last executing test programs: 21.273285222s ago: executing program 1 (id=591): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) lstat(0x0, &(0x7f0000001000)) read(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r2 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x22}}}}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) 20.301738119s ago: executing program 1 (id=594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x4000423) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x2, 0x7f03) sendfile(r0, r1, 0x0, 0x7ffff004) 18.608840634s ago: executing program 1 (id=597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='qgroup_update_counters\x00', r6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x40}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f0000000100)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 16.132086862s ago: executing program 4 (id=606): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) 14.431753407s ago: executing program 4 (id=608): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x0, 0x0}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f00000000c0), 0x18) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x1) userfaultfd(0x400) r3 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x41c3, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x3, 0x0}) io_uring_enter(r4, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) 14.419235558s ago: executing program 1 (id=609): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 12.651353119s ago: executing program 4 (id=610): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406441, &(0x7f0000000280)={0x34, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x1a52) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) 11.619986003s ago: executing program 1 (id=611): socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x3ff, 0x40024, 0x1, 0x9c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xf}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r5, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) 11.29245715s ago: executing program 4 (id=614): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009700000095000000"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff03076003008cb89e08f086dd", 0x0, 0xd8a8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="138cdfbdd695c93e0f1fb1e3a398fbd7f424a8e2133b13eed1e3b1cd"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600040000014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5f98fc9afa89a4f60852df"], 0x0) 9.810944408s ago: executing program 3 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10916af4, @empty, 0xa}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xad96, 0x24, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x5d) epoll_create1(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 9.771753601s ago: executing program 1 (id=617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) 9.770934181s ago: executing program 4 (id=618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x60) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x41884) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 9.53006122s ago: executing program 0 (id=619): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) 9.441762547s ago: executing program 2 (id=620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) sendmsg$unix(r1, 0x0, 0x4000) recvmsg$unix(r0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0xa400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x8, 0xfffffffc, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x5, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400009, 0x1]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) 8.200456765s ago: executing program 3 (id=621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 8.199824106s ago: executing program 0 (id=622): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 8.000720652s ago: executing program 2 (id=623): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x140}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00@\x00\x00\x00\x00'], 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f00000005c0)) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 7.196900616s ago: executing program 3 (id=624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406441, &(0x7f0000000280)={0x34, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) sendfile(r3, r3, 0x0, 0x200000) 6.916408608s ago: executing program 0 (id=625): dup(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 6.147804679s ago: executing program 3 (id=626): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) read$FUSE(r0, &(0x7f00000064c0)={0x2020}, 0x2020) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usbip_server_init(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c800}, 0x80c4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.043860688s ago: executing program 2 (id=627): socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x3ff, 0x40024, 0x1, 0x9c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xf}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r5, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 5.180483286s ago: executing program 0 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) getdents64(r0, 0x0, 0x0) 4.892462889s ago: executing program 0 (id=629): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000970000009500000000000000743a082b44795f3b3405"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff03076003008cb89e08f086dd", 0x0, 0xd8a8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="138cdfbdd695c93e0f1fb1e3a398fbd7f424a8e2133b13eed1e3b1cd"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600040000014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5f98fc9afa89a4f60852df"], 0x0) 3.664489147s ago: executing program 0 (id=630): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x8080000, 0x8, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x4, 0x0, '\x00', 0x2}, {0x0, 0x4}, {0x81, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0xff}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x8}, {0xfe, 0x0, 0x9}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x0, 0x4}, {0x0, 0x1, 0xf3, '\x00', 0x20}, {0x9}, {0x1c, 0x8c, 0x0, '\x00', 0x1}, {0xfe, 0xfc, 0x0, '\x00', 0x9}, {0xfc, 0x0, 0x5, '\x00', 0xfd}, {0xfc, 0x0, 0x0, '\x00', 0xea}, {0x0, 0x1, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80, '\x00', 0x1}]}}) 3.664235927s ago: executing program 2 (id=631): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x1e, 0x4, 0x0) sendmmsg(r1, 0x0, 0x0, 0x9200000000001800) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.620229661s ago: executing program 3 (id=632): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) rmdir(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x2, 0xfffffffffffffffe}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r3, 0x0, 0x20, 0xce2) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f8ffb3ffff00000000000000019500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000540)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x7}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000, 0xfffd, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x8}}}}}}, 0x32) epoll_create(0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0003}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) 1.239477111s ago: executing program 2 (id=633): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 105.239812ms ago: executing program 4 (id=634): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 16.261179ms ago: executing program 2 (id=635): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x2f, 0x0, 0x0, 0x0, 0x0, {0x2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8, '\x00', r5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b3a}, &(0x7f00000002c0), &(0x7f0000000000)) 0s ago: executing program 3 (id=636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000008c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 49.835167][ T4170] cgroup: Unknown subsys name 'net' [ 49.943777][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.382074][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.272219][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 53.388697][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 53.417781][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 53.446087][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.498551][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.507108][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.515427][ T4189] device bridge_slave_0 entered promiscuous mode [ 53.553169][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.560630][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.568608][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.623668][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.630855][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.639484][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.667549][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.674670][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.683366][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.693073][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.729432][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.746135][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.753204][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.761571][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.771417][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.778558][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.786433][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.795748][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.820831][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 53.838976][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.862278][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.869486][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.877719][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.886079][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.893148][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.901241][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.919639][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.931047][ T4189] team0: Port device