last executing test programs: 12.715808409s ago: executing program 2 (id=167): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x2b06, &(0x7f0000000040), 0x0, &(0x7f0000ffe000)) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(0x0, 0xb8a, 0x18b80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x200000000000000) 11.706714355s ago: executing program 2 (id=171): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 11.424209854s ago: executing program 2 (id=175): getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0x3, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) socket(0x22, 0x2, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c2000003082000abaaaaaabbac1414bbaaaa8cfcf469d98bc0c20000000000000000"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x1000000000000000, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x9, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, 0x3, 0x101, 0x7, 0xfffc, 0x7785, 0x0, 0x4000000000000004, 0x4, 0x8, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x80000002000, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x2, 0x10001, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x5, 0x100000000000, 0xffffffffffffffff, 0x3, 0x200007, 0x0, 0x7, 0xc0c3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffefffff, 0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) 9.65099124s ago: executing program 2 (id=178): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setregid(0x0, 0x0) setresgid(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='./file1\x00', 0x12000335) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000300)=[{0x0}], 0x1, 0x3ff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) 8.416284115s ago: executing program 2 (id=181): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x2b06, &(0x7f0000000040), 0x0, &(0x7f0000ffe000)) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x200000000000000) 7.380168666s ago: executing program 4 (id=191): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setregid(0x0, 0x0) setresgid(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='./file1\x00', 0x12000335) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000300)=[{0x0}], 0x1, 0x3ff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) 7.358891872s ago: executing program 0 (id=192): request_key(&(0x7f0000000000)='syzkaller\x00', 0x0, &(0x7f0000000080)='\x00', 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x9, 0x4, 0x5, 0x8}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 7.288205149s ago: executing program 3 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28682, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x30200, 0x0, &(0x7f0000e02000/0x3000)=nil}) 6.311606811s ago: executing program 0 (id=194): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.302587789s ago: executing program 3 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000001880)={@val={0x0, 0x88fb}, @void, @eth={@empty, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x4, 0x24, 0x67, 0x0, 0x7, 0x21, 0x0, @empty, @local}, {{0x4e24, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x5, 0x7, '\x00', 0x0, "20dda3"}}}}}}}, 0x3e) 6.176100256s ago: executing program 4 (id=196): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) sched_setaffinity(0x0, 0x0, 0x0) socket$tipc(0x1e, 0xa, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)="af3f1d52ce5d36b7c757a616d799209b61147a988b9a26c9098e303e74648a6763b5a817dd5cb46493d3d8e9a49e1bc275aea4a2e8380021fe68b626875bb399019260e1068f672e1b74dd899f5d6ced1201465f6f36af3b13d4d3e5ac01b8a2d1fdbe7fef5a1946da4ee198af37e5079105f18e", 0x8bbee067) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8040) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x204d, 0x2}, @cond=[{0x108, 0x5388, 0x0, 0x800, 0xf535, 0x7}, {0x3, 0x805, 0x1, 0x7, 0x81, 0x1}]}) write$char_usb(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) setresuid(0xee00, 0xee00, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000400)=""/62) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r4, &(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e24, 0x1, @empty, 0x9}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 6.175583636s ago: executing program 2 (id=197): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="400c100000003f3a12dfa0c1fbff0e6a43ac0427eb94"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}}, 0x1c) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000000), 0x4) dup3(r5, r7, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 5.988536863s ago: executing program 4 (id=198): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x8010) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 5.888997374s ago: executing program 3 (id=200): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xe6) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x200600, &(0x7f00000000c0)=ANY=[], 0x1, 0x415, &(0x7f0000000140)="$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") sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d0021000000000000000000070000000500"], 0x30}}, 0x0) 5.783306065s ago: executing program 3 (id=202): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)) 5.692212068s ago: executing program 3 (id=203): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x8010) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 5.664662593s ago: executing program 3 (id=204): socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0)=0x58, 0x5) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r3, &(0x7f00000025c0)={0x2020}, 0x2020) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) 5.439767822s ago: executing program 1 (id=205): request_key(&(0x7f0000000000)='syzkaller\x00', 0x0, &(0x7f0000000080)='\x00', 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x9, 0x4, 0x5, 0x8}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xfffffffffffffffd) 5.26070061s ago: executing program 1 (id=206): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setregid(0x0, 0x0) setresgid(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0), 0x0, 0x2040000, 0x0) r5 = socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='./file1\x00', 0x12000335) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000300)=[{0x0}], 0x1, 0x3ff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) 4.346622293s ago: executing program 4 (id=207): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x2b06, &(0x7f0000000040), 0x0, &(0x7f0000ffe000)) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x200000000000000) 4.092215916s ago: executing program 0 (id=208): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) sched_setaffinity(0x0, 0x0, 0x0) socket$tipc(0x1e, 0xa, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)="af3f1d52ce5d36b7c757a616d799209b61147a988b9a26c9098e303e74648a6763b5a817dd5cb46493d3d8e9a49e1bc275aea4a2e8380021fe68b626875bb399019260e1068f672e1b74dd899f5d6ced1201465f6f36af3b13d4d3e5ac01b8a2d1fdbe7fef5a1946da4ee198af37e5079105f18e", 0x8bbee067) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8040) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x204d, 0x2}, @cond=[{0x108, 0x5388, 0x0, 0x800, 0xf535, 0x7}, {0x3, 0x805, 0x1, 0x7, 0x81, 0x1}]}) write$char_usb(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) setresuid(0xee00, 0xee00, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000400)=""/62) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r4, &(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e24, 0x1, @empty, 0x9}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.046627138s ago: executing program 1 (id=209): getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0x3, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c2000003082000abaaaaaabb"], 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0) 2.74461285s ago: executing program 1 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r4, 0x1e67e000) 