last executing test programs: 1m0.4241937s ago: executing program 0 (id=21): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8, '\x00', r4}, 0x50) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x7}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b3a}, &(0x7f00000002c0), &(0x7f0000000000)) 54.249925038s ago: executing program 0 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xffffffff}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000000000000100010090fd1400", @ANYRES32=0x0, @ANYBLOB="b7836f1c1b5be19805e133"], 0x28}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="00000000000000001e00000000006ca363129c0c4ec01400840b2d845469000000f5e376f042db62297e72cf6ce85b4282093c3862beaff32b6c9c214d96b29b959d8e9bbdfacc486925479c261ca99ea7b9d44e913efecf32157c0c733315e6b2be3bba7e8398c26fad5561213ca10fadcc0bcbdc2496f9be36461b0a1d4b9a", @ANYRES32=0x0, @ANYRES32, @ANYRES64=r9], 0x48) clock_gettime(0x4, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@gettfilter={0x3c, 0x2e, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xe}, {0x10, 0x3}, {0xe, 0xc}}, [{0x8, 0xb, 0x210}, {0x8, 0xb, 0x6dfc}, {0x8, 0xb, 0x8984}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r11}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004c5540b60c60e2e000000be7000005c", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) 51.539236171s ago: executing program 0 (id=34): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffff6d}, 0x1, 0x0, 0x0, 0x20042040}, 0x7609d0db956ec314) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x0, 0x8}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) timer_create(0x6, &(0x7f0000000200)={0x0, 0x17, 0x4, @thr={&(0x7f0000000100)="9bd584001c", &(0x7f0000000140)="a59bb47360a621"}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0), &(0x7f0000000300)) 51.342085954s ago: executing program 0 (id=37): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) unshare(0x22020400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 50.761284505s ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 50.598721249s ago: executing program 0 (id=43): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x2}, &(0x7f00000003c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c66, &(0x7f0000000240)={0x0, 0x5cca, 0x27, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f00000000c0)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000900)) read(r7, &(0x7f00000002c0)=""/237, 0xed) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) preadv2(r7, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/147, 0x93}], 0x1, 0x2, 0x4, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) 35.506821958s ago: executing program 32 (id=43): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x2}, &(0x7f00000003c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c66, &(0x7f0000000240)={0x0, 0x5cca, 0x27, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f00000000c0)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000900)) read(r7, &(0x7f00000002c0)=""/237, 0xed) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) preadv2(r7, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/147, 0x93}], 0x1, 0x2, 0x4, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) 6.072050413s ago: executing program 5 (id=235): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff858, 0x0, 0x0, 0x0, 0xfffffff4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x677f5fa6ed85acee}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x8, 0x20, &(0x7f0000000100)=""/32, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='rpcgss_svc_seqno_bad\x00', r3, 0x0, 0x95}, 0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1001004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x8000000e51, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.73175832s ago: executing program 5 (id=242): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x280, 0x30, 0x400, 0x0, 0x0, {}, [{0x26c, 0x1, [@m_mirred={0xa0, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x2, 0x7ff, 0x1000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6a, 0x3, 0x20000000, 0xa, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4ef0, 0x0, 0x0, 0x80000}, 0x1}}]}, {0x12, 0x6, "dfd2a6161d4242d05e0c21857d06"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x1c8, 0x17, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x0, 0x9}}}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xb}, @IFE_META_PRIO={0x8, 0x3, @val=0x4f8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0xffff8001, 0x8, 0x9, 0xa}}}]}, {0xfb, 0x6, "95a97b995ff76d56301184c3ba7e61dbf0f593870021e134cc2afa82ea78578dfc542cb6849b3a5703ebd612d15295458b948df52332d66ee9cc363640b050b9015de9c8038bf6afc0d24b6ffc9e31b5cc07edf3dea5839e32d26c7d87e507c446da00043196a4a18f99037bf952d8660e2d1dc501e4bd1a8f919e764b054237de257e69ff4e1545b8396200000000000000000000000000000001000000000e34f528cf62690e9a70cabc34188bd957ace1f23633ef3fddffd4e0c3fae8a51ebf1c18e922259a94992338b2c79549d2de179362507e6cfae0e25dcb4a260aaaae2c894f1cb76cf8a8c9440459a11782ecc73343de17cc"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x404}, 0x8010) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) openat$sysfs(0xffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x101000, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffd5, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000180)=0x18, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x2, 0x0, 0xacf0165) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$kcm(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], 0x10}, 0x4008812) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x9e, 0x1, 0x1be52644}}, 0x20, 0x0, 0x0) 5.584043613s ago: executing program 3 (id=243): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000200)="dbf60a5de56d6ccc146290c0c1bd37a86ea2f2807b06a4fd0d0a0b7d3b67e0e515329b967022b6009bff952d9077604ae0207eefdbc891c381df1792cb11663d888ae99cbc9d463a8a6f38a433aec4751f2041df962db72b7935d4335f68b9bf8cb86e169c86fb69c47e415219a1b82a8c170947a165e9323e8349fcb2990f61d4e4", &(0x7f0000000140)=""/90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.237527349s ago: executing program 3 (id=246): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, 0x0) 4.853112957s ago: executing program 3 (id=248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4.581704412s ago: executing program 5 (id=250): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000040000000400"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f00000001c0)="11", 0x0, 0x0, 0x0, 0x800, r2}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="00007500000000ba903a16000100008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff0000000000000600000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r7, @ANYRESDEC=r7], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x30, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) brk(0x4) r10 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv(r10, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000440)={0x2ce, 0x0, 0x1, 0x0, 0xf4e3, 0xb, 0x2, 0x9, 0x10}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r9}, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x5, 0x200000000005, 0x0, 0x5, 0x5}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) io_uring_enter(r3, 0x52de, 0xf62e, 0x8, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0xfffffff6) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 4.512034823s ago: executing program 4 (id=251): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$misdntimer(0xffffff9c, &(0x7f0000000200), 0x22000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4.436738164s ago: executing program 4 (id=253): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@sndrcv={0x2c, 0x84, 0x1, {0x3, 0xfff8, 0x20b, 0xa, 0x3, 0x8, 0x10001, 0x6}}], 0x2c, 0x805}, 0x25) 4.328007397s ago: executing program 4 (id=255): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.075837772s ago: executing program 4 (id=256): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x7a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={r6, 0xa49a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.844596586s ago: executing program 3 (id=257): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) rmdir(&(0x7f0000000440)='./file0\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x2) 3.664074599s ago: executing program 5 (id=258): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) msgget$private(0x0, 0x240) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) 3.618418931s ago: executing program 3 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000700000400000000098e6000000bb"]) 3.517748503s ago: executing program 1 (id=260): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/254, 0xfe}], 0x1}, 0xffffffff}], 0x1, 0x10000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 3.264082217s ago: executing program 3 (id=261): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r4, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r4, 0x0) r5 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000200)) r6 = socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) 2.682576339s ago: executing program 5 (id=262): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac"], 0x118}}, 0x44) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 2.60851646s ago: executing program 1 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004080) 2.552040061s ago: executing program 5 (id=264): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x80, 0x102) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000020a28000000000a0101007ca7005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000173797a30000000000900030073797a32000000001400000011000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0x3, 0x0) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') writev(r5, &(0x7f0000000e40)=[{&(0x7f0000000bc0)='u', 0x1}], 0x1) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000280000000000059d78ac141400e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907809f1"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0xfc}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x800, 0x80000800) unshare(0x40020000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.854301674s ago: executing program 1 (id=266): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01144e", 0x18, 0x3a, 0x1, @empty, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private1}}}}}}, 0x0) 1.643972409s ago: executing program 1 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000400)}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="30800000906675e414adf5930d14d498c2d993621ec7cdf38634840b8dc7700f99d1a04f71a9b9407a318f46c0368d060b5c1b38476d0505cc346e1ea01b7b99a156", @ANYRES16=r2, @ANYBLOB="cf0403000000fcffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000000000600b5"], 