last executing test programs: 13.642262212s ago: executing program 1 (id=268): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x4, 0x0, 0x0, 0x0, 0x7}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000180)={0x4, 0x2f, 0xfffffff9, 0x0, 0x10, "4f1a413a978f5416a99162bad6ecf7ce638218", 0x4c, 0x80000001}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1}, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) mlockall(0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000003b0007010000000000000000037c0000040000000c000180"], 0x24}}, 0x0) 10.55662692s ago: executing program 1 (id=281): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = openat$sndseq(0xffffff9c, 0x0, 0x121800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0) gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x80000000000}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe4) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 9.009689094s ago: executing program 1 (id=287): syz_open_dev$vim2m(0x0, 0x10001, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) semget$private(0x0, 0x207, 0x480) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000003f80)=""/4098, 0x1002) 8.516462023s ago: executing program 0 (id=298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendto$inet6(r3, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) shutdown(r3, 0x2) 7.359506358s ago: executing program 0 (id=299): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000041c0)}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@local, 0x1}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)}], 0x1}}], 0x1, 0x8040) socket$netlink(0x10, 0x3, 0x13) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6, 0x40) sendmsg(r5, &(0x7f0000000600)={&(0x7f0000000200)=@caif=@rfm={0x25, 0x101, "23b7bc13b47ddc8332d3a89e3c1936ca"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)="5e261323b7511c266d4a8274efa28735423029d6a9b4d234f46fe0ba12df3fed4a4737e0abe2c1e1f7a8a898bc610a519c83bef1", 0x34}, {&(0x7f0000001100)}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000580)="da545c5e6798bf7e7c4586ba4661f90a1e5c89a845fcdf8ca07febcfc3adada5731c6f7e1e1232a55158", 0x2a}], 0x5, &(0x7f0000000680)}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x0, 0xfe, 0x0, 0x21df, 0x2, 0x3, 0x1, 0x9, 0x6, 0x1, 0x5, 0x0, 0x7, 0x6, 0x1, 0x0, 0x9, 0x9, '\x00', 0xc, 0x2}) 5.15867891s ago: executing program 0 (id=306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/79, 0x4f) 5.07103278s ago: executing program 4 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c00028005000100000000002c00018014000300fe88000000000000000000000000000114000400fe80000000000000000000406556c1aa240002800c00028005000100000000001400018008000100ac1e000108000200e000000208000740000000000c0005800800010052415300"], 0xc0}}, 0x0) 5.023541479s ago: executing program 2 (id=310): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) socket$inet6(0xa, 0x2, 0x3a) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4602010900070000000000000003003e00ffffff7f5f0100000000000040000000000000000c02000000000000ff03000007003800020010000100018003000000060000000ebf1f41000000000c00000000000000050000000000000005000000000000000500000000000000800000000000000005000000020000000a000000000000004a000000000000000e0000000000000000000000060000000700000000000000050000000000000078d9d7054e01e3b6887a7ba6c2b03194e3ccf4a500"/797], 0x6c4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x40086602, &(0x7f0000000000)) 4.924706419s ago: executing program 0 (id=311): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000300)={[{0xfffffffc, 0x8000, 0xe0, 0xfc, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x40, 0x0, 0x6}, {0x0, 0x0, 0xff, 0xfe, 0x4, 0x0, 0x81, 0x0, 0x20, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0x5, 0xf8, 0x2, 0x0, 0x68, 0x0, 0x9, 0xe0ee}], 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.207066986s ago: executing program 2 (id=312): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) pipe2$watch_queue(&(0x7f0000000180), 0x80) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffffffffff9}]}, 0x2c}], 0x1}, 0x0) 4.199777966s ago: executing program 4 (id=313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="5daa000000000000791029000000000095000000000000009021f7eace5bc5e9b05abe6ed9e5a4652b36"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.058271866s ago: executing program 1 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8c101a, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4.023193206s ago: executing program 4 (id=315): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='})\x00', 0x0) 4.022555395s ago: executing program 3 (id=316): ioperm(0x0, 0x9, 0x7) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) waitid(0x1, r1, 0x0, 0x4, 0x0) memfd_create(0x0, 0xa) 4.009354886s ago: executing program 0 (id=317): mkdir(0x0, 0x0) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x380b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) chdir(&(0x7f0000000280)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x5) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0xfffffdfc}]) 3.936895005s ago: executing program 1 (id=318): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) 3.936624785s ago: executing program 4 (id=319): r0 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001c00070c160200000000000007000000", @ANYRES32=r2, @ANYBLOB="020000000a0002000180c200000200000c00"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf7) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0xffffffff, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "04b2c5641bafe203015f8161af3be9b7715843"}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x800, 0x4) 3.936333075s ago: executing program 2 (id=320): socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000010c0)="172f9946"}) mount$cgroup(0x0, 0x0, 0x0, 0x8, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f045}) ppoll(&(0x7f0000000040)=[{r5, 0x80db}], 0x1, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r6) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000080)=@filename='./file0\x00', r6, &(0x7f0000000100)={0x6, 0xd, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000d}) 3.742876584s ago: executing program 3 (id=321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/79, 0x4f) 2.55043102s ago: executing program 1 (id=322): syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0xff7e, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.370146599s ago: executing program 2 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c00028005000100000000002c00018014000300fe88000000000000000000000000000114000400fe80000000000000000000406556c1aa240002800c00028005000100000000001400018008000100ac1e000108000200e000000208000740000000000c0005800800010052415300"], 0xc0}}, 0x0) 2.233152019s ago: executing program 4 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) fanotify_mark(0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffff9c, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x1, &(0x7f0000000b80)) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x11]}, 0x8, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) 