2.676379588s ago: executing program 4 (id=211): r0 = epoll_create1(0x80000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000100)={r0, r1}) 2.676075618s ago: executing program 0 (id=212): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 2.546305464s ago: executing program 0 (id=213): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xe6) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x200600, &(0x7f00000000c0)=ANY=[], 0x1, 0x415, &(0x7f0000000140)="$eJzs3E9vG0UfwPHZxNbjx5UqpIokTXOYthzCoe56QxxZPS3rsTPtene1u0bJCVXEriKcgmiRaA6ouRSQQPAWypEXwZl3wSuouPYAMto/CU4cO22axlH1/UjJjHd/O/ObsbUTb7QrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMJyGaVYN4WqvsyHHcxqh356wf7+9G4eKCf0KYSQ/olQSC9mmhSv/7X4/a2Q+ezUvSklREruX5t67c6VQyJowxISEzsWjJ7uf3+/3u1/JshBTz+b8tZSnI1+37ZaSOvJlvVYzb683I9nUroo2o1i1pRMqO/ZDuex8KKv1+opUf2/6Ha/VsF21v3HtlmWaNXm3Eig7jHzv9t1K5Kxr19VeK41Jdicxa8kH8Z6OZazstpS97X535aQkk6DqqwRZUhYmvo2WaVnVqmVVa6v11TXTLIxsMI8QIxHT/9Di3JWGP1Znev4G3sQgX/8BAAAAAMC7y0ivsSff/4vpdXhDNLWrzGmnBQAAAAAAzlD6n//5pCgmtQVh8P0fAAAAAIB3zffj7rGbEWI2j/mf8ftfIlT/z17t2MlveyffO3u0xbi5aFzOG0mLWiF/5agl46oQP/8zGFzdj36RF700j5l868vBYCiP9F5BIwyLxl6w8YFx+gTEj2Ixi1ncysqt/T1ZL+WmdlXF8d07VWHbl2ditRF//XD7GyGS3n/w2pcN0dvudyuffdHfSnPZS1rZ28lvoBi5j2JCLo8P7nscnfkkl2J6ISbvt5z1aw6PP5+smdfo85m4ll3ouVbOYsuHx19K+qxWDo/+1z/E4SyqQyO/JE4a+WAwGCQbhrNYymKWlm8mxc3lY7KwKuPegzwLa3j+TzUXr5DFyklZvHz6ZlkAwLT0TliFDDGy7p7iLNeb8FfG2a3uz8T1LOb6YnpiLSwec0Y3x57RneE19vTr+m/iRjY3B89AGLfGJv3+dGRVfZ4c8Hxsv5FrGckUzj7e+VLMPXqye2t75/6D7oPuQ8taqZkfmeaqJYrpMESxN9vvmqw9AIBjqPCFUY6/M8JQB59W6/WqHa8rGfrOPRnqRktJ7cUqdNZtr6VkEPqx7/jiaX5sJKNOEPhhLJt+KAM/0hvpk19k/uiXSLVtL9ZOFLjKjpR0fC+2nVg2dOTIoPOxq6N1FaYHR4FydFM7dqx9T0Z+J3RURcpIqaFA3VBerJs6qXoyCHXbDjflJ77baSvZUJET6iD2swb3+9Je0w/babOVaU82AAAXxMET7N5iZdpjBAAAh42s0lemnBAAAAAAAAAAAAAAAAAAAAAAABjxenfy/Tl3mqOoULlwlW9/uRBpXNzKtM9MAN62fwMAAP//Ns6ntg==") sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d0021000000000000000000070000000500"], 0x30}}, 0x0) 879.13622ms ago: executing program 4 (id=214): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x8010) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 443.667611ms ago: executing program 1 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x2, 0x2, 0x0, "3bd9d32ea20600e4ffffffedff000000000037340311979df25800", 0x31364d59}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) 442.73707ms ago: executing program 0 (id=216): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b0102030109021b0001010400000904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40025b0c, &(0x7f0000000000)={0xffffffff, 0x200, 0x0, 0x101}) write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="e2f6fa500f77ac4356f4e6a17bcc09a0712c4921c89bf9491ba7589eeb0000000000000000124b93f3c12a6e414fccffff84d12e2fac12c96d3b3e435e1707829da45702d438b2bf7126b5a568b634bc348716ee2de2d2bc8e323ed36264bbfa69266aee9605f95c32f5ac63bdf1ecf0d846287f1e72064a7ede5fb8024646d2f3c0b4b10a17851e57a37cf8652b41c5f26e64d242066cb33aa2b60521d9005422f3a5d03b3b4227869b34db90b2fe03c682271efdab4785b0e541e46d665e1e653ffcf0d48a8f4ed3dad6b40794d16e00504c0935cc0607815d34ceb57ca6324a63292126c4cccb64c657174519f839650e80097362e890c3d3c221864d7e5b7e3e8953acc98c57574c9a77207e60257599d3a6659438a21c2078b0688c67f8d952714dd85540780e31f70f8a", 0x12d) 0s ago: executing program 1 (id=217): getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0x3, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) socket(0x22, 0x2, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c2000003082000abaaaaaabbac1414bbaaaa8cfcf469d98bc0c20000000000000000"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x1000000000000000, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x9, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, 0x3, 0x101, 0x7, 0xfffc, 0x7785, 0x0, 0x4000000000000004, 0x4, 0x8, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x80000002000, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x2, 0x10001, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x5, 0x100000000000, 0xffffffffffffffff, 0x3, 0x200007, 0x0, 0x7, 0xc0c3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffefffff, 0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 67.916480][ T4172] cgroup: Unknown subsys name 'net' [ 68.056379][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.550313][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.081916][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 71.137781][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 71.170489][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 71.246561][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 71.280446][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 71.307676][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.315704][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.324364][ T4184] device bridge_slave_0 entered promiscuous mode [ 71.353321][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.360669][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.368512][ T4193] device bridge_slave_0 entered promiscuous mode [ 71.376945][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.384153][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.392692][ T4184] device bridge_slave_1 entered promiscuous mode [ 71.417323][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.425481][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.433865][ T4193] device bridge_slave_1 entered promiscuous mode [ 71.491153][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.508731][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.537488][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.553989][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.561557][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.570213][ T4192] device bridge_slave_0 entered promiscuous mode [ 71.583432][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.590160][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.607548][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.614741][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.622995][ T4187] device bridge_slave_0 entered promiscuous mode [ 71.633381][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.651407][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.658614][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.667361][ T4192] device bridge_slave_1 entered promiscuous mode [ 71.675593][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.683160][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.691820][ T4189] device bridge_slave_0 entered promiscuous mode [ 71.700993][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.708223][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.716437][ T4187] device bridge_slave_1 entered promiscuous mode [ 71.733441][ T4184] team0: Port device team_slave_0 added [ 71.747762][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.755021][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.763344][ T4189] device bridge_slave_1 entered promiscuous mode [ 71.785271][ T4184] team0: Port device team_slave_1 added [ 71.836108][ T4193] team0: Port device team_slave_0 added [ 71.844365][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.862373][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.873697][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.884291][ T4193] team0: Port device team_slave_1 added [ 71.892077][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.902159][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.909448][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.935546][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.949793][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.961114][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.983664][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.990776][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.017391][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.076937][ T4187] team0: Port device team_slave_0 added [ 72.090538][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.097630][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.124260][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.138841][ T4192] team0: Port device team_slave_0 added [ 72.147169][ T4192] team0: Port device team_slave_1 added [ 72.163218][ T4187] team0: Port device team_slave_1 added [ 72.178082][ T4189] team0: Port device team_slave_0 added [ 72.185000][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.192856][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.226171][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.259315][ T4189] team0: Port device team_slave_1 added [ 72.265558][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.272771][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.299302][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.315421][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.322710][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.349755][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.379293][ T4184] device hsr_slave_0 entered promiscuous mode [ 72.386361][ T4184] device hsr_slave_1 entered promiscuous mode [ 72.394347][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.401668][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.427857][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.444219][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.452199][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.478354][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.528881][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.536308][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.563085][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.580290][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.587377][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.614518][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.663310][ T4187] device hsr_slave_0 entered promiscuous mode [ 72.670928][ T4187] device hsr_slave_1 entered promiscuous mode [ 72.677998][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.686501][ T4187] Cannot create hsr debugfs directory [ 72.697092][ T4193] device hsr_slave_0 entered promiscuous mode [ 72.705868][ T4193] device hsr_slave_1 entered promiscuous mode [ 72.713264][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.720963][ T4193] Cannot create hsr debugfs directory [ 72.760236][ T4192] device hsr_slave_0 entered promiscuous mode [ 72.767967][ T4192] device hsr_slave_1 entered promiscuous mode [ 72.772609][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 72.775122][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 72.787329][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 72.794553][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 72.800846][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 72.807053][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.814864][ T4192] Cannot create hsr debugfs directory [ 72.871175][ T4189] device hsr_slave_0 entered promiscuous mode [ 72.878193][ T4189] device hsr_slave_1 entered promiscuous mode [ 72.885994][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.893709][ T4189] Cannot create hsr debugfs directory [ 73.199471][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.212186][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.223395][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.236481][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.288311][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.309858][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.326615][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.368407][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.378711][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.409001][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.428304][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.443582][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.477797][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.492964][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.505130][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.516297][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.557672][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.633762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.645727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.658337][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.667606][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.699582][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.714800][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.726033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.737692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.747107][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.754582][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.781696][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.793424][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.806414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.828814][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.844859][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.853812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.865685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.875107][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.882242][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.891204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.900349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.908249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.927595][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.937422][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.946666][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.953820][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.986533][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.994526][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.005643][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.015406][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.025701][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.035800][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.045436][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.055376][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.064528][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.075459][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.082964][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.091267][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.104924][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.132229][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.145753][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.154590][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.163691][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.173871][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.184764][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.193047][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.201159][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.214409][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.226559][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.238709][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.256902][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.273009][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.290780][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.307381][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.318614][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.328732][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.338