team_slave_0 added [ 53.964130][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.975174][ T4189] team0: Port device team_slave_1 added [ 53.988583][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.000384][ T4182] team0: Port device team_slave_0 added [ 54.025881][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.037020][ T4182] team0: Port device team_slave_1 added [ 54.082955][ T4183] team0: Port device team_slave_0 added [ 54.090378][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.097532][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.123621][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.144477][ T4184] team0: Port device team_slave_0 added [ 54.161306][ T4183] team0: Port device team_slave_1 added [ 54.167850][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.174811][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.200801][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.220090][ T4184] team0: Port device team_slave_1 added [ 54.226551][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.233499][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.260134][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.281921][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.289229][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.297298][ T4181] device bridge_slave_0 entered promiscuous mode [ 54.313610][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.320677][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.346712][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.371859][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.378956][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.404983][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.416094][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.423126][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.431812][ T4181] device bridge_slave_1 entered promiscuous mode [ 54.451531][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.458750][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.485664][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.509462][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.516610][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.542788][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.571432][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.578778][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.604853][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.630293][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.650308][ T4189] device hsr_slave_0 entered promiscuous mode [ 54.657343][ T4189] device hsr_slave_1 entered promiscuous mode [ 54.675926][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.708197][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.714927][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.721607][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.729804][ T4184] Cannot create hsr debugfs directory [ 54.742935][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.750324][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.756940][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.764521][ T4182] Cannot create hsr debugfs directory [ 54.797047][ T4181] team0: Port device team_slave_0 added [ 54.806898][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.813536][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.820331][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.828087][ T4183] Cannot create hsr debugfs directory [ 54.855999][ T4181] team0: Port device team_slave_1 added [ 54.933931][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.941181][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.968473][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.983212][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.990292][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.017352][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 55.020994][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.024097][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 55.046518][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 55.085215][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 55.091358][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 55.129972][ T4181] device hsr_slave_0 entered promiscuous mode [ 55.137159][ T4181] device hsr_slave_1 entered promiscuous mode [ 55.143683][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.151576][ T4181] Cannot create hsr debugfs directory [ 55.334426][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.350802][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.359958][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.370567][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.414082][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.423378][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.437250][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.456731][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.522945][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.551583][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.563638][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.573418][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.597363][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.612310][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.628491][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.659576][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.726275][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.751318][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.767493][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.779837][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.790976][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.825390][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.840936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.851158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.862897][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.898383][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.909013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.919154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.928412][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.935706][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.944104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.954051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.962896][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.970075][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.978533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.989709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.013889][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.031342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.040322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.048914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.057077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.068314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.086521][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.107554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.117957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.126814][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.133871][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.142044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.152239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.161582][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.168856][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.176734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.186283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.194281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.204834][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.219474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.230032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.241925][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.261982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.270328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.279386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.289291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.298103][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.305208][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.314678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.323781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.332615][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.340148][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.348001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.358060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.367542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.375684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.402338][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.413682][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.431050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.440727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.450369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.460124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.469039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.478521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.487646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.496871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.506213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.514397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.524171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.532808][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.539908][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.549611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.558497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.566937][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.573977][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.581870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.590064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.603419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.612013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.621446