0x30}}, 0x4084) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000080)={0x3, {0xb, 0x80000000, 0x7, 0x4, 0x5, 0x80}}) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "c0a70d6e72233eeb", "f9e89cd8dc99a34d3ed36a04d8c3747b", "9e150210", "e3935ef20e00fc22"}, 0x28) io_setup(0x8a, &(0x7f0000000680)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f0000000b80)=[{&(0x7f0000000040)="be", 0x1}], 0x1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000000)) close_range(r9, 0xffffffffffffffff, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x38, r11, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_submit(r6, 0x0, &(0x7f0000000040)) 1.57082113s ago: executing program 4 (id=268): umount2(0x0, 0x5) socket$kcm(0xa, 0x2, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) r3 = socket$netlink(0x10, 0x3, 0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r4 = syz_io_uring_setup(0x1d2d, 0x0, &(0x7f0000000080), &(0x7f00000016c0)) r5 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x1, 0xffffffff, 0x40001c8, 0x0, r4}, &(0x7f0000001300), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) getdents64(r1, &(0x7f0000001340)=""/216, 0xd8) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) mkdir(0x0, 0x30) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000100), 0x2, 0x1) fcntl$addseals(r3, 0x409, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.433397733s ago: executing program 4 (id=269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYRESOCT], 0xb4}}, 0x0) 1.302241635s ago: executing program 1 (id=270): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x80000) 1.132038878s ago: executing program 1 (id=272): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x3d, 0x80) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) r3 = dup(r1) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000040)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 871.533583ms ago: executing program 2 (id=274): r0 = syz_io_uring_setup(0x8dd, &(0x7f00000002c0)={0x0, 0x1b7, 0x1000, 0x1, 0xf2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x12, 0x4004, @fd, 0xc5, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 754.925386ms ago: executing program 2 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d02, 0x0, 0x295}]}) 576.091589ms ago: executing program 2 (id=276): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 279.166185ms ago: executing program 2 (id=277): ioctl(0xffffffffffffffff, 0x309, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback={0xe0}, 0xf}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 158.689107ms ago: executing program 2 (id=278): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1}) 0s ago: executing program 2 (id=279): r0 = syz_io_uring_setup(0x8e, &(0x7f0000000280)={0x0, 0xd146, 0x1000, 0x2, 0x222}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_setup(0x5990, &(0x7f0000000300)={0x0, 0xeae0, 0x2, 0x2, 0x385, 0x0, r0}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000040)=[0xf, 0x6], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_ENDIAN(0x14, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x200}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xbb8) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010000304fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0xba01}, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d22, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000002ec0)={'macvlan1\x00', &(0x7f0000002e40)=@ethtool_coalesce={0xf, 0x3169, 0x400009, 0xffffff7d, 0x5, 0x9, 0xaa, 0x4, 0xfff, 0xa8, 0x6, 0xb, 0xe, 0x3, 0x4, 0x800, 0x101, 0x1, 0x240f, 0x3, 0x809, 0xede, 0x80000000}}) ioctl$BLKTRACESTART(r2, 0x1276, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 48.471098][ T4172] cgroup: Unknown subsys name 'net' [ 48.605831][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.820982][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.061696][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.114747][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.208205][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 51.258736][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.267145][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.305540][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.313374][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.321503][ T4192] device bridge_slave_0 entered promiscuous mode [ 51.356886][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.364211][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.372005][ T4192] device bridge_slave_1 entered promiscuous mode [ 51.379492][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.386599][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.394728][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.430147][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.437391][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.445739][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.459551][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.466783][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.474792][ T4195] device bridge_slave_0 entered promiscuous mode [ 51.513179][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.520247][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.528155][ T4195] device bridge_slave_1 entered promiscuous mode [ 51.544613][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.566818][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.574004][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.581791][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.598339][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.609303][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.618717][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.625806][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.633570][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.640727][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.648525][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.656177][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.664726][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.682850][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.692091][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.699261][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.707133][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.720723][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.765428][ T4192] team0: Port device team_slave_0 added [ 51.787525][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.798330][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.814266][ T4192] team0: Port device team_slave_1 added [ 51.821836][ T4195] team0: Port device team_slave_0 added [ 51.829470][ T4182] team0: Port device team_slave_0 added [ 51.837310][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.847547][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.865615][ T4195] team0: Port device team_slave_1 added [ 51.873606][ T4182] team0: Port device team_slave_1 added [ 51.924429][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.931640][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.957642][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.985277][ T4183] team0: Port device team_slave_0 added [ 51.993340][ T4190] team0: Port device team_slave_0 added [ 52.000255][ T4183] team0: Port device team_slave_1 added [ 52.006434][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.013802][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.040015][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.051660][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.059003][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.085226][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.096657][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.103868][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.130077][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.142155][ T4190] team0: Port device team_slave_1 added [ 52.148231][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.155217][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.181224][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.207573][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.214680][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.240627][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.287874][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.294931][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.321001][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.333398][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.340362][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.366870][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.394912][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.401573][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.408577][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.415712][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.441846][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.458006][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.465050][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.491090][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.576404][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.583154][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.590022][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.598030][ T4182] Cannot create hsr debugfs directory [ 52.617392][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.624381][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.630867][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.638419][ T4190] Cannot create hsr debugfs directory [ 52.654341][ T4195] device hsr_slave_0 entered promiscuous mode [ 52.661878][ T4195] device hsr_slave_1 entered promiscuous mode [ 52.668261][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.676042][ T4195] Cannot create hsr debugfs directory [ 52.692606][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.699220][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.705860][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.713593][ T4183] Cannot create hsr debugfs directory [ 52.761839][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 52.768616][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 52.831258][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 52.835814][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 52.912590][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 