2.230195769s ago: executing program 0 (id=325): syz_open_dev$vim2m(0x0, 0x10001, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) semget$private(0x0, 0x207, 0x480) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) socket(0x28, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000003f80)=""/4098, 0x1002) 1.986837028s ago: executing program 3 (id=326): socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000010c0)="172f9946"}) mount$cgroup(0x0, 0x0, 0x0, 0x8, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f045}) ppoll(&(0x7f0000000040)=[{r5, 0x80db}], 0x1, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r6) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000080)=@filename='./file0\x00', r6, &(0x7f0000000100)={0x6, 0xd, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000d}) 1.218059885s ago: executing program 2 (id=327): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003661c557e25aad3ee0a0447dc05c35e4bab539fa37bd9e2e7300f2ec29242e539c1a7ccf8a2dfe7ef353e78c818c28b3abdb3e2cd601e434cc590ac3fd14c01968b923bce39571961b89", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000001880)=""/180) 888.830844ms ago: executing program 4 (id=328): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) userfaultfd(0x0) 331.158052ms ago: executing program 2 (id=329): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e1a0de04ada2502011500010000000000000c07058108090006aaaa"], 0x1d) 262.981781ms ago: executing program 3 (id=330): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='})\x00', 0x0) 76.872501ms ago: executing program 3 (id=331): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) io_submit(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 0s ago: executing program 3 (id=332): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r2, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x31c}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 53.362740][ T4155] cgroup: Unknown subsys name 'net' [ 53.498090][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.902905][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.675827][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 56.750474][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 56.852561][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.859646][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.868119][ T4166] device bridge_slave_0 entered promiscuous mode [ 56.900256][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.907456][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.918135][ T4166] device bridge_slave_1 entered promiscuous mode [ 56.955435][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 56.983356][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.990498][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.998636][ T4180] device bridge_slave_0 entered promiscuous mode [ 57.016072][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 57.026153][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.034515][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.044915][ T4180] device bridge_slave_1 entered promiscuous mode [ 57.058199][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.096568][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.122921][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 57.146797][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.174617][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.204927][ T4166] team0: Port device team_slave_0 added [ 57.239587][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.246814][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.254841][ T4167] device bridge_slave_0 entered promiscuous mode [ 57.264110][ T4166] team0: Port device team_slave_1 added [ 57.269944][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.277026][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.285293][ T4167] device bridge_slave_1 entered promiscuous mode [ 57.303491][ T4180] team0: Port device team_slave_0 added [ 57.329664][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.337601][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.345703][ T4174] device bridge_slave_0 entered promiscuous mode [ 57.359493][ T4180] team0: Port device team_slave_1 added [ 57.378449][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.385611][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.393692][ T4174] device bridge_slave_1 entered promiscuous mode [ 57.415917][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.423254][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.449248][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.462591][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.494648][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.501599][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.527747][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.540235][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.557501][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.564645][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.573599][ T4169] device bridge_slave_0 entered promiscuous mode [ 57.581197][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.588379][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.614600][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.645960][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.655386][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.662906][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.670607][ T4169] device bridge_slave_1 entered promiscuous mode [ 57.678116][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.685246][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.711256][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.729924][ T4167] team0: Port device team_slave_0 added [ 57.738254][ T4167] team0: Port device team_slave_1 added [ 57.751206][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.799730][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.811392][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.870802][ T4166] device hsr_slave_0 entered promiscuous mode [ 57.877601][ T4166] device hsr_slave_1 entered promiscuous mode [ 57.885050][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.892115][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.918054][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.931312][ T4174] team0: Port device team_slave_0 added [ 57.948496][ T4180] device hsr_slave_0 entered promiscuous mode [ 57.955567][ T4180] device hsr_slave_1 entered promiscuous mode [ 57.962192][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.969982][ T4180] Cannot create hsr debugfs directory [ 57.976552][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.984193][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.010133][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.022277][ T4174] team0: Port device team_slave_1 added [ 58.034297][ T4169] team0: Port device team_slave_0 added [ 58.067442][ T4169] team0: Port device team_slave_1 added [ 