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.629968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.640690][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.667882][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.677960][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.694486][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.717934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.736578][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.776486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.794095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.804125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.818947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.828894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.838140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.848330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.857032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.865514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.874072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.882984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.892087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.901438][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.921685][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.942290][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.951240][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.967494][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.986790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.001029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.011488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.021231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.050004][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.064087][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.074160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.086549][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 57.099251][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 57.106222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.114718][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.121867][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.130126][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 57.134048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.147971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.156586][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 57.157499][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.162867][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 57.169723][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.185371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.194040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.202605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.212109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.222485][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.250908][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.266338][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.307118][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.321321][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.339386][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.356746][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.376574][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.385794][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.394162][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.402883][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.411412][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.420201][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.428785][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.437559][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.452317][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.463337][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.507821][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.524311][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.551086][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.576447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.591425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.600696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.612693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.633940][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.643047][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.655596][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.663626][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.679231][ T4189] device veth0_vlan entered promiscuous mode [ 57.690596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.702563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.738423][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.750866][ T4189] device veth1_vlan entered promiscuous mode [ 57.776212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.784475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.795653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.804741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.814819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.828364][ T4184] device veth0_vlan entered promiscuous mode [ 57.855532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.865111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.873112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.882829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.891113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.911340][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.927971][ T4184] device veth1_vlan entered promiscuous mode [ 57.944789][ T4189] device veth0_macvtap entered promiscuous mode [ 57.953869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.970582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.981035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.990221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.033320][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.042568][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.059467][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.078256][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.090787][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.102407][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.111327][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.123355][ T4189] device veth1_macvtap entered promiscuous mode [ 58.132008][ T4181] device veth0_vlan entered promiscuous mode [ 58.141288][ T4183] device veth0_vlan entered promiscuous mode [ 58.150581][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.159055][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.167939][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.177876][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.186206][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.202570][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.211632][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.231397][ T4181] device veth1_vlan entered promiscuous mode [ 58.247472][ T4183] device veth1_vlan entered promiscuous mode [ 58.257383][ T4184] device veth0_macvtap entered promiscuous mode [ 58.277694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.287857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.297169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.306329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.314433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.323820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.347614][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.369461][ T4184] device veth1_macvtap entered promiscuous mode [ 58.386769][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.396543][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.405249][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.413776][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.426820][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.434427][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.444452][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.468549][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.479398][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.491142][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.502648][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.513193][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.523558][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.532643][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.553412][ T4182] device veth0_vlan entered promiscuous mode [ 58.561430][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.570111][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.579484][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.588167][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.604106][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.613287][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.622694][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.631653][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.640438][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.649746][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.659100][ T4183] device veth0_macvtap entered promiscuous mode [ 58.667993][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.679359][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.691370][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.706005][ T4181] device veth0_macvtap entered promiscuous mode [ 58.716309][ T4183] device veth1_macvtap entered promiscuous mode [ 58.724149][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.733030][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.743696][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.753039][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.778223][ T4182] device veth1_vlan entered promiscuous mode [ 58.787773][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.798914][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.808219][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.817494][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.828429][ T4181] device veth1_macvtap entered