53.001810][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.016572][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.025843][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.035176][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.091464][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.100762][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.125406][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.133838][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.172365][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.200206][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.215767][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.226364][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.237870][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.245510][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.271953][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.283966][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.292049][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.300712][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.310299][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.317514][ T3085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.326748][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.344550][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.353611][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.362117][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.369151][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.408483][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.431931][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.444399][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.457974][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.467916][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.476942][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.485728][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.497444][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.505951][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.514616][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.523399][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.532790][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.541294][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.549055][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.557645][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.577665][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.589991][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.607212][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.630674][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.641489][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.655162][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.668671][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.690174][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.712970][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.723397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.737653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.747505][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.754619][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.767811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.777902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.786894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.795874][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.802951][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.815015][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.823732][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.833278][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.862772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.874940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.885375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.893200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.900591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.910014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.919416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.927854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.935613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.961200][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.969790][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.980498][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.992347][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.016127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.024905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.034048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.043202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.052770][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.059829][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.067582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.094039][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.105581][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.114481][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.126332][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.134897][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.143719][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.152172][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.159187][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.167266][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.186534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.215536][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.226107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.236629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.264624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.275641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.283646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.292926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.302753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.313226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.324825][ T4190] device veth0_vlan entered promiscuous mode [ 54.337872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.348648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.363297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.375889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.394792][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.411594][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.429254][ T4190] device veth1_vlan entered promiscuous mode [ 54.437897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.454232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.466207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.476412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.490093][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.518917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.531891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.539355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.555144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.564799][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.571877][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.584587][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.598231][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.619642][ T4190] device veth0_macvtap entered promiscuous mode [ 54.628500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.636651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.645165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.653780][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.660870][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.669477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.678185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.687991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.697144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.706345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.715146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.723648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.732909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.741674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.749491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.763274][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.773799][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.789536][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.800448][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.825479][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.832899][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 54.841501][ T4184] Bluetooth: hci1: command 0x041b tx timeout [ 54.849297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.859509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.868053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.876741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.886226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.895110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.905401][ T4190] device veth1_macvtap entered promiscuous mode [ 54.911177][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 54.917687][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 54.933935][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.961167][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.968689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.977382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.986265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.991330][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 54.999683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.007412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.016086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.025654][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.032734][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.040279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.048876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.058279][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.065357][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.073465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.082042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.090054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.098271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.106756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.115976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.124385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.132172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.152283][ T4182] device