last executing test programs: 20.850050896s ago: executing program 1 (id=379): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.724775156s ago: executing program 1 (id=380): fsopen(&(0x7f0000000400)='affs\x00', 0x0) 20.618467805s ago: executing program 1 (id=383): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00'}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) 20.470082956s ago: executing program 1 (id=386): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4", @ANYRESOCT], 0x1, 0x4441, &(0x7f0000010200)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17.929393679s ago: executing program 1 (id=393): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x5, &(0x7f0000006680)) getrandom(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7f4}, &(0x7f0000000080)=0x8) r2 = openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000300)={0x2, 0x34343452, 0x2, @discrete={0x6, 0x400}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="04000a0005000000352a06000400575eab65"], 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x1, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmmsg(r4, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) 13.865575683s ago: executing program 1 (id=406): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/144, 0x90}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e00"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13.78631981s ago: executing program 32 (id=406): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/144, 0x90}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e00"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13.318203587s ago: executing program 3 (id=411): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000000)) 10.119018092s ago: executing program 3 (id=412): setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0xd5, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sysfs$2(0x2, 0xf74, &(0x7f0000000180)=""/22) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) accept4(r0, 0x0, 0x0, 0x0) 9.099812424s ago: executing program 2 (id=415): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) connect$pppoe(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x0, {0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xbc}, 'hsr0\x00'}}, 0x1e) r5 = getpid() r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x20001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r5, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x102) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 7.748122762s ago: executing program 0 (id=417): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x5, &(0x7f0000006680)) getrandom(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7f4}, &(0x7f0000000080)=0x8) r2 = openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000300)={0x2, 0x34343452, 0x2, @discrete={0x6, 0x400}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="04000a0005000000352a06000400575eab65"], 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x1, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmmsg(r4, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) 7.034636189s ago: executing program 2 (id=419): bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$evdev(0x0, 0x0, 0x60000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 5.890011581s ago: executing program 2 (id=420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) 5.88975058s ago: executing program 4 (id=421): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000000)) 5.293577038s ago: executing program 2 (id=422): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40046103, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) capset(0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x240008c8) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, 0x0, 0x0, &(0x7f00000001c0)) mq_open(0x0, 0x40, 0x9, 0x0) sendfile(r0, r1, 0x0, 0x110003) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0xf36, 0x8, "f494bfeba3160200160000000000006d004000"}) 5.256512931s ago: executing program 0 (id=423): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@local}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) 5.030062529s ago: executing program 0 (id=424): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) 5.01528995s ago: executing program 4 (id=425): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008000000000000", @ANYRES32, @ANYBLOB], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 4.906720789s ago: executing program 0 (id=426): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, 0x0}, 0x20) 4.044655078s ago: executing program 4 (id=427): openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x711301, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaa857d3d37e0e41d6b38a252d71ca9aaaa0180c200000086dd6000000000200000fe800000000000000004"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="57fb32c100000000000000000040000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.005113081s ago: executing program 3 (id=428): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) connect$pppoe(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x0, {0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xbc}, 'hsr0\x00'}}, 0x1e) r5 = getpid() r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x20001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r5, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x102) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 3.779240959s ago: executing program 2 (id=429): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 3.7663208s ago: executing program 0 (id=430): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) fanotify_init(0x20, 0x800) syz_open_dev$sndmidi(&(0x7f0000000100), 0x80000001, 0x3422e0c440d01fb7) setreuid(0xffffffffffffffff, 0xee01) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x425b}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x38, 0x0) io_uring_enter(r5, 0x6e2, 0x600, 0x1, 0x0, 0x0) 3.032322448s ago: executing program 3 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x49e8648f) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0xffffffffffffffaf) close_range(r0, r2, 0x0) 2.63147135s ago: executing program 4 (id=432): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00'}) io_uring_enter(r0, 0x5b40, 0x2634, 0x25, 0x0, 0x0) 2.438186896s ago: executing program 4 (id=433): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 2.391653889s ago: executing program 3 (id=434): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1}) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000000)) 118.877831ms ago: executing program 0 (id=435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x21c) 94.669003ms ago: executing program 2 (id=436): write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x6}, 0x2) syz_usb_connect(0x1, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000480), 0xf, 0x602) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) dup(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r3, 0x101, 0x4, 0x619}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000100), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 76.275684ms ago: executing program 3 (id=437): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x84) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) truncate(0x0, 0x8fff5) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r3}}, 0x40) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(&(0x7f0000000300), 0x0, 0x0, 0x2200892, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 0s ago: executing program 4 (id=438): socketpair$unix(0x1, 0x5069ed6169838ae0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x848000000015, 0x805, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 49.779394][ T4172] cgroup: Unknown subsys name 'net' [ 49.923293][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.099695][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.773387][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.857432][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.881418][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.931782][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.943156][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.951100][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.959356][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.970094][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.977149][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.985000][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.009027][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.070827][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.109568][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.120748][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.127804][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.135980][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.150641][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.157713][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.167201][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.175332][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.182437][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.190349][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.229237][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.236296][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.244139][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.259122][ T4185] team0: Port device team_slave_0 added [ 53.292416][ T4185] team0: Port device team_slave_1 added [ 