promiscuous mode [ 58.869072][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.879832][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.890239][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.900911][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.912686][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.945289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.953862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.965189][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.978879][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.989011][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.999820][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.010467][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.021191][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.032369][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.059763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.082274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.093865][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.104833][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.115277][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.125990][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.137564][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.148392][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.157672][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.166239][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 59.167642][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.172445][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 59.181626][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.193330][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 59.197949][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.212784][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.222839][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.233616][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.244180][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.247183][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 59.258140][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.261274][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 59.274347][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.289760][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.298985][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.309025][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.318946][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.360015][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.373068][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.382318][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.391328][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.441361][ T4182] device veth0_macvtap entered promiscuous mode [ 59.449973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.459196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.468283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.497913][ T4182] device veth1_macvtap entered promiscuous mode [ 59.508673][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.517097][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.542786][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.554065][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.563969][ T396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.574614][ T396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.607017][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.638016][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.649718][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.660017][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.666371][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.678036][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.688518][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.698374][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.709110][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.721217][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.731979][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.743617][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.761938][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.774873][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.783749][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.802665][ T396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.814523][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.828245][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.835556][ T396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.838893][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.856096][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.868474][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.879952][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.890244][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.900719][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.911748][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.920260][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.939505][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.941000][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.950847][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.965558][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.969326][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.982769][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.991958][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.003871][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.024694][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.046804][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.061791][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.070737][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.133665][ T396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.142863][ T396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.188152][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.214848][ T396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.254280][ T396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.295883][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 60.305875][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 60.309169][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.313442][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.339397][ T4199] Workqueue: hci3 hci_rx_work [ 60.344107][ T4199] Call Trace: [ 60.347408][ T4199] [ 60.350448][ T4199] dump_stack_lvl+0x168/0x230 [ 60.355158][ T4199] ? show_regs_print_info+0x20/0x20 [ 60.360396][ T4199] ? load_image+0x3b0/0x3b0 [ 60.364945][ T4199] sysfs_create_dir_ns+0x252/0x280 [ 60.370086][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 60.372518][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.375135][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 60.375164][ T4199] ? le_conn_complete_evt+0xcbc/0x1590 [ 60.375184][ T4199] ? hci_event_packet+0xe05/0x12f0 [ 60.375204][ T4199] ? process_one_work+0x863/0x1000 [ 60.375226][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 60.375249][ T4199] kobject_add_internal+0x662/0xd00 [ 60.375277][ T4199] kobject_add+0x152/0x210 [ 60.375311][ T4199] ? kobject_init+0x1d0/0x1d0 [ 60.392482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.393372][ T4199] ? klist_children_get+0x50/0x50 [ 60.393401][ T4199] ? get_device_parent+0x121/0x3f0 [ 60.406954][ T4301] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 60.408824][ T4199] device_add+0x483/0xfb0 [ 60.408867][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 60.421986][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.423175][ T4199] le_conn_complete_evt+0xcbc/0x1590 [ 60.470169][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 60.475311][ T4199] ? __mutex_trylock_common+0x14f/0x250 [ 60.480865][ T4199] hci_le_meta_evt+0x289/0x3b80 [ 60.485724][ T4199] ? hci_event_packet+0x36d/0x12f0 [ 60.490837][ T4199] ? hci_event_packet+0x2e2/0x12f0 [ 60.495973][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 60.501016][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 60.507086][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 60.512807][ T4199] ? mark_lock+0x94/0x320 [ 60.517141][ T4199] ? mutex_unlock+0x10/0x10 [ 60.521657][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 60.527644][ T4199] ? lock_chain_count+0x20/0x20 [ 60.532590][ T4199] ? __rwlock_init+0x140/0x140 [ 60.537394][ T4199] hci_event_packet+0xe05/0x12f0 [ 60.542333][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 60.547541][ T4199] ? rcu_lock_release+0x20/0x20 [ 60.552410][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 60.557610][ T4199] hci_rx_work+0x255/0xa10 [ 60.562042][ T4199] process_one_work+0x863/0x1000 [ 60.567004][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 60.572665][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 60.577970][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 60.583008][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 60.588405][ T4199] ? wq_worker_running+0x97/0x170 [ 60.593452][ T4199] worker_thread+0xaa8/0x12a0 [ 60.598141][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 60.604042][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 60.609259][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 60.614461][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 60.620375][ T4199] kthread+0x436/0x520 [ 60.624447][ T4199] ? rcu_lock_release+0x20/0x20 [ 60.629297][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 60.633888][ T4199] ret_from_fork+0x1f/0x30 [ 60.638319][ T4199] [ 60.649041][ T4199] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.663001][ T4199] Bluetooth: hci3: failed to register connection device [ 60.679658][ T4302] loop0: detected capacity change from 0 to 512 [ 60.691881][ T4301] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 60.735240][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.956643][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.986300][ T4312] tmpfs: Unknown parameter 'grpquota' [ 61.018962][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.056064][ T4302] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 