veth0_vlan entered promiscuous mode [ 55.163126][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.175990][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.190547][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.200386][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.212726][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.223664][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.237420][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.246208][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.265759][ T4182] device veth1_vlan entered promiscuous mode [ 55.275730][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.284028][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.334373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.342004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.349418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.358539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.367449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.378603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.387372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.396284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.405501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.414485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.423157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.431770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.439865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.448867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.466463][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.477429][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.501382][ T4182] device veth0_macvtap entered promiscuous mode [ 55.520931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.528813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.543898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.552828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.567444][ T4192] device veth0_vlan entered promiscuous mode [ 55.596183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.612102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.635266][ T4182] device veth1_macvtap entered promiscuous mode [ 55.658061][ T4192] device veth1_vlan entered promiscuous mode [ 55.722217][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.746930][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.766039][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.781378][ T3085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.789329][ T3085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.791799][ T4192] device veth0_macvtap entered promiscuous mode [ 55.812064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.820042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.828331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.837236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.845260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.854101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.862912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.872298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.882784][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.894152][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.905013][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.923079][ T4192] device veth1_macvtap entered promiscuous mode [ 55.932579][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.941527][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.950212][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.959537][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.970892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.979457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.987718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.996360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.004979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.012742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.028978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.038125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.057917][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.061604][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.077557][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.100123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.108724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.118510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.144738][ T4183] device veth0_vlan entered promiscuous mode [ 56.163553][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.180896][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.190720][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.210854][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.226600][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.234426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.243871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.251732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.260338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.288157][ T4183] device veth1_vlan entered promiscuous mode [ 56.308376][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.325870][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.339774][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.350540][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.363019][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.420091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.431989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.458311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.467880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.477282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.497069][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.510754][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.520681][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.544163][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.583982][ T4195] device veth0_vlan entered promiscuous mode [ 56.597880][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.613648][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.630910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.640678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.649364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.690302][ T4183] device veth0_macvtap entered promiscuous mode [ 56.701565][ T4195] device veth1_vlan entered promiscuous mode [ 56.714322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.723307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.731535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.739724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.751089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.759701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.785100][ T4183] device veth1_macvtap entered promiscuous mode [ 56.794024][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.821134][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.846058][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.858684][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.872912][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.885960][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.896147][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.906923][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.917313][ T4223] Bluetooth: hci0: command 0x040f tx timeout [ 56.921471][ T4184] Bluetooth: hci1: command 0x040f tx timeout [ 56.925122][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.937066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.945571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.953669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.962892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.971596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.990682][ T4195] device veth0_macvtap entered promiscuous mode [ 56.997779][ T4184] Bluetooth: hci2: command 0x040f tx timeout [ 57.008011][ T4184] Bluetooth: hci4: command 0x040f tx timeout [ 57.019054][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.030411][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.040571][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.052088][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.062076][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.073230][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.081909][ T4184] Bluetooth: hci3: command 0x040f tx timeout [ 57.085221][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.100375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.109476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.118109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.127010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.138172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.178497][ T4195] device veth1_macvtap entered promiscuous mode [ 57.188923][ T4300] IPv4: Oversized IP packet from 127.202.26.0 [ 57.195617][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.197618][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.206270][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.219810][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.229566][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.240114][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267675][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.285100][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.296384][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.307289][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.325136][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.335810][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.345947][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.356624][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.368321][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.379634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.388652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.397216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.405800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.426139][ T4302] device ipvlan2 entered promiscuous mode [ 57.435801][ T4302] bridge0: port 3(ipvlan2) entered blocking state [ 57.446465][ T4302] bridge0: port 3(ipvlan2) entered disabled state [ 