(0x22, 0x3, 0x23) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@local, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "a7", "bab435", 0x16}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x20000}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6000000000383afffc010000000001ff020000000000000000000000000001010390780000000060dc9ef8e7c022ed00b29500003a00fe80000000000000000000000000001dff010000000000000000000000000001ca"], 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 431.525038ms ago: executing program 0 (id=485): msync(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) 278.097863ms ago: executing program 4 (id=486): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x1, 0x1000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x18, 0x0, 0x0, 0x0, 0x5, 0x2], 0xeeee8000, 0x8340}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000d00)={"1c13d2e231343fc1634b4d0da3078818d31e1756c6a31346c7ab0c1f70139f66266c3d8734c3e50d40639916e52d4444a05ef3e0d5cf4bc6b33f637ebe71de7839018d2795b83de90e3d509e6561bd0878fcf80a6fba1e60d6ac89dabbaf16eaae28d5a0651d8dea7eb32e073df4ffffffffffffdec18b6455ceb92eaaa01874b7dbd637f2f68a771a587ae4888ae26d962dbda15e5861fc281833c8e82f4b55acf89d92fc3a0154be8763209d48d8d411132231ade002e330cd826612a9e5f0c5cf46dd8ae602c5243d41a7230f9e3ed53b12bb755213f28b5ccdee9f54ff9abbc65cc397255b45fc1d258be287a0c87dc91048cfcee9aa7d602e1df9afadab861de2b3b2a0583cf1f381579a49e04df1010ee16844f9c603b1585c4f10158026a9a1344a9a569dff848f995a3431ab12e49edcc0717eb61cdf560a26d2cc9f2aadbb8dd77b067b1c0ad04326f213dcd3e2bb596bfe13741284e37f6889f3ffef7ee5013a217b6ad7c6a509ca9df4fa1be6704b29ba6e721227f9568536b6a1b80ac6a871d7361b772b9492dcd46a7d439ac2bb8ef988204e1943d1eb71a25eb7106f2cd15221d976c7674a8818b618120e25f535f4fe68d2133af25c519a821dcebee26d4e868863e0b7352ef77eabfd5a1c5474f41b1dcf507af5dcc262942a17a21b612de6e29171f9665cf611f49792ed262215fc1a1b4bf2608e4186a0bbf5b645e25e830835535092453c86ff891568cb6538bb3d879e23883873cd96019219ae09c6e12f3295781ce7c46738e18e8a2543a351c62e0faffca46025023ff25a43e59e825be2ef4f3bc75389c011595bfa102b329aa033a91f94829783e58ff630862341ca0f7b851581bcf3ea4d6afce7dbf1b6bc12ddf2d2f0d198d7cebe3743c84ec204917f1586b9dc8c529a55d0626ab25477fe1c2efd58a66207227b9db9f234dc7fec92eb135a8bc2b8967db452458b0b22294f4925fa372638c6f5d86882c677e4f2cf56d6fc73926ebe9d967fd6297f82cb2fba65830c888da3f1f63e9deb8231894116e151dd8bcffcb1f66769862676668b3c93d0c861492c7395afc554dac4d5c5272441b84baec9e36c11288d730852c70bdc462e22272c4fbb04ff6e6530b6ab9fd3f4118dfb8e3dccf5541dd088cbd40df686f6be9bb6301ad6f134d6b113673d63050000003f27fc82ba3514a8412419da91872323c6718db532f011554d1e02150ecc79cd762d909316b146babfaa9a5e61f184dc997f98fb32918a20b345ae32a444250cbfdb2ed9c896de8931e3ae9989f5e31e691fd31139cdc88468571196e9446d58e26bc8fdd5e090d33989fb68e22ceff8b9fd31539e635b88b53cec0000000000000000000000eaff00"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 128.218308ms ago: executing program 5 (id=487): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) 71.435623ms ago: executing program 0 (id=488): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 0s ago: executing program 5 (id=489): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 52.795938][ T4252] cgroup: Unknown subsys name 'net' [ 52.909268][ T4252] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.246434][ T4252] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.479283][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.481587][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.491510][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.496911][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.504097][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.509099][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.515983][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.523188][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.530343][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.537206][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.544157][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.557674][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.564846][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.565426][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.573845][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.580965][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.586586][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.593445][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.601585][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.608049][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.614745][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.621448][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.627776][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.635627][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.649167][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.649717][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.665467][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.679561][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.687436][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.705311][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.051310][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 57.117518][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 57.230708][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 57.294171][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.301543][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.310666][ T4265] device bridge_slave_0 entered promiscuous mode [ 57.319021][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 57.328906][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.336208][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.344118][ T4263] device bridge_slave_0 entered promiscuous mode [ 57.359950][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 57.373725][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.380810][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.389107][ T4265] device bridge_slave_1 entered promiscuous mode [ 57.407922][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.415077][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.422691][ T4263] device bridge_slave_1 entered promiscuous mode [ 57.474533][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.502780][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.515424][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.558644][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.585785][ T4265] team0: Port device team_slave_0 added [ 57.598607][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.606380][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.615087][ T4262] device bridge_slave_0 entered promiscuous mode [ 57.628101][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.635418][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.643081][ T4279] device bridge_slave_0 entered promiscuous mode [ 57.651981][ T4265] team0: Port device team_slave_1 added [ 57.666577][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.673859][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.681531][ T4262] device bridge_slave_1 entered promiscuous mode [ 57.694889][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.701991][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.709844][ T4279] device bridge_slave_1 entered promiscuous mode [ 57.726622][ T4263] team0: Port device team_slave_0 added [ 57.739872][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.747102][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.755356][ T4267] device bridge_slave_0 entered promiscuous mode [ 57.780007][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.787017][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.813670][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.826911][ T4263] team0: Port device team_slave_1 added [ 57.843324][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.852736][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.860717][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.868583][ T4267] device bridge_slave_1 entered promiscuous mode [ 57.882832][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.889890][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.916067][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.937702][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.956332][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.968205][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.021914][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.028939][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.055001][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.074348][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.085705][ T4279] team0: Port device team_slave_0 added [ 