58.095308][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.102600][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.128676][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.161633][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.168851][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.194969][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.215653][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.222751][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.248909][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.270940][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.277986][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.304127][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.322374][ T4167] device hsr_slave_0 entered promiscuous mode [ 58.329078][ T4167] device hsr_slave_1 entered promiscuous mode [ 58.335669][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.343629][ T4167] Cannot create hsr debugfs directory [ 58.422458][ T4169] device hsr_slave_0 entered promiscuous mode [ 58.429257][ T4169] device hsr_slave_1 entered promiscuous mode [ 58.436179][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.443891][ T4169] Cannot create hsr debugfs directory [ 58.455558][ T4174] device hsr_slave_0 entered promiscuous mode [ 58.463070][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 58.463245][ T4174] device hsr_slave_1 entered promiscuous mode [ 58.469788][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 58.475608][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 58.487614][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 58.493857][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 58.493973][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.507485][ T4174] Cannot create hsr debugfs directory [ 58.760706][ T4166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.771833][ T4166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.782868][ T4166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.801272][ T4166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.855669][ T4180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.874262][ T4180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.884595][ T4180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.898945][ T4180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.945089][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.956216][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.973222][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.983631][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.037509][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.061518][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.074683][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.089630][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.098672][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.166923][ T4174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.179437][ T4174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.197257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.207714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.218669][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.235381][ T4174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.248817][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.267943][ T4174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.278440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.288796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.298068][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.305345][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.314465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.323243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.331647][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.338763][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.347040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.365206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.393226][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.400393][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.440576][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.447788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.457549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.466800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.476239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.484235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.491840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.499580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.512433][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.524785][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.534497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.544434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.553911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.563304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.571701][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.578769][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.595583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.604502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.614220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.624062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.631659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.640077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.648932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.657760][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.664870][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.676310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.687165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.697356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.706269][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.713356][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.724300][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.732955][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.744030][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.760718][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.769329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.778218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.789826][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.796930][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.805434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.835023][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.847710][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.859629][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.866760][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.882768][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.891404][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.900738][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.914933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.923916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.932842][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.939887][