706][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.348102][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.357068][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.386048][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.407960][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.417210][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.437082][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.448291][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.455525][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.473077][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.486866][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.496760][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.506089][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.516737][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.524742][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.536525][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.562944][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.573665][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.587246][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.599918][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.608694][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.621248][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.661764][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.680287][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.700151][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.719716][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.726943][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.747312][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.763078][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.775010][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.786743][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.795910][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.803442][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.812615][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.847470][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.859870][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 74.867280][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 74.874155][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.888556][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.897035][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 74.905236][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.913666][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 74.920890][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.930171][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 74.942634][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.955178][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.993720][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.004557][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.015328][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.024763][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.035133][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.044610][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.053564][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.065334][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.083843][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.104813][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.120283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.135836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.148896][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.161783][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.216342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.232026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.256669][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.271706][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.288238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.299603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.307238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.327113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.370623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.390510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.403211][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.411140][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.421589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.431458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.440915][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.448037][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.463028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.484724][ T4192] device veth0_vlan entered promiscuous mode [ 75.519818][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.528926][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.538618][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.548635][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.557935][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.591620][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.614762][ T4192] device veth1_vlan entered promiscuous mode [ 75.624822][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.635185][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.644366][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.654028][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.663291][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.673397][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.688193][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.696174][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.735822][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.746699][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.755656][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.766507][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.775994][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.785806][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.794920][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.804048][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.813614][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.823447][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.834171][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.842788][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.851811][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.863446][ T4184] device veth0_vlan entered promiscuous mode [ 75.881985][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.891911][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.906755][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.918427][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.931475][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.958531][ T4192] device veth0_macvtap entered promiscuous mode [ 75.979736][ T4192] device veth1_macvtap entered promiscuous mode [ 75.991885][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.006512][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.016496][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.031912][ T4184] device veth1_vlan entered promiscuous mode [ 76.067226][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.075437][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.084014][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.094672][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.104272][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.114892][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.125080][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.154597][ T4187] device veth0_vlan entered promiscuous mode [ 