61.090873][ T4302] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 61.113017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.154307][ T4302] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.1: iget: bad i_size value: 12154757448730 [ 61.192324][ T4302] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1: couldn't read orphan inode 13 (err -117) [ 61.246265][ T4242] Bluetooth: hci2: command 0x0419 tx timeout [ 61.254189][ T4242] Bluetooth: hci1: command 0x0419 tx timeout [ 61.282556][ T4242] Bluetooth: hci4: command 0x0419 tx timeout [ 61.289908][ T4302] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 61.337500][ T4242] Bluetooth: hci3: command 0x0419 tx timeout [ 61.355351][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 61.764601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.035585][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.733792][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 62.747471][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 62.757234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.766189][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.775615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.784568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.793569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.805968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.662972][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 65.677380][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.685020][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.699831][ T4342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.822000][ T4356] process 'syz.0.14' launched './file0' with NULL argv: empty string added [ 67.405103][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 67.773050][ T4372] fuse: Bad value for 'fd' [ 71.320243][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.327403][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.425304][ T4398] binder: 4397:4398 ioctl c0306201 0 returned -14 [ 72.472402][ T4398] binder: 4397:4398 ioctl 4018620d 0 returned -22 [ 73.951792][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 74.559632][ T26] audit: type=1326 audit(1756452551.459:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a51cabe9 code=0x7ffc0000 [ 74.661271][ T26] audit: type=1326 audit(1756452551.489:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a51cabe9 code=0x7ffc0000 [ 74.783681][ T26] audit: type=1326 audit(1756452551.489:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f74a51cabe9 code=0x7ffc0000 [ 75.357396][ T26] audit: type=1326 audit(1756452551.489:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a51cabe9 code=0x7ffc0000 [ 75.790423][ T4428] loop0: detected capacity change from 0 to 164 [ 75.902794][ T26] audit: type=1326 audit(1756452551.489:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a51cabe9 code=0x7ffc0000 [ 75.924900][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.078695][ T26] audit: type=1326 audit(1756452551.489:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74a51c9550 code=0x7ffc0000 [ 76.202746][ T26] audit: type=1326 audit(1756452551.489:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f74a51cc417 code=0x7ffc0000 [ 76.225054][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.323779][ T26] audit: type=1326 audit(1756452551.489:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74a51cabe9 code=0x7ffc0000 [ 76.348748][ T26] audit: type=1326 audit(1756452551.489:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f74a51cc417 code=0x7ffc0000 [ 76.426788][ T4443] kvm: emulating exchange as write [ 76.434253][ T26] audit: type=1326 audit(1756452551.489:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74a51c984a code=0x7ffc0000 [ 77.182235][ T4447] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.689269][ T7] cfg80211: failed to load regulatory.db [ 79.427229][ T4460] loop1: detected capacity change from 0 to 128 [ 80.714022][ T4460] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.725452][ T4460] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.773112][ T4481] loop1: detected capacity change from 0 to 1024 [ 82.143549][ T4489] xt_limit: Overflow, try lower: 687865856/40 [ 82.156370][ T4489] hfsplus: xattr searching failed [ 82.162577][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 82.162591][ T26] audit: type=1800 audit(1756452559.059:21): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.44" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=2 res=0 errno=0 [ 82.211230][ T4489] hfsplus: xattr searching failed [ 82.217771][ T4490] hfsplus: catalog searching failed [ 82.778619][ T154] hfsplus: b-tree write err: -5, ino 3 [ 85.191807][ T4518] fuse: Bad value for 'fd' [ 85.729807][ T4521] loop1: detected capacity change from 0 to 512 [ 85.964832][ T4521] EXT4-fs (loop1): Unrecognized mount option "defcontext=staff_u" or missing value [ 89.143459][ T4563] fuse: Bad value for 'fd' [ 89.368564][ T4570] loop2: detected capacity change from 0 to 1024 [ 89.436049][ T4570] ======================================================= [ 89.436049][ T4570] WARNING: The mand mount option has been deprecated and [ 89.436049][ T4570] and is ignored by this kernel. Remove the mand [ 89.436049][ T4570] option from the mount to silence this warning. [ 89.436049][ T4570] ======================================================= [ 89.749817][ T4570] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.059687][ T4587] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 91.066534][ T4587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.119243][ T4587] vhci_hcd vhci_hcd.0: Device attached [ 91.395070][ T4227] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 92.878849][ T4605] 9pnet: Insufficient options for proto=fd [ 92.962489][ T4605] loop0: detected capacity change from 0 to 128 [ 93.131278][ T4605] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 93.523723][ T4609] loop1: detected capacity change from 0 to 1024 [ 93.689851][ T4609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.701046][ T4609] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.112817][ T4619] loop1: detected capacity change from 0 to 512 [ 94.157876][ T4619] EXT4-fs (loop1): Unrecognized mount option "defcontext=staff_u" or missing value [ 94.199119][ T4588] vhci_hcd: connection reset by peer [ 94.234055][ T1455] vhci_hcd: stop threads [ 94.255846][ T1455] vhci_hcd: release socket [ 94.262159][ T4623] loop2: detected capacity change from 0 to 1024 [ 94.280812][ T1455] vhci_hcd: disconnect device [ 96.517550][ T4227] vhci_hcd: vhci_device speed not set [ 97.268291][ T4546] udevd[4546]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 97.666585][ T4652] 9pnet: Insufficient options for proto=fd [ 97.722529][ T4652] 9pnet: Insufficient options for proto=fd [ 98.482767][ T4652] loop2: detected capacity change from 0 to 128 [ 98.565787][ T4652] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 98.796846][ T4664] loop1: detected capacity change from 0 to 1024 [ 99.216037][ T4664] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.226964][ T4664] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.235079][ T4669] loop4: detected capacity change from 0 to 1024 [ 99.462148][ T4669] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.861896][ T4683] loop1: detected capacity change from 0 to 1024 [ 104.365204][ T4243] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.614964][ T4243] usb 5-1: Using ep0 maxpacket: 16 [ 104.735220][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.780492][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.796931][ T4243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.824422][ T4243] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.833949][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.991746][ T4718] loop1: detected capacity change from 0 to 1024 [ 105.376738][ T4243] usb 5-1: config 0 descriptor?? [ 105.505915][ T4718] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.516710][ T4718] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.748539][ T4729] loop3: detected capacity change from 0 to 1024 [ 108.494404][ T4649] udevd[4649]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 108.535078][ T4243] usbhid 5-1:0.0: can't add hid device: -71 [ 108.544357][ T4243] usbhid: probe of 5-1:0.0 failed with error -71 [ 108.677461][ T4649] udevd[4649]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 108.873601][ T4243] usb 5-1: USB disconnect, device number 2 [ 112.082190][ T4227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.358107][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 112.975682][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.016179][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.098552][ T4227] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.114344][ T4227] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.123604][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.245730][ T4227] usb 5-1: config 0 descriptor?? [ 114.515296][ T26] audit: type=1804 audit(1756452591.409:22): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.129" name="/newroot/21/file1" dev="fuse" ino=1 res=1 errno=0 [ 114.593496][ T26] audit: type=1800 audit(1756452591.419:23): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="/" dev="fuse" ino=1 res=0 errno=0 [ 114.647732][ T26] audit: type=1804 audit(1756452591.419:24): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.129" name="/newroot/21/file1" dev="fuse" ino=1 res=1 errno=0 [ 114.671368][ T4227] usbhid 5-1:0.0: can't add hid device: -71 [ 114.681548][ T4227] usbhid: probe of 5-1:0.0 failed with error -71 [ 114.715757][ T4227] usb 5-1: USB disconnect, device number 3 [ 114.737584][ T26] audit: type=1800 audit(1756452591.419:25): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="/" dev="fuse" ino=1 res=0 errno=0 [ 114.940013][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.249037][ T4817] loop4: detected capacity change from 0 to 1024 [ 115.335021][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 117.446014][ T7] usb 2-1: config 0 has no interfaces? [ 117.502992][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 118.177784][ T7] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 118.335974][ T7] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 