last executing test programs: 11.574335804s ago: executing program 1 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000500)={0x8}) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={{r5}, 0x0, 0x5, 0x1}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) 10.104488911s ago: executing program 1 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffefff) 9.82349708s ago: executing program 4 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x3, @private0}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000040)) sendto$inet(r2, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 8.742643384s ago: executing program 4 (id=419): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) unshare(0x20000400) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) 8.659289436s ago: executing program 0 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000500)={0x8}) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={{r5}, 0x0, 0x5, 0x1}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) 8.605354398s ago: executing program 4 (id=422): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x3, &(0x7f0000000300)=0x897, &(0x7f0000000080)=0x276) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) io_uring_enter(r2, 0x221c, 0x7721, 0x53, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) 7.646477648s ago: executing program 0 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 7.59246171s ago: executing program 4 (id=424): syz_usb_connect(0x2, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06", @ANYRES32], 0x0) 7.505589983s ago: executing program 0 (id=425): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) 7.341529568s ago: executing program 0 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100acef000108000200ac1e00010c0002"], 0x64}}, 0x0) 7.189301033s ago: executing program 0 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x3, @private0}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000040)) sendto$inet(r2, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 6.529013744s ago: executing program 3 (id=430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xb, 0x80000000003}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 6.095146517s ago: executing program 3 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000200)=0x40b) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) write(r0, &(0x7f0000000040)="e2b93b458749a1d8439e1b922bfd32e88c88024c98449bfc", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x3, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f0000075e40)={0x1, &(0x7f0000075dc0)=[{0x8000001, 0x0, 0x0, 0x0, 0x3}]}) 6.001519181s ago: executing program 1 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={{r5}, 0x0, 0x5, 0x1}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) 4.952288124s ago: executing program 1 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.819171868s ago: executing program 1 (id=436): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x20001000, 0x4000, 0x0, 0x0, 0x1}, 0x10) 4.549555926s ago: executing program 3 (id=437): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) tgkill(r5, r5, 0x21) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) 3.952696035s ago: executing program 4 (id=439): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f00000000c0)) 3.857437628s ago: executing program 3 (id=440): socket$nl_generic(0x10, 0x3, 0x10) getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r2, &(0x7f0000001f00)=""/4111, 0x100f) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x448, &(0x7f0000000f80)="$eJzs282PE+UfAPDvzG6XHz/QrYovvKiraNz4sssCKgcPajTxgImJHvS42V0IUljDrokQomAMnowx8W48+i940osxnky86t2QEMMF8FQznRloS1ugtBTo55MMPM+87PP9duZpn5mnDWBszWT/JBGbI+LPiJjOq607zOT/XTx/cunS+ZNLSdTr7/6TNPa7cP7kUrlredymojKbRqRfJLG9Q7trx08cXqzVVo4V9fn1Ix/Nrx0/8cKhI4sHVw6uHN29b9/ePQsvv7T7xYHkmcV0Ydunqzu2vvXBN2/v/6ol/7Y8BmSm18an6/UBNzda94w6APoyERGTEVFp9P/pmGjUctPx5ucjDQ4Yqnq9Xt/UffOpOnAXS6K1rsvDuCg/6LP733JpHwS8Orzhx8idey2/Acryvlgs+ZbJSIt9KkO8v52JiPdP/ftdtsRwnkMAALT4KRv/PN9p/JfGQ0373VvMDVUj4r6IuD8iHoiILRHxYERj34cj4pEbbL99kuTq8U96tq/ErlM2/nulmNtqHf+l9em8UJ1ovBr5GLAaleTAodrKruI1mY3Khqy+0KONn9/44+tu25rHf9mStV+OBYs4zk5uaD1meXF98eayvuLc6Yhtk53yTy7PBCQRsTUitvXZxqFnf9jRbdu18+9hss+AmtS/j3gmP/+noi3/UtJ7fnL+f1Fb2TVfXhVX++33M+90a/+m8h+A7Pz/v+P1fzn/atI8X7t2422c+evLrvc0/V7/U8l7jfJUse6TxfX1YwsRU8n+POjm9buvHFvWy/2z/Gd3duz/jfe48pXYHhHZRfxoRDwWEY8XsT8REU9GxM4e+f/6+lMf9p//cGX5L9/Q+b9SmIr2NZ0LE4d/+bGl0epV+V/qff73NkqzxZrref+7nrj6u5oBAADgzpNGxOZI0rnL5TSdm8u/L78lIq2trq0/d2D146PL+W8EqlFJyydd003PQxeK2/q8fjoi8q8WlNv3FM+Nv53Y2KjPLa3WlkedPIy5TV36f+bviVFHBwzdAObRgDuU/g/jS/+H8aX/w/jq0P83jiIO4Nbr9Pn/2QjiAG69tv5v2g/GiPt/GF/6P4wv/R/G0trGuPaP5HsWyr/U5+F3bSEqt0UYQytEeluEoTCkwmjflwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAblvwAAAP//i0zh2w==") keyctl$update(0x2, 0x0, &(0x7f0000000680), 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x18, 0x8, 0x0, r6, 0x0, 0x0, 0x1, 0x0, 0x2}]) write$tun(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) 3.839653359s ago: executing program 1 (id=441): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = dup(0xffffffffffffffff) write$binfmt_elf32(r5, 0x0, 0x58) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000100)="0827e0b9d3ed", 0x6}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.701510233s ago: executing program 4 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffefff) 3.296642236s ago: executing program 2 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={{r5}, 0x0, 0x5, 0x1}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) 2.303471377s ago: executing program 2 (id=446): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.082737134s ago: executing program 3 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000200)=0x40b) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) write(r0, &(0x7f0000000040)="e2b93b458749a1d8439e1b922bfd32e88c88024c98449bfc", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x3, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f0000075e40)={0x1, &(0x7f0000075dc0)=[{0x8000001, 0x0, 0x0, 0x0, 0x3}]}) 2.017397956s ago: executing program 2 (id=448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@newsa={0x128, 0x10, 0x10, 0x70bd2d, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x4e23, 0xff, 0x4e21, 0xb3d, 0xa, 0x30, 0x0, 0x33}, {@in=@broadcast, 0x4d2, 0x6c}, @in6=@empty, {0x6e4a, 0x8, 0xf23a, 0x7cf, 0xe3c, 0x6, 0xfffffffffffff13b, 0x7f}, {0x3, 0x2, 0x4, 0x5}, {0xff, 0x6, 0x5}, 0x70bd2d, 0x3505, 0xa, 0x2, 0x1, 0xce}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xdf}, @lifetime_val={0x24, 0x9, {0x1, 0x80000000, 0x5, 0x10000}}, @policy_type={0xa}]}, 0x128}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000600)={0x18, 0x0, {0x2, @empty, 'veth1_to_team\x00'}}, 0x1e) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000680)) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000740)={0x0, 0x2001}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000980)={0x16, 0x4, {0x6, @struct={0x1ff, 0x9}, 0x0, 0xfffffffffffffffd, 0x1, 0x3, 0x9, 0x0, 0xead27c265d2444b4, @struct={0x6, 0x4}, 0x80000001, 0x4, [0x7f, 0x17, 0x45, 0x0, 0x47, 0x6]}, {0x3, @struct={0x793, 0x5}, 0x0, 0x8, 0x1, 0x7, 0x4, 0x5, 0x8, @struct={0x80, 0x400}, 0x3, 0x1, [0x0, 0xe237, 0x7, 0x3, 0x9, 0x3]}, {0xc8, @struct={0x9, 0x7}, 0x0, 0x1, 0x3, 0x6, 0x1, 0xfffffffffffffff4, 0x20, @usage=0x7, 0x2, 0x101, [0x2, 0xff, 0x3, 0x7f, 0x8, 0x81]}, {0x9, 0x1, 0x3ff}}) r4 = signalfd(r1, &(0x7f0000001d80)={[0x9]}, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001ec0), 0x408000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000003900)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000038c0)={&(0x7f00000021c0)={0x394, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1fa, 0x12}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x23, 0xfc, "e28caa856ce8000e0ef7d230fb89b952758e67436626fa79ef3a6139e6fb48"}, @NL80211_ATTR_FILS_ERP_RRK={0x7f, 0xfc, "52937642c5e15e9d7e8687f890257e2b041f042e8a7eb7ed3657e35162e9fbcc91259b11fc0cdf3bd1abb4d6e6ab2a58cae083662f63a4547afe30762d405b5303b2fa78b88a01cf20493dff3d9c415b20896b76cd8b0d1e5754fdafaf63f712aa4ac57360f29ab75b3e32820957068ab25e129d01880101aa82b9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x401}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "ea5b1b33ebdad04c1e86c7df44"}], @NL80211_ATTR_IE={0x4a, 0x2a, [@challenge={0x10, 0x1, 0xb}, @cf={0x4, 0x6, {0xc0, 0x0, 0x8000, 0x1}}, @challenge={0x10, 0x1, 0x29}, @measure_req={0x26, 0x2e, {0x2, 0xe, 0x1, "c5ad3d854d33c004d0271b0839da08e2642621aba61fc2481a8ace9c1dc2a6707275ecf77454ab4628b064"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x10f, 0x2a, [@fast_bss_trans={0x37, 0x106, {0x1, 0x6, "53438e50d1ed58c2f49283c92a9c9f1f", "3b1efcb707e4f1a75378b304d1d6011eea253b5f18eb78ec4fb1c456d2ebd895", "4dbb44fb60915b73535164b286f585c55933f14dfd259f0c6d270ba63b2df41b", [{0x1, 0x16, "a140915827d6fcc4323d0ce896f879d15e304bff2f23"}, {0x1, 0x1c, "c509633a3a350ae3a636ec0ad490dca99b8eef102c830c5c45e48571"}, {0x4, 0xd, "d94936e88d752e1942828e6102"}, {0x1, 0x22, "77856ed5850bd43f40f33a29465e8d01bb8b20cdfe8e53c431dff27a50d0b64b33f4"}, {0x3, 0x21, "8e74603bc5367228f7ac8802a39ac714a2cf58737e6e412e060c8060f0ee6c410c"}, {0x1, 0x26, "94403f27116be20d8b039d42a2a422d7359d62154426ecdfa458bfa75a63fbb2b8718924bf15"}]}}, @dsss={0x3, 0x1, 0x68}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}, @NL80211_ATTR_IE={0x132, 0x2a, [@ht={0x2d, 0x1a, {0x0, 0x2, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x4}}, @random_vendor={0xdd, 0x6a, "27b329810ff6488cf7795da3d49ded9d4f4f32d46208564eaffd9244b3ac51855e86a5ed149b08cfba78dfb455f2fdb7dd759c6bcdf982e97016bbae729ab4991f2e1a575954326f7319861dc174eae8ef82cea52b2c012c287a91e37f8eb9909a38aae3be8d88c13d37"}, @peer_mgmt={0x75, 0x16, {0x0, 0x2, @void, @val=0x1e, @val="0d38e7c1de21b22478f2bfe22d69daa7"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random_vendor={0xdd, 