76.172777][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.183873][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.193595][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.202380][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.213152][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.223041][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.232528][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.242118][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.254729][ T4189] device veth0_vlan entered promiscuous mode [ 76.285642][ T4187] device veth1_vlan entered promiscuous mode [ 76.298461][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.309271][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.318031][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.327203][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.346504][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.356348][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.366170][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.381899][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.391026][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.401060][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.411993][ T4184] device veth0_macvtap entered promiscuous mode [ 76.426313][ T4184] device veth1_macvtap entered promiscuous mode [ 76.444602][ T4189] device veth1_vlan entered promiscuous mode [ 76.491942][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.502020][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.511182][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.518915][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.534269][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.568186][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.599711][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.612092][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.649374][ T4187] device veth0_macvtap entered promiscuous mode [ 76.666059][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.676054][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.693222][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.705288][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.714936][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.739316][ T4187] device veth1_macvtap entered promiscuous mode [ 76.752901][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.765993][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.784456][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.797746][ T4189] device veth0_macvtap entered promiscuous mode [ 76.806893][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.821996][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.835028][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.847056][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.857985][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.867812][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.891967][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.904131][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.913872][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.923453][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.926446][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.934856][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 76.945282][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.960704][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 76.972084][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.979444][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 76.997826][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.008371][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.019895][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 77.032163][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 77.038326][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.051260][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.059699][ T4189] device veth1_macvtap entered promiscuous mode [ 77.084515][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.096808][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.107888][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.117003][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.135792][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.147032][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.157099][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.168016][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.181472][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.205513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.214684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.228824][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.238111][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.247394][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.257990][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.279682][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.287551][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.343945][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.355587][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.378147][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.388175][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.400934][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.411832][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.422668][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.435213][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.453388][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.471679][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.485705][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.504229][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.515032][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.529880][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.542500][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.568937][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.580796][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.591080][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.600218][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.610246][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.618905][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.653258][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.694789][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.704125][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.717568][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.119736][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.213766][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.277521][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.378748][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.422167][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.430265][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.550581][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.585479][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.620551][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.663758][ T4193] device veth0_vlan entered promiscuous mode [ 78.880259][ T4193] device veth1_vlan entered promiscuous mode [ 78.904116][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.789068][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.840614][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.852015][ T4272] loop0: detected capacity change from 0 to 32768 [ 79.859899][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.867972][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.877941][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 79.884141][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 79.890727][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 