118.385962][ T7] usb 2-1: config 0 descriptor?? [ 118.414261][ T7] usb 2-1: can't set config #0, error -71 [ 118.465360][ T7] usb 2-1: USB disconnect, device number 2 [ 119.646746][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.095154][ T7] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 120.137124][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.237272][ T7] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 120.254666][ T7] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 120.315041][ T4188] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.366745][ T7] usb 2-1: Manufacturer: syz [ 120.451550][ T7] usb 2-1: config 0 descriptor?? [ 120.584953][ T4188] usb 1-1: Using ep0 maxpacket: 16 [ 120.655047][ T7] rc_core: IR keymap rc-hauppauge not found [ 120.661044][ T7] Registered IR keymap rc-empty [ 120.705315][ T4188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.727689][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 120.761687][ T4188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.811659][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 120.825075][ T4188] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.860651][ T4188] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.871610][ T4188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.888633][ T7] usb 2-1: USB disconnect, device number 3 [ 120.947287][ T4188] usb 1-1: config 0 descriptor?? [ 121.229558][ T4860] loop4: detected capacity change from 0 to 1024 [ 121.379493][ T4860] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.945052][ T4188] usbhid 1-1:0.0: can't add hid device: -71 [ 123.951089][ T4188] usbhid: probe of 1-1:0.0 failed with error -71 [ 123.972303][ T4188] usb 1-1: USB disconnect, device number 2 [ 128.075051][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.324955][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 128.438670][ T4913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.163'. [ 128.455446][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.554109][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.575841][ T4916] loop4: detected capacity change from 0 to 1024 [ 128.592949][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.731805][ T4227] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.228061][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.592808][ T4227] usb 4-1: config 0 descriptor?? [ 130.705021][ T4227] usbhid 4-1:0.0: can't add hid device: -71 [ 130.711061][ T4227] usbhid: probe of 4-1:0.0 failed with error -71 [ 130.720676][ T4227] usb 4-1: USB disconnect, device number 2 [ 132.979426][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.985829][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.499335][ T4949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.174'. [ 134.857016][ T4958] 9pnet: Insufficient options for proto=fd [ 137.020433][ T4984] xt_limit: Overflow, try lower: 687865856/40 [ 137.408902][ T4991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'. [ 138.471893][ T5004] 9pnet: Insufficient options for proto=fd [ 140.267083][ T5022] xt_limit: Overflow, try lower: 687865856/40 [ 141.933535][ T5045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 141.952917][ T5047] 9pnet: Insufficient options for proto=fd [ 142.043424][ T5049] capability: warning: `syz.4.202' uses deprecated v2 capabilities in a way that may be insecure [ 143.397947][ T5049] sctp: failed to load transform for md5: -2 [ 144.235664][ T5070] fuse: Bad value for 'group_id' [ 144.585689][ T5072] xt_limit: Overflow, try lower: 687865856/40 [ 144.656461][ T150] block nbd1: Attempted send on invalid socket [ 144.663802][ T150] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.245342][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.765148][ T4188] Bluetooth: hci2: command 0x0401 tx timeout [ 146.925386][ T5109] fuse: Bad value for 'group_id' [ 147.828666][ T5089] bond0: (slave rose0): Enslaving as an active interface with an up link [ 147.871354][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 148.932633][ T5141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 151.926949][ T5169] fuse: Bad value for 'group_id' [ 152.765741][ T5191] binder: 5179:5191 ioctl c0306201 0 returned -14 [ 152.794085][ T5194] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.945373][ T5210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 156.383718][ T5216] sched: RT throttling activated [ 161.335837][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.353047][ T5300] misc userio: Invalid payload size [ 161.381603][ T5300] misc userio: No port type given on /dev/userio [ 161.645002][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 161.765173][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.776775][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.786808][ T7] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.796105][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.828465][ T7] usb 4-1: config 0 descriptor?? [ 162.966395][ T7] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 164.373623][ T5322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.264'. [ 165.565647][ T5334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.013274][ T1111] usb 4-1: USB disconnect, device number 3 [ 170.274960][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 171.455320][ T5380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 173.004676][ T5389] syz.2.280 (5389) used greatest stack depth: 20832 bytes left [ 173.030954][ T5412] xt_limit: Overflow, try lower: 687865856/40 [ 175.125168][ T4784] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 175.374935][ T4784] usb 3-1: Using ep0 maxpacket: 8 [ 175.392031][ T5434] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.624363][ T4784] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.635202][ T4784] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.645400][ T4784] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.655600][ T4784] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.668950][ T4784] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.678304][ T4784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.592175][ T5440] 9pnet: Could not find request transport: fd0x0000000000000003 [ 176.605335][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 176.611475][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 176.635183][ T4784] usb 3-1: GET_CAPABILITIES returned 0 [ 176.635411][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 176.640980][ T4784] usbtmc 3-1:16.0: can't read capabilities [ 176.653246][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 176.675545][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 176.849373][ T4784] usb 3-1: USB disconnect, device number 2 [ 177.000914][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.297'. [ 178.653134][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 179.246190][ T4198] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 180.143136][ T5499] xt_limit: Overflow, try lower: 687865856/40 [ 180.302658][ T5501] fuse: Unknown parameter 'grou00000000000000000000' [ 180.875126][ T5508] syz.3.314 uses obsolete (PF_INET,SOCK_PACKET) [ 180.922516][ T26] audit: type=1326 audit(1756452657.819:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 181.025503][ T26] audit: type=1326 audit(1756452657.889:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 181.402441][ T26] audit: type=1326 audit(1756452657.889:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 181.734974][ T26] audit: type=1326 audit(1756452657.889:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 181.848239][ T26] audit: type=1326 audit(1756452657.889:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 181.934970][ T26] audit: type=1326 audit(1756452657.889:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 181.991931][ T26] audit: type=1326 audit(1756452657.889:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 182.079913][ T26] audit: type=1326 audit(1756452657.889:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 182.216386][ T26] audit: type=1326 audit(1756452657.889:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 182.390117][ T26] audit: type=1326 audit(1756452657.889:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 183.591394][ T4243] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 183.632585][ T4243] Bluetooth: hci2: Injecting HCI hardware error event [ 183.687994][ T4198] Bluetooth: hci2: hardware error 0x00 [ 184.051426][ T5532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 185.230792][ T5542] fuse: Unknown parameter 'grou00000000000000000000' [ 186.194661][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 186.204472][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 186.212042][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.222157][ T4199] Workqueue: hci0 hci_rx_work [ 186.226851][ T4199] Call Trace: [ 186.230152][ T4199] [ 186.233089][ T4199] dump_stack_lvl+0x168/0x230 [ 186.237795][ T4199] ? show_regs_print_info+0x20/0x20 [ 186.242985][ T4199] ? load_image+0x3b0/0x3b0 [ 186.247489][ T4199] sysfs_create_dir_ns+0x252/0x280 [ 186.252629][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 186.257667][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 186.262349][ T4199] ? le_conn_complete_evt+0xcbc/0x1590 [ 186.267816][ T4199] ? hci_event_packet+0xe05/0x12f0 [ 186.272945][ T4199] ? process_one_work+0x863/0x1000 [ 186.278066][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 186.283271][ T4199] kobject_add_internal+0x662/0xd00 [ 186.288473][ T4199] kobject_add+0x152/0x210 [ 186.292888][ T4199] ? kobject_init+0x1d0/0x1d0 [ 186.297587][ T4199] ? klist_children_get+0x50/0x50 [ 186.302618][ T4199] ? get_device_parent+0x121/0x3f0 [ 186.307731][ T4199] device_add+0x483/0xfb0 [ 186.312063][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 186.317021][ T4199] le_conn_complete_evt+0xcbc/0x1590 [ 186.322305][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 186.327434][ T4199] ? __mutex_trylock_common+0x14f/0x250 [ 186.333016][ T4199] hci_le_meta_evt+0x289/0x3b80 [ 186.337988][ T4199] ? hci_event_packet+0x36d/0x12f0 [ 186.343107][ T4199] ? hci_event_packet+0x2e2/0x12f0 [ 186.348220][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 186.353399][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 