53.303362][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.314418][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.322267][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.330213][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.337281][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.345166][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.353893][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.377777][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.387588][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.394766][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.421319][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.432900][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.440147][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.447777][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.454965][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.462142][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.471620][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.486634][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.502631][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.512642][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.519698][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.545781][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.596488][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.608295][ T4184] team0: Port device team_slave_0 added [ 53.625215][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.636360][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.647430][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.657598][ T4184] team0: Port device team_slave_1 added [ 53.673298][ T4183] team0: Port device team_slave_0 added [ 53.706098][ T4183] team0: Port device team_slave_1 added [ 53.735381][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.742476][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.756961][ T4182] team0: Port device team_slave_0 added [ 53.765837][ T4182] team0: Port device team_slave_1 added [ 53.773981][ T4186] team0: Port device team_slave_0 added [ 53.780480][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.787424][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.813658][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.842210][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.852542][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.878869][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.891261][ T4186] team0: Port device team_slave_1 added [ 53.897469][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.904708][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.931456][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.943172][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.950277][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.976222][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.022272][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.029437][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.055392][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.074729][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.081760][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.107707][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.134887][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.142071][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.168537][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.180927][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.187899][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.215455][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.236120][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.242842][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.249822][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.257737][ T4184] Cannot create hsr debugfs directory [ 54.310308][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.317242][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.323910][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.331934][ T4183] Cannot create hsr debugfs directory [ 54.357175][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.363880][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.370765][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.378484][ T4186] Cannot create hsr debugfs directory [ 54.430870][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.437771][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.444764][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.452535][ T4182] Cannot create hsr debugfs directory [ 54.549279][ T4192] Bluetooth: hci4: command 0x0409 tx timeout [ 54.549660][ T4222] Bluetooth: hci2: command 0x0409 tx timeout [ 54.556003][ T4192] Bluetooth: hci1: command 0x0409 tx timeout [ 54.561799][ T4222] Bluetooth: hci3: command 0x0409 tx timeout [ 54.578158][ T4192] Bluetooth: hci0: command 0x0409 tx timeout [ 54.700394][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.717109][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.726923][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.736267][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.778735][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.787675][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.801627][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.819888][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.835881][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.846608][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.866111][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.876897][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.947347][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.981465][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.992835][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.002468][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.060695][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.075540][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.091130][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.110488][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.125533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.135351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.143618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.151694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.167643][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.176379][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.190500][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.204338][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.213990][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.223923][ T241] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.231166][ T241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.242468][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.256974][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.267324][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.276894][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.286101][ T241] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.293584][ T241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.303752][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.317637][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.329085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.338763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.347272][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.354360][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.388882][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.396597][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.407217][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.415973][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.424925][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.435146][ T241] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.442234][ T241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.450627][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.460072][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.468799][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.477327][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.486551][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.499094][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.514466][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.522440][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.531623][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.541389][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.550506][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.559323][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.567670][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.580176][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.589144][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.600428][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.609127][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.625066][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.634305][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.642908][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.650006][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.659402][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.667912][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.677030][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.684165][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.691929][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.700951][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.712423][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.721642][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.734445][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.746097][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.766299][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.776441][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.784828][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.792847][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.801600][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.810791][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.820069][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.829029][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.837366][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.846177][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.855230][ T241] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.862328][ T241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.872019][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.880296][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.894639][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.906249][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.921371][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.932956][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.942960][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.952012][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.982515][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.999729][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.017608][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.033677][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.044827][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.051962][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.060569][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.070175][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.083587][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.092160][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.100962][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.109894][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.134236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.145641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.156990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.169589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.179135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.187638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.198951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.207346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.237235][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.257059][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.267838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.276602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.300164][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.310294][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.324105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.331926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.384108][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.405174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.418428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.425928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.439309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.447353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.456254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.467431][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.494090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.503606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.512590][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.519701][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.530236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.540251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.550110][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.557606][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.565374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.574479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.584402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.617102][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.627597][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.645156][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.652301][ T4227] Bluetooth: hci0: command 0x041b tx timeout [ 56.658417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.663572][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 56.667751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.673034][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 56.681639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.691831][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 56.696864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.705723][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 56.709907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.723307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.730927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.739460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.747800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.756294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.765002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.773423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.801895][ T4185] device veth0_vlan entered promiscuous mode [ 56.815466][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.824180][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.834507][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.843887][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.862507][ T4185] device veth1_vlan entered promiscuous mode [ 56.879342][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.887301][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.896002][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.927840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.936242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.945294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.953228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.964185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.974156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.983047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.001430][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.017984][ T4184] device veth0_vlan entered promiscuous mode [ 57.031317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.043723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.058180][ T4185] device veth0_macvtap entered promiscuous mode [ 57.079211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.096111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.104623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.114021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.132079][ T4182] device veth0_vlan entered promiscuous mode [ 57.142037][ T4184] device veth1_vlan entered promiscuous mode [ 57.159803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.168951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.177214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.186303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.195279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.204736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.213765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.222155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.242048][ T4182] device veth1_vlan entered promiscuous mode [ 57.251956][ T4185] device veth1_macvtap entered promiscuous mode [ 57.264609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.274185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.283344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.292147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.300284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.309750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.317195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.332246][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.341076][ T4186] device veth0_vlan entered promiscuous mode [ 57.355234][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.396695][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.406802][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.424225][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.434228][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.443570][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.458581][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.475319][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.485078][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.498490][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.507288][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.526449][ T4186] device veth1_vlan entered promiscuous mode [ 57.536580][ T4182] device veth0_macvtap entered promiscuous mode [ 57.545860][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.555371][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.564921][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.573681][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.587988][ T4184] device veth0_macvtap entered promiscuous mode [ 57.631410][ T4184] device veth1_macvtap entered promiscuous mode [ 57.641414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.654098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.667839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.676981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.686895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.695718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.705028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.714581][ T4182] device veth1_macvtap entered promiscuous mode [ 57.724249][ T4186] device veth0_macvtap entered promiscuous mode [ 57.747039][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.760231][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.771741][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.794667][ T4186] device veth1_macvtap entered promiscuous mode [ 57.804021][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.812301][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.820840][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.832115][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.841216][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.850072][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.859272][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.871055][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.881964][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.893757][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.934509][ T4183] device veth0_vlan entered promiscuous mode [ 