58.092993][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.103044][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.110422][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.136434][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.149905][ T4262] team0: Port device team_slave_0 added [ 58.158711][ T4279] team0: Port device team_slave_1 added [ 58.182618][ T4262] team0: Port device team_slave_1 added [ 58.223850][ T4267] team0: Port device team_slave_0 added [ 58.234373][ T4265] device hsr_slave_0 entered promiscuous mode [ 58.241277][ T4265] device hsr_slave_1 entered promiscuous mode [ 58.254674][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.261639][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.288092][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.311965][ T4267] team0: Port device team_slave_1 added [ 58.319387][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.326570][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.352616][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.364114][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.371088][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.397233][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.429456][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.436658][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.462745][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.480720][ T4263] device hsr_slave_0 entered promiscuous mode [ 58.487472][ T4263] device hsr_slave_1 entered promiscuous mode [ 58.495146][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.502912][ T4263] Cannot create hsr debugfs directory [ 58.524929][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.531893][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.558168][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.570314][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.577354][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.603623][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.685570][ T4279] device hsr_slave_0 entered promiscuous mode [ 58.692455][ T4279] device hsr_slave_1 entered promiscuous mode [ 58.699300][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.707073][ T4279] Cannot create hsr debugfs directory [ 58.751213][ T4262] device hsr_slave_0 entered promiscuous mode [ 58.757871][ T4262] device hsr_slave_1 entered promiscuous mode [ 58.764749][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.772326][ T4262] Cannot create hsr debugfs directory [ 58.778804][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 58.785259][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 58.789243][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 58.792000][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 58.797777][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 58.868016][ T4267] device hsr_slave_0 entered promiscuous mode [ 58.875162][ T4267] device hsr_slave_1 entered promiscuous mode [ 58.881593][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.889194][ T4267] Cannot create hsr debugfs directory [ 59.068481][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.081448][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.107903][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.118938][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.194755][ T4262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.205818][ T4262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.228860][ T4262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.242355][ T4262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.301097][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.308309][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.317921][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.329066][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.349347][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.359911][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.369461][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.399724][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.416960][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.427231][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.438335][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.445759][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.471919][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.486738][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.505932][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.515012][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.524906][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.531963][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.540831][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.569192][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.578900][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.606111][ T4263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.617848][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.628705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.648272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.658815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.670170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.678828][ T4263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.692552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.701907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.723040][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.731528][ T4263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.753434][ T4263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.780786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.790013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.822883][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.840129][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.849945][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.859154][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.866948][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.875716][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.891852][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.917932][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.935020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.943074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.978505][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.998682][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.008086][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.023044][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.030207][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.044517][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.071273][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.083469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.098953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.108514][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.115647][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.124234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.132800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.141424][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.148531][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.156507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.167853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.188283][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.219574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.230842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.243035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.257257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.268299][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.275476][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.290708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.299729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.315290][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.355640][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.362591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.377705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.386998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.396515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.405172][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.412241][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.420183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.429834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.438824][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.445938][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.454379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.463309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.471863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.480551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.488935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.497385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.506125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.516227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.525007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.539996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.550022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.558926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.569773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.592796][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.610814][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.618660][ T4262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.631101][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.638911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.647979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.656527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.664699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.672318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.681327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.688976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.702236][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.714232][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.735813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.745370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.755100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.764268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.775647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.784739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.793477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.802362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.817490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.826524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.835718][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.842817][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.858084][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 60.868325][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 60.868345][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 60.874624][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 60.880410][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 60.934985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.945039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.958275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.979621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.997091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.021684][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.032997][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.049014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.066575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.084176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.104369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.124172][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.131806][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.153931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.163508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.179686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.187738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.215714][ T4265] device veth0_vlan entered promiscuous mode [ 61.244907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.261749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.272540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.287155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.298148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.320938][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.349672][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.359472][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.375107][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.382635][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.390833][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.398710][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.408458][ T4265] device veth1_vlan entered promiscuous mode [ 61.422125][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.439203][ T4263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.457874][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.490317][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.500672][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.517296][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.526791][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.535596][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.563023][ T4265] device veth0_macvtap entered promiscuous mode [ 61.589907][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.599331][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.608914][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.617974][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.628177][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.637356][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.646200][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.678312][ T4265] device veth1_macvtap entered promiscuous mode [ 61.693511][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.702255][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.711787][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.728112][ T4262] device veth0_vlan entered promiscuous mode [ 61.736114][ T4279] device veth0_vlan entered promiscuous mode [ 61.753040][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.767303][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.780225][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.788506][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.804048][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.812688][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.829192][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.839945][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.853083][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.863631][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.872354][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.880806][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.895652][ T4262] device veth1_vlan entered promiscuous mode [ 61.909317][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.918497][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.928248][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.937353][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.957126][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.965460][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.974732][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.982186][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.996479][ T4279] device veth1_vlan entered promiscuous mode [ 62.062718][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.100429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.121082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.131523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.141423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.150617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.159453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.167655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.184642][ T4262] device veth0_macvtap entered promiscuous mode [ 62.223800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.232619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.252535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.274384][ T4262] device veth1_macvtap entered promiscuous mode [ 62.307513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.318175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.333268][ T4279] device veth0_macvtap entered promiscuous mode [ 62.351174][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.369812][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.389520][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.404379][ T4263] device veth0_vlan entered promiscuous mode [ 62.414767][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.421550][ T4263] device veth1_vlan entered promiscuous mode [ 62.422721][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.451261][ T4279] device veth1_macvtap entered promiscuous mode [ 62.461540][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.470459][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.480040][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.489668][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.499157][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.507556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.516682][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.525312][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.533230][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.542271][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.550515][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.563633][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.574963][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.586852][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.628896][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.637947][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.646973][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.656221][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.667603][ T4262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.676948][ T4262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.685940][ T4262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.695994][ T4262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.736724][ T4263] device veth0_macvtap entered promiscuous mode [ 62.745106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.754229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.775838][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.776389][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.787470][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.805247][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.806466][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.827200][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.840299][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.852079][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.863088][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.873782][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.884459][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.896340][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.910642][ T4263] device veth1_macvtap entered promiscuous mode [ 62.920567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.929329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.934491][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 62.937705][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 62.942691][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 62.948674][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 62.954987][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 62.968148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.976441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.985668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.994885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.003081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.011566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.020930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.032991][ T4267] device veth0_vlan entered promiscuous mode [ 63.056653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.069005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.079968][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.090197][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.101273][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.110877][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.124449][ T4267] device veth1_vlan entered promiscuous mode [ 63.146305][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.157233][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.167402][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.178123][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.188026][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.198714][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.209954][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.217620][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.226469][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.235074][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.244325][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.301707][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.315256][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.315259][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.322568][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.350656][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.361686][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.376958][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.394407][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.412292][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.445064][ T4267] device veth0_macvtap entered promiscuous mode [ 63.471555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.479928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.490393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.511998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.521551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.531170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.569429][ T4267] device veth1_macvtap entered promiscuous mode [ 63.599173][ T4263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.613228][ T4263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.622685][ T4263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.637758][ T4263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.674335][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.682451][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.691686][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.704839][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.715453][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.727119][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.738336][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.749186][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.760139][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.770947][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.783261][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.828057][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.835458][ T4378] loop3: detected capacity change from 0 to 40427 [ 63.842401][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.860897][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.872308][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.875096][ T4378] F2FS-fs (loop3): invalid crc value [ 63.889041][ T4378] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.901093][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.929580][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.937117][ T4378] F2FS-fs (loop3): Start checkpoint disabled! [ 63.941759][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.954413][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.965256][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.977946][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.989442][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.990497][ T4378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 64.000344][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.018279][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.028715][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.039619][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.051782][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.090949][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.116083][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.188395][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.202955][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.216927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.235335][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.249876][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.259190][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.269921][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.632969][ T4383] block device autoloading is deprecated and will be removed. [ 65.013763][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 65.020262][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 65.026608][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 65.026625][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 65.032596][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 65.072242][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.085700][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.176969][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.198755][ T4265] syz-executor: attempt to access beyond end of device [ 65.198755][ T4265] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 65.238987][ T4265] syz-executor: attempt to access beyond end of device [ 65.238987][ T4265] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 65.253511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.269847][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.417848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.476756][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.505117][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.525607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.548626][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.564727][ T75] kworker/u4:4: attempt to access beyond end of device [ 65.564727][ T75] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 65.581143][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.606334][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.729985][ T4400] loop0: detected capacity change from 0 to 512 [ 65.748322][ T4401] program syz.2.