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.968332][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.979508][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.007938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.019605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.035880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.047767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.056622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.065875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.074450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.083759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.092264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.100456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.109769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.118972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.127864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.136536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.145307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.154360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.162810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.171023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.178981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.187094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.205584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.215654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.229368][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.241508][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.261632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.270278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.286057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.307955][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.341006][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.363303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.375806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.384746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.394533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.403967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.411362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.420000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.428604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.466187][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.483800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.494259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.513094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.524284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.533948][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.542196][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 60.542616][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 60.548226][ T4211] Bluetooth: hci3: command 0x041b tx timeout [ 60.561036][ T4212] Bluetooth: hci2: command 0x041b tx timeout [ 60.567283][ T4212] Bluetooth: hci4: command 0x041b tx timeout [ 60.579509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.587645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.599776][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.621999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.631215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.647614][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.654734][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.669895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.678656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.693629][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.700688][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.710087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.719046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.749852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.761535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.775340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.791734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.800999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.815784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.825918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.833928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.842762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.851654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.860115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.868662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.878692][ T4166] device veth0_vlan entered promiscuous mode [ 60.889807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.898916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.922408][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.937717][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.958741][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.968114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.976953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.985153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.994067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.007864][ T4166] device veth1_vlan entered promiscuous mode [ 61.034198][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.062632][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.071294][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.101847][ T4166] device veth0_macvtap entered promiscuous mode [ 61.116950][ T4166] device veth1_macvtap entered promiscuous mode [ 61.132920][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.143792][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.154160][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.163215][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.171702][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.180169][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.190015][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.198950][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.206887][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.215090][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.240770][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.250088][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.274681][ T4180] device veth0_vlan entered promiscuous mode [ 61.281167][ T4169] device veth0_vlan entered promiscuous mode [ 61.297519][ T4167] device veth0_vlan entered promiscuous mode [ 61.310054][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.320856][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.329761][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.337353][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.346590][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.354852][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.363555][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.371677][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.380587][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.389759][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.398795][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.406866][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.415865][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.424387][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.442941][ T4180] device veth1_vlan entered promiscuous mode [ 61.454264][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.464865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.473716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.483641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.508551][ T4169] device veth1_vlan entered promiscuous mode [ 61.522636][ T4167] device veth1_vlan entered promiscuous mode [ 61.529352][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.538568][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.548014][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.556629][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.565740][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.586914][ T4166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.596772][ T4166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.605539][ T4166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.615536][ T4166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.639866][ T4180] device veth0_macvtap entered promiscuous mode [ 61.664130][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.673920][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.684126][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.693572][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.703553][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.734168][ T4169] device veth0_macvtap entered promiscuous mode [ 61.747101][ T4174] device veth0_vlan entered promiscuous mode [ 61.768712][ T4180] device veth1_macvtap entered promiscuous mode [ 61.779910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.788333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.797377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.806756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.815245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.824310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.833397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.841313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.853281][ T4169] device veth1_macvtap entered promiscuous mode [ 61.863670][ T4174] device veth1_vlan entered promiscuous mode [ 61.875999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.884661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.894232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.903095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.911677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.926062][ T4167] device veth0_macvtap entered promiscuous mode [ 61.969166][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.980353][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.001272][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.008930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.017275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.026319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.035276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.044564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.054981][ T4167] device veth1_macvtap entered promiscuous mode [ 62.084350][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.095282][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.108486][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.118268][ T4174] device veth0_macvtap entered promiscuous mode [ 62.128965][ T4174] device veth1_macvtap entered promiscuous mode [ 62.147322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.156099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.164802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.173600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.185976][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.194879][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.204002][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.213118][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.226460][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.239494][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.249971][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.261339][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.273487][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.283637][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.294290][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.305094][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.315787][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.328834][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.342977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.351562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.360344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.369306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.378974][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.389799][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.399940][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.410743][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.420595][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.431310][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.444017][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.454833][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.466996][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.476839][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.487371][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.497232][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.507987][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.518934][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.529352][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.538438][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.541699][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.547170][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.547221][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.582034][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.587593][ T4180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.598338][ T4180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.608738][ T4180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.617746][ T4180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.627265][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 62.633748][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 62.639835][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 62.641018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.652117][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 62.659203][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 