0x89, "fda4fd4414d1b26cb75874ed854366f8a3760beda72604f2f1f5253722d01345b1c60aa6fe640815fe574c0e19e76c574d4d0e83a78bb652fdd05288254da64c37f1cdd58bfcf1b4a90ade747f8dc5a37abefdf3bd6431d901880d32be5ba62a913756565a3807dc124eac68f887183e37841e6b47fa781ce0b4b92dd4bf4cb8822d0173f11438f442"}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x8c5}, 0x8000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003940)={0x0}, &(0x7f0000003980)=0xc) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000039c0)={'\x00', 0x400, 0x5, 0x9, 0x100, 0x1000, 0xffffffffffffffff}) rt_tgsigqueueinfo(r6, r7, 0x41, &(0x7f0000003a40)={0x20, 0x9, 0x3}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003ac0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) accept4$inet6(r4, 0x0, &(0x7f0000006b80), 0xc00) sendmmsg$unix(r8, 0x0, 0x0, 0x20000004) 1.047208167s ago: executing program 3 (id=449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xf23, 0x1000}, &(0x7f0000000340)=0x8) 812.701484ms ago: executing program 2 (id=450): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) tgkill(r5, r5, 0x21) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) 729.414517ms ago: executing program 0 (id=451): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x20001000, 0x4000, 0x0, 0x0, 0x1}, 0x10) 147.077295ms ago: executing program 2 (id=452): r0 = epoll_create1(0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x4, r1, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)={0xe000001b}) 0s ago: executing program 2 (id=453): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 63.510704][ T4175] cgroup: Unknown subsys name 'net' [ 63.656378][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.102604][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.970839][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.074348][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.106166][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.155829][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.169905][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.178487][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.219499][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.226802][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.235326][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.255793][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 67.282622][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.289950][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.297827][ T4194] device bridge_slave_0 entered promiscuous mode [ 67.310054][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 67.325862][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.337475][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.348476][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.355880][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.364373][ T4194] device bridge_slave_1 entered promiscuous mode [ 67.409103][ T4188] team0: Port device team_slave_0 added [ 67.441400][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.448524][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.456880][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.466892][ T4188] team0: Port device team_slave_1 added [ 67.486120][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.499359][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.506613][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.514863][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.533835][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.581245][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.591383][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.598363][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.625059][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.660225][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.670008][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.676977][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.703326][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.723454][ T4194] team0: Port device team_slave_0 added [ 67.736888][ T4194] team0: Port device team_slave_1 added [ 67.754296][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.761505][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.769488][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.784382][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.791498][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.799546][ T4202] device bridge_slave_0 entered promiscuous mode [ 67.817491][ T4192] team0: Port device team_slave_0 added [ 67.823653][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.831418][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.839594][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.855279][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.862774][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.871302][ T4202] device bridge_slave_1 entered promiscuous mode [ 67.891800][ T4192] team0: Port device team_slave_1 added [ 67.905257][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.912343][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.938436][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.966033][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.973205][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.992994][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.000265][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.026551][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.053591][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.075319][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.085604][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.093162][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.119697][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.133176][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.161936][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.171960][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.178924][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.205182][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.225808][ T4193] team0: Port device team_slave_0 added [ 68.233748][ T4193] team0: Port device team_slave_1 added [ 68.293722][ T4194] device hsr_slave_0 entered promiscuous mode [ 68.300938][ T4194] device hsr_slave_1 entered promiscuous mode [ 68.308181][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.316480][ T4194] Cannot create hsr debugfs directory [ 68.327180][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.334478][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.361100][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.375252][ T4202] team0: Port device team_slave_0 added [ 68.390227][ T4202] team0: Port device team_slave_1 added [ 68.413782][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.421060][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.447035][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.473221][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.481068][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.507172][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.537362][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.544377][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.551053][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.558625][ T4192] Cannot create hsr debugfs directory [ 68.564728][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.571854][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.598170][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.661148][ T4177] Bluetooth: hci0: command 0x0409 tx timeout [ 68.673647][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.680589][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.687258][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.694944][ T4193] Cannot create hsr debugfs directory [ 68.739860][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 68.740161][ T4177] Bluetooth: hci1: command 0x0409 tx timeout [ 68.745979][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 68.758967][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 68.839974][ T4202] device hsr_slave_0 entered promiscuous mode [ 68.846653][ T4202] device hsr_slave_1 entered promiscuous mode [ 68.853573][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.861729][ T4202] Cannot create hsr debugfs directory [ 69.022940][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.037652][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.069742][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.091873][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.127505][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.139576][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.168552][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.195522][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.240861][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.262557][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.282717][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.293652][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.360467][ T4202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.371012][ T4202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.390961][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.406929][ T4202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.416500][ T4202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.454889][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.465380][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.477933][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.489563][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.507198][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.518889][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.528937][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.568378][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.578512][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.588495][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.595942][ T1592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.605487][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.615227][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.624239][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.631362][ T1592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.642589][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.658533][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.679468][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.693045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.702327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.738978][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.748563][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.759228][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.771313][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.780208][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.788646][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.795769][ T1592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.804063][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.814573][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.823435][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.830595][ T1592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.838860][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.849988][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.860121][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.869220][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.919394][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.927832][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.938975][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.948621][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.958662][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.967449][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.976632][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.986132][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.994851][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.007083][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.017163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.053881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.072305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.086173][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.093333][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.129151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.139389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.151767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.161498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.171160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.187897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.196837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.205711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.214809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.223981][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.231144][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.239614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.249296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.261627][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.278406][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.291827][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.303995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.313388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.322285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.331290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.340608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.349308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.363141][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.408367][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.417119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.433590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.445961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.460785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.469158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.477432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.493764][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.505686][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.527789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.538666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.550712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.559411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.573755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.587119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.597800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.610622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.619179][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.626288][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.634739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.645004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.653596][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.660709][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.676121][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.693156][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.703277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.718819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.734135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.742802][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 70.781078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.797654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.807638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.816743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.824803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.831702][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 70.835039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.840033][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 70.849391][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.860019][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.868155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.870046][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 70.878842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.891058][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.898129][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 70.898133][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.899632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.921708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.930857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.939226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.957236][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.971793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.983821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.992548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.002009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.011429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.032560][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.058253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.070048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.078817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.090303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.100816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.109510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.119248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.146683][ T4188] device veth0_vlan entered promiscuous mode [ 71.178150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.193170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.208260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.223593][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.230275][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.236581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.252184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.261908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.271740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.283742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.292531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.305236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.315220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.340704][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.357712][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.377673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.408012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.421630][ T4188] device veth1_vlan entered promiscuous mode [ 71.434220][ T4192] device veth0_vlan entered promiscuous mode [ 71.451389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.477495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.487573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.502932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.517392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.551425][ T4192] device veth1_vlan entered promiscuous mode [ 71.576254][ T4188] device veth0_macvtap entered promiscuous mode [ 71.614572][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.624996][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.640821][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.650333][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.659180][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.674211][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.696297][ T4188] device veth1_macvtap entered promiscuous mode [ 71.730251][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.738471][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.755867][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.766477][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.780119][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.798059][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.807938][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.833031][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.842299][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.855145][ T4192] device veth0_macvtap entered promiscuous mode [ 71.882509][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.891915][ T4192] device veth1_macvtap entered promiscuous mode [ 71.903010][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.918518][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.927261][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.936537][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.946561][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.957025][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.968606][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.983475][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.993586][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.027872][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.037223][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.047006][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.056031][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.067478][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.078246][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.088256][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.097372][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.114169][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.122613][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.155783][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.163816][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.182018][ T4194] device veth0_vlan entered promiscuous mode [ 72.196208][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.208482][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.220166][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.235761][ T4202] device veth0_vlan entered promiscuous mode [ 72.250631][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.259287][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.275457][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.285865][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.297511][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.305900][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.314698][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.323770][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.335165][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.347337][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.359203][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.373187][ T4193] device veth0_vlan entered promiscuous mode [ 72.381769][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.391108][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.398895][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.407959][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.446875][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.457795][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.472477][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.481658][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.494558][ T4194] device veth1_vlan entered promiscuous mode [ 72.525542][ T4193] device veth1_vlan entered promiscuous mode [ 72.535537][ T4202] device veth1_vlan entered promiscuous mode [ 72.570904][ T4194] device veth0_macvtap entered promiscuous mode [ 72.592816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.602719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.612795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.621968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.630775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.638823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.647381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.657673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.667672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.676730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.685686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.702527][ T4202] device veth0_macvtap entered promiscuous mode [ 72.717445][ T4202] device veth1_macvtap entered promiscuous mode [ 72.728151][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.744852][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.778737][ T4193] device veth0_macvtap entered promiscuous mode [ 72.787463][ T4194] device veth1_macvtap entered promiscuous mode [ 72.798823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.810890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.818952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.828377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.830761][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 72.838203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.850799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.859496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.871720][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.882711][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.893114][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.904145][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.914384][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 72.920844][ T4238] Bluetooth: hci1: command 0x040f tx timeout [ 72.928342][ T4238] Bluetooth: hci2: command 0x040f tx timeout [ 72.932792][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.956897][ T4193] device veth1_macvtap entered promiscuous mode [ 72.969051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.977583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.988305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.992061][ T4238] Bluetooth: hci3: command 0x040f tx timeout [ 73.013695][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.024658][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.035084][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.045674][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.055536][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.066689][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.078049][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.086206][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.097507][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.107809][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.118616][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.131073][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.160224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.169061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.178705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.188323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.201432][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.212055][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.225759][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.237025][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.247222][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.258121][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.269753][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.288514][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.297654][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.315189][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.324254][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.344674][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.355996][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.366361][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.377318][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.389701][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.400590][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.410893][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.421625][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.433221][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.441918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.454311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.464334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.474944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.487109][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.496518][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.505355][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.514437][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.517455][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.531794][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.543017][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.552073][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.565777][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.580858][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.591205][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.603985][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.613865][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.626161][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.636153][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.646660][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.657894][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.665690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.674316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.682911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.692036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.725230][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.735982][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.745129][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.753974][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.796239][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.822008][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.878433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.894736][ T1592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.918907][ T1592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.025581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.084683][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.168781][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.227247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.267647][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.269084][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.594259][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.763972][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.061188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.078768][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 75.086874][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 75.094008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.191073][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 75.197278][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 75.203437][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 75.249740][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.259772][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.277482][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.295220][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.330851][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.367556][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.381089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.495788][ T4291] binder: 4288:4291 unknown command 0 [ 75.522661][ T4291] binder: 4288:4291 ioctl c0306201 200000000080 returned -22 [ 75.614953][ T4291] binder: BINDER_SET_CONTEXT_MGR already set [ 75.652864][ T4291] binder: 4288:4291 ioctl 4018620d 200000000040 returned -16 [ 75.851479][ T4235] usb 2-1: config index 0 descriptor too short (expected 37906, got 18) [ 75.897113][ T4235] usb 2-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 76.216382][ T4235] usb 2-1: config 0 has an invalid interface number: 121 but max is 102 [ 76.671298][ T4235] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 76.680788][ T4235] usb 2-1: config 0 has no interface number 0 [ 76.686923][ T4235] usb 2-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 76.702191][ T4235] usb 2-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 76.725025][ T4235] usb 2-1: config 0 interface 121 has no altsetting 0 [ 76.919986][ T4235] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 76.945892][ T4235] usb 2-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 76.954590][ T4235] usb 2-1: Product: syz [ 76.958798][ T4235] usb 2-1: Manufacturer: syz [ 76.977958][ T4235] usb 2-1: SerialNumber: syz [ 77.020425][ T4235] usb 2-1: config 0 descriptor?? [ 77.076902][ T4177] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.480700][ T4177] usb 1-1: config 0 has an invalid interface number: 80 but max is 0 [ 77.540133][ T4177] usb 1-1: config 0 has no interface number 0 [ 77.762540][ T4235] hub 2-1:0.121: bad descriptor, ignoring hub [ 77.768806][ T4235] hub: probe of 2-1:0.121 failed with error -5 [ 77.838155][ T4235] gspca_main: spca501-2.14.0 probing 0000:0000 [ 77.867686][ T4177] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.59 [ 77.912666][ T4235] gspca_spca501: reg write: error -71 [ 77.918115][ T4235] spca501 2-1:0.121: Reg write failed for 0x02,0x0f,0x05 [ 77.939395][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.969781][ T4177] usb 1-1: Product: syz [ 77.974010][ T4177] usb 1-1: Manufacturer: syz [ 77.978626][ T4177] usb 1-1: SerialNumber: syz [ 77.993650][ T4235] spca501: probe of 2-1:0.121 failed with error -22 [ 78.055107][ T4177] usb 1-1: config 0 descriptor?? [ 78.082169][ T4235] usb 2-1: USB disconnect, device number 2 [ 78.180217][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.469886][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 78.612200][ T4233] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 78.713270][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.894206][ T4233] usb 5-1: config 0 descriptor?? [ 79.082171][ T4276] usb 1-1: USB disconnect, device number 2 [ 79.540771][ T4233] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 79.848093][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.941574][ T4233] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 79.948952][ T4233] usb 5-1: media controller created [ 80.074434][ T4363] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.116098][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.266982][ T4233] az6027: usb out operation failed. (-71) [ 80.301582][ T4233] az6027: usb out operation failed. (-71) [ 80.311335][ T4233] stb0899_attach: Driver disabled by Kconfig [ 80.317433][ T4233] az6027: no front-end attached [ 80.317433][ T4233] [ 80.379993][ T4233] az6027: usb out operation failed. (-71) [ 80.391866][ T4233] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 80.457417][ T4233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 80.520685][ T4233] dvb-usb: schedule remote query interval to 400 msecs. [ 80.527695][ T4233] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 80.620541][ T4233] usb 5-1: USB disconnect, device number 2 [ 80.707629][ T4395] fuse: Unknown parameter '¡ÔYÉ⛤á [ 80.707629][ T4395] 5Bì¨)#“Û1¢êçˆbŠ*Ohø¦ü0 LÛ¯×Aƒó8ÿ{ˆŽ' [ 80.973285][ T4397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 81.871355][ T4233] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 81.913826][ T26] audit: type=1326 audit(1778948493.716:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b4f3e59 code=0x7ffc0000 [ 81.959659][ C0] sched: RT throttling activated [ 82.128962][ T26] audit: type=1326 audit(1778948493.786:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b4f3e59 code=0x7ffc0000 [ 82.190535][ T4409] Zero length message leads to an empty skb [ 82.205237][ T26] audit: type=1326 audit(1778948493.966:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b4f3e59 code=0x7ffc0000 [ 82.492059][ T26] audit: type=1326 audit(1778948493.976:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b4f3e59 code=0x7ffc0000 [ 82.738738][ T26] audit: type=1326 audit(1778948493.976:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd74b4b02ac code=0x7ffc0000 [ 82.938806][ T4433] loop1: detected capacity change from 0 to 512 [ 82.986046][ T26] audit: type=1326 audit(1778948493.976:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd74b4b030e code=0x7ffc0000 [ 83.149073][ T26] audit: type=1326 audit(1778948493.976:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd74b4f3aeb code=0x7ffc0000 [ 83.474380][ T26] audit: type=1326 audit(1778948493.976:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd74b4f3e59 code=0x7ffc0000 [ 84.225682][ T26] audit: type=1326 audit(1778948493.976:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b4f3e59 code=0x7ffc0000 [ 84.304309][ T4448] netlink: 36 bytes leftover after parsing attributes in process `syz.3.59'. [ 84.364505][ T26] audit: type=1326 audit(1778948493.976:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4403 comm="syz.2.41" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b4f3e59 code=0x7ffc0000 [ 84.491978][ T4433] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.52: missing EA_INODE flag [ 84.553960][ T4457] netlink: 64 bytes leftover after parsing attributes in process `syz.3.61'. [ 84.650440][ T4433] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.52: error while reading EA inode 2 err=-117 [ 84.679759][ T4177] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.719847][ T4433] EXT4-fs (loop1): 1 orphan inode deleted [ 84.725635][ T4433] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 84.989870][ T4177] usb 5-1: Using ep0 maxpacket: 16 [ 85.448100][ T4433] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 85.454560][ T4177] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 85.479752][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.559557][ T4177] usb 5-1: Product: syz [ 85.611485][ T4177] usb 5-1: Manufacturer: syz [ 85.629846][ T4177] usb 5-1: SerialNumber: syz [ 85.647444][ T4177] usb 5-1: config 0 descriptor?? [ 85.712384][ T4177] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 85.919970][ T4177] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 85.938591][ T4177] visor: probe of 5-1:0.0 failed with error -5 [ 86.411378][ T13] usb 5-1: USB disconnect, device number 3 [ 86.991297][ T21] cfg80211: failed to load regulatory.db [ 90.995199][ T4518] loop4: detected capacity change from 0 to 512 [ 93.239839][ T4518] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.77: missing EA_INODE flag [ 94.026674][ T4554] ODEBUG: Out of memory. ODEBUG disabled [ 95.219676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 95.239671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.259671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.279669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.299671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.319672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.339672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.359669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.389675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.409683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 95.444156][ T4518] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.77: error while reading EA inode 2 err=-117 [ 95.505765][ T4560] ======================================================= [ 95.505765][ T4560] WARNING: The mand mount option has been deprecated and [ 95.505765][ T4560] and is ignored by this kernel. Remove the mand [ 95.505765][ T4560] option from the mount to silence this warning. [ 95.505765][ T4560] ======================================================= [ 96.489857][ T4518] EXT4-fs (loop4): 1 orphan inode deleted [ 96.495650][ T4518] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 102.933262][ T4625] loop0: detected capacity change from 0 to 512 [ 103.230722][ T4625] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.106: missing EA_INODE flag [ 103.300100][ T4625] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.106: error while reading EA inode 2 err=-117 [ 103.360225][ T4625] EXT4-fs (loop0): 1 orphan inode deleted [ 103.378049][ T4625] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 103.473864][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.639972][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.649837][ T4634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 104.660915][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 104.819958][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.919862][ T13] usb 4-1: config 4 interface 0 has no altsetting 0 [ 105.157391][ T4662] 9pnet_virtio: no channels available for device syz [ 105.310806][ T13] usb 4-1: string descriptor 0 read error: -22 [ 105.319816][ T13] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 105.342927][ T13] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 105.412887][ T13] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 105.429138][ T13] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.446378][ T13] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 105.458000][ T13] usb 4-1: media controller created [ 105.491804][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.821277][ T4308] libceph: connect (1)[c::]:6789 error -101 [ 105.839240][ T4308] libceph: mon0 (1)[c::]:6789 connect error [ 105.863982][ T4308] libceph: connect (1)[c::]:6789 error -101 [ 105.870430][ T4308] libceph: mon0 (1)[c::]:6789 connect error [ 105.877057][ T4671] ceph: No mds server is up or the cluster is laggy [ 106.144474][ T4308] libceph: connect (1)[c::]:6789 error -101 [ 106.206244][ T4308] libceph: mon0 (1)[c::]:6789 connect error [ 106.611314][ T13] zl10353_read_register: readreg error (reg=127, ret==0) [ 106.618774][ T4632] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 106.763157][ T13] usb 4-1: USB disconnect, device number 2 [ 106.957522][ T4697] loop2: detected capacity change from 0 to 512 [ 107.910270][ T4697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.124: missing EA_INODE flag [ 107.940687][ T4708] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 108.241314][ T4708] netlink: 152 bytes leftover after parsing attributes in process `syz.0.128'. [ 108.732185][ T4708] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 108.808618][ T4697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.124: error while reading EA inode 2 err=-117 [ 108.917489][ T4697] EXT4-fs (loop2): 1 orphan inode deleted [ 108.970430][ T4697] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 109.129827][ T4276] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.656678][ T4276] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.763414][ T4276] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 109.778559][ T4276] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 109.799267][ T4276] usb 4-1: config 63 has no interface number 0 [ 109.816810][ T4276] usb 4-1: config 63 interface 66 has no altsetting 0 [ 109.989783][ T4276] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 109.998919][ T4276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.051616][ T4276] usb 4-1: Product: syz [ 110.055857][ T4276] usb 4-1: Manufacturer: syz [ 110.101594][ T4276] usb 4-1: SerialNumber: syz [ 110.209867][ T4308] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.393451][ T4711] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 110.499829][ T4308] usb 5-1: Using ep0 maxpacket: 32 [ 110.640680][ T4308] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 110.648824][ T4308] usb 5-1: config 0 has no interface number 0 [ 110.684357][ T4308] usb 5-1: config 0 interface 35 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 110.839904][ T4276] usb 4-1: Found UVC 0.07 device syz (174f:8acf) [ 110.846410][ T4276] usb 4-1: No valid video chain found. [ 110.874531][ T4276] usb 4-1: USB disconnect, device number 3 [ 111.725204][ T4308] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 111.735089][ T4308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.749385][ T4308] usb 5-1: Product: syz [ 111.754214][ T4308] usb 5-1: Manufacturer: syz [ 111.758850][ T4308] usb 5-1: SerialNumber: syz [ 111.788491][ T4308] usb 5-1: config 0 descriptor?? [ 111.872040][ T4308] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 111.879613][ T4308] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 111.970870][ T4747] loop0: detected capacity change from 0 to 512 [ 112.779502][ T4750] process 'syz.2.144' launched '/dev/fd/-1' with NULL argv: empty string added [ 113.236007][ T4308] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 113.243917][ T4308] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 113.264653][ T4308] usb 5-1: USB disconnect, device number 4 [ 113.293621][ T4747] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.143: missing EA_INODE flag [ 113.384276][ T4747] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.143: error while reading EA inode 2 err=-117 [ 113.397029][ T4747] EXT4-fs (loop0): 1 orphan inode deleted [ 113.413468][ T4747] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 116.489686][ T4793] comedi comedi0: reset error (fatal) [ 116.782518][ T4801] loop4: detected capacity change from 0 to 512 [ 117.317827][ T4801] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.162: missing EA_INODE flag [ 118.270064][ T4801] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.162: error while reading EA inode 2 err=-117 [ 118.400228][ T4816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 118.410197][ T4801] EXT4-fs (loop4): 1 orphan inode deleted [ 118.415975][ T4801] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 122.485431][ T4870] i2c i2c-0: Invalid block write size 84 [ 122.643875][ T4880] loop1: detected capacity change from 0 to 512 [ 122.695347][ T4880] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.182: missing EA_INODE flag [ 122.730275][ T4880] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.182: error while reading EA inode 2 err=-117 [ 122.758769][ T4880] EXT4-fs (loop1): 1 orphan inode deleted [ 122.771580][ T4880] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 122.799856][ T4308] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 123.429766][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 123.450767][ T4887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.470136][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.690132][ T4308] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 123.715862][ T4308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.743117][ T4308] usb 3-1: Product: syz [ 123.747841][ T4308] usb 3-1: Manufacturer: syz [ 123.757997][ T4308] usb 3-1: SerialNumber: syz [ 123.794037][ T4308] usb 3-1: config 0 descriptor?? [ 123.841195][ T4308] hub 3-1:0.0: bad descriptor, ignoring hub [ 123.856418][ T4308] hub: probe of 3-1:0.0 failed with error -5 [ 123.896110][ T4308] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 126.540181][ T4276] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.229732][ T4276] usb 2-1: Using ep0 maxpacket: 32 [ 127.289783][ T4198] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.490948][ T4276] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 127.500445][ T4276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.517340][ T4276] usb 2-1: config 0 has no interface number 0 [ 127.523993][ T4276] usb 2-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.549860][ T4198] usb 5-1: Using ep0 maxpacket: 32 [ 127.791104][ T4276] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 127.802541][ T4198] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 127.814205][ T4198] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.822673][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.833343][ T4198] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.843513][ T4198] usb 5-1: config 1 has no interface number 0 [ 128.118819][ T4276] usb 2-1: Product: syz [ 128.301630][ T4276] usb 2-1: Manufacturer: syz [ 128.327743][ T4276] usb 2-1: SerialNumber: syz [ 128.466636][ T4198] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.477605][ T4198] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 128.505182][ T4198] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 128.534545][ T4276] usb 2-1: config 0 descriptor?? [ 128.554747][ T4198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.105174][ T4276] redrat3 2-1:0.83: Couldn't find all endpoints [ 129.657508][ T4177] usb 2-1: USB disconnect, device number 3 [ 129.984857][ T4198] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 130.048048][ T4198] snd_usb_pod 5-1:1.1: set_interface failed [ 130.099027][ T4198] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 130.304804][ T4198] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 130.319456][ T4198] usb 5-1: USB disconnect, device number 5 [ 131.127616][ T4308] usb 3-1: USB disconnect, device number 2 [ 131.285740][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.574556][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 132.450028][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 132.639977][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.679797][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.692684][ T4987] loop3: detected capacity change from 0 to 128 [ 132.720138][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.726558][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.744156][ T7] usb 2-1: Product: syz [ 132.748378][ T7] usb 2-1: Manufacturer: syz [ 132.820328][ T7] usb 2-1: SerialNumber: syz [ 132.832310][ T7] usb 2-1: config 0 descriptor?? [ 132.990688][ T4987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.331186][ T4987] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.833528][ T7] usb 2-1: can't set config #0, error -71 [ 133.979086][ T7] usb 2-1: USB disconnect, device number 4 [ 134.132453][ T5000] Attempt to restore checkpoint with obsolete wellknown handles [ 137.548854][ T5044] loop1: detected capacity change from 0 to 128 [ 138.509293][ T5044] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.522589][ T5044] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.747649][ T5053] Attempt to restore checkpoint with obsolete wellknown handles [ 140.740931][ T5090] loop8: detected capacity change from 0 to 7 [ 140.757991][ T5090] Dev loop8: unable to read RDB block 7 [ 140.768127][ T5090] loop8: unable to read partition table [ 140.793666][ T5090] loop8: partition table beyond EOD, truncated [ 140.807463][ T5090] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.852950][ T5095] capability: warning: `syz.1.247' uses deprecated v2 capabilities in a way that may be insecure [ 143.366974][ T5117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'. [ 143.399868][ T5117] netlink: 156 bytes leftover after parsing attributes in process `syz.3.255'. [ 143.416363][ T5117] futex_wake_op: syz.3.255 tries to shift op by -1; fix this program [ 147.112397][ T5160] loop4: detected capacity change from 0 to 128 [ 148.211788][ T5160] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.283600][ T5160] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.680083][ T5177] Attempt to restore checkpoint with obsolete wellknown handles [ 148.761057][ T5179] qrtr: Invalid version 0 [ 151.728705][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 151.737783][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 153.643292][ T5220] loop0: detected capacity change from 0 to 128 [ 153.785987][ T5222] program syz.2.285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.812537][ T5222] autofs4:pid:5222:autofs_fill_super: called with bogus options [ 153.946556][ T5220] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.084719][ T5220] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.013398][ T5233] Attempt to restore checkpoint with obsolete wellknown handles [ 157.113385][ T5257] netlink: 'syz.2.297': attribute type 16 has an invalid length. [ 157.179817][ T5257] netlink: 'syz.2.297': attribute type 17 has an invalid length. [ 157.298087][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.411251][ T5257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.755675][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 158.764945][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 159.292064][ T5273] loop2: detected capacity change from 0 to 512 [ 159.487064][ T5273] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.300: missing EA_INODE flag [ 159.521476][ T5281] loop3: detected capacity change from 0 to 128 [ 159.548119][ T5273] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.300: error while reading EA inode 2 err=-117 [ 159.590945][ T5273] EXT4-fs (loop2): 1 orphan inode deleted [ 159.590995][ T5273] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 159.649803][ T5281] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.649909][ T5281] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.946844][ T5284] Attempt to restore checkpoint with obsolete wellknown handles [ 164.194933][ T5324] loop1: detected capacity change from 0 to 512 [ 164.255788][ T5324] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.315: missing EA_INODE flag [ 164.281853][ T5324] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.315: error while reading EA inode 2 err=-117 [ 164.340228][ T5324] EXT4-fs (loop1): 1 orphan inode deleted [ 164.401291][ T5324] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 164.444046][ T5328] loop4: detected capacity change from 0 to 128 [ 164.490625][ T5328] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.516069][ T5328] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.548015][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.049136][ T5335] Attempt to restore checkpoint with obsolete wellknown handles [ 165.222728][ T5337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.317'. [ 165.233795][ T5337] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 171.122829][ T5408] loop1: detected capacity change from 0 to 512 [ 171.235114][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 171.244186][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 172.227529][ T5408] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.328: missing EA_INODE flag [ 172.297978][ T5408] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.328: error while reading EA inode 2 err=-117 [ 172.369909][ T5408] EXT4-fs (loop1): 1 orphan inode deleted [ 172.458952][ T5408] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 172.899790][ T4276] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 173.269955][ T4276] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 173.289833][ T4276] usb 4-1: config 0 has no interface number 0 [ 173.521721][ T4276] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 173.559855][ T4276] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 173.657061][ T4276] usb 4-1: config 0 interface 255 has no altsetting 0 [ 173.692572][ T4276] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 173.747778][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.808091][ T4276] usb 4-1: config 0 descriptor?? [ 173.880910][ T4276] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 174.082602][ T4276] usb 4-1: USB disconnect, device number 4 [ 174.376174][ T5450] loop1: detected capacity change from 0 to 512 [ 174.480062][ T5450] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.356: missing EA_INODE flag [ 174.548282][ T5450] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.356: error while reading EA inode 2 err=-117 [ 174.581327][ T5450] EXT4-fs (loop1): 1 orphan inode deleted [ 174.601587][ T5450] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 176.706410][ T5488] device syzkaller0 entered promiscuous mode [ 176.753273][ T5492] loop1: detected capacity change from 0 to 512 [ 176.923938][ T5492] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.372: missing EA_INODE flag [ 177.092448][ T5492] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.372: error while reading EA inode 2 err=-117 [ 177.114735][ T5492] EXT4-fs (loop1): 1 orphan inode deleted [ 177.120639][ T5492] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 180.538989][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.703914][ T5522] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 180.887212][ T5532] loop1: detected capacity change from 0 to 128 [ 180.989164][ T5539] loop3: detected capacity change from 0 to 512 [ 181.026951][ T5532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.051531][ T5532] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.083403][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.103794][ T5539] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.389: missing EA_INODE flag [ 181.116709][ T5532] Attempt to restore checkpoint with obsolete wellknown handles [ 181.155004][ T5539] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.389: error while reading EA inode 2 err=-117 [ 181.262199][ T5539] EXT4-fs (loop3): 1 orphan inode deleted [ 181.448633][ T5539] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 182.466097][ T5558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 182.704721][ T5562] netlink: 256 bytes leftover after parsing attributes in process `syz.0.396'. [ 182.825767][ T5562] netlink: 80 bytes leftover after parsing attributes in process `syz.0.396'. [ 186.016355][ T5589] loop0: detected capacity change from 0 to 512 [ 187.179069][ T5597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'. [ 187.230643][ T5589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.407: missing EA_INODE flag [ 187.946418][ T5589] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.407: error while reading EA inode 2 err=-117 [ 187.997578][ T5589] EXT4-fs (loop0): 1 orphan inode deleted [ 188.018387][ T5589] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 188.341047][ T5624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 189.702239][ T5643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 189.954380][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 189.970833][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 190.009763][ T4198] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 190.095846][ T5655] loop3: detected capacity change from 0 to 512 [ 190.344389][ T5655] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.428: missing EA_INODE flag [ 190.438253][ T5655] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.428: error while reading EA inode 2 err=-117 [ 190.489961][ T4198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 190.529819][ T4198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 65535, setting to 64 [ 190.533797][ T5655] EXT4-fs (loop3): 1 orphan inode deleted [ 190.555518][ T5655] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 190.809862][ T4198] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 190.855861][ T4198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.922556][ T4198] usb 5-1: Product: syz [ 190.935676][ T5662] binder: BINDER_SET_CONTEXT_MGR already set [ 190.973572][ T4198] usb 5-1: Manufacturer: syz [ 190.978234][ T4198] usb 5-1: SerialNumber: syz [ 191.014394][ T5662] binder: 5661:5662 ioctl 4018620d 2000000002c0 returned -16 [ 191.045292][ T4198] usb 5-1: config 0 descriptor?? [ 191.059926][ T4235] Bluetooth: hci4: command 0x0406 tx timeout [ 191.066135][ T4235] Bluetooth: hci1: command 0x0406 tx timeout [ 191.090081][ T5645] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.110801][ T4198] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 191.117809][ T4235] Bluetooth: hci0: command 0x0406 tx timeout [ 191.143436][ T4235] Bluetooth: hci2: command 0x0406 tx timeout [ 191.159922][ T4235] Bluetooth: hci3: command 0x0406 tx timeout [ 192.362942][ T5683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 192.690573][ T4198] scsi host1: usb-storage 5-1:0.0 [ 192.733796][ T4198] usb 5-1: USB disconnect, device number 6 [ 192.781436][ T5689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.437'. [ 