57.943251][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.952235][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.961208][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.969662][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.977960][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.987317][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.001067][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.010800][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.019766][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.028840][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.062502][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.073826][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.084638][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.095359][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.107004][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.118221][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.129242][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.140806][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.151886][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.164006][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.181551][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.192564][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.203295][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.214047][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.224613][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.235521][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.247956][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.259536][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.269924][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.278641][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.287362][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.296646][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.305318][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.316691][ T4183] device veth1_vlan entered promiscuous mode [ 58.333081][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.343109][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.352176][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.361150][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.384031][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.395361][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.406000][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.417082][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.427148][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.437860][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.449604][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.460627][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.469916][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.479299][ T241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.487293][ T241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.490170][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.503451][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527260][ T4183] device veth0_macvtap entered promiscuous mode [ 58.534886][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.543088][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.553839][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.563221][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.571950][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.598988][ T4183] device veth1_macvtap entered promiscuous mode [ 58.619211][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.630786][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.705948][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.717177][ T4222] Bluetooth: hci2: command 0x040f tx timeout [ 58.723374][ T4222] Bluetooth: hci3: command 0x040f tx timeout [ 58.726634][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.730191][ T4222] Bluetooth: hci1: command 0x040f tx timeout [ 58.744626][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.745890][ T4222] Bluetooth: hci0: command 0x040f tx timeout [ 58.756643][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.774886][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.785563][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.796519][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.801902][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 58.807529][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.824971][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.839614][ T241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.844437][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.847641][ T241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.858642][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.875842][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.878299][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.895921][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.906498][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.916433][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.927183][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.941607][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.952822][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.964621][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.974780][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.983047][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.990982][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.999819][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.008596][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.017637][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.036974][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.054245][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.063415][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.072719][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.132749][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.161887][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.169939][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.177817][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.214236][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.232975][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.234881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.254822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.267682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.323207][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.335930][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.351893][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.367817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.375702][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.396823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.441440][ T241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.461717][ T241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.525962][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.697301][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.820916][ T4306] device ip6gretap0 entered promiscuous mode [ 60.045649][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.304600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.361371][ T4309] loop2: detected capacity change from 0 to 256 [ 60.457175][ T4311] loop1: detected capacity change from 0 to 1024 [ 60.467121][ T4309] exfat: Deprecated parameter 'utf8' [ 60.490816][ T4309] exfat: Deprecated parameter 'namecase' [ 60.518423][ T4309] exfat: Bad value for 'namecase' [ 60.631793][ T4318] process 'syz.4.9' launched './file2' with NULL argv: empty string added [ 60.721467][ T4311] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 60.728479][ T4298] loop3: detected capacity change from 0 to 40427 [ 60.788656][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 60.795804][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 60.804002][ T4298] F2FS-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 60.815712][ T4295] Bluetooth: hci3: command 0x0419 tx timeout [ 60.829204][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 60.863426][ T26] audit: type=1804 audit(1755266310.179:2): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7" name="/newroot/1/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 60.997930][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 62.007595][ T4348] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 62.706432][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.820661][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 63.474999][ T4387] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 63.607708][ T4393] loop4: detected capacity change from 0 to 16 [ 63.680625][ T4393] erofs: (device loop4): mounted with root inode @ nid 36. [ 63.960826][ T4404] Zero length message leads to an empty skb [ 64.599106][ T4392] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 64.735865][ T4392] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 64.797604][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 64.833038][ T4416] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 65.496705][ T4442] loop1: detected capacity change from 0 to 16 [ 65.577794][ T4442] erofs: (device loop1): mounted with root inode @ nid 36. [ 66.773447][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 66.980276][ T26] audit: type=1326 audit(1755266316.299:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 67.022208][ T26] audit: type=1326 audit(1755266316.329:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 67.115936][ T26] audit: type=1326 audit(1755266316.329:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 67.141328][ T26] audit: type=1326 audit(1755266316.329:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 67.239448][ T26] audit: type=1326 audit(1755266316.329:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 67.318212][ T26] audit: type=1326 audit(1755266316.379:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 67.388952][ T26] audit: type=1326 audit(1755266316.379:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 67.415298][ T4486] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 67.455511][ T4490] loop1: detected capacity change from 0 to 16 [ 67.465356][ T4488] loop0: detected capacity change from 0 to 1024 [ 67.469189][ T4486] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 67.480447][ T26] audit: type=1326 audit(1755266316.379:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 67.517262][ T4490] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.547399][ T4488] ======================================================= [ 67.547399][ T4488] WARNING: The mand mount option has been deprecated and [ 67.547399][ T4488] and is ignored by this kernel. Remove the mand [ 67.547399][ T4488] option from the mount to silence this warning. [ 67.547399][ T4488] ======================================================= [ 67.620713][ T26] audit: type=1326 audit(1755266316.379:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f441b13ec23 code=0x7ffc0000 [ 67.662076][ T26] audit: type=1326 audit(1755266316.379:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f441b13eca7 code=0x7ffc0000 [ 68.197400][ T4488] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.462486][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 69.135765][ T4541] loop3: detected capacity change from 0 to 16 [ 69.329451][ T4541] erofs: (device loop3): mounted with root inode @ nid 36. [ 70.348199][ T4548] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 70.601281][ T4552] autofs4:pid:4552:autofs_fill_super: called with bogus options [ 70.817234][ T4554] loop1: detected capacity change from 0 to 1024 [ 71.089153][ T4554] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.272211][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.280823][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.336722][ T4572] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.805982][ T4589] loop2: detected capacity change from 0 to 16 [ 71.910168][ T4589] erofs: (device loop2): mounted with root inode @ nid 36. [ 72.198408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.207667][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.216847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.225761][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.234759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.243672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.313227][ T4601] autofs4:pid:4601:autofs_fill_super: called with bogus options [ 72.762227][ T4603] sctp: [Deprecated]: syz.0.99 (pid 4603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.762227][ T4603] Use struct sctp_sack_info instead [ 72.871100][ T4611] loop2: detected capacity change from 0 to 1024 [ 72.975195][ T4616] kernel profiling enabled (shift: 17) [ 73.069633][ T4611] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.611674][ T4632] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 73.877764][ T4642] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.885898][ T4642] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.400658][ T4656] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.797618][ T4670] loop4: detected capacity change from 0 to 1024 [ 74.889385][ T4670] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.889779][ T4678] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.071122][ T4684] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 76.422598][ T1108] cfg80211: failed to load regulatory.db [ 76.484799][ T4716] loop4: detected capacity change from 0 to 1024 [ 76.670542][ T4716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.699662][ T4721] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.771471][ T4721] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.849551][ T4740] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 77.017067][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 77.017080][ T26] audit: type=1326 audit(1755266326.329:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 77.130936][ T26] audit: type=1326 audit(1755266326.369:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 77.196757][ T26] audit: type=1326 audit(1755266326.369:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 77.263965][ T26] audit: type=1326 audit(1755266326.369:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 77.296874][ T26] audit: type=1326 audit(1755266326.369:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 77.333335][ T26] audit: type=1326 audit(1755266326.369:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 77.362733][ T26] audit: type=1326 audit(1755266326.369:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 77.415513][ T26] audit: type=1326 audit(1755266326.369:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 77.473842][ T4770] netlink: 220 bytes leftover after parsing attributes in process `syz.1.162'. [ 77.617198][ T26] audit: type=1326 audit(1755266326.369:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 78.122021][ T26] audit: type=1326 audit(1755266326.399:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6f350be9 code=0x7ffc0000 [ 78.321193][ T4777] loop1: detected capacity change from 0 to 1024 [ 78.604842][ T4792] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 78.704253][ T4777] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.302688][ T4798] raw_sendmsg: syz.0.172 forgot to set AF_INET. Fix it! [ 79.601212][ T4819] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 79.878998][ T4831] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 79.886925][ T4831] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 79.921182][ T4834] loop1: detected capacity change from 0 to 1024 [ 80.034283][ T4834] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.588610][ T4858] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 80.612839][ T4858] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 80.621644][ T4872] loop1: detected capacity change from 0 to 1024 [ 80.654402][ T4870] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 80.755162][ T4872] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.943025][ T4904] netlink: 268 bytes leftover after parsing attributes in process `syz.1.211'. [ 81.958111][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.075948][ T4910] binder: 4908:4910 unknown command 1074553619 [ 82.083124][ T4910] binder: 4908:4910 ioctl c0306201 200000000040 returned -22 [ 82.091284][ T4910] binder: 4908:4910 unknown command 1074553620 [ 82.099565][ T4910] binder: 4908:4910 ioctl c0306201 200000000640 returned -22 [ 82.193980][ T4915] ksmbd: Unknown IPC event: 6, ignore. [ 82.238657][ T13] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 82.273984][ T4711] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.086895][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 83.383569][ T4711] usb 1-1: Using ep0 maxpacket: 8 [ 83.553629][ T4711] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.568068][ T4711] usb 1-1: config 0 has no interface number 0 [ 83.669476][ T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.676314][ T4711] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.691359][ T4711] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.699145][ T13] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.700653][ T4711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.811097][ T4711] usb 1-1: config 0 descriptor?? [ 83.859728][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.891490][ T4711] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 84.565321][ T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.588298][ T4711] usb 1-1: USB disconnect, device number 2 [ 84.652605][ T13] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.664805][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.728258][ T13] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 84.738568][ T13] usb 3-1: can't read configurations, error -71 [ 84.769085][ T4938] 9pnet_virtio: no channels available for device syz [ 85.091043][ T4934] kvm [4933]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100000000 [ 85.101039][ T4934] kvm [4933]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 85.134689][ T4934] kvm [4933]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80 [ 85.697392][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 85.718028][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.727129][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.736417][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 86.236475][ T4963] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 87.253708][ T4978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.234'. [ 89.213133][ T5017] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 89.220081][ T5017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.386038][ T5014] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 89.392585][ T5014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.879999][ T5014] vhci_hcd vhci_hcd.0: Device attached [ 89.939138][ T5017] vhci_hcd vhci_hcd.0: Device attached [ 89.956070][ T5030] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.999568][ T5014] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 90.006183][ T5014] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.081924][ T5014] vhci_hcd vhci_hcd.0: Device attached [ 90.096051][ T5017] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 90.102674][ T5017] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.112436][ T4296] vhci_hcd: vhci_device speed not set [ 90.152265][ T5014] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(18) [ 90.158909][ T5014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.191314][ T5017] vhci_hcd vhci_hcd.0: Device attached [ 90.200708][ T4296] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 90.214339][ T5047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.254'. [ 90.229579][ T5014] vhci_hcd vhci_hcd.0: Device attached [ 90.240660][ T5044] Invalid ELF header magic: != ELF [ 90.257561][ T5014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.278339][ T5014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.309186][ T5014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.361257][ T5015] vhci_hcd: connection reset by peer [ 90.382115][ T5018] vhci_hcd: connection closed [ 90.382306][ T5040] vhci_hcd: connection closed [ 90.441561][ T5035] vhci_hcd: connection closed [ 90.446972][ T5042] vhci_hcd: connection closed [ 90.463217][ T144] vhci_hcd: stop threads [ 90.497733][ T144] vhci_hcd: release socket [ 90.592782][ T5056] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 90.653855][ T144] vhci_hcd: disconnect device [ 91.110973][ T144] vhci_hcd: stop threads [ 91.115313][ T144] vhci_hcd: release socket [ 91.120083][ T144] vhci_hcd: disconnect device [ 91.141760][ T144] vhci_hcd: stop threads [ 91.150599][ T144] vhci_hcd: release socket [ 91.166782][ T144] vhci_hcd: disconnect device [ 91.201706][ T144] vhci_hcd: stop threads [ 91.275019][ T144] vhci_hcd: release socket [ 91.279659][ T144] vhci_hcd: disconnect device [ 91.284791][ T144] vhci_hcd: stop threads [ 91.289431][ T144] vhci_hcd: release socket [ 91.297842][ T144] vhci_hcd: disconnect device [ 92.579072][ T5070] sched: RT throttling activated [ 92.949182][ T5087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.968446][ T5087] device batadv_slave_0 entered promiscuous mode [ 93.269999][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 93.270010][ T26] audit: type=1326 audit(1755266342.452:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 93.323954][ T26] audit: type=1326 audit(1755266342.452:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 93.346524][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.364693][ T26] audit: type=1326 audit(1755266342.452:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 93.443337][ T26] audit: type=1326 audit(1755266342.452:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 93.465518][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.540187][ T26] audit: type=1326 audit(1755266342.452:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 93.563762][ T26] audit: type=1326 audit(1755266342.452:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 93.587769][ T26] audit: type=1326 audit(1755266342.452:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 93.855387][ T5098] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.954654][ T5098] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.168647][ T26] audit: type=1326 audit(1755266342.452:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 94.299426][ T26] audit: type=1326 audit(1755266342.452:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 94.343485][ T5112] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 94.531646][ T26] audit: type=1326 audit(1755266342.452:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490f58abe9 code=0x7ffc0000 [ 94.837936][ T5122] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 95.244314][ T5129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.455818][ T4296] vhci_hcd: vhci_device speed not set [ 95.538601][ T5128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.462271][ T5150] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 98.621679][ T5175] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 99.722717][ T5177] syz.3.287 (5177) used greatest stack depth: 21064 bytes left [ 101.233503][ T5205] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 104.559039][ T5225] 9pnet_virtio: no channels available for device syz [ 105.118263][ T4295] Bluetooth: hci3: command 0x0405 tx timeout [ 107.255675][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): rose1: link becomes ready [ 108.724989][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 108.725006][ T26] audit: type=1326 audit(1755266357.663:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 109.222450][ T5270] loop1: detected capacity change from 0 to 1024 [ 109.876876][ T5270] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.101976][ T26] audit: type=1326 audit(1755266357.663:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 110.202275][ T5279] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 110.778699][ T26] audit: type=1326 audit(1755266357.811:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 110.986270][ T26] audit: type=1326 audit(1755266357.811:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 111.108109][ T26] audit: type=1326 audit(1755266357.811:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 111.215203][ T26] audit: type=1326 audit(1755266357.960:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 111.268372][ T5292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.318'. [ 111.283431][ T26] audit: type=1326 audit(1755266357.960:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 111.382104][ T26] audit: type=1326 audit(1755266357.960:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 111.764062][ T26] audit: type=1326 audit(1755266358.148:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 111.895311][ T26] audit: type=1326 audit(1755266358.148:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441b13ebe9 code=0x7ffc0000 [ 112.374735][ T5308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.382208][ T5308] IPv6: NLM_F_CREATE should be set when creating new route [ 112.677169][ T5313] loop3: detected capacity change from 0 to 1024 [ 112.743670][ T5317] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 113.402552][ T5313] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.501102][ T5313] overlayfs: failed to resolve './file1': -2 [ 114.227199][ T5344] netlink: 268 bytes leftover after parsing attributes in process `syz.1.337'. [ 115.297640][ T5350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 115.896654][ T4296] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.046885][ T5361] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 116.791508][ T4296] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 116.799827][ T4296] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.810339][ T4296] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.984170][ T4296] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.999063][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.133109][ T5369] loop4: detected capacity change from 0 to 1024 [ 117.141401][ T4296] usb 1-1: Product: syz [ 117.146925][ T4296] usb 1-1: Manufacturer: syz [ 117.152432][ T4296] usb 1-1: SerialNumber: syz [ 117.225760][ T4296] usb 1-1: config 0 descriptor?? [ 118.286301][ T5369] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.310099][ T4296] usb 1-1: can't set config #0, error -71 [ 118.317922][ T5380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.347'. [ 118.328696][ T4296] usb 1-1: USB disconnect, device number 3 [ 118.489982][ T5369] overlayfs: failed to resolve './file1': -2 [ 118.997129][ T5393] 9pnet: Insufficient options for proto=fd [ 119.877351][ T4711] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 120.300255][ T4711] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 121.963256][ T4711] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 122.052455][ T4711] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 122.347657][ T4711] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 122.882114][ T4711] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 122.901762][ T4711] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 123.050072][ T4711] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 123.057671][ T4711] usb 5-1: can't read configurations, error -71 [ 123.214134][ T5421] netlink: 'syz.4.362': attribute type 1 has an invalid length. [ 123.241280][ T5421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.267783][ T5416] loop2: detected capacity change from 0 to 1024 [ 123.361324][ T5421] bond1: (slave dummy0): making interface the new active one [ 123.372885][ T5421] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 123.436468][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 123.453443][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 123.464281][ T5424] netlink: 'syz.0.361': attribute type 13 has an invalid length. [ 123.474936][ T5424] netlink: 'syz.0.361': attribute type 11 has an invalid length. [ 123.487663][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 123.496341][ T5416] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.511801][ T5425] netlink: 'syz.4.362': attribute type 10 has an invalid length. [ 123.519650][ T5425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.362'. [ 123.602230][ T5425] device dummy0 entered promiscuous mode [ 123.615388][ T5425] bond1: (slave dummy0): Releasing active interface [ 123.667842][ T5421] syz.4.362 (5421) used greatest stack depth: 20832 bytes left [ 123.710372][ T5432] 9pnet_virtio: no channels available for device syz [ 123.748680][ T5435] loop0: detected capacity change from 0 to 128 [ 124.527477][ T4254] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.998210][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 126.015054][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 126.034336][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 126.375904][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 126.400082][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 126.423116][ T4254] usb 1-1: Using ep0 maxpacket: 32 [ 126.561576][ T4254] usb 1-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 126.581249][ T4254] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 126.616421][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 126.676228][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 126.696994][ T5452] device netdevsim0 entered promiscuous mode [ 126.736709][ T5452] device netdevsim0 left promiscuous mode [ 126.762087][ T4254] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 126.788010][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.796377][ T4254] usb 1-1: Product: syz [ 126.800618][ T4254] usb 1-1: Manufacturer: syz [ 126.805382][ T4254] usb 1-1: SerialNumber: syz [ 126.832733][ T4254] usb 1-1: config 0 descriptor?? [ 126.861084][ T5453] netlink: 'syz.4.364': attribute type 10 has an invalid length. [ 126.892431][ T4254] usb 1-1: can't set config #0, error -71 [ 126.912506][ T4254] usb 1-1: USB disconnect, device number 4 [ 126.927076][ T5445] syz.3.366 (5445) used greatest stack depth: 20192 bytes left [ 126.939037][ T144] attempt to access beyond end of device [ 126.939037][ T144] loop0: rw=1, want=1041, limit=128 [ 127.155360][ T5453] batman_adv: batadv0: Adding interface: team0 [ 127.829213][ T5453] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.856870][ T5453] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 128.704042][ T5473] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 130.394760][ T5477] loop2: detected capacity change from 0 to 32768 [ 130.492250][ T5477] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.746952][ T5477] (syz.2.375,5477,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 130.882299][ T5477] loop_set_status: loop2 () has still dirty pages (nrpages=5) [ 131.116172][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 131.243412][ T5507] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 131.884289][ T1347] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.750613][ T1347] usb 4-1: Using ep0 maxpacket: 16 [ 133.269506][ T5506] loop1: detected capacity change from 0 to 32768 [ 133.280824][ T1347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.280847][ T1347] usb 4-1: config 0 has no interfaces? [ 133.287735][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.287806][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.307561][ T5513] tmpfs: Unknown parameter 'quota' [ 133.313922][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 133.397823][ T1347] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.397862][ T1347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.397878][ T1347] usb 4-1: SerialNumber: syz [ 133.401858][ T1347] usb 4-1: config 0 descriptor?? [ 133.455231][ T5506] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 133.475496][ T5506] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.588918][ T5506] loop_set_status: loop1 () has still dirty pages (nrpages=8) [ 133.643666][ T1347] usb 4-1: USB disconnect, device number 2 [ 133.674232][ T4184] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #17057: signature = INOD [ 133.674286][ T4184] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 133.674290][ T4184] OCFS2: File system is now read-only. [ 133.674295][ T4184] (syz-executor,4184,0):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 133.675352][ T4184] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #17057: signature = INOD [ 133.675375][ T4184] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 133.675384][ T4184] (syz-executor,4184,0):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 134.734859][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 134.973405][ T5555] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 137.657608][ T5563] tipc: Failed to remove unknown binding: 66,1,1/0:3445681086/3445681088 [ 137.666924][ T5563] tipc: Failed to remove unknown binding: 66,1,1/0:3445681086/3445681088 [ 141.415791][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 141.415803][ T26] audit: type=1326 audit(1755266390.239:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32845d9be9 code=0x7ffc0000 [ 141.622273][ T5585] trusted_key: encrypted_key: master key parameter 'defa^lt' is invalid [ 143.087648][ T5605] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 143.657010][ T4296] Bluetooth: hci1: command 0x0409 tx timeout [ 143.873922][ T5584] chnl_net:caif_netlink_parms(): no params data found [ 143.934695][ T5610] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 145.249644][ T26] audit: type=1326 audit(1755266394.075:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 145.332707][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.332802][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.333777][ T5584] device bridge_slave_0 entered promiscuous mode [ 145.428737][ T26] audit: type=1326 audit(1755266394.095:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 145.563376][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.747382][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.753596][ T26] audit: type=1326 audit(1755266394.105:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 145.756624][ T5584] device bridge_slave_1 entered promiscuous mode [ 145.978560][ T5632] ODEBUG: Out of memory. ODEBUG disabled [ 146.213894][ T4295] Bluetooth: hci1: command 0x041b tx timeout [ 146.373570][ T26] audit: type=1326 audit(1755266394.105:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 146.433053][ T26] audit: type=1326 audit(1755266394.105:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 146.461142][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.501345][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.621285][ T5584] team0: Port device team_slave_0 added [ 146.629076][ T26] audit: type=1326 audit(1755266394.105:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 146.665750][ T5584] team0: Port device team_slave_1 added [ 147.546518][ T26] audit: type=1326 audit(1755266394.105:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 147.608934][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.627840][ T26] audit: type=1326 audit(1755266394.105:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 147.656230][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.683510][ T26] audit: type=1326 audit(1755266394.105:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 147.793380][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.826059][ T26] audit: type=1326 audit(1755266394.105:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 147.902602][ T5657] snd_aloop snd_aloop.0: control 0:9:32769:syz0:3106 is already present [ 147.923127][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.979884][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.108959][ T26] audit: type=1326 audit(1755266394.105:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 148.391666][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 148.400876][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.621112][ T5662] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 148.633605][ T26] audit: type=1326 audit(1755266394.115:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 148.955946][ T26] audit: type=1326 audit(1755266394.115:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 149.040690][ T5584] device hsr_slave_0 entered promiscuous mode [ 149.064964][ T5584] device hsr_slave_1 entered promiscuous mode [ 149.078414][ T26] audit: type=1326 audit(1755266394.115:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ab615be9 code=0x7ffc0000 [ 149.115291][ T5584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.138015][ T5584] Cannot create hsr debugfs directory [ 149.390841][ T5671] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 149.397392][ T5671] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 149.405479][ T5672] vhci_hcd: connection closed [ 149.405543][ T5671] vhci_hcd vhci_hcd.0: Device attached [ 149.426824][ T4307] vhci_hcd: stop threads [ 149.431196][ T4307] vhci_hcd: release socket [ 149.470622][ T4307] vhci_hcd: disconnect device [ 150.406456][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 151.817046][ T5584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.436209][ T5687] ================================================================== [ 152.444296][ T5687] BUG: KASAN: use-after-free in __lock_acquire+0xf7/0x7c60 [ 152.451492][ T5687] Read of size 8 at addr ffff8880254daab8 by task syz.3.437/5687 [ 152.459189][ T5687] [ 152.461495][ T5687] CPU: 1 PID: 5687 Comm: syz.3.437 Not tainted 5.15.189-syzkaller #0 [ 152.469538][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.479612][ T5687] Call Trace: [ 152.482877][ T5687] [ 152.485790][ T5687] dump_stack_lvl+0x168/0x230 [ 152.490451][ T5687] ? show_regs_print_info+0x20/0x20 [ 152.495772][ T5687] ? load_image+0x3b0/0x3b0 [ 152.500275][ T5687] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 152.505656][ T5687] ? rcu_lock_release+0x5/0x20 [ 152.510410][ T5687] print_address_description+0x60/0x2d0 [ 152.516034][ T5687] ? __lock_acquire+0xf7/0x7c60 [ 152.520875][ T5687] kasan_report+0xdf/0x130 [ 152.525277][ T5687] ? __lock_acquire+0xf7/0x7c60 [ 152.530107][ T5687] __lock_acquire+0xf7/0x7c60 [ 152.534772][ T5687] ? __kernel_text_address+0x9a/0x100 [ 152.540126][ T5687] ? unwind_get_return_address+0x49/0x80 [ 152.545828][ T5687] ? stack_trace_save+0xe0/0xe0 [ 152.550654][ T5687] ? arch_stack_walk+0xf2/0x140 [ 152.555491][ T5687] ? stack_trace_save+0x98/0xe0 [ 152.560409][ T5687] ? verify_lock_unused+0x140/0x140 [ 152.565603][ T5687] ? verify_lock_unused+0x140/0x140 [ 152.570784][ T5687] ? kasan_save_stack+0x4b/0x60 [ 152.575701][ T5687] ? kasan_save_stack+0x35/0x60 [ 152.580524][ T5687] ? kasan_record_aux_stack+0xb8/0x100 [ 152.585961][ T5687] ? task_work_add+0x2f/0x1d0 [ 152.590617][ T5687] ? fput_many+0xde/0x1a0 [ 152.594924][ T5687] ? poll_freewait+0xba/0x210 [ 152.599596][ T5687] ? do_select+0x1629/0x16f0 [ 152.604254][ T5687] ? __se_sys_pselect6+0x2ed/0x3a0 [ 152.609369][ T5687] ? do_syscall_64+0x4c/0xa0 [ 152.613939][ T5687] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.620003][ T5687] lock_acquire+0x197/0x3f0 [ 152.624513][ T5687] ? remove_wait_queue+0x20/0x120 [ 152.629516][ T5687] ? read_lock_is_recursive+0x10/0x10 [ 152.634864][ T5687] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 152.640306][ T5687] ? lockdep_hardirqs_off+0x70/0x100 [ 152.645573][ T5687] _raw_spin_lock_irqsave+0xa4/0xf0 [ 152.650749][ T5687] ? remove_wait_queue+0x20/0x120 [ 152.655770][ T5687] ? _raw_spin_lock+0x40/0x40 [ 152.660425][ T5687] ? kick_process+0xd4/0x140 [ 152.665171][ T5687] ? task_work_add+0x1a7/0x1d0 [ 152.670002][ T5687] remove_wait_queue+0x20/0x120 [ 152.674941][ T5687] poll_freewait+0x99/0x210 [ 152.679423][ T5687] do_select+0x1629/0x16f0 [ 152.683819][ T5687] ? do_select+0xbc1/0x16f0 [ 152.688317][ T5687] ? core_sys_select+0x860/0x860 [ 152.693320][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 152.699536][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 152.705799][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 152.712017][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 152.718248][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 152.724469][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 152.730685][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 152.736991][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 152.743211][ T5687] ? __lock_acquire+0x7c60/0x7c60 [ 152.748218][ T5687] ? __lock_acquire+0x7c60/0x7c60 [ 152.753219][ T5687] ? __might_fault+0xb3/0x110 [ 152.757875][ T5687] core_sys_select+0x65c/0x860 [ 152.762626][ T5687] ? poll_select_set_timeout+0x150/0x150 [ 152.768246][ T5687] ? sigprocmask+0x190/0x190 [ 152.772813][ T5687] ? __lock_acquire+0x7c60/0x7c60 [ 152.777821][ T5687] __se_sys_pselect6+0x2ed/0x3a0 [ 152.782745][ T5687] ? __x64_sys_pselect6+0xf0/0xf0 [ 152.787769][ T5687] ? __x64_sys_pselect6+0x1d/0xf0 [ 152.792767][ T5687] do_syscall_64+0x4c/0xa0 [ 152.797160][ T5687] ? clear_bhb_loop+0x30/0x80 [ 152.801811][ T5687] ? clear_bhb_loop+0x30/0x80 [ 152.806463][ T5687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.812343][ T5687] RIP: 0033:0x7f441b13ebe9 [ 152.816759][ T5687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.836431][ T5687] RSP: 002b:00007f44193a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 152.844832][ T5687] RAX: ffffffffffffffda RBX: 00007f441b365fa0 RCX: 00007f441b13ebe9 [ 152.852780][ T5687] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 152.860728][ T5687] RBP: 00007f441b1c1e19 R08: 0000000000000000 R09: 0000000000000000 [ 152.868937][ T5687] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 152.876899][ T5687] R13: 00007f441b366038 R14: 00007f441b365fa0 R15: 00007ffe5cef7668 [ 152.884854][ T5687] [ 152.887855][ T5687] [ 152.890168][ T5687] Allocated by task 5269: [ 152.894466][ T5687] __kasan_kmalloc+0xb5/0xf0 [ 152.899035][ T5687] comedi_device_postconfig+0x496/0xc50 [ 152.904557][ T5687] comedi_device_attach+0x52f/0x650 [ 152.909751][ T5687] comedi_unlocked_ioctl+0x5ec/0xe90 [ 152.915018][ T5687] __se_sys_ioctl+0xfa/0x170 [ 152.919672][ T5687] do_syscall_64+0x4c/0xa0 [ 152.924088][ T5687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.929970][ T5687] [ 152.932273][ T5687] Freed by task 5694: [ 152.936222][ T5687] kasan_set_track+0x4b/0x70 [ 152.940786][ T5687] kasan_set_free_info+0x1f/0x40 [ 152.945795][ T5687] ____kasan_slab_free+0xd5/0x110 [ 152.950793][ T5687] slab_free_freelist_hook+0xea/0x170 [ 152.956139][ T5687] kfree+0xef/0x2a0 [ 152.959925][ T5687] comedi_device_detach+0x35f/0x6e0 [ 152.965102][ T5687] comedi_unlocked_ioctl+0xbd0/0xe90 [ 152.970378][ T5687] __se_sys_ioctl+0xfa/0x170 [ 152.975125][ T5687] do_syscall_64+0x4c/0xa0 [ 152.979616][ T5687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.985498][ T5687] [ 152.987800][ T5687] The buggy address belongs to the object at ffff8880254daa00 [ 152.987800][ T5687] which belongs to the cache kmalloc-256 of size 256 [ 153.001844][ T5687] The buggy address is located 184 bytes inside of [ 153.001844][ T5687] 256-byte region [ffff8880254daa00, ffff8880254dab00) [ 153.015192][ T5687] The buggy address belongs to the page: [ 153.020799][ T5687] page:ffffea0000953680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x254da [ 153.030925][ T5687] head:ffffea0000953680 order:1 compound_mapcount:0 [ 153.037574][ T5687] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 153.045543][ T5687] raw: 00fff00000010200 ffffea000185a280 0000000400000004 ffff888016841b40 [ 153.054102][ T5687] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 153.062654][ T5687] page dumped because: kasan: bad access detected [ 153.069048][ T5687] page_owner tracks the page as allocated [ 153.074744][ T5687] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5251, ts 106204312507, free_ts 105982169710 [ 153.095469][ T5687] get_page_from_freelist+0x1b77/0x1c60 [ 153.101009][ T5687] __alloc_pages+0x1e1/0x470 [ 153.105580][ T5687] new_slab+0xc0/0x4b0 [ 153.109625][ T5687] ___slab_alloc+0x81e/0xdf0 [ 153.114195][ T5687] __kmalloc+0x1cd/0x330 [ 153.118411][ T5687] snd_midi_event_new+0x91/0x1e0 [ 153.123324][ T5687] snd_virmidi_output_open+0xeb/0x520 [ 153.128683][ T5687] open_substream+0x347/0x6c0 [ 153.133336][ T5687] rawmidi_open_priv+0xc4/0x660 [ 153.138250][ T5687] snd_rawmidi_open+0x455/0xac0 [ 153.143074][ T5687] chrdev_open+0x597/0x670 [ 153.147477][ T5687] do_dentry_open+0x7ff/0xf80 [ 153.152130][ T5687] path_openat+0x2682/0x2f30 [ 153.156815][ T5687] do_filp_open+0x1b3/0x3e0 [ 153.161304][ T5687] do_sys_openat2+0x142/0x4a0 [ 153.165965][ T5687] __x64_sys_openat+0x135/0x160 [ 153.170887][ T5687] page last free stack trace: [ 153.175545][ T5687] free_unref_page_prepare+0x637/0x6c0 [ 153.181170][ T5687] free_unref_page+0x94/0x280 [ 153.185858][ T5687] qlist_free_all+0x35/0x90 [ 153.190344][ T5687] kasan_quarantine_reduce+0x150/0x160 [ 153.195781][ T5687] __kasan_slab_alloc+0x2f/0xd0 [ 153.200606][ T5687] slab_post_alloc_hook+0x4c/0x380 [ 153.205692][ T5687] kmem_cache_alloc+0x100/0x290 [ 153.210522][ T5687] getname_flags+0xb5/0x500 [ 153.215646][ T5687] user_path_at_empty+0x2a/0x190 [ 153.220564][ T5687] do_utimes+0x138/0x2a0 [ 153.224785][ T5687] __x64_sys_utimensat+0x14c/0x230 [ 153.229896][ T5687] do_syscall_64+0x4c/0xa0 [ 153.234296][ T5687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.240174][ T5687] [ 153.242475][ T5687] Memory state around the buggy address: [ 153.248079][ T5687] ffff8880254da980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.256114][ T5687] ffff8880254daa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.264149][ T5687] >ffff8880254daa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.272183][ T5687] ^ [ 153.278049][ T5687] ffff8880254dab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.286187][ T5687] ffff8880254dab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.294216][ T5687] ================================================================== [ 153.302248][ T5687] Disabling lock debugging due to kernel taint [ 153.308557][ T5687] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.315733][ T5687] CPU: 1 PID: 5687 Comm: syz.3.437 Tainted: G B 5.15.189-syzkaller #0 [ 153.325174][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.335383][ T5687] Call Trace: [ 153.338649][ T5687] [ 153.341562][ T5687] dump_stack_lvl+0x168/0x230 [ 153.346316][ T5687] ? show_regs_print_info+0x20/0x20 [ 153.351731][ T5687] ? load_image+0x3b0/0x3b0 [ 153.356233][ T5687] panic+0x2c9/0x7f0 [ 153.360112][ T5687] ? bpf_jit_dump+0xd0/0xd0 [ 153.364597][ T5687] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 153.370471][ T5687] ? _raw_spin_unlock+0x40/0x40 [ 153.375300][ T5687] ? __lock_acquire+0xf7/0x7c60 [ 153.380133][ T5687] check_panic_on_warn+0x80/0xa0 [ 153.385052][ T5687] ? __lock_acquire+0xf7/0x7c60 [ 153.389886][ T5687] end_report+0x6d/0xf0 [ 153.394023][ T5687] kasan_report+0x102/0x130 [ 153.398504][ T5687] ? __lock_acquire+0xf7/0x7c60 [ 153.403347][ T5687] __lock_acquire+0xf7/0x7c60 [ 153.408003][ T5687] ? __kernel_text_address+0x9a/0x100 [ 153.413362][ T5687] ? unwind_get_return_address+0x49/0x80 [ 153.419002][ T5687] ? stack_trace_save+0xe0/0xe0 [ 153.423840][ T5687] ? arch_stack_walk+0xf2/0x140 [ 153.428711][ T5687] ? stack_trace_save+0x98/0xe0 [ 153.433541][ T5687] ? verify_lock_unused+0x140/0x140 [ 153.438721][ T5687] ? verify_lock_unused+0x140/0x140 [ 153.443905][ T5687] ? kasan_save_stack+0x4b/0x60 [ 153.448741][ T5687] ? kasan_save_stack+0x35/0x60 [ 153.453574][ T5687] ? kasan_record_aux_stack+0xb8/0x100 [ 153.459032][ T5687] ? task_work_add+0x2f/0x1d0 [ 153.463693][ T5687] ? fput_many+0xde/0x1a0 [ 153.468007][ T5687] ? poll_freewait+0xba/0x210 [ 153.472683][ T5687] ? do_select+0x1629/0x16f0 [ 153.477254][ T5687] ? __se_sys_pselect6+0x2ed/0x3a0 [ 153.482345][ T5687] ? do_syscall_64+0x4c/0xa0 [ 153.486915][ T5687] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.492965][ T5687] lock_acquire+0x197/0x3f0 [ 153.497629][ T5687] ? remove_wait_queue+0x20/0x120 [ 153.502637][ T5687] ? read_lock_is_recursive+0x10/0x10 [ 153.507991][ T5687] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 153.513341][ T5687] ? lockdep_hardirqs_off+0x70/0x100 [ 153.518606][ T5687] _raw_spin_lock_irqsave+0xa4/0xf0 [ 153.523793][ T5687] ? remove_wait_queue+0x20/0x120 [ 153.528795][ T5687] ? _raw_spin_lock+0x40/0x40 [ 153.533450][ T5687] ? kick_process+0xd4/0x140 [ 153.538020][ T5687] ? task_work_add+0x1a7/0x1d0 [ 153.542849][ T5687] remove_wait_queue+0x20/0x120 [ 153.547700][ T5687] poll_freewait+0x99/0x210 [ 153.552180][ T5687] do_select+0x1629/0x16f0 [ 153.556577][ T5687] ? do_select+0xbc1/0x16f0 [ 153.561065][ T5687] ? core_sys_select+0x860/0x860 [ 153.565981][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 153.572198][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 153.578421][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 153.584640][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 153.590870][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 153.597084][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 153.603386][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 153.609608][ T5687] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 153.615924][ T5687] ? __lock_acquire+0x7c60/0x7c60 [ 153.620936][ T5687] ? __lock_acquire+0x7c60/0x7c60 [ 153.625945][ T5687] ? __might_fault+0xb3/0x110 [ 153.630687][ T5687] core_sys_select+0x65c/0x860 [ 153.635432][ T5687] ? poll_select_set_timeout+0x150/0x150 [ 153.641057][ T5687] ? sigprocmask+0x190/0x190 [ 153.645625][ T5687] ? __lock_acquire+0x7c60/0x7c60 [ 153.650629][ T5687] __se_sys_pselect6+0x2ed/0x3a0 [ 153.655544][ T5687] ? __x64_sys_pselect6+0xf0/0xf0 [ 153.660635][ T5687] ? __x64_sys_pselect6+0x1d/0xf0 [ 153.665654][ T5687] do_syscall_64+0x4c/0xa0 [ 153.670051][ T5687] ? clear_bhb_loop+0x30/0x80 [ 153.674706][ T5687] ? clear_bhb_loop+0x30/0x80 [ 153.679534][ T5687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.685405][ T5687] RIP: 0033:0x7f441b13ebe9 [ 153.689798][ T5687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.709384][ T5687] RSP: 002b:00007f44193a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 153.717864][ T5687] RAX: ffffffffffffffda RBX: 00007f441b365fa0 RCX: 00007f441b13ebe9 [ 153.725811][ T5687] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 153.733760][ T5687] RBP: 00007f441b1c1e19 R08: 0000000000000000 R09: 0000000000000000 [ 153.741720][ T5687] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 153.749764][ T5687] R13: 00007f441b366038 R14: 00007f441b365fa0 R15: 00007ffe5cef7668 [ 153.757718][ T5687] [ 153.760883][ T5687] Kernel Offset: disabled [ 153.765196][ T5687] Rebooting in 86400 seconds..