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.800924][ T4400] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 65.817346][ T4400] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 65.872331][ T4400] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 65.886445][ T4404] genirq: Flags mismatch irq 25. 00000000 (comedi_parport) vs. 00000000 (virtio3-input) [ 65.912830][ T4400] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.954952][ T4393] loop1: detected capacity change from 0 to 32768 [ 65.959137][ T4400] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 65.969250][ T4393] ======================================================= [ 65.969250][ T4393] WARNING: The mand mount option has been deprecated and [ 65.969250][ T4393] and is ignored by this kernel. Remove the mand [ 65.969250][ T4393] option from the mount to silence this warning. [ 65.969250][ T4393] ======================================================= [ 65.969349][ T4393] XFS: noikeep mount option is deprecated. [ 66.023041][ T26] audit: type=1326 audit(1766380794.576:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 66.058349][ T4404] loop4: detected capacity change from 0 to 512 [ 66.070984][ T26] audit: type=1326 audit(1766380794.606:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 66.096899][ T26] audit: type=1326 audit(1766380794.606:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 66.119369][ T4404] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.132815][ T4404] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.146901][ T4400] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.168175][ T26] audit: type=1326 audit(1766380794.606:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 66.193308][ T4350] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.236691][ T4393] XFS (loop1): Mounting V5 Filesystem [ 66.247051][ T4400] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1: bg 0: block 34: padding at end of block bitmap is not set [ 66.301890][ T4400] Quota error (device loop0): write_blk: dquota write failed [ 66.302813][ T26] audit: type=1326 audit(1766380794.606:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 66.325741][ T4400] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 66.338078][ T26] audit: type=1326 audit(1766380794.606:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 66.365150][ T26] audit: type=1326 audit(1766380794.606:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 66.402377][ T4404] EXT4-fs (loop4): 1 orphan inode deleted [ 66.423801][ T4400] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.1: Failed to acquire dquot type 1 [ 66.433738][ T4404] EXT4-fs (loop4): 1 truncate cleaned up [ 66.453345][ T4350] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.461207][ T4404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.464876][ T26] audit: type=1326 audit(1766380794.606:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 66.535071][ T4400] EXT4-fs (loop0): 1 truncate cleaned up [ 66.542882][ T4400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.565110][ T4393] XFS (loop1): Ending clean mount [ 66.597368][ T4393] XFS (loop1): Quotacheck needed: Please wait. [ 66.649868][ T4350] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.676858][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 66.711366][ T4393] XFS (loop1): Quotacheck: Done. [ 66.812182][ T4406] sctp: failed to load transform for md5: -4 [ 66.831545][ T4350] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.030882][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 67.051107][ T4269] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.236078][ T4269] usb 1-1: device descriptor read/64, error -71 [ 67.256462][ T4418] loop2: detected capacity change from 0 to 8 [ 67.355787][ T4418] SQUASHFS error: xz decompression failed, data probably corrupt [ 67.374319][ T4418] SQUASHFS error: Failed to read block 0x108: -5 [ 67.413278][ T4418] SQUASHFS error: Unable to read metadata cache entry [106] [ 67.439511][ T4418] SQUASHFS error: Unable to read inode 0x11f [ 67.533734][ T4269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.713666][ T4269] usb 1-1: device descriptor read/64, error -71 [ 67.860714][ T4269] usb usb1-port1: attempt power cycle [ 67.912485][ T4446] capability: warning: `syz.4.13' uses deprecated v2 capabilities in a way that may be insecure [ 68.284592][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.294170][ T4269] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.304016][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.311941][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.319848][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.328361][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.336005][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.375551][ T4269] usb 1-1: device descriptor read/8, error -71 [ 68.587906][ T4279] XFS (loop1): Unmounting Filesystem [ 68.649383][ T4269] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.700556][ T4269] usb 1-1: device descriptor read/8, error -71 [ 68.775747][ T4283] Bluetooth: hci4: command 0x0405 tx timeout [ 68.864056][ T4269] usb usb1-port1: unable to enumerate USB device [ 68.924466][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 70.313870][ T4453] chnl_net:caif_netlink_parms(): no params data found [ 70.380193][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 70.535774][ T4350] device hsr_slave_0 left promiscuous mode [ 70.563677][ T4350] device hsr_slave_1 left promiscuous mode [ 70.574331][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.581845][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.642480][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.700584][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.771205][ T4350] device bridge_slave_1 left promiscuous mode [ 70.791260][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.865481][ T4350] device bridge_slave_0 left promiscuous mode [ 70.871804][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.959606][ T4350] device veth1_macvtap left promiscuous mode [ 70.971825][ T4350] device veth0_macvtap left promiscuous mode [ 70.987951][ T4350] device veth1_vlan left promiscuous mode [ 71.020195][ T4350] device veth0_vlan left promiscuous mode [ 71.347686][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.354348][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.463502][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 72.671382][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 72.842678][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 72.978399][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.135245][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.302629][ T4350] bond0 (unregistering): Released all slaves [ 74.535434][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 74.815166][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.858006][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.885455][ T4453] device bridge_slave_0 entered promiscuous mode [ 74.915083][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.927720][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.975281][ T4453] device bridge_slave_1 entered promiscuous mode [ 75.140179][ T4453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.210288][ T4453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.360747][ T4453] team0: Port device team_slave_0 added [ 75.421141][ T4453] team0: Port device team_slave_1 added [ 75.560826][ T4453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.573661][ T4453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.687920][ T4453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.701796][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 75.701809][ T26] audit: type=1326 audit(1766380804.266:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 75.732938][ T4453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.769800][ T4453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.828390][ T26] audit: type=1326 audit(1766380804.326:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f485ed8df90 code=0x7ffc0000 [ 75.863279][ T4453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.909044][ T26] audit: type=1326 audit(1766380804.326:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f485ed8df90 code=0x7ffc0000 [ 75.981808][ T26] audit: type=1326 audit(1766380804.326:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 76.087032][ T26] audit: type=1326 audit(1766380804.326:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 76.126863][ T4453] device hsr_slave_0 entered promiscuous mode [ 76.148026][ T4453] device hsr_slave_1 entered promiscuous mode [ 76.213669][ T26] audit: type=1326 audit(1766380804.326:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 76.338580][ T26] audit: type=1326 audit(1766380804.326:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 76.423563][ T26] audit: type=1326 audit(1766380804.326:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 76.458181][ T41] cfg80211: failed to load regulatory.db [ 76.523937][ T26] audit: type=1326 audit(1766380804.326:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 76.613747][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 76.693672][ T26] audit: type=1326 audit(1766380804.326:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8f749 code=0x7ffc0000 [ 76.838242][ T4453] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.896953][ T4453] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.954358][ T4453] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.019864][ T4453] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.523954][ T4453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.615914][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.652590][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.705092][ T4453] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.728352][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.757625][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.824163][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.831315][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.889973][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.938075][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.984270][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.051713][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.058940][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.112158][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.189575][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.234579][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.273629][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.322900][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.345974][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.384576][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.404350][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.444076][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.487059][ T4453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.515178][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.558481][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.581414][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.543282][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.565983][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.599009][ T4453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.850033][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.869285][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.957690][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.975976][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.016373][ T4453] device veth0_vlan entered promiscuous mode [ 81.039872][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.063320][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.107472][ T4453] device veth1_vlan entered promiscuous mode [ 81.197035][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.225490][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.265331][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.293820][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.355883][ T4453] device veth0_macvtap entered promiscuous mode [ 81.388679][ T4453] device veth1_macvtap entered promiscuous mode [ 81.452165][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.495063][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.561694][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.615707][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.640904][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.668153][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.723618][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.784619][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.829992][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.871061][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.900059][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.947350][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.972113][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.010200][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.056463][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.113650][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.135582][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.172428][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.209085][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.255840][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.299421][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.346540][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.392707][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.424505][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.469552][ T4453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.487554][ T4453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.527535][ T4453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.565317][ T4453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.799464][ T4481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.825134][ T4481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.875206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.905917][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.923931][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.944231][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.206224][ T4990] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.485901][ T4988] loop5: detected capacity change from 0 to 4096 [ 83.550621][ T4988] __ntfs_error: 16 callbacks suppressed [ 83.550696][ T4988] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 83.673604][ T4988] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 83.707646][ T4988] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 83.835591][ T4988] ntfs: volume version 3.1. [ 83.895928][ T26] audit: type=1800 audit(1766380812.456:67): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10" name="file1" dev="loop5" ino=67 res=0 errno=0 [ 84.034878][ T4453] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 86.838958][ T5137] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 87.978285][ T5182] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.293670][ T4283] Bluetooth: hci5: command 0x1003 tx timeout [ 88.294690][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 88.599225][ T5188] ceph: No mds server is up or the cluster is laggy [ 88.629969][ T4311] libceph: connect (1)[c::]:6789 error -101 [ 88.673960][ T4311] libceph: mon0 (1)[c::]:6789 connect error [ 88.809213][ T5186] batman_adv: batadv0: Adding interface: dummy0 [ 88.923744][ T5186] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.009694][ T5202] 9pnet_virtio: no channels available for device syz [ 89.075211][ T5186] batman_adv: batadv0: Interface activated: dummy0 [ 89.147188][ T5207] syz.4.269 uses obsolete (PF_INET,SOCK_PACKET) [ 89.178929][ T5208] Bluetooth: MGMT ver 1.22 [ 89.190487][ T5195] batadv0: mtu less than device minimum [ 89.274936][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.287675][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.299047][ T5212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 89.299759][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.320590][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.332747][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.345145][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.357368][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.369646][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.382029][ T5195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.500292][ T5218] 9pnet_virtio: no channels available for device syz [ 90.269485][ T5230] smc: net device hsr0 applied user defined pnetid SYZ2 [ 90.349876][ T5233] smc: net device hsr0 erased user defined pnetid SYZ2 [ 92.423876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.433869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.453543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.463550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.473550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.483553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.493550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.503548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.513548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.523551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 92.807684][ T5261] 9pnet_virtio: no channels available for device syz [ 95.801270][ T5306] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.809390][ T5306] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.069177][ T5306] batman_adv: batadv0: Interface deactivated: dummy0 [ 98.012588][ T5347] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 98.288802][ T5306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.396198][ T5306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.973170][ T26] audit: type=1326 audit(1766380827.526:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.0.