193.496713][ T5698] loop3: detected capacity change from 0 to 512 [ 193.755503][ T5698] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.440: missing EA_INODE flag [ 193.895693][ T5698] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.440: error while reading EA inode 2 err=-117 [ 194.026690][ T5698] EXT4-fs (loop3): 1 orphan inode deleted [ 194.213045][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.219393][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.248573][ T5698] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 196.349686][ T5724] netlink: 'syz.3.449': attribute type 10 has an invalid length. [ 196.496203][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.007071][ T5724] bond0: (slave team0): Enslaving as an active interface with an up link [ 197.077542][ T5727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'. [ 197.286693][ T4191] ================================================================== [ 197.295123][ T4191] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 197.302965][ T4191] Read of size 1 at addr ffff888027e1e40a by task kworker/u5:2/4191 [ 197.310982][ T4191] [ 197.313358][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 197.320924][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.330996][ T4191] Workqueue: hci4 hci_rx_work [ 197.335762][ T4191] Call Trace: [ 197.339058][ T4191] [ 197.342018][ T4191] dump_stack_lvl+0x188/0x250 [ 197.346719][ T4191] ? show_regs_print_info+0x20/0x20 [ 197.351950][ T4191] ? load_image+0x400/0x400 [ 197.356485][ T4191] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 197.361977][ T4191] ? mutex_lock_io_nested+0x60/0x60 [ 197.367192][ T4191] print_address_description+0x60/0x2d0 [ 197.372746][ T4191] ? hci_le_meta_evt+0x1324/0x3c90 [ 197.377863][ T4191] kasan_report+0xdf/0x130 [ 197.382292][ T4191] ? hci_le_meta_evt+0x1324/0x3c90 [ 197.387515][ T4191] hci_le_meta_evt+0x1324/0x3c90 [ 197.392475][ T4191] ? hci_remote_host_features_evt+0x280/0x280 [ 197.398552][ T4191] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 197.404207][ T4191] ? mark_lock+0x94/0x320 [ 197.408541][ T4191] ? mutex_unlock+0x10/0x10 [ 197.413083][ T4191] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 197.419169][ T4191] ? lock_chain_count+0x20/0x20 [ 197.424055][ T4191] ? __rwlock_init+0x140/0x140 [ 197.428861][ T4191] hci_event_packet+0xe48/0x1370 [ 197.433823][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 197.439055][ T4191] ? rcu_lock_release+0x20/0x20 [ 197.443920][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 197.449134][ T4191] hci_rx_work+0x255/0xa10 [ 197.453568][ T4191] process_one_work+0x85f/0x1010 [ 197.458527][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 197.464179][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 197.469478][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 197.474510][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 197.480064][ T4191] ? wq_worker_running+0x97/0x170 [ 197.485096][ T4191] worker_thread+0xaa6/0x1290 [ 197.489813][ T4191] kthread+0x436/0x520 [ 197.493887][ T4191] ? rcu_lock_release+0x20/0x20 [ 197.498740][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 197.503337][ T4191] ret_from_fork+0x1f/0x30 [ 197.507768][ T4191] [ 197.510785][ T4191] [ 197.513131][ T4191] Allocated by task 5738: [ 197.517450][ T4191] __kasan_kmalloc+0xb5/0xf0 [ 197.522045][ T4191] __alloc_skb+0x22c/0x750 [ 197.526467][ T4191] vhci_write+0xbc/0x450 [ 197.530714][ T4191] vfs_write+0x745/0xd60 [ 197.534954][ T4191] ksys_write+0x152/0x260 [ 197.539287][ T4191] do_syscall_64+0x4c/0xa0 [ 197.543704][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.549608][ T4191] [ 197.551946][ T4191] Last potentially related work creation: [ 197.557653][ T4191] kasan_save_stack+0x35/0x60 [ 197.562356][ T4191] kasan_record_aux_stack+0xb8/0x100 [ 197.567644][ T4191] kvfree_call_rcu+0x105/0x7d0 [ 197.572416][ T4191] neigh_periodic_work+0x407/0xc70 [ 197.577571][ T4191] process_one_work+0x85f/0x1010 [ 197.582524][ T4191] worker_thread+0xaa6/0x1290 [ 197.587212][ T4191] kthread+0x436/0x520 [ 197.591281][ T4191] ret_from_fork+0x1f/0x30 [ 197.595706][ T4191] [ 197.598035][ T4191] The buggy address belongs to the object at ffff888027e1e000 [ 197.598035][ T4191] which belongs to the cache kmalloc-1k of size 1024 [ 197.612096][ T4191] The buggy address is located 10 bytes to the right of [ 197.612096][ T4191] 1024-byte region [ffff888027e1e000, ffff888027e1e400) [ 197.625913][ T4191] The buggy address belongs to the page: [ 197.631586][ T4191] page:ffffea00009f8600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27e18 [ 197.641738][ T4191] head:ffffea00009f8600 order:3 compound_mapcount:0 compound_pincount:0 [ 197.650060][ T4191] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 197.658053][ T4191] raw: 00fff00000010200 ffffea00007fbc00 0000000300000003 ffff888016c41dc0 [ 197.666641][ T4191] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 197.675225][ T4191] page dumped because: kasan: bad access detected [ 197.681633][ T4191] page_owner tracks the page as allocated [ 197.687341][ T4191] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3930, ts 39301400131, free_ts 39274719163 [ 197.705673][ T4191] get_page_from_freelist+0x1bbd/0x1ca0 [ 197.711234][ T4191] __alloc_pages+0x1ee/0x480 [ 197.715829][ T4191] new_slab+0xc0/0x4b0 [ 197.719905][ T4191] ___slab_alloc+0x80a/0xdd0 [ 197.724527][ T4191] __kmalloc+0x1cd/0x330 [ 197.728774][ T4191] tomoyo_init_log+0x19f9/0x1e90 [ 197.733716][ T4191] tomoyo_supervisor+0x38d/0x11f0 [ 197.738738][ T4191] tomoyo_env_perm+0x14e/0x1f0 [ 197.743507][ T4191] tomoyo_find_next_domain+0x1591/0x1a60 [ 197.749190][ T4191] tomoyo_bprm_check_security+0xdd/0x120 [ 197.754836][ T4191] security_bprm_check+0x5e/0x90 [ 197.759789][ T4191] bprm_execve+0xa53/0x1840 [ 197.764335][ T4191] do_execveat_common+0x51e/0x6d0 [ 197.769361][ T4191] __x64_sys_execve+0x8e/0xa0 [ 197.774034][ T4191] do_syscall_64+0x4c/0xa0 [ 197.778479][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.784373][ T4191] page last free stack trace: [ 197.789070][ T4191] free_unref_page_prepare+0x637/0x6c0 [ 197.794534][ T4191] free_unref_page+0x8f/0x2a0 [ 197.799216][ T4191] __unfreeze_partials+0x1a5/0x200 [ 197.804503][ T4191] put_cpu_partial+0x12d/0x190 [ 197.809288][ T4191] qlist_free_all+0x35/0x90 [ 197.813787][ T4191] kasan_quarantine_reduce+0x150/0x160 [ 197.819244][ T4191] __kasan_slab_alloc+0x2f/0xd0 [ 197.824100][ T4191] slab_post_alloc_hook+0x4c/0x380 [ 197.829233][ T4191] kmem_cache_alloc+0x100/0x290 [ 197.834089][ T4191] getname_flags+0xb5/0x500 [ 197.838600][ T4191] do_sys_openat2+0xdd/0x4b0 [ 197.843194][ T4191] __x64_sys_openat+0x135/0x160 [ 197.848055][ T4191] do_syscall_64+0x4c/0xa0 [ 197.852481][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.858384][ T4191] [ 197.860717][ T4191] Memory state around the buggy address: [ 197.866376][ T4191] ffff888027e1e300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 197.874440][ T4191] ffff888027e1e380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 197.882533][ T4191] >ffff888027e1e400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.890595][ T4191] ^ [ 197.894923][ T4191] ffff888027e1e480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.903002][ T4191] ffff888027e1e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 197.911059][ T4191] ================================================================== [ 197.919114][ T4191] Disabling lock debugging due to kernel taint [ 197.925335][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.940238][ T4191] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 197.947485][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:2 Tainted: G B syzkaller #0 [ 197.956447][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.966522][ T4191] Workqueue: hci4 hci_rx_work [ 197.971231][ T4191] Call Trace: [ 197.974533][ T4191] [ 197.977484][ T4191] dump_stack_lvl+0x188/0x250 [ 197.982192][ T4191] ? show_regs_print_info+0x20/0x20 [ 197.987418][ T4191] ? load_image+0x400/0x400 [ 197.991951][ T4191] panic+0x2e5/0x810 [ 197.995877][ T4191] ? bpf_jit_dump+0xd0/0xd0 [ 198.000411][ T4191] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 198.006420][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 198.011294][ T4191] ? hci_le_meta_evt+0x1324/0x3c90 [ 198.016444][ T4191] check_panic_on_warn+0x80/0xa0 [ 198.021413][ T4191] ? hci_le_meta_evt+0x1324/0x3c90 [ 198.026542][ T4191] end_report+0x6d/0xf0 [ 198.030726][ T4191] kasan_report+0x102/0x130 [ 198.035256][ T4191] ? hci_le_meta_evt+0x1324/0x3c90 [ 198.040413][ T4191] hci_le_meta_evt+0x1324/0x3c90 [ 198.045390][ T4191] ? hci_remote_host_features_evt+0x280/0x280 [ 198.051506][ T4191] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 198.057164][ T4191] ? mark_lock+0x94/0x320 [ 198.061518][ T4191] ? mutex_unlock+0x10/0x10 [ 198.066045][ T4191] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 198.072061][ T4191] ? lock_chain_count+0x20/0x20 [ 198.076940][ T4191] ? __rwlock_init+0x140/0x140 [ 198.081730][ T4191] hci_event_packet+0xe48/0x1370 [ 198.086698][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 198.091928][ T4191] ? rcu_lock_release+0x20/0x20 [ 198.096811][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 198.102122][ T4191] hci_rx_work+0x255/0xa10 [ 198.106566][ T4191] process_one_work+0x85f/0x1010 [ 198.111623][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 198.117286][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 198.122603][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 198.127659][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 198.133229][ T4191] ? wq_worker_running+0x97/0x170 [ 198.138261][ T4191] worker_thread+0xaa6/0x1290 [ 198.142956][ T4191] kthread+0x436/0x520 [ 198.147029][ T4191] ? rcu_lock_release+0x20/0x20 [ 198.151889][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 198.156481][ T4191] ret_from_fork+0x1f/0x30 [ 198.160902][ T4191] [ 198.164226][ T4191] Kernel Offset: disabled [ 198.168594][ T4191] Rebooting in 86400 seconds..