62.663773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.674821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.683749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.692865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.707482][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.719413][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.729437][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.740132][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.749978][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.760646][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.770478][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.781030][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.796084][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.823287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.831875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.844304][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.854990][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.865966][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.876701][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.886762][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.897303][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.908043][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.918805][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.930408][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.960648][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.970217][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.980969][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.990676][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.000242][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.008964][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.075440][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.096223][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.121464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.153345][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.161731][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.182852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.222379][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.240796][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.270606][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.280761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.317212][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.327472][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.362049][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.374103][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.396776][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.406124][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.409994][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.419900][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.437850][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.445290][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.453980][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.470390][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.519056][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.530324][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.542514][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 63.561128][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.561137][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.578612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.947655][ T4215] Bluetooth: hci1: command 0x0419 tx timeout [ 65.095013][ T4215] Bluetooth: hci0: command 0x0419 tx timeout [ 65.200973][ T4215] Bluetooth: hci2: command 0x0419 tx timeout [ 65.250971][ T4215] Bluetooth: hci4: command 0x0419 tx timeout [ 65.270662][ T4215] Bluetooth: hci3: command 0x0419 tx timeout [ 65.558808][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 65.947591][ T4274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 65.982105][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.991062][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.302850][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.652094][ T13] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 67.033461][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.059501][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.084450][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 67.128520][ T13] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 67.150308][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.232962][ T4277] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.257145][ T13] hub 1-1:1.0: bad descriptor, ignoring hub [ 67.282961][ T13] hub: probe of 1-1:1.0 failed with error -5 [ 67.323117][ T13] cdc_wdm 1-1:1.0: skipping garbage [ 67.328343][ T13] cdc_wdm 1-1:1.0: skipping garbage [ 67.366216][ T13] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 67.380998][ T13] cdc_wdm 1-1:1.0: Unknown control protocol [ 67.474261][ T13] usb 1-1: USB disconnect, device number 2 [ 69.022068][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 69.351943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.935020][ T4323] overlayfs: failed to set xattr on upper [ 69.962087][ T4323] overlayfs: ...falling back to index=off,metacopy=off. [ 70.131933][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 70.141080][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 70.150089][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 70.159135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 70.168109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.187886][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.194532][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.611443][ T4340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 71.689139][ T4340] netlink: 31 bytes leftover after parsing attributes in process `syz.1.19'. [ 71.740159][ T4340] netlink: 'syz.1.19': attribute type 3 has an invalid length. [ 71.772037][ T4340] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 71.784588][ T4340] netlink: 31 bytes leftover after parsing attributes in process `syz.1.19'. [ 72.091269][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 72.308015][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.296518][ T4373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 75.328987][ T4388] loop2: detected capacity change from 0 to 1024 [ 75.627292][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'. [ 75.668233][ T4396] ======================================================= [ 75.668233][ T4396] WARNING: The mand mount option has been deprecated and [ 75.668233][ T4396] and is ignored by this kernel. Remove the mand [ 75.668233][ T4396] option from the mount to silence this warning. [ 75.668233][ T4396] ======================================================= [ 75.668270][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'. [ 75.703216][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.723617][ T4396] process 'syz.3.32' launched '/dev/fd/3' with NULL argv: empty string added [ 75.755967][ T4393] device bridge0 entered promiscuous mode [ 75.795921][ T4393] device batadv_slave_1 entered promiscuous mode [ 