186.359475][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 186.365125][ T4199] ? mark_lock+0x94/0x320 [ 186.369461][ T4199] ? mutex_unlock+0x10/0x10 [ 186.373965][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 186.379943][ T4199] ? lock_chain_count+0x20/0x20 [ 186.384784][ T4199] ? __rwlock_init+0x140/0x140 [ 186.389540][ T4199] hci_event_packet+0xe05/0x12f0 [ 186.394490][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 186.399699][ T4199] ? rcu_lock_release+0x20/0x20 [ 186.404575][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 186.409781][ T4199] hci_rx_work+0x255/0xa10 [ 186.414212][ T4199] process_one_work+0x863/0x1000 [ 186.419149][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 186.424787][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 186.430070][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 186.435090][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 186.440456][ T4199] ? wq_worker_running+0x97/0x170 [ 186.445471][ T4199] worker_thread+0xaa8/0x12a0 [ 186.450138][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 186.456043][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 186.461263][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 186.466455][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 186.472346][ T4199] kthread+0x436/0x520 [ 186.476409][ T4199] ? rcu_lock_release+0x20/0x20 [ 186.481251][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 186.485842][ T4199] ret_from_fork+0x1f/0x30 [ 186.490284][ T4199] [ 186.500295][ T4199] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 186.513972][ T4199] Bluetooth: hci0: failed to register connection device [ 186.637390][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 186.637406][ T26] audit: type=1326 audit(1756452663.539:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5547 comm="syz.0.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a51cabe9 code=0x0 [ 186.644946][ T4188] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 187.795198][ T4188] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 187.804285][ T4188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.957694][ T4188] usb 4-1: Product: syz [ 187.961909][ T4188] usb 4-1: Manufacturer: syz [ 188.005286][ T4188] usb 4-1: SerialNumber: syz [ 188.043607][ T4188] usb 4-1: config 0 descriptor?? [ 188.320589][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 188.392977][ T5549] device bond_slave_0 entered promiscuous mode [ 188.399414][ T5549] device bond_slave_1 entered promiscuous mode [ 188.446636][ T5549] device macvtap1 entered promiscuous mode [ 188.478439][ T5549] device bond0 entered promiscuous mode [ 188.493919][ T5549] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 188.558171][ T5566] device bond0 left promiscuous mode [ 188.607494][ T5566] device bond_slave_0 left promiscuous mode [ 188.613473][ T5566] device bond_slave_1 left promiscuous mode [ 190.756608][ T4188] cx82310_eth: probe of 4-1:0.0 failed with error -22 [ 190.837060][ T4188] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 190.857735][ T4188] usb 4-1: USB disconnect, device number 4 [ 191.338912][ T5583] fuse: Unknown parameter 'grou00000000000000000000' [ 191.402637][ T5587] xt_limit: Overflow, try lower: 687865856/40 [ 193.067499][ T5601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'. [ 194.124962][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 194.200531][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209612][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.415443][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 196.557378][ T5624] 9pnet: Insufficient options for proto=fd [ 196.610497][ T5628] fuse: Unknown parameter 'group_i00000000000000000000' [ 200.122358][ T5668] xt_limit: Overflow, try lower: 687865856/40 [ 201.031412][ T5675] 9pnet: Insufficient options for proto=fd [ 201.114743][ T5678] fuse: Unknown parameter 'group_i00000000000000000000' [ 203.920406][ T5715] fuse: Unknown parameter 'group_i00000000000000000000' [ 204.831160][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.009176][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.054555][ T5729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.377'. [ 205.064177][ T4241] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.121896][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 205.134074][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 205.290820][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 205.314675][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 205.326408][ T4241] usb 4-1: Using ep0 maxpacket: 8 [ 205.427019][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 205.436238][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 205.471314][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 205.482734][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 205.490753][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.505280][ T4241] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.513863][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 205.514607][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.548349][ T4241] usb 4-1: config 0 descriptor?? [ 205.565609][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 205.631862][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 205.653209][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 205.717851][ T5723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.756320][ T5723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.775066][ T5734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.376'. [ 205.811074][ T4241] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 206.096680][ T4262] usb 4-1: USB disconnect, device number 5 [ 206.917893][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 206.995594][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.166867][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.177015][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.247072][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.257473][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.407026][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.417369][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.427537][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.505382][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 208.564960][ T4188] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 208.815701][ T4188] usb 1-1: Using ep0 maxpacket: 32 [ 208.938201][ T4188] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 209.959139][ T4188] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 210.181750][ T4188] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 210.214943][ T5774] 9pnet_virtio: no channels available for device syz [ 210.647503][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 210.861233][ T4188] usb 1-1: Product: syz [ 210.865559][ T4188] usb 1-1: Manufacturer: syz [ 210.870760][ T4188] usb 1-1: SerialNumber: syz [ 210.892042][ T4188] usb 1-1: config 0 descriptor?? [ 210.915213][ T5751] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.134377][ T4188] usb 1-1: USB disconnect, device number 3 [ 211.763166][ T5798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 214.267793][ T5829] netlink: 224 bytes leftover after parsing attributes in process `syz.3.410'. [ 214.955478][ T4243] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 215.196038][ T4243] usb 5-1: Using ep0 maxpacket: 8 [ 215.335221][ T4243] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 215.353071][ T4243] usb 5-1: config 0 has no interface number 0 [ 215.382872][ T4243] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 215.465113][ T4243] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 215.534397][ T4243] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.818060][ T4243] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 215.860356][ T4243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.886723][ T4243] usb 5-1: Product: syz [ 215.894478][ T4243] usb 5-1: Manufacturer: syz [ 215.957665][ T5846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.412'. [ 216.113297][ T4243] usb 5-1: SerialNumber: syz [ 216.143193][ T4243] usb 5-1: config 0 descriptor?? [ 216.176493][ T4243] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 218.504178][ T4243] usb 5-1: USB disconnect, device number 4 [ 218.849561][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.895951][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 222.014262][ T5913] fuse: Bad value for 'user_id' [ 224.163418][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'. [ 227.557105][ T5960] fuse: Bad value for 'user_id' [ 228.161496][ T5971] xt_limit: Overflow, try lower: 687865856/40 [ 231.946868][ T6001] mmap: syz.2.459 (6001) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 232.259801][ T6010] fuse: Bad value for 'fd' [ 236.080120][ T6062] fuse: Bad value for 'fd' [ 236.133387][ T6064] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.166502][ T6065] xt_limit: Overflow, try lower: 687865856/40 [ 241.126428][ T6105] fuse: Bad value for 'fd' [ 241.392800][ T6116] fuse: Unknown parameter 'grou00000000000000000000' [ 242.768078][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 243.792573][ T6139] netlink: 'syz.2.497': attribute type 10 has an invalid length. [ 244.771412][ T6155] fuse: Unknown parameter 'grou00000000000000000000' [ 244.971106][ T6162] xt_limit: Overflow, try lower: 687865856/40 [ 249.259782][ T6207] fuse: Unknown parameter 'grou00000000000000000000' [ 252.220626][ T6226] Process accounting resumed [ 253.124505][ T6234] xt_limit: Overflow, try lower: 687865856/40 [ 255.636958][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643394][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.439093][ T26] audit: type=1326 audit(1756452734.339:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 257.664172][ T26] audit: type=1326 audit(1756452734.419:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 257.744984][ T26] audit: type=1326 audit(1756452734.419:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 257.778440][ T26] audit: type=1326 audit(1756452734.419:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7facb5e9ebe9 code=0x7ffc0000 [ 257.806516][ T26] audit: type=1326 