57.522776][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.537399][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.553238][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.564883][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.575504][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.587070][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.597442][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.612493][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.624562][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.644287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.656408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.692776][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.693308][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.700747][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.719051][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.733341][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.742100][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.781682][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.865972][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.880530][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.917426][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.943718][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.964400][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.000745][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.010209][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.051186][ T4223] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.055968][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.058865][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.085295][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.102619][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.138761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.407936][ T4315] Zero length message leads to an empty skb [ 58.431724][ T4223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 58.448171][ T4223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.458623][ T4223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 58.631191][ T4223] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 58.634879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.658006][ T4223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.671551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.680482][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.689402][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.698279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.707143][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.716009][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 58.725078][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 58.734030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 58.742981][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 58.779601][ T4223] usb 4-1: Product: syz [ 58.784323][ T4223] usb 4-1: Manufacturer: syz [ 58.788933][ T4223] usb 4-1: SerialNumber: syz [ 58.817345][ T4223] usb 4-1: config 0 descriptor?? [ 58.998264][ T4246] Bluetooth: hci1: command 0x0419 tx timeout [ 59.018411][ T4246] Bluetooth: hci0: command 0x0419 tx timeout [ 59.088128][ T4223] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 59.088223][ T4246] Bluetooth: hci4: command 0x0419 tx timeout [ 59.106839][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 59.125920][ T4246] Bluetooth: hci2: command 0x0419 tx timeout [ 59.177917][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 59.335678][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.351064][ T2856] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.384650][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.559518][ T4333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.600879][ T2856] usb 1-1: Using ep0 maxpacket: 8 [ 59.721102][ T2856] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 59.742587][ T2856] usb 1-1: config 179 has no interface number 0 [ 59.761885][ T2856] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 59.813071][ T2856] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 59.846499][ T2856] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 59.889870][ T2856] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26223, setting to 1024 [ 59.921629][ T2856] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 59.921737][ T4288] usb 4-1: USB disconnect, device number 2 [ 59.967959][ T2856] usb 1-1: config 179 interface 65 has no altsetting 0 [ 59.988963][ T2856] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 60.029743][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.081289][ T4332] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 60.118680][ T2856] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 60.193148][ T4346] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 60.199837][ T4346] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 60.224231][ T4346] vhci_hcd vhci_hcd.0: Device attached [ 60.355260][ T4346] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 60.402648][ T2856] usb 1-1: USB disconnect, device number 2 [ 60.421359][ T2856] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 60.491096][ T4338] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 61.294483][ T4350] vhci_hcd: connection reset by peer [ 61.303373][ T1245] vhci_hcd: stop threads [ 61.309332][ T1245] vhci_hcd: release socket [ 61.388894][ T1245] vhci_hcd: disconnect device [ 62.028632][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 62.697882][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.721640][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.735854][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.170982][ T4370] tmpfs: Unknown parameter 'grpquota' [ 65.631847][ T4338] vhci_hcd: vhci_device speed not set [ 65.906201][ T4374] netlink: 'syz.3.26': attribute type 27 has an invalid length. [ 67.076316][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.174780][ T4397] ksmbd: Daemon and kernel module version mismatch. ksmbd: 29, kernel module: 1. User-space ksmbd should terminate. [ 67.480985][ T4338] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.570937][ T4288] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.626578][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.634875][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.670495][ T4191] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 67.681083][ T4191] CPU: 0 PID: 4191 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 67.688646][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.698686][ T4191] Workqueue: hci1 hci_rx_work [ 67.703380][ T4191] Call Trace: [ 67.706648][ T4191] [ 67.709559][ T4191] dump_stack_lvl+0x168/0x230 [ 67.714221][ T4191] ? show_regs_print_info+0x20/0x20 [ 67.719408][ T4191] ? load_image+0x3b0/0x3b0 [ 67.723901][ T4191] sysfs_create_dir_ns+0x252/0x280 [ 67.729015][ T4191] ? __lock_acquire+0x7c60/0x7c60 [ 67.734030][ T4191] ? sysfs_warn_dup+0xa0/0xa0 [ 67.738822][ T4191] ? le_conn_complete_evt+0xcbc/0x1590 [ 67.744282][ T4191] ? hci_event_packet+0xe05/0x12f0 [ 67.749387][ T4191] ? process_one_work+0x863/0x1000 [ 67.754477][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 67.759657][ T4191] kobject_add_internal+0x662/0xd00 [ 67.764852][ T4191] kobject_add+0x152/0x210 [ 67.769258][ T4191] ? kobject_init+0x1d0/0x1d0 [ 67.773913][ T4191] ? klist_children_get+0x50/0x50 [ 67.778914][ T4191] ? get_device_parent+0x121/0x3f0 [ 67.784019][ T4191] device_add+0x483/0xfb0 [ 67.788369][ T4191] hci_conn_add_sysfs+0xd1/0x1e0 [ 67.793298][ T4191] le_conn_complete_evt+0xcbc/0x1590 [ 67.798576][ T4191] ? cs_le_create_conn+0x5e0/0x5e0 [ 67.803692][ T4191] ? __mutex_trylock_common+0x14f/0x250 [ 67.809244][ T4191] hci_le_meta_evt+0x289/0x3b80 [ 67.814078][ T4191] ? hci_event_packet+0x36d/0x12f0 [ 67.819170][ T4191] ? hci_event_packet+0x2e2/0x12f0 [ 67.824257][ T4191] ? __lock_acquire+0x7c60/0x7c60 [ 67.829265][ T4191] ? hci_remote_host_features_evt+0x280/0x280 [ 67.835315][ T4191] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 67.840932][ T4191] ? mark_lock+0x94/0x320 [ 67.845252][ T4191] ? mutex_unlock+0x10/0x10 [ 67.849742][ T4191] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 67.855714][ T4191] ? lock_chain_count+0x20/0x20 [ 67.860541][ T4191] ? __rwlock_init+0x140/0x140 [ 67.865289][ T4191] hci_event_packet+0xe05/0x12f0 [ 67.870208][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 67.875385][ T4191] ? rcu_lock_release+0x20/0x20 [ 67.880215][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 67.885389][ T4191] hci_rx_work+0x255/0xa10 [ 67.889791][ T4191] process_one_work+0x863/0x1000 [ 67.894711][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 67.900318][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 67.905580][ T4191] ? _raw_spin_lock_irq+0xab/0xe0 [ 67.910581][ T4191] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 67.915929][ T4191] ? wq_worker_running+0x97/0x170 [ 67.920930][ T4191] worker_thread+0xaa8/0x12a0 [ 67.925600][ T4191] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 67.931480][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 67.936674][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 67.941848][ T4191] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 67.947724][ T4191] kthread+0x436/0x520 [ 67.951767][ T4191] ? rcu_lock_release+0x20/0x20 [ 67.956593][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 67.961179][ T4191] ret_from_fork+0x1f/0x30 [ 67.965579][ T4191] [ 67.976815][ T4191] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.990093][ T4191] Bluetooth: hci1: failed to register connection device [ 68.001183][ T4338] usb 4-1: Using ep0 maxpacket: 16 [ 68.090916][ T4288] usb 2-1: Using ep0 maxpacket: 16 [ 68.121008][ T4338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.143243][ T4338] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.211687][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.236302][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.250899][ T4288] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 68.263745][ T4288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.296121][ T4288] usb 2-1: config 0 descriptor?? [ 68.876783][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.964889][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.621227][ T4374] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.630222][ T4374] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.645416][ T4374] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.654505][ T4374] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.768754][ T4374] syz.3.26 (4374) used greatest stack depth: 19840 bytes left [ 69.799407][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.808297][ T4386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.817462][ T4386] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.826710][ T4386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.844388][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 69.980974][ T4288] usbhid 2-1:0.0: can't add hid device: -71 [ 69.986926][ T4288] usbhid: probe of 2-1:0.0 failed with error -71 [ 70.093571][ T4288] usb 2-1: USB disconnect, device number 2 [ 70.100979][ T4338] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 70.138322][ T4338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.181968][ T4338] usb 4-1: config 0 descriptor?? [ 70.231296][ T4338] usb 4-1: can't set config #0, error -71 [ 70.268379][ T4338] usb 4-1: USB disconnect, device number 3 [ 71.157090][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.163696][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.324204][ T4445] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 71.828765][ T4450] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 72.071109][ T4448] bond1 (unregistering): Released all slaves [ 72.932357][ T4457] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 73.021643][ T4457] ubi31: attaching mtd0 [ 73.035124][ T4457] ubi31: scanning is finished [ 73.040326][ T4457] ubi31: empty MTD device detected [ 73.318391][ T4457] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 74.657409][ T4474] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.081295][ T4338] Bluetooth: hci1: command 0x0406 tx timeout [ 76.286106][ T13] cfg80211: failed to load regulatory.db [ 76.918146][ T4507] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 77.563962][ T4516] process 'syz.2.65' launched '/dev/fd/-1/./file0/file0' with NULL argv: empty string added [ 78.412812][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.420138][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.439590][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.481402][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.143469][ T4516] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.163682][ T4516] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.186373][ T4516] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.207580][ T4516] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.768657][ T4572] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 81.875466][ T4573] @0Ù: renamed from bond_slave_1 [ 82.032713][ T4223] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 82.041890][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.051655][ T4223] Bluetooth: hci2: Injecting HCI hardware error event [ 82.069451][ T4191] Bluetooth: hci2: hardware error 0x00 [ 82.570956][ T21] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 82.583304][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.641125][ T21] usb 3-1: config 0 has no interfaces? [ 82.646636][ T21] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 82.758669][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.794799][ T21] usb 3-1: config 0 descriptor?? [ 83.880973][ T21] Bluetooth: hci4: command 0x0411 tx timeout [ 84.135698][ T4607] 9pnet_virtio: no channels available for device syz [ 84.400907][ T4246] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.496578][ T4617] netlink: 'syz.1.94': attribute type 3 has an invalid length. [ 84.552687][ T4241] usb 3-1: USB disconnect, device number 2 [ 84.641749][ T4246] usb 4-1: Using ep0 maxpacket: 32 [ 84.648903][ T4622] kvm: pic: non byte write [ 84.653867][ T4622] kvm: pic: non byte write [ 84.659022][ T4622] kvm: pic: non byte write [ 84.664017][ T4622] kvm: pic: non byte write [ 84.668651][ T4622] kvm: pic: single mode not supported [ 84.761145][ T4246] usb 4-1: config 0 has no interfaces? [ 84.931073][ T4246] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 84.970922][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.989303][ T4246] usb 4-1: Product: syz [ 84.994978][ T4246] usb 4-1: Manufacturer: syz [ 85.011284][ T4246] usb 4-1: SerialNumber: syz [ 85.044589][ T4246] usb 4-1: config 0 descriptor?? [ 85.284156][ T4608] udc-core: couldn't find an available UDC or it's busy [ 85.310128][ T4608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.345450][ T4638] binder: 4631:4638 ioctl c00c6211 200000000a40 returned -22 [ 85.363346][ T4246] usb 4-1: USB disconnect, device number 4 [ 86.676073][ T156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.859427][ T156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.070568][ T156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.158901][ T4666] binder: 4651:4666 ioctl c00c6211 200000000a40 returned -22 [ 87.264997][ T156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.327602][ T4654] chnl_net:caif_netlink_parms(): no params data found [ 88.834159][ T4246] Bluetooth: hci0: command 0x0409 tx timeout [ 89.772709][ T4686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'. [ 89.786361][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.806217][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.851605][ T4654] device bridge_slave_0 entered promiscuous mode [ 89.887995][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.896092][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.904779][ T4654] device bridge_slave_1 entered promiscuous mode [ 90.153803][ T4654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.202848][ T4654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.381318][ T4654] team0: Port device team_slave_0 added [ 90.461274][ T4654] team0: Port device team_slave_1 added [ 90.557121][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.574748][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.710963][ T4654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.796095][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.847841][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.911224][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 90.955424][ T4654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.035860][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 91.178898][ T4654] device hsr_slave_0 entered promiscuous mode [ 91.196522][ T4654] device hsr_slave_1 entered promiscuous mode [ 91.203576][ T4654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.217664][ T4654] Cannot create hsr debugfs directory [ 91.234986][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 91.314780][ T4730] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 91.321326][ T4730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.333232][ T4730] vhci_hcd vhci_hcd.0: Device attached [ 91.600936][ T4241] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 91.763085][ T4654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.788665][ T4654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.847637][ T156] device hsr_slave_0 left promiscuous mode [ 91.888894][ T156] device hsr_slave_1 left promiscuous mode [ 91.916783][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.956340][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.976251][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.987036][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.016263][ T156] device bridge_slave_1 left promiscuous mode [ 92.032346][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.129473][ T156] device bridge_slave_0 left promiscuous mode [ 92.140976][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.210390][ T4755] 9p: Unknown Cache mode readahead [ 92.242801][ T156] device veth1_macvtap left promiscuous mode [ 92.316686][ T156] device veth0_macvtap left promiscuous mode [ 92.373925][ T156] device veth1_vlan left promiscuous mode [ 92.435486][ T156] device veth0_vlan left promiscuous mode [ 92.923215][ T4731] vhci_hcd: connection reset by peer [ 92.929362][ T4483] vhci_hcd: stop threads [ 92.933724][ T4483] vhci_hcd: release socket [ 92.948476][ T4483] vhci_hcd: disconnect device [ 92.991136][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 93.479845][ T156] team0 (unregistering): Port device team_slave_1 removed [ 93.513393][ T156] team0 (unregistering): Port device team_slave_0 removed [ 93.531628][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.547215][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.636307][ T156] bond0 (unregistering): Released all slaves [ 93.688940][ T4654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.739103][ T4772] device bridge_slave_0 left promiscuous mode [ 93.768315][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.803051][ T4772] device bridge_slave_1 left promiscuous mode [ 93.809263][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.833922][ T4772] bond0: (slave bond_slave_0): Releasing backup interface [ 93.844513][ T4772] bond0: (slave bond_slave_1): Releasing backup interface [ 93.871778][ T4772] team0: Port device team_slave_0 removed [ 93.882207][ T4772] team0: Port device team_slave_1 removed [ 93.896166][ T4772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.914386][ T4772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.934304][ T4774] team0: Mode changed to "random" [ 93.945437][ T4775] device vlan0 entered promiscuous mode [ 93.977614][ T4654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.081498][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.116443][ T4791] binder_alloc: 4790: binder_alloc_buf, no vma [ 94.390903][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 94.427184][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.462555][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.478179][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.523894][ T4654] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.554931][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.569572][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.600270][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.607386][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.731099][ T13] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 94.761794][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.769917][ T13] usb 4-1: Product: syz [ 94.810938][ T13] usb 4-1: Manufacturer: syz [ 94.821464][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.851023][ T13] usb 4-1: SerialNumber: syz [ 94.896703][ T13] usb 4-1: config 0 descriptor?? [ 94.902878][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.948006][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.434812][ T4223] Bluetooth: hci0: command 0x0419 tx timeout [ 95.498342][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.505468][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.564479][ T4811] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.572590][ T4811] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.585929][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.597127][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.656484][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.671081][ T13] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 95.744781][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.775610][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.851685][ T13] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 95.910982][ T13] usb 4-1: media controller created [ 95.941564][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.975617][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.988436][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.021765][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.068255][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.151509][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.216744][ T4654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.242062][ T13] zl10353_read_register: readreg error (reg=127, ret==0) [ 96.249112][ T13] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 96.262189][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.284233][ T13] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 96.294438][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.311974][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.352482][ T13] usb 4-1: USB disconnect, device number 5 [ 96.540310][ T13] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 96.578617][ T4842] device syzkaller0 entered promiscuous mode [ 96.669648][ T4850] syz.1.142 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.762036][ T4241] vhci_hcd: vhci_device speed not set [ 97.170781][ T4654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.269724][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.285576][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.891912][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.931579][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.026995][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.039561][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.241171][ T4654] device veth0_vlan entered promiscuous mode [ 98.309518][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.341312][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.370316][ T4901] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.379266][ T4901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.474710][ T4654] device veth1_vlan entered promiscuous mode [ 98.510973][ T4241] Bluetooth: hci3: command 0x0406 tx timeout [ 98.663976][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.741780][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.782221][ T4906] tipc: Enabling of bearer rejected, failed to enable media [ 98.835877][ T4654] device veth0_macvtap entered promiscuous mode [ 98.873966][ T4654] device veth1_macvtap entered promiscuous mode [ 98.966655][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.015769][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.041345][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.060877][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.102904][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.122255][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.144012][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.203435][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.337691][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.403483][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.432149][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.502075][ T4654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.539645][ T4654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.580918][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.589670][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.617351][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.672110][ T4654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.706009][ T4654] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.762015][ T4654] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.770731][ T4654] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.998669][ T4924] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 100.106193][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.154363][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.206282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.257215][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.300261][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.369182][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.842569][ T4959] tipc: Started in network mode [ 100.878723][ T4959] tipc: Node identity 928015244006, cluster identity 4711 [ 100.879374][ T4959] tipc: Enabled bearer , priority 0 [ 100.894431][ T4959] tipc: Resetting bearer [ 100.899510][ T4957] tipc: Disabling bearer [ 101.108947][ T4966] 9pnet_virtio: no channels available for device syz [ 102.503039][ T25] audit: type=1326 audit(1757676889.556:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 102.579303][ T25] audit: type=1326 audit(1757676889.576:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 102.611101][ T4223] Bluetooth: hci3: command 0x0409 tx timeout [ 102.663972][ T4988] 9pnet_virtio: no channels available for device syz [ 102.672312][ T25] audit: type=1326 audit(1757676889.576:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 102.751026][ T25] audit: type=1326 audit(1757676889.576:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 102.800891][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.865156][ T25] audit: type=1326 audit(1757676889.576:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 102.942227][ T25] audit: type=1326 audit(1757676889.576:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 103.041858][ T25] audit: type=1326 audit(1757676889.576:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 103.064336][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 103.163217][ T25] audit: type=1326 audit(1757676889.576:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 103.185537][ T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.213803][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.264115][ T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 103.307871][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 103.325656][ T25] audit: type=1326 audit(1757676889.576:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 103.340901][ T13] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.449496][ T25] audit: type=1326 audit(1757676889.576:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.5.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bc232bda9 code=0x7ffc0000 [ 103.543949][ T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.619923][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.816973][ T5011] 9pnet_virtio: no channels available for device syz [ 103.931097][ T13] usb 4-1: GET_CAPABILITIES returned 0 [ 103.936782][ T13] usbtmc 4-1:16.0: can't read capabilities [ 103.946324][ T5013] tipc: Started in network mode [ 103.986484][ T5013] tipc: Node identity be1b3e5bc3, cluster identity 4711 [ 104.030097][ T5013] tipc: Enabled bearer , priority 0 [ 104.061525][ T5017] tipc: Resetting bearer [ 104.107361][ T5012] tipc: Disabling bearer [ 104.150370][ T13] usb 4-1: USB disconnect, device number 6 [ 105.500040][ T5059] fuse: Bad value for 'fd' [ 105.956044][ T5072] tipc: Started in network mode [ 105.986118][ T5072] tipc: Node identity e6797a74b76d, cluster identity 4711 [ 106.104503][ T5072] tipc: Enabled bearer , priority 0 [ 106.145324][ T5075] device syzkaller0 entered promiscuous mode [ 106.703007][ T5071] tipc: Resetting bearer [ 106.948272][ T5071] tipc: Disabling bearer [ 107.106938][ T5089] 9pnet_virtio: no channels available for device syz [ 107.128835][ T5090] ======================================================= [ 107.128835][ T5090] WARNING: The mand mount option has been deprecated and [ 107.128835][ T5090] and is ignored by this kernel. Remove the mand [ 107.128835][ T5090] option from the mount to silence this warning. [ 107.128835][ T5090] ======================================================= [ 107.179218][ T5090] overlayfs: workdir and upperdir must be separate subtrees [ 109.297874][ T5119] hub 9-0:1.0: USB hub found [ 109.304038][ T5119] hub 9-0:1.0: 1 port detected [ 110.354528][ T5126] tipc: Started in network mode [ 110.402561][ T5126] tipc: Node identity 0a8ae117529c, cluster identity 4711 [ 110.410612][ T5126] tipc: Enabled bearer , priority 0 [ 110.635466][ T5130] device syzkaller0 entered promiscuous mode [ 110.708648][ T5125] tipc: Resetting bearer [ 110.754684][ T5125] tipc: Disabling bearer [ 111.491931][ T5161] device veth0_to_bridge entered promiscuous mode [ 111.500513][ T5160] device veth0_to_bridge left promiscuous mode [ 111.811411][ T5176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.216'. [ 113.253579][ T5201] netlink: 188 bytes leftover after parsing attributes in process `syz.4.220'. [ 113.443882][ T25] kauditd_printk_skb: 109 callbacks suppressed [ 113.443894][ T25] audit: type=1326 audit(1757676900.496:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5202 comm="syz.3.221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfa04c1ba9 code=0x0 [ 113.638489][ T5225] block nbd3: shutting down sockets [ 113.864156][ T5230] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.524493][ T5230] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.640048][ T5230] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.757689][ T5230] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.924526][ T5230] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.977487][ T5230] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.223769][ T5230] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.235721][ T5230] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.396155][ T5260] tipc: Enabled bearer , priority 0 [ 115.403664][ T5260] device syzkaller0 entered promiscuous mode [ 115.421396][ T5260] tipc: Resetting bearer [ 115.448896][ T5256] tipc: Resetting bearer [ 115.462451][ T5256] tipc: Disabling bearer [ 116.780299][ T5300] batman_adv: batadv0: Adding interface: dummy0 [ 116.791005][ T5300] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.951807][ T5300] batman_adv: batadv0: Interface activated: dummy0 [ 117.039046][ T5303] batadv0: mtu less than device minimum [ 117.063175][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.074817][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.086244][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.097560][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.108884][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.120218][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.131588][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.142905][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.154244][ T5303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.240884][ T4288] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.481056][ T4288] usb 3-1: Using ep0 maxpacket: 8 [ 117.601032][ T4288] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.626257][ T4288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.697067][ T4288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.759704][ T4288] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.824340][ T4288] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.842192][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.141200][ T4288] usb 3-1: GET_CAPABILITIES returned 0 [ 118.146988][ T4288] usbtmc 3-1:16.0: can't read capabilities [ 118.343759][ T4288] usb 3-1: USB disconnect, device number 3 [ 118.740355][ T5367] netlink: 44 bytes leftover after parsing attributes in process `syz.5.262'. [ 120.601382][ T4223] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.802243][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 120.870924][ T4223] usb 2-1: Using ep0 maxpacket: 8 [ 121.006295][ T4223] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.036025][ T4223] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.065942][ T4223] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 121.095303][ T4223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.207152][ T4223] hub 2-1:1.0: bad descriptor, ignoring hub [ 121.217791][ T4223] hub: probe of 2-1:1.0 failed with error -5 [ 121.410807][ T4191] ================================================================== [ 121.419126][ T4191] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12a9/0x3b80 [ 121.426956][ T4191] Read of size 1 at addr ffff88807ea29400 by task kworker/u5:4/4191 [ 121.434929][ T4191] [ 121.437255][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 121.444788][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.454838][ T4191] Workqueue: hci3 hci_rx_work [ 121.459518][ T4191] Call Trace: [ 121.462798][ T4191] [ 121.465724][ T4191] dump_stack_lvl+0x168/0x230 [ 121.470407][ T4191] ? show_regs_print_info+0x20/0x20 [ 121.475616][ T4191] ? load_image+0x3b0/0x3b0 [ 121.480129][ T4191] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 121.485539][ T4191] print_address_description+0x60/0x2d0 [ 121.491097][ T4191] ? hci_le_meta_evt+0x12a9/0x3b80 [ 121.496215][ T4191] kasan_report+0xdf/0x130 [ 121.500625][ T4191] ? hci_le_meta_evt+0x12a9/0x3b80 [ 121.505728][ T4191] hci_le_meta_evt+0x12a9/0x3b80 [ 121.510658][ T4191] ? hci_event_packet+0x2d0/0x12f0 [ 121.515770][ T4191] ? hci_remote_host_features_evt+0x280/0x280 [ 121.521830][ T4191] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 121.527444][ T4191] ? mark_lock+0x94/0x320 [ 121.531757][ T4191] ? mutex_unlock+0x10/0x10 [ 121.536241][ T4191] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 121.542205][ T4191] ? lock_chain_count+0x20/0x20 [ 121.547039][ T4191] ? __rwlock_init+0x140/0x140 [ 121.551785][ T4191] hci_event_packet+0xe05/0x12f0 [ 121.556734][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 121.561919][ T4191] ? rcu_lock_release+0x20/0x20 [ 121.566753][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 121.571934][ T4191] hci_rx_work+0x255/0xa10 [ 121.576340][ T4191] process_one_work+0x863/0x1000 [ 121.581270][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 121.586881][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 121.592146][ T4191] ? _raw_spin_lock_irq+0xab/0xe0 [ 121.597149][ T4191] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 121.602501][ T4191] ? wq_worker_running+0x97/0x170 [ 121.607521][ T4191] worker_thread+0xaa8/0x12a0 [ 121.612184][ T4191] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 121.618063][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 121.623242][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 121.628419][ T4191] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 121.634297][ T4191] kthread+0x436/0x520 [ 121.638343][ T4191] ? rcu_lock_release+0x20/0x20 [ 121.643172][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 121.647741][ T4191] ret_from_fork+0x1f/0x30 [ 121.652145][ T4191] [ 121.655144][ T4191] [ 121.657449][ T4191] Allocated by task 5406: [ 121.661750][ T4191] __kasan_kmalloc+0xb5/0xf0 [ 121.666321][ T4191] __alloc_skb+0x22c/0x750 [ 121.670716][ T4191] vhci_write+0xbc/0x450 [ 121.674936][ T4191] vfs_write+0x712/0xd00 [ 121.679158][ T4191] ksys_write+0x14d/0x250 [ 121.683462][ T4191] do_syscall_64+0x4c/0xa0 [ 121.687860][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.693729][ T4191] [ 121.696030][ T4191] The buggy address belongs to the object at ffff88807ea29000 [ 121.696030][ T4191] which belongs to the cache kmalloc-1k of size 1024 [ 121.710057][ T4191] The buggy address is located 0 bytes to the right of [ 121.710057][ T4191] 1024-byte region [ffff88807ea29000, ffff88807ea29400) [ 121.723741][ T4191] The buggy address belongs to the page: [ 121.729357][ T4191] page:ffffea0001fa8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ea28 [ 121.739484][ T4191] head:ffffea0001fa8a00 order:3 compound_mapcount:0 compound_pincount:0 [ 121.747788][ T4191] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 121.755749][ T4191] raw: 00fff00000010200 ffffea0000779e00 0000000400000004 ffff888016841dc0 [ 121.764309][ T4191] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 121.772864][ T4191] page dumped because: kasan: bad access detected [ 121.779259][ T4191] page_owner tracks the page as allocated [ 121.784947][ T4191] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 156, ts 58100669752, free_ts 58044587373 [ 121.803237][ T4191] get_page_from_freelist+0x1b77/0x1c60 [ 121.808766][ T4191] __alloc_pages+0x1e1/0x470 [ 121.813331][ T4191] new_slab+0xc0/0x4b0 [ 121.817377][ T4191] ___slab_alloc+0x81e/0xdf0 [ 121.821940][ T4191] __kmalloc+0x1cd/0x330 [ 121.826158][ T4191] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 121.831969][ T4191] ieee80211_bss_info_update+0x75d/0xaa0 [ 121.837581][ T4191] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 121.843723][ T4191] ieee80211_iface_work+0x70e/0xc60 [ 121.848895][ T4191] process_one_work+0x863/0x1000 [ 121.853808][ T4191] worker_thread+0xaa8/0x12a0 [ 121.858461][ T4191] kthread+0x436/0x520 [ 121.862522][ T4191] ret_from_fork+0x1f/0x30 [ 121.866918][ T4191] page last free stack trace: [ 121.871563][ T4191] free_unref_page_prepare+0x637/0x6c0 [ 121.877002][ T4191] free_unref_page+0x94/0x280 [ 121.881655][ T4191] __unfreeze_partials+0x1a5/0x200 [ 121.886742][ T4191] put_cpu_partial+0x12d/0x190 [ 121.891485][ T4191] qlist_free_all+0x35/0x90 [ 121.895965][ T4191] kasan_quarantine_reduce+0x150/0x160 [ 121.901402][ T4191] __kasan_slab_alloc+0x2f/0xd0 [ 121.906229][ T4191] slab_post_alloc_hook+0x4c/0x380 [ 121.911315][ T4191] kmem_cache_alloc+0x100/0x290 [ 121.916139][ T4191] __kernfs_new_node+0xd6/0x680 [ 121.920966][ T4191] kernfs_new_node+0x148/0x250 [ 121.925707][ T4191] __kernfs_create_file+0x47/0x2e0 [ 121.930824][ T4191] sysfs_add_file_mode_ns+0x2d4/0x3a0 [ 121.936171][ T4191] internal_create_group+0x489/0xcf0 [ 121.941431][ T4191] sysfs_create_groups+0x55/0x120 [ 121.946431][ T4191] device_add_attrs+0x83/0x6a0 [ 121.951171][ T4191] [ 121.953477][ T4191] Memory state around the buggy address: [ 121.959080][ T4191] ffff88807ea29300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.967116][ T4191] ffff88807ea29380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.975149][ T4191] >ffff88807ea29400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.983187][ T4191] ^ [ 121.987243][ T4191] ffff88807ea29480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.995279][ T4191] ffff88807ea29500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.003316][ T4191] ================================================================== [ 122.011358][ T4191] Disabling lock debugging due to kernel taint [ 122.022528][ T4191] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.029745][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 122.038672][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.048722][ T4191] Workqueue: hci3 hci_rx_work [ 122.053396][ T4191] Call Trace: [ 122.056668][ T4191] [ 122.059592][ T4191] dump_stack_lvl+0x168/0x230 [ 122.064269][ T4191] ? show_regs_print_info+0x20/0x20 [ 122.069523][ T4191] ? load_image+0x3b0/0x3b0 [ 122.074023][ T4191] panic+0x2c9/0x7f0 [ 122.077998][ T4191] ? bpf_jit_dump+0xd0/0xd0 [ 122.082498][ T4191] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 122.088387][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 122.093243][ T4191] ? hci_le_meta_evt+0x12a9/0x3b80 [ 122.098351][ T4191] check_panic_on_warn+0x80/0xa0 [ 122.103287][ T4191] ? hci_le_meta_evt+0x12a9/0x3b80 [ 122.108394][ T4191] end_report+0x6d/0xf0 [ 122.112549][ T4191] kasan_report+0x102/0x130 [ 122.117053][ T4191] ? hci_le_meta_evt+0x12a9/0x3b80 [ 122.122167][ T4191] hci_le_meta_evt+0x12a9/0x3b80 [ 122.127104][ T4191] ? hci_event_packet+0x2d0/0x12f0 [ 122.132221][ T4191] ? hci_remote_host_features_evt+0x280/0x280 [ 122.138298][ T4191] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 122.142449][ T4237] usb 2-1: USB disconnect, device number 3 [ 122.143924][ T4191] ? mark_lock+0x94/0x320 [ 122.143945][ T4191] ? mutex_unlock+0x10/0x10 [ 122.158516][ T4191] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 122.164499][ T4191] ? lock_chain_count+0x20/0x20 [ 122.169347][ T4191] ? __rwlock_init+0x140/0x140 [ 122.174107][ T4191] hci_event_packet+0xe05/0x12f0 [ 122.179041][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 122.184240][ T4191] ? rcu_lock_release+0x20/0x20 [ 122.189175][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 122.194371][ T4191] hci_rx_work+0x255/0xa10 [ 122.198790][ T4191] process_one_work+0x863/0x1000 [ 122.203737][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 122.209367][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 122.214652][ T4191] ? _raw_spin_lock_irq+0xab/0xe0 [ 122.219675][ T4191] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 122.225042][ T4191] ? wq_worker_running+0x97/0x170 [ 122.230060][ T4191] worker_thread+0xaa8/0x12a0 [ 122.234731][ T4191] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 122.240621][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 122.245814][ T4191] ? lockdep_hardirqs_on+0x94/0x140 [ 122.251005][ T4191] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 122.256904][ T4191] kthread+0x436/0x520 [ 122.260971][ T4191] ? rcu_lock_release+0x20/0x20 [ 122.265820][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 122.270409][ T4191] ret_from_fork+0x1f/0x30 [ 122.274826][ T4191] [ 122.278017][ T4191] Kernel Offset: disabled [ 122.282328][ T4191] Rebooting in 86400 seconds..