79.902373][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 79.908548][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 79.958348][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.970683][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.982947][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.027778][ T4193] device veth0_macvtap entered promiscuous mode [ 80.052010][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.059967][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.060011][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.078521][ T4193] device veth1_macvtap entered promiscuous mode [ 80.101386][ T4272] XFS (loop0): Mounting V5 Filesystem [ 80.125794][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.130392][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.142988][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.175185][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.183586][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.224255][ T4272] XFS (loop0): Ending clean mount [ 80.305232][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.315507][ T4285] loop2: detected capacity change from 0 to 256 [ 80.381418][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.392188][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.403073][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.413422][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.424690][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.435343][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.446453][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.478161][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.493658][ T4287] loop1: detected capacity change from 0 to 16 [ 80.512062][ T4192] XFS (loop0): Unmounting Filesystem [ 80.528770][ T4285] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.553419][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.565630][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.586158][ T4287] erofs: (device loop1): mounted with root inode @ nid 36. [ 80.604588][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.636416][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.670081][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.711480][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.737548][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.753627][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.765654][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.776486][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.789614][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.801954][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.812866][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.835237][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.844495][ T4273] Process accounting resumed [ 80.856796][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.880955][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.897703][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.917374][ T4273] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 80.927156][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.949131][ T4273] FAT-fs (loop2): Filesystem has been set read-only [ 80.986245][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.997242][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282052][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.306047][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.334235][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.403503][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.450942][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.510061][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.897797][ T4308] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 82.859601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 82.868801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 82.877930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 82.886986][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 83.035235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.089750][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.137691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.179299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.857555][ T4330] overlayfs: failed to clone lowerpath [ 85.797615][ T4353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 86.454408][ T4351] loop1: detected capacity change from 0 to 32768 [ 86.637054][ T4351] XFS (loop1): Mounting V5 Filesystem [ 86.659359][ T4372] overlayfs: failed to clone lowerpath [ 87.729029][ C1] sched: RT throttling activated [ 87.825235][ T4386] loop4: detected capacity change from 0 to 32768 [ 87.885775][ T1335] cfg80211: failed to load regulatory.db [ 87.971017][ T4351] XFS (loop1): Ending clean mount [ 88.034541][ T4386] XFS (loop4): Mounting V5 Filesystem [ 88.090283][ T4184] XFS (loop1): Unmounting Filesystem [ 88.232316][ T4386] XFS (loop4): Ending clean mount [ 88.529554][ T4193] XFS (loop4): Unmounting Filesystem [ 89.959931][ T4418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.37'. [ 90.143018][ T4418] unsupported nlmsg_type 40 [ 90.707335][ T4418] loop1: detected capacity change from 0 to 136 [ 90.896026][ T4418] Attempt to read inode for relocated directory [ 90.952343][ T4418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 90.982320][ T4428] loop0: detected capacity change from 0 to 128 [ 91.223246][ T4428] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 91.542532][ T4428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.554593][ T4437] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET) [ 92.718364][ T4447] loop4: detected capacity change from 0 to 1024 [ 92.815463][ T4447] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 94.759879][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 95.212767][ T4461] loop0: detected capacity change from 0 to 32768 [ 95.657261][ T4461] XFS (loop0): Mounting V5 Filesystem [ 95.797769][ T4461] XFS (loop0): Ending clean mount [ 96.014157][ T4192] XFS (loop0): Unmounting Filesystem [ 97.883897][ T4511] loop4: detected capacity change from 0 to 16 [ 97.954869][ T4511] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.967015][ T4511] attempt to access beyond end of device [ 97.967015][ T4511] loop4: rw=524288, want=1072, limit=16 [ 97.980944][ T4188] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 98.005760][ T4511] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 98.015098][ T4511] attempt to access beyond end of device [ 98.015098][ T4511] loop4: rw=524288, want=56, limit=16 [ 98.029674][ T4511] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 98.052943][ T26] audit: type=1800 audit(1773226307.641:2): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.65" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 99.388549][ T4522] netlink: 60 bytes leftover after parsing attributes in process `syz.2.69'. [ 99.425980][ T4522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'. [ 104.187178][ T4559] overlayfs: failed to clone upperpath [ 105.035489][ T4565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.81'. [ 105.150405][ T4565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.81'. [ 105.306077][ T4574] ======================================================= [ 105.306077][ T4574] WARNING: The mand mount option has been deprecated and [ 105.306077][ T4574] and is ignored by this kernel. Remove the mand [ 105.306077][ T4574] option from the mount to silence this warning. [ 105.306077][ T4574] ======================================================= [ 105.356391][ T4577] netlink: 'syz.0.85': attribute type 39 has an invalid length. [ 105.484709][ T4574] overlayfs: unrecognized mount option "/ino=auto" or missing value [ 105.614646][ T4583] block device autoloading is deprecated