audit(1756452734.519:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facb5e3ade9 code=0x7ffc0000 [ 257.829773][ T26] audit: type=1326 audit(1756452734.519:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facb5e3ade9 code=0x7ffc0000 [ 257.959498][ T26] audit: type=1326 audit(1756452734.519:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facb5e3ade9 code=0x7ffc0000 [ 258.942866][ T26] audit: type=1326 audit(1756452734.519:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facb5e3ade9 code=0x7ffc0000 [ 258.965520][ T26] audit: type=1326 audit(1756452734.519:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facb5e3ade9 code=0x7ffc0000 [ 258.992636][ T26] audit: type=1326 audit(1756452734.519:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facb5e3ade9 code=0x7ffc0000 [ 260.638184][ T6286] device syzkaller0 entered promiscuous mode [ 262.583077][ T6311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 263.400262][ T6318] 9pnet_virtio: no channels available for device syz [ 267.042976][ T6359] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.027066][ T6423] 9pnet_virtio: no channels available for device syz [ 276.562756][ T150] block nbd0: Attempted send on invalid socket [ 276.569050][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.581785][ T263] block nbd0: Attempted send on invalid socket [ 276.588099][ T263] blk_update_request: I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.599499][ T6488] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 276.768750][ T150] block nbd0: Attempted send on invalid socket [ 276.775040][ T150] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.786288][ T6488] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 276.798028][ T150] block nbd0: Attempted send on invalid socket [ 276.804447][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.816225][ T263] block nbd0: Attempted send on invalid socket [ 276.822470][ T263] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.834099][ T6488] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 277.178252][ T6491] device syzkaller1 entered promiscuous mode [ 277.186138][ T6491] program syz.3.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.196813][ T6491] nfs: Unknown parameter 'ntext' [ 277.246591][ T263] block nbd0: Attempted send on invalid socket [ 277.252853][ T263] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.359563][ T6488] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 277.375822][ T263] block nbd0: Attempted send on invalid socket [ 277.385044][ T263] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.449806][ T150] block nbd0: Attempted send on invalid socket [ 277.456040][ T150] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.480536][ T6488] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 277.499828][ T150] block nbd0: Attempted send on invalid socket [ 277.506184][ T150] blk_update_request: I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.517361][ T6488] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 277.590074][ T263] block nbd0: Attempted send on invalid socket [ 277.596701][ T263] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.609751][ T6488] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 277.674301][ T6488] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 277.699886][ T6488] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 278.675416][ T6512] Zero length message leads to an empty skb [ 281.890292][ T6542] block nbd3: shutting down sockets [ 285.416702][ T6576] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 293.707785][ T6657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 293.714436][ T6657] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.722903][ T6657] vhci_hcd vhci_hcd.0: Device attached [ 293.794304][ T6660] vhci_hcd: connection closed [ 293.796789][ T4459] vhci_hcd: stop threads [ 293.862303][ T4459] vhci_hcd: release socket [ 293.863431][ T4459] vhci_hcd: disconnect device [ 298.976265][ T6699] ------------[ cut here ]------------ [ 298.998625][ T6699] WARNING: CPU: 1 PID: 6699 at fs/inode.c:389 inc_nlink+0x11d/0x130 [ 299.023268][ T6699] Modules linked in: [ 299.043851][ T6699] CPU: 1 PID: 6699 Comm: syz.4.634 Not tainted syzkaller #0 [ 299.080230][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.114156][ T6699] RIP: 0010:inc_nlink+0x11d/0x130 [ 299.134247][ T6699] Code: 0c ef ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 9d 0c ef ff e9 3f ff ff ff e8 73 a6 aa ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 57 41 [ 299.226879][ T6699] RSP: 0018:ffffc900033cfc28 EFLAGS: 00010283 [ 299.233020][ T6699] RAX: ffffffff81cd243d RBX: ffff88805f920190 RCX: 0000000000080000 [ 299.290995][ T6699] RDX: ffffc9000bf31000 RSI: 000000000000d1d4 RDI: 000000000000d1d5 [ 299.322439][ T6699] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100bf24106 [ 299.360724][ T6699] R10: ffffed100bf24106 R11: 1ffff1100bf24105 R12: dffffc0000000000 [ 299.369624][ T6699] R13: 1ffff1100bf24032 R14: ffff88805f920148 R15: 0000000000000000 [ 299.386493][ T6699] FS: 00007f43fb1bf6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 299.400215][ T6699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.408283][ T6699] CR2: 0000001b32023ffc CR3: 0000000021f5f000 CR4: 00000000003506f0 [ 299.420360][ T6699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.429786][ T6699] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.441817][ T6699] Call Trace: [ 299.447689][ T6699] [ 299.454317][ T6699] v9fs_vfs_mkdir_dotl+0x52c/0x640 [ 299.463703][ T6699] ? v9fs_vfs_symlink_dotl+0x4e0/0x4e0 [ 299.470605][ T6699] ? privileged_wrt_inode_uidgid+0x1ed/0x240 [ 299.480693][ T6699] ? generic_permission+0x292/0x510 [ 299.487264][ T6699] ? inode_permission+0xef/0x480 [ 299.503487][ T6699] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 299.519795][ T6699] ? security_inode_mkdir+0xb3/0x100 [ 299.540186][ T6699] vfs_mkdir+0x387/0x570 [ 299.557676][ T6699] do_mkdirat+0x1d7/0x5a0 [ 299.567574][ T6699] ? vfs_mkdir+0x570/0x570 [ 299.585658][ T6699] ? getname_flags+0x1fe/0x500 [ 299.602246][ T6699] __x64_sys_mkdir+0x6a/0x80 [ 299.607969][ T6699] do_syscall_64+0x4c/0xa0 [ 299.621820][ T6699] ? clear_bhb_loop+0x30/0x80 [ 299.631997][ T6699] ? clear_bhb_loop+0x30/0x80 [ 299.646523][ T6699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.658696][ T6699] RIP: 0033:0x7f43fcf57be9 [ 299.679970][ T6699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.722971][ T6699] RSP: 002b:00007f43fb1bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 299.785298][ T6699] RAX: ffffffffffffffda RBX: 00007f43fd17efa0 RCX: 00007f43fcf57be9 [ 299.823924][ T6699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000004c0 [ 299.860857][ T6699] RBP: 00007f43fcfdae19 R08: 0000000000000000 R09: 0000000000000000 [ 299.880298][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.915723][ T6699] R13: 00007f43fd17f038 R14: 00007f43fd17efa0 R15: 00007fff054a3bc8 [ 299.952927][ T6699] [ 299.963042][ T6699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.970352][ T6699] CPU: 0 PID: 6699 Comm: syz.4.634 Not tainted syzkaller #0 [ 299.977436][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 299.977791][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.986791][ T6711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.630'. [ 299.996655][ T6699] Call Trace: [ 299.996672][ T6699] [ 299.996681][ T6699] dump_stack_lvl+0x168/0x230 [ 299.996713][ T6699] ? show_regs_print_info+0x20/0x20 [ 299.996736][ T6699] ? load_image+0x3b0/0x3b0 [ 300.026164][ T6699] panic+0x2c9/0x7f0 [ 300.030080][ T6699] ? bpf_jit_dump+0xd0/0xd0 [ 300.034595][ T6699] ? inc_nlink+0x11d/0x130 [ 300.039019][ T6699] __warn+0x248/0x2b0 [ 300.043008][ T6699] ? inc_nlink+0x11d/0x130 [ 300.047422][ T6699] report_bug+0x1b7/0x2e0 [ 300.051755][ T6699] handle_bug+0x3a/0x70 [ 300.056023][ T6699] exc_invalid_op+0x16/0x40 [ 300.060527][ T6699] asm_exc_invalid_op+0x16/0x20 [ 300.065376][ T6699] RIP: 0010:inc_nlink+0x11d/0x130 [ 300.070400][ T6699] Code: 0c ef ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 9d 0c ef ff e9 3f ff ff ff e8 73 a6 aa ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 57 41 [ 300.090130][ T6699] RSP: 0018:ffffc900033cfc28 EFLAGS: 00010283 [ 300.096216][ T6699] RAX: ffffffff81cd243d RBX: ffff88805f920190 RCX: 0000000000080000 [ 300.104191][ T6699] RDX: ffffc9000bf31000 RSI: 000000000000d1d4 RDI: 000000000000d1d5 [ 300.112257][ T6699] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100bf24106 [ 300.120236][ T6699] R10: ffffed100bf24106 R11: 1ffff1100bf24105 R12: dffffc0000000000 [ 300.128212][ T6699] R13: 1ffff1100bf24032 R14: ffff88805f920148 R15: 0000000000000000 [ 300.136188][ T6699] ? inc_nlink+0x11d/0x130 [ 300.140625][ T6699] ? inc_nlink+0x11d/0x130 [ 300.145040][ T6699] v9fs_vfs_mkdir_dotl+0x52c/0x640 [ 300.150158][ T6699] ? v9fs_vfs_symlink_dotl+0x4e0/0x4e0 [ 300.155649][ T6699] ? privileged_wrt_inode_uidgid+0x1ed/0x240 [ 300.161653][ T6699] ? generic_permission+0x292/0x510 [ 300.166851][ T6699] ? inode_permission+0xef/0x480 [ 300.171783][ T6699] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 300.176809][ T6699] ? security_inode_mkdir+0xb3/0x100 [ 300.182103][ T6699] vfs_mkdir+0x387/0x570 [ 300.186476][ T6699] do_mkdirat+0x1d7/0x5a0 [ 300.190811][ T6699] ? vfs_mkdir+0x570/0x570 [ 300.195236][ T6699] ? getname_flags+0x1fe/0x500 [ 300.200003][ T6699] __x64_sys_mkdir+0x6a/0x80 [ 300.204590][ T6699] do_syscall_64+0x4c/0xa0 [ 300.209004][ T6699] ? clear_bhb_loop+0x30/0x80 [ 300.213681][ T6699] ? clear_bhb_loop+0x30/0x80 [ 300.218362][ T6699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.224266][ T6699] RIP: 0033:0x7f43fcf57be9 [ 300.228683][ T6699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.248436][ T6699] RSP: 002b:00007f43fb1bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 300.256875][ T6699] RAX: ffffffffffffffda RBX: 00007f43fd17efa0 RCX: 00007f43fcf57be9 [ 300.264864][ T6699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000004c0 [ 300.272847][ T6699] RBP: 00007f43fcfdae19 R08: 0000000000000000 R09: 0000000000000000 [ 300.280842][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.288815][ T6699] R13: 00007f43fd17f038 R14: 00007f43fd17efa0 R15: 00007fff054a3bc8 [ 300.296808][ T6699] [ 300.300063][ T6699] Kernel Offset: disabled [ 300.304544][ T6699] Rebooting in 86400 seconds..