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff9498f749 code=0x0 [ 99.127336][ T5306] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.147480][ T5306] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.164923][ T5306] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.188205][ T5306] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.406696][ T5333] netlink: 'syz.2.301': attribute type 10 has an invalid length. [ 99.444020][ T5333] team0: Port device dummy0 added [ 99.793632][ T5366] usb usb8: usbfs: process 5366 (syz.5.307) did not claim interface 0 before use [ 99.833780][ T5366] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.621409][ T5372] 9pnet_virtio: no channels available for device syz [ 101.140648][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.312'. [ 103.671453][ T5426] device batadv_slave_1 entered promiscuous mode [ 104.313106][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 104.356419][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 106.083867][ T26] audit: type=1326 audit(1766380834.646:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 106.106269][ T5444] loop1: detected capacity change from 0 to 40427 [ 106.148541][ T26] audit: type=1326 audit(1766380834.666:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 106.190709][ T5444] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 106.220499][ T5444] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.245164][ T26] audit: type=1326 audit(1766380834.666:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 106.288246][ T5444] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 106.327107][ T26] audit: type=1326 audit(1766380834.666:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 106.478994][ T26] audit: type=1326 audit(1766380834.666:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 106.555802][ T26] audit: type=1326 audit(1766380834.666:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 106.703406][ T26] audit: type=1326 audit(1766380834.676:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 106.820939][ T26] audit: type=1326 audit(1766380834.676:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 106.911689][ T26] audit: type=1326 audit(1766380834.676:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 107.054296][ T26] audit: type=1326 audit(1766380834.676:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.5.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f826fb2b829 code=0x7ffc0000 [ 108.323472][ T5496] sched: RT throttling activated [ 110.132092][ T5518] Zero length message leads to an empty skb [ 111.123673][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.339'. [ 112.076428][ T5512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.179343][ T5524] device batadv_slave_1 entered promiscuous mode [ 113.247688][ T5512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.375559][ T5512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.542971][ T5512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.682789][ T5512] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.709538][ T5512] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.740823][ T5512] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.770675][ T5512] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.211138][ T5584] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 116.236858][ T5584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.268321][ T5584] bond1: (slave dummy0): making interface the new active one [ 116.285059][ T5584] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 116.302717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 116.805860][ T5596] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 116.963367][ T5601] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 117.499132][ T5612] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 117.508250][ T5612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.352'. [ 117.628272][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 117.944004][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.133732][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 118.159157][ T22] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 118.176616][ T5612] team0: Port device geneve0 added [ 118.209474][ T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 118.244039][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.294696][ T22] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 118.333662][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.375106][ T22] usb 5-1: config 0 descriptor?? [ 118.427593][ T22] pxrc 5-1:0.0: Could not find endpoint [ 118.473484][ T22] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 119.963622][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.159527][ T14] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 120.181308][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.231372][ T14] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 120.241539][ T22] usb 5-1: USB disconnect, device number 2 [ 120.850220][ T14] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 121.107730][ T14] usb 3-1: Manufacturer: syz [ 121.163647][ T14] usb 3-1: config 0 descriptor?? [ 121.624689][ T14] rc_core: IR keymap rc-hauppauge not found [ 121.630646][ T14] Registered IR keymap rc-empty [ 121.666265][ T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 121.722096][ T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 121.837629][ T14] usb 3-1: USB disconnect, device number 2 [ 122.156682][ T5677] loop5: detected capacity change from 0 to 4096 [ 122.539906][ T5677] NILFS (loop5): unrecognized mount option "oÿÿÿÿ=relaxed" [ 123.123727][ T5678] device batadv_slave_1 entered promiscuous mode [ 123.450329][ T5686] 9pnet_virtio: no channels available for device syz [ 124.215805][ T5697] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 124.253736][ T5697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.369'. [ 124.467180][ T5697] team0: Port device geneve0 added [ 125.133000][ T5717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.373'. [ 126.302412][ T5735] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 127.428240][ T5776] netlink: 'syz.1.387': attribute type 10 has an invalid length. [ 127.438311][ T5776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.387'. [ 127.538708][ T5776] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.569079][ T5776] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.598743][ T5776] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.616787][ T5776] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.713999][ T5776] team0: Port device geneve0 added [ 132.775341][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781699][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.969148][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.976755][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.156666][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.233021][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.970151][ T5831] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 135.199006][ T5799] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.216320][ T5799] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.236278][ T5799] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.245493][ T5799] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.593456][ T5852] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 143.723158][ T5897] 9pnet_virtio: no channels available for device syz [ 146.021611][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.052814][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.052856][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 149.022441][ T4325] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 149.321093][ T5929] 9pnet_virtio: no channels available for device syz [ 149.505124][ T4325] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.514110][ T4325] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 149.542467][ T4325] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.591759][ T4325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 149.622433][ T4325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 149.677696][ T4325] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.707356][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.731624][ T4325] usb 6-1: Product: syz [ 149.763987][ T4325] usb 6-1: Manufacturer: syz [ 149.819404][ T4325] cdc_wdm 6-1:1.0: skipping garbage [ 149.824819][ T4325] cdc_wdm 6-1:1.0: skipping garbage [ 149.841370][ T4325] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 149.880730][ T4325] cdc_wdm 6-1:1.0: Unknown control protocol [ 150.038922][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 150.045787][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 150.052420][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 150.059047][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 150.082296][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 150.089036][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 150.095808][ T4372] usb 6-1: USB disconnect, device number 2 [ 150.101959][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 150.101985][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 150.102001][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 150.379054][ T5951] QAT: failed to copy from user. [ 153.299058][ T5977] 9pnet_virtio: no channels available for device syz [ 153.997820][ T5981] device batadv_slave_0 entered promiscuous mode [ 154.196749][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.276289][ T5986] net_ratelimit: 10 callbacks suppressed [ 154.276299][ T5986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.067859][ T6003] random: crng reseeded on system resumption [ 156.051585][ T4284] Bluetooth: hci0: command 0x0401 tx timeout [ 157.789842][ T6024] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.034255][ T6032] 9pnet_virtio: no channels available for device syz [ 161.663339][ T6067] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 162.254460][ T6077] 9pnet_virtio: no channels available for device syz [ 162.300046][ T6077] overlayfs: overlapping lowerdir path [ 162.335276][ T6077] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 162.370248][ T6077] overlayfs: overlapping lowerdir path [ 167.340314][ T4349] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.534466][ T4349] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 167.631882][ T4349] usb 3-1: can't read configurations, error -61 [ 168.012203][ T6101] random: crng reseeded on system resumption [ 168.180525][ T4349] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.382421][ T4349] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 168.404506][ T4349] usb 3-1: can't read configurations, error -61 [ 168.424954][ T4349] usb usb3-port1: attempt power cycle [ 168.435902][ T6105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.477'. [ 168.880075][ T4349] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.923350][ T4349] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 168.952499][ T4349] usb 3-1: can't read configurations, error -61 [ 169.130979][ T4349] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.176545][ T4349] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 169.176595][ T4349] usb 3-1: can't read configurations, error -61 [ 169.176759][ T4349] usb usb3-port1: unable to enumerate USB device [ 171.259213][ T6131] ------------[ cut here ]------------ [ 171.264874][ T6131] WARNING: CPU: 0 PID: 6131 at arch/x86/kvm/x86.c:11235 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 171.275186][ T6131] Modules linked in: [ 171.279093][ T6131] CPU: 0 PID: 6131 Comm: syz.4.486 Not tainted syzkaller #0 [ 171.286420][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.296500][ T6131] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 171.302958][ T6131] Code: e8 07 47 c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 cc 46 c1 00 e9 ce e5 ff ff e8 a2 15 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 171.322628][ T6131] RSP: 0018:ffffc9001066fc48 EFLAGS: 00010287 [ 171.328692][ T6131] RAX: ffffffff810fca2e RBX: ffff8880789ea7c0 RCX: 0000000000080000 [ 171.336740][ T6131] RDX: ffffc9000e182000 RSI: 00000000000003c4 RDI: 00000000000003c5 [ 171.344774][ T6131] RBP: ffff888055fe0000 R08: dffffc0000000000 R09: fffffbfff2119072 [ 171.352822][ T6131] R10: fffffbfff2119072 R11: 1ffffffff2119071 R12: ffff8880789eaab4 [ 171.360848][ T6131] R13: ffff8880789ea898 R14: dffffc0000000000 R15: 0000000000000000 [ 171.368817][ T6131] FS: 00007f485fb636c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 171.377808][ T6131] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.384525][ T6131] CR2: 00007f82709156c0 CR3: 000000007c4d9000 CR4: 00000000003526f0 [ 171.392560][ T6131] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.400572][ T6131] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.408544][ T6131] Call Trace: [ 171.411890][ T6131] [ 171.414835][ T6131] ? mutex_lock_nested+0x10/0x10 [ 171.419841][ T6131] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 171.425578][ T6131] kvm_vcpu_ioctl+0x887/0xb80 [ 171.430310][ T6131] ? xa_release+0x50/0x50 [ 171.434655][ T6131] ? __fget_files+0x28/0x4d0 [ 171.439248][ T6131] ? bpf_lsm_file_ioctl+0x5/0x10 [ 171.444234][ T6131] ? security_file_ioctl+0x7c/0xa0 [ 171.449359][ T6131] ? xa_release+0x50/0x50 [ 171.453739][ T6131] __se_sys_ioctl+0xfa/0x170 [ 171.458345][ T6131] do_syscall_64+0x4c/0xa0 [ 171.462805][ T6131] ? clear_bhb_loop+0x60/0xb0 [ 171.467491][ T6131] ? clear_bhb_loop+0x60/0xb0 [ 171.472235][ T6131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.478148][ T6131] RIP: 0033:0x7f485ed8f749 [ 171.482623][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.502270][ T6131] RSP: 002b:00007f485fb63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.510743][ T6131] RAX: ffffffffffffffda RBX: 00007f485efe5fa0 RCX: 00007f485ed8f749 [ 171.518725][ T6131] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 171.526744][ T6131] RBP: 00007f485ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.534756][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.542773][ T6131] R13: 00007f485efe6038 R14: 00007f485efe5fa0 R15: 00007ffe4b3c21f8 [ 171.550791][ T6131] [ 171.553811][ T6131] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.561074][ T6131] CPU: 0 PID: 6131 Comm: syz.4.486 Not tainted syzkaller #0 [ 171.568340][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.578389][ T6131] Call Trace: [ 171.581661][ T6131] [ 171.584587][ T6131] dump_stack_lvl+0x168/0x22e [ 171.589255][ T6131] ? memcpy+0x3c/0x60 [ 171.593238][ T6131] ? show_regs_print_info+0x12/0x12 [ 171.598447][ T6131] ? load_image+0x3b0/0x3b0 [ 171.602953][ T6131] panic+0x2c9/0x710 [ 171.606836][ T6131] ? bpf_jit_dump+0xd0/0xd0 [ 171.611330][ T6131] __warn+0x2f8/0x4f0 [ 171.615294][ T6131] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 171.621085][ T6131] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 171.626893][ T6131] report_bug+0x2ba/0x4f0 [ 171.631215][ T6131] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 171.637014][ T6131] handle_bug+0x3a/0x70 [ 171.641166][ T6131] exc_invalid_op+0x16/0x40 [ 171.645659][ T6131] asm_exc_invalid_op+0x16/0x20 [ 171.650495][ T6131] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 171.656898][ T6131] Code: e8 07 47 c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 cc 46 c1 00 e9 ce e5 ff ff e8 a2 15 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 171.676497][ T6131] RSP: 0018:ffffc9001066fc48 EFLAGS: 00010287 [ 171.682559][ T6131] RAX: ffffffff810fca2e RBX: ffff8880789ea7c0 RCX: 0000000000080000 [ 171.690518][ T6131] RDX: ffffc9000e182000 RSI: 00000000000003c4 RDI: 00000000000003c5 [ 171.698474][ T6131] RBP: ffff888055fe0000 R08: dffffc0000000000 R09: fffffbfff2119072 [ 171.706433][ T6131] R10: fffffbfff2119072 R11: 1ffffffff2119071 R12: ffff8880789eaab4 [ 171.714565][ T6131] R13: ffff8880789ea898 R14: dffffc0000000000 R15: 0000000000000000 [ 171.722534][ T6131] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 171.728334][ T6131] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 171.734135][ T6131] ? mutex_lock_nested+0x10/0x10 [ 171.739069][ T6131] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 171.744798][ T6131] kvm_vcpu_ioctl+0x887/0xb80 [ 171.749496][ T6131] ? xa_release+0x50/0x50 [ 171.753819][ T6131] ? __fget_files+0x28/0x4d0 [ 171.758404][ T6131] ? bpf_lsm_file_ioctl+0x5/0x10 [ 171.763327][ T6131] ? security_file_ioctl+0x7c/0xa0 [ 171.768428][ T6131] ? xa_release+0x50/0x50 [ 171.772749][ T6131] __se_sys_ioctl+0xfa/0x170 [ 171.777329][ T6131] do_syscall_64+0x4c/0xa0 [ 171.781741][ T6131] ? clear_bhb_loop+0x60/0xb0 [ 171.786408][ T6131] ? clear_bhb_loop+0x60/0xb0 [ 171.791078][ T6131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.796972][ T6131] RIP: 0033:0x7f485ed8f749 [ 171.801371][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.820975][ T6131] RSP: 002b:00007f485fb63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.829377][ T6131] RAX: ffffffffffffffda RBX: 00007f485efe5fa0 RCX: 00007f485ed8f749 [ 171.837341][ T6131] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 171.845302][ T6131] RBP: 00007f485ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.853611][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.861568][ T6131] R13: 00007f485efe6038 R14: 00007f485efe5fa0 R15: 00007ffe4b3c21f8 [ 171.869544][ T6131] [ 171.873031][ T6131] Kernel Offset: disabled [ 171.877419][ T6131] Rebooting in 86400 seconds..