and will be removed. [ 106.810998][ T4574] md: could not open device unknown-block(0,0). [ 106.817932][ T4574] md: md_import_device returned -6 [ 114.097372][ T26] audit: type=1326 audit(1773226323.681:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.183153][ T4659] crypto_alloc_aead failed rc=-4 [ 114.197916][ T26] audit: type=1326 audit(1773226323.731:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.399187][ T26] audit: type=1326 audit(1773226323.731:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.488137][ T26] audit: type=1326 audit(1773226323.731:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.556291][ T26] audit: type=1326 audit(1773226323.731:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.651809][ T26] audit: type=1326 audit(1773226323.731:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.701569][ T4690] loop4: detected capacity change from 0 to 4096 [ 114.717501][ T26] audit: type=1326 audit(1773226323.731:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.760545][ T26] audit: type=1326 audit(1773226323.741:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.803221][ T26] audit: type=1326 audit(1773226323.761:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208b01799 code=0x7ffc0000 [ 114.869853][ T4690] ntfs3: Unknown parameter 'windows_names' [ 119.480435][ T4739] loop4: detected capacity change from 0 to 32768 [ 119.644822][ T4739] XFS (loop4): Mounting V5 Filesystem [ 120.564541][ T4739] XFS (loop4): Ending clean mount [ 120.786116][ T4193] XFS (loop4): Unmounting Filesystem [ 121.733122][ T4760] overlayfs: failed to clone lowerpath [ 123.865125][ T4782] binder: 4781:4782 ioctl c0306201 2000000003c0 returned -14 [ 124.309635][ T4791] overlayfs: failed to clone lowerpath [ 125.422928][ T4812] overlayfs: failed to clone upperpath [ 125.620224][ T4821] overlayfs: failed to clone lowerpath [ 126.973227][ T4850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.170'. [ 129.311681][ T4875] Zero length message leads to an empty skb [ 130.757483][ T4884] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.952435][ T4886] overlayfs: failed to clone lowerpath [ 131.067001][ T4893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.187'. [ 132.776844][ T4926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.200'. [ 132.797142][ T4926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.200'. [ 133.012385][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.018882][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.613674][ T4947] overlayfs: failed to clone lowerpath [ 137.209693][ T4965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.213'. [ 137.791348][ T4965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.213'. [ 138.665648][ T4969] ================================================================== [ 138.673974][ T4969] BUG: KASAN: use-after-free in ax25_find_cb+0x175/0x3a0 [ 138.681041][ T4969] Read of size 8 at addr ffff88802ad39208 by task syz.4.214/4969 [ 138.688924][ T4969] [ 138.691279][ T4969] CPU: 0 PID: 4969 Comm: syz.4.214 Not tainted syzkaller #0 [ 138.698575][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.708647][ T4969] Call Trace: [ 138.711944][ T4969] [ 138.714926][ T4969] dump_stack_lvl+0x188/0x250 [ 138.719656][ T4969] ? show_regs_print_info+0x20/0x20 [ 138.724905][ T4969] ? _printk+0xda/0x130 [ 138.729206][ T4969] ? ax25_find_cb+0x175/0x3a0 [ 138.733977][ T4969] ? load_image+0x400/0x400 [ 138.738515][ T4969] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 138.744104][ T4969] print_address_description+0x60/0x2d0 [ 138.749877][ T4969] ? ax25_find_cb+0x175/0x3a0 [ 138.754574][ T4969] kasan_report+0xdf/0x130 [ 138.759039][ T4969] ? ax25_find_cb+0x175/0x3a0 [ 138.763871][ T4969] ax25_find_cb+0x175/0x3a0 [ 138.768406][ T4969] rose_transmit_link+0x169/0x730 [ 138.773660][ T4969] rose_write_internal+0x680/0x1e90 [ 138.779069][ T4969] ? rose_validate_nr+0x120/0x120 [ 138.784116][ T4969] ? __timer_delete+0x6c/0x220 [ 138.788910][ T4969] ? skb_queue_purge+0x62/0x290 [ 138.793904][ T4969] rose_release+0x22a/0x4e0 [ 138.798563][ T4969] sock_close+0xd5/0x240 [ 138.802914][ T4969] ? sock_mmap+0x90/0x90 [ 138.807433][ T4969] __fput+0x234/0x930 [ 138.811451][ T4969] task_work_run+0x125/0x1a0 [ 138.816127][ T4969] get_signal+0x1222/0x12c0 [ 138.820681][ T4969] arch_do_signal_or_restart+0xe7/0x12c0 [ 138.826338][ T4969] ? kick_process+0xd4/0x140 [ 138.831046][ T4969] ? task_work_add+0x1a7/0x1d0 [ 138.835929][ T4969] ? get_sigframe_size+0x10/0x10 [ 138.840968][ T4969] ? __sys_connect+0x278/0x450 [ 138.845829][ T4969] ? exit_to_user_mode_loop+0x3b/0x130 [ 138.851376][ T4969] exit_to_user_mode_loop+0x9e/0x130 [ 138.856868][ T4969] exit_to_user_mode_prepare+0xee/0x180 [ 138.862453][ T4969] syscall_exit_to_user_mode+0x16/0x40 [ 138.867996][ T4969] do_syscall_64+0x58/0xa0 [ 138.872469][ T4969] ? clear_bhb_loop+0x30/0x80 [ 138.877405][ T4969] ? clear_bhb_loop+0x30/0x80 [ 138.882186][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.888187][ T4969] RIP: 0033:0x7fa208b01799 [ 138.892644][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.912373][ T4969] RSP: 002b:00007fa206d5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 138.920808][ T4969] RAX: fffffffffffffe00 RBX: 00007fa208d7afa0 RCX: 00007fa208b01799 [ 138.928928][ T4969] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000008 [ 138.936943][ T4969] RBP: 00007fa208b97c99 R08: 0000000000000000 R09: 0000000000000000 [ 138.944973][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.952969][ T4969] R13: 00007fa208d7b038 R14: 00007fa208d7afa0 R15: 00007ffdb247afa8 [ 138.961009][ T4969] [ 138.964201][ T4969] [ 138.966540][ T4969] Allocated by task 4476: [ 138.970867][ T4969] __kasan_kmalloc+0xb5/0xf0 [ 138.975573][ T4969] ax25_dev_device_up+0x50/0x580 [ 138.980654][ T4969] ax25_device_event+0x483/0x4f0 [ 138.985628][ T4969] raw_notifier_call_chain+0xcb/0x160 [ 138.991039][ T4969] __dev_notify_flags+0x194/0x300 [ 138.996081][ T4969] dev_change_flags+0xe3/0x1a0 [ 139.001124][ T4969] dev_ifsioc+0x130/0xd50 [ 139.005489][ T4969] dev_ioctl+0x545/0xe30 [ 139.009862][ T4969] sock_do_ioctl+0x245/0x320 [ 139.014483][ T4969] sock_ioctl+0x4d2/0x710 [ 139.018842][ T4969] __se_sys_ioctl+0xfa/0x170 [ 139.024129][ T4969] do_syscall_64+0x4c/0xa0 [ 139.028771][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.036307][ T4969] [ 139.038763][ T4969] Freed by task 4968: [ 139.042841][ T4969] kasan_set_track+0x4b/0x70 [ 139.047465][ T4969] kasan_set_free_info+0x1f/0x40 [ 139.052467][ T4969] ____kasan_slab_free+0xd5/0x110 [ 139.057602][ T4969] slab_free_freelist_hook+0xea/0x170 [ 139.063189][ T4969] kfree+0xef/0x2a0 [ 139.067013][ T4969] ax25_release+0x661/0x870 [ 139.071528][ T4969] sock_close+0xd5/0x240 [ 139.075958][ T4969] __fput+0x234/0x930 [ 139.079947][ T4969] task_work_run+0x125/0x1a0 [ 139.084560][ T4969] exit_to_user_mode_loop+0x10f/0x130 [ 139.089936][ T4969] exit_to_user_mode_prepare+0xee/0x180 [ 139.095487][ T4969] syscall_exit_to_user_mode+0x16/0x40 [ 139.100954][ T4969] do_syscall_64+0x58/0xa0 [ 139.105379][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.111283][ T4969] [ 139.113694][ T4969] Last potentially related work creation: [ 139.119403][ T4969] kasan_save_stack+0x35/0x60 [ 139.124111][ T4969] kasan_record_aux_stack+0xb8/0x100 [ 139.129401][ T4969] insert_work+0x54/0x3d0 [ 139.134063][ T4969] __queue_work+0x9c5/0xd50 [ 139.138583][ T4969] queue_work_on+0x124/0x1f0 [ 139.143388][ T4969] inet6addr_event+0x9c/0xc0 [ 139.148041][ T4969] atomic_notifier_call_chain+0x15d/0x280 [ 139.153775][ T4969] ipv6_add_addr+0xb57/0xe10 [ 139.158440][ T4969] inet6_addr_add+0x43a/0x9c0 [ 139.163146][ T4969] inet6_rtm_newaddr+0x64c/0x8f0 [ 139.168150][ T4969] rtnetlink_rcv_msg+0x844/0xf30 [ 139.173103][ T4969] netlink_rcv_skb+0x1f5/0x440 [ 139.177877][ T4969] netlink_unicast+0x774/0x920 [ 139.182666][ T4969] netlink_sendmsg+0x8ba/0xbe0 [ 139.187437][ T4969] __sys_sendto+0x46d/0x620 [ 139.191963][ T4969] __x64_sys_sendto+0xda/0xf0 [ 139.196681][ T4969] do_syscall_64+0x4c/0xa0 [ 139.201167][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.207068][ T4969] [ 139.209403][ T4969] Second to last potentially related work creation: [ 139.215994][ T4969] kasan_save_stack+0x35/0x60 [ 139.220965][ T4969] kasan_record_aux_stack+0xb8/0x100 [ 139.226271][ T4969] insert_work+0x54/0x3d0 [ 139.230629][ T4969] __queue_work+0x9c5/0xd50 [ 139.235161][ T4969] queue_work_on+0x124/0x1f0 [ 139.239760][ T4969] call_usermodehelper_exec+0x2e3/0x520 [ 139.245662][ T4969] kobject_uevent_env+0x681/0x890 [ 139.250697][ T4969] device_add+0x91c/0xfb0 [ 139.255044][ T4969] snd_register_device+0x32c/0x480 [ 139.260203][ T4969] snd_pcm_dev_register+0x523/0x870 [ 139.265418][ T4969] snd_device_register_all+0xc8/0x190 [ 139.270799][ T4969] snd_card_register+0x1b0/0x6e0 [ 139.275747][ T4969] loopback_probe+0x14c6/0x1b50 [ 139.280605][ T4969] platform_probe+0x137/0x1c0 [ 139.285300][ T4969] really_probe+0x284/0xc80 [ 139.289921][ T4969] __driver_probe_device+0x18c/0x330 [ 139.295319][ T4969] driver_probe_device+0x4f/0x420 [ 139.300346][ T4969] __device_attach_driver+0x2b0/0x500 [ 139.305730][ T4969] bus_for_each_drv+0x184/0x210 [ 139.310595][ T4969] __device_attach+0x2a8/0x480 [ 139.315389][ T4969] bus_probe_device+0xbc/0x1e0 [ 139.320198][ T4969] device_add+0xa00/0xfb0 [ 139.324536][ T4969] platform_device_add+0x4b9/0x820 [ 139.329695][ T4969] platform_device_register_full+0x622/0x730 [ 139.335686][ T4969] alsa_card_loopback_init+0x14f/0x2a0 [ 139.341178][ T4969] do_one_initcall+0x272/0x730 [ 139.346557][ T4969] do_initcall_level+0x137/0x1f0 [ 139.351610][ T4969] do_initcalls+0x4b/0x90 [ 139.356048][ T4969] kernel_init_freeable+0x3e9/0x570 [ 139.361283][ T4969] kernel_init+0x19/0x1b0 [ 139.366112][ T4969] ret_from_fork+0x1f/0x30 [ 139.370550][ T4969] [ 139.372881][ T4969] The buggy address belongs to the object at ffff88802ad39200 [ 139.372881][ T4969] which belongs to the cache kmalloc-192 of size 192 [ 139.387124][ T4969] The buggy address is located 8 bytes inside of [ 139.387124][ T4969] 192-byte region [ffff88802ad39200, ffff88802ad392c0) [ 139.401686][ T4969] The buggy address belongs to the page: [ 139.407638][ T4969] page:ffffea0000ab4e40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ad39 [ 139.417919][ T4969] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 139.425961][ T4969] raw: 00fff00000000200 0000000000000000 0000000100000001 ffff888016c41a00 [ 139.434560][ T4969] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 139.443684][ T4969] page dumped because: kasan: bad access detected [ 139.450242][ T4969] page_owner tracks the page as allocated [ 139.456169][ T4969] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 21634334780, free_ts 21602442405 [ 139.472570][ T4969] get_page_from_freelist+0x1bbd/0x1ca0 [ 139.478234][ T4969] __alloc_pages+0x1ee/0x480 [ 139.482980][ T4969] alloc_page_interleave+0x24/0x1e0 [ 139.488539][ T4969] new_slab+0xc0/0x4b0 [ 139.492631][ T4969] ___slab_alloc+0x80a/0xdd0 [ 139.497243][ T4969] __kmalloc+0x1cd/0x330 [ 139.501516][ T4969] snd_ctl_new1+0x115/0x820 [ 139.506121][ T4969] loopback_probe+0x108a/0x1b50 [ 139.510984][ T4969] platform_probe+0x137/0x1c0 [ 139.515668][ T4969] really_probe+0x284/0xc80 [ 139.520178][ T4969] __driver_probe_device+0x18c/0x330 [ 139.525720][ T4969] driver_probe_device+0x4f/0x420 [ 139.531032][ T4969] __device_attach_driver+0x2b0/0x500 [ 139.536413][ T4969] bus_for_each_drv+0x184/0x210 [ 139.541275][ T4969] __device_attach+0x2a8/0x480 [ 139.546112][ T4969] bus_probe_device+0xbc/0x1e0 [ 139.550886][ T4969] page last free stack trace: [ 139.555553][ T4969] free_unref_page_prepare+0x637/0x6c0 [ 139.561050][ T4969] free_unref_page+0x8f/0x2a0 [ 139.565766][ T4969] __vunmap+0x8b9/0xa50 [ 139.569933][ T4969] free_work+0x56/0x80 [ 139.574037][ T4969] process_one_work+0x85f/0x1010 [ 139.579176][ T4969] worker_thread+0xaa6/0x1290 [ 139.584014][ T4969] kthread+0x436/0x520 [ 139.588109][ T4969] ret_from_fork+0x1f/0x30 [ 139.592717][ T4969] [ 139.595144][ T4969] Memory state around the buggy address: [ 139.601480][ T4969] ffff88802ad39100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.609737][ T4969] ffff88802ad39180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 139.617809][ T4969] >ffff88802ad39200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.626402][ T4969] ^ [ 139.630752][ T4969] ffff88802ad39280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 139.639236][ T4969] ffff88802ad39300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.647321][ T4969] ================================================================== [ 139.655852][ T4969] Disabling lock debugging due to kernel taint [ 139.662224][ T4969] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.669619][ T4969] CPU: 0 PID: 4969 Comm: syz.4.214 Tainted: G B syzkaller #0 [ 139.678310][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.688653][ T4969] Call Trace: [ 139.691939][ T4969] [ 139.694879][ T4969] dump_stack_lvl+0x188/0x250 [ 139.699671][ T4969] ? show_regs_print_info+0x20/0x20 [ 139.705054][ T4969] ? load_image+0x400/0x400 [ 139.709804][ T4969] panic+0x2e5/0x810 [ 139.713712][ T4969] ? asm_common_interrupt+0x22/0x40 [ 139.718918][ T4969] ? bpf_jit_dump+0xd0/0xd0 [ 139.723434][ T4969] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 139.729874][ T4969] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 139.736028][ T4969] ? _raw_spin_unlock+0x40/0x40 [ 139.740900][ T4969] ? ax25_find_cb+0x175/0x3a0 [ 139.745793][ T4969] check_panic_on_warn+0x80/0xa0 [ 139.750837][ T4969] ? ax25_find_cb+0x175/0x3a0 [ 139.755524][ T4969] end_report+0x6d/0xf0 [ 139.759861][ T4969] kasan_report+0x102/0x130 [ 139.764416][ T4969] ? ax25_find_cb+0x175/0x3a0 [ 139.769140][ T4969] ax25_find_cb+0x175/0x3a0 [ 139.773652][ T4969] rose_transmit_link+0x169/0x730 [ 139.778787][ T4969] rose_write_internal+0x680/0x1e90 [ 139.784274][ T4969] ? rose_validate_nr+0x120/0x120 [ 139.789331][ T4969] ? __timer_delete+0x6c/0x220 [ 139.794103][ T4969] ? skb_queue_purge+0x62/0x290 [ 139.798969][ T4969] rose_release+0x22a/0x4e0 [ 139.803576][ T4969] sock_close+0xd5/0x240 [ 139.807828][ T4969] ? sock_mmap+0x90/0x90 [ 139.812075][ T4969] __fput+0x234/0x930 [ 139.816439][ T4969] task_work_run+0x125/0x1a0 [ 139.821050][ T4969] get_signal+0x1222/0x12c0 [ 139.825704][ T4969] arch_do_signal_or_restart+0xe7/0x12c0 [ 139.831359][ T4969] ? kick_process+0xd4/0x140 [ 139.835957][ T4969] ? task_work_add+0x1a7/0x1d0 [ 139.840761][ T4969] ? get_sigframe_size+0x10/0x10 [ 139.845708][ T4969] ? __sys_connect+0x278/0x450 [ 139.850481][ T4969] ? exit_to_user_mode_loop+0x3b/0x130 [ 139.855958][ T4969] exit_to_user_mode_loop+0x9e/0x130 [ 139.861390][ T4969] exit_to_user_mode_prepare+0xee/0x180 [ 139.866953][ T4969] syscall_exit_to_user_mode+0x16/0x40 [ 139.872625][ T4969] do_syscall_64+0x58/0xa0 [ 139.877099][ T4969] ? clear_bhb_loop+0x30/0x80 [ 139.881978][ T4969] ? clear_bhb_loop+0x30/0x80 [ 139.886666][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.892588][ T4969] RIP: 0033:0x7fa208b01799 [ 139.897013][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.916836][ T4969] RSP: 002b:00007fa206d5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 139.925325][ T4969] RAX: fffffffffffffe00 RBX: 00007fa208d7afa0 RCX: 00007fa208b01799 [ 139.933579][ T4969] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000008 [ 139.941768][ T4969] RBP: 00007fa208b97c99 R08: 0000000000000000 R09: 0000000000000000 [ 139.949881][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.958271][ T4969] R13: 00007fa208d7b038 R14: 00007fa208d7afa0 R15: 00007ffdb247afa8 [ 139.966300][ T4969] [ 139.969560][ T4969] Kernel Offset: disabled [ 139.973951][ T4969] Rebooting in 86400 seconds..