75.806753][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'. [ 75.825914][ T4388] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 75.830515][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'. [ 75.871068][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 75.962332][ T4393] Zero length message leads to an empty skb [ 77.082006][ T4215] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.204638][ T4381] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 77.289767][ T4381] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 77.308643][ T4381] EXT4-fs (loop2): This should not happen!! Data will be lost [ 77.308643][ T4381] [ 77.319463][ T4381] EXT4-fs (loop2): Total free blocks count 0 [ 77.326393][ T4381] EXT4-fs (loop2): Free/Dirty block details [ 77.334735][ T4381] EXT4-fs (loop2): free_blocks=68451041280 [ 77.346221][ T4381] EXT4-fs (loop2): dirty_blocks=5136 [ 77.351525][ T4381] EXT4-fs (loop2): Block reservation details [ 77.379043][ T4381] EXT4-fs (loop2): i_reserved_data_blocks=321 [ 77.464158][ T4215] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.474981][ T4227] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 77.482051][ T4215] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.523055][ T4227] EXT4-fs (loop2): This should not happen!! Data will be lost [ 77.523055][ T4227] [ 77.736984][ T4215] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.746745][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.755282][ T4215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.772157][ T4215] usb 5-1: Product: syz [ 77.777815][ T4215] usb 5-1: Manufacturer: syz [ 77.785083][ T4215] usb 5-1: SerialNumber: syz [ 77.819177][ T4215] usb 5-1: config 0 descriptor?? [ 77.848473][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 77.857989][ T4427] device lo entered promiscuous mode [ 77.865312][ T4427] device tunl0 entered promiscuous mode [ 77.871595][ T4427] device gre0 entered promiscuous mode [ 77.879933][ T4427] device gretap0 entered promiscuous mode [ 77.887444][ T4427] device erspan0 entered promiscuous mode [ 77.904875][ T4427] device ip_vti0 entered promiscuous mode [ 77.906874][ T4215] usb 5-1: selecting invalid altsetting 0 [ 77.921333][ T4428] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 77.969767][ T4427] device ip6_vti0 entered promiscuous mode [ 77.992076][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 78.011574][ T4427] device sit0 entered promiscuous mode [ 78.051058][ T4428] cramfs: wrong magic [ 78.053366][ T4427] device ip6tnl0 entered promiscuous mode [ 78.092667][ T4427] device ip6gre0 entered promiscuous mode [ 78.112150][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.138190][ T7] usb 2-1: config 0 has no interface number 0 [ 78.164961][ T7] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 6090, setting to 64 [ 78.309953][ T4427] device syz_tun entered promiscuous mode [ 78.317078][ T4427] device ip6gretap0 entered promiscuous mode [ 78.323432][ T7] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.328740][ T4427] device bridge0 entered promiscuous mode [ 78.350891][ T4427] device vcan0 entered promiscuous mode [ 78.370132][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.395866][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.418114][ T4427] device bond0 entered promiscuous mode [ 78.434416][ T4427] device bond_slave_0 entered promiscuous mode [ 78.452762][ T4427] device bond_slave_1 entered promiscuous mode [ 78.470906][ T4427] device team0 entered promiscuous mode [ 78.489466][ T4427] device team_slave_0 entered promiscuous mode [ 78.513629][ T4427] device team_slave_1 entered promiscuous mode [ 78.520463][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.538683][ T7] usb 2-1: config 0 descriptor?? [ 78.548275][ T4427] device dummy0 entered promiscuous mode [ 78.567905][ T4427] device nlmon0 entered promiscuous mode [ 78.868510][ T4212] usb 5-1: USB disconnect, device number 2 [ 78.877360][ T7] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 79.292812][ T4427] device caif0 entered promiscuous mode [ 79.310963][ T4427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.367856][ T4431] device vlan0 entered promiscuous mode [ 79.428561][ T4431] team0: Port device vlan0 added [ 79.482254][ T4419] netlink: 56 bytes leftover after parsing attributes in process `syz.1.38'. [ 79.526155][ T4261] usb 2-1: USB disconnect, device number 2 [ 79.628158][ T4431] syz.3.41 (4431) used greatest stack depth: 18872 bytes left [ 79.863466][ T4460] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.434327][ T1106] cfg80211: failed to load regulatory.db [ 83.563244][ T1106] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.194487][ T4507] ceph: No mds server is up or the cluster is laggy [ 84.213850][ T4243] libceph: connect (1)[c::]:6789 error -101 [ 84.221277][ T4243] libceph: mon0 (1)[c::]:6789 connect error [ 84.532148][ T1106] usb 2-1: Using ep0 maxpacket: 8 [ 84.672550][ T1106] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 84.700423][ T1106] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.726518][ T1106] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.741231][ T4520] netlink: 164 bytes leftover after parsing attributes in process `syz.2.60'. [ 84.931302][ T1106] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.945788][ T1106] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.965192][ T1106] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.992192][ T1106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.002121][ T4212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.022082][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 85.252036][ T4212] usb 4-1: Using ep0 maxpacket: 8 [ 85.312131][ T1106] usb 2-1: GET_CAPABILITIES returned 0 [ 85.317656][ T1106] usbtmc 2-1:16.0: can't read capabilities [ 85.372218][ T4212] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.434259][ T4212] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.444917][ T4212] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.455495][ T4212] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.469170][ T4212] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.478542][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.586010][ T1106] usb 2-1: USB disconnect, device number 3 [ 85.752459][ T4212] usb 4-1: usb_control_msg returned -32 [ 85.760351][ T4212] usbtmc 4-1:16.0: can't read capabilities [ 87.693234][ T4552] sched: RT throttling activated [ 87.773750][ T4215] usb 4-1: USB disconnect, device number 2 [ 87.826219][ T4554] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -71 [ 90.216918][ T4582] trusted_key: encrypted_key: insufficient parameters specified [ 92.498343][ T4243] libceph: connect (1)[c::]:6789 error -101 [ 92.513305][ T4243] libceph: mon0 (1)[c::]:6789 connect error [ 92.613610][ T4595] ceph: No mds server is up or the cluster is laggy [ 92.884028][ T4608] netlink: 164 bytes leftover after parsing attributes in process `syz.4.76'. [ 95.708456][ T4628] trusted_key: encrypted_key: insufficient parameters specified [ 96.396657][ T4371] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.712709][ T4371] usb 1-1: Using ep0 maxpacket: 8 [ 96.872097][ T4371] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.924963][ T4371] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.949847][ T4371] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.963660][ T4371] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.981502][ T4371] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.993626][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.362240][ T4371] usb 1-1: can't set config #16, error -71 [ 97.502849][ T4371] usb 1-1: USB disconnect, device number 3 [ 97.789337][ T4648] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 98.373280][ T4215] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.402092][ T1325] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 98.742166][ T4215] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.766777][ T4215] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.792191][ T1325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.822812][ T1325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.831701][ T1325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 98.851952][ T4215] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.893167][ T4215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.932033][ T1325] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.972362][ T4662] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.989557][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.062253][ T4663] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.103066][ T1325] hub 1-1:1.0: bad descriptor, ignoring hub [ 99.109019][ T1325] hub: probe of 1-1:1.0 failed with error -5 [ 99.162556][ T1325] cdc_wdm 1-1:1.0: skipping garbage [ 99.277235][ T1325] cdc_wdm 1-1:1.0: skipping garbage [ 99.301277][ T1325] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 99.416964][ T4688] trusted_key: encrypted_key: insufficient parameters specified [ 99.430226][ T1325] cdc_wdm 1-1:1.0: Unknown control protocol [ 99.522760][ T1325] usb 1-1: USB disconnect, device number 4 [ 101.200068][ T4699] crypto_alloc_aead failed rc=-4 [ 102.217969][ T4721] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.794953][ T1325] usb 5-1: USB disconnect, device number 3 [ 102.888572][ T4179] Bluetooth: hci0: Received unexpected HCI Event 00000000 [ 106.170480][ T4756] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.466020][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 107.654309][ T4777] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.779878][ T4773] team0 (unregistering): Port device team_slave_0 removed [ 107.818341][ T4773] team0 (unregistering): Port device team_slave_1 removed [ 107.995866][ T4787] trusted_key: encrypted_key: key user:syz not found [ 108.172070][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.626788][ T21] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.659386][ T21] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.682046][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.721699][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.752322][ T4786] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.491097][ T4639] usb 4-1: USB disconnect, device number 3 [ 114.629109][ T4860] trusted_key: encrypted_key: key user:syz not found [ 116.390390][ T4862] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.614593][ T4921] trusted_key: encrypted_key: key user:syz not found [ 123.006455][ T4939] syz.3.153 (4939): drop_caches: 2 [ 132.959341][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965737][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.936787][ T5160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 138.945882][ T5160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 139.005084][ T5160] device bridge0 entered promiscuous mode [ 139.031277][ T5160] device batadv_slave_1 entered promiscuous mode [ 139.044630][ T5160] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 139.093767][ T5160] Cannot create hsr debugfs directory [ 139.114438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 139.123395][ T5160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 139.152023][ T4212] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 139.169796][ T5160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 139.542086][ T4212] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.591984][ T4212] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.621347][ T4212] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 140.462822][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 140.568910][ T4212] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 140.650219][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.852304][ T5158] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.410310][ T4212] hub 4-1:1.0: bad descriptor, ignoring hub [ 142.611105][ T4212] hub: probe of 4-1:1.0 failed with error -5 [ 142.744302][ T4212] cdc_wdm 4-1:1.0: skipping garbage [ 142.797996][ T4212] cdc_wdm 4-1:1.0: skipping garbage [ 142.838353][ T4212] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 142.886374][ T4212] cdc_wdm 4-1:1.0: Unknown control protocol [ 142.973291][ T4212] usb 4-1: USB disconnect, device number 4 [ 143.085214][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 147.284071][ T5233] Bluetooth: hci5: Frame reassembly failed (-84) [ 152.027282][ T5289] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.152360][ T4173] Bluetooth: hci4: hardware error 0x00 [ 157.729280][ T4639] libceph: connect (1)[c::]:6789 error -101 [ 157.793556][ T4639] libceph: mon0 (1)[c::]:6789 connect error [ 158.077233][ T4639] libceph: connect (1)[c::]:6789 error -101 [ 158.516225][ T4639] libceph: mon0 (1)[c::]:6789 connect error [ 158.552874][ T5383] ceph: No mds server is up or the cluster is laggy [ 159.045983][ T4639] libceph: connect (1)[c::]:6789 error -101 [ 159.056065][ T4639] libceph: mon0 (1)[c::]:6789 connect error [ 160.274190][ T5405] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.348525][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 165.184949][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 165.220186][ T5509] netlink: 31 bytes leftover after parsing attributes in process `syz.4.309'. [ 165.367511][ T5509] netlink: 'syz.4.309': attribute type 3 has an invalid length. [ 165.375478][ T5509] netlink: 'syz.4.309': attribute type 2 has an invalid length. [ 165.385170][ T5509] netlink: 31 bytes leftover after parsing attributes in process `syz.4.309'. [ 167.867401][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 168.148487][ T5557] netlink: 31 bytes leftover after parsing attributes in process `syz.2.323'. [ 168.171692][ T5557] netlink: 'syz.2.323': attribute type 3 has an invalid length. [ 168.187253][ T5557] netlink: 'syz.2.323': attribute type 2 has an invalid length. [ 168.197402][ T5557] netlink: 31 bytes leftover after parsing attributes in process `syz.2.323'. [ 170.501926][ T4173] ================================================================== [ 170.510487][ T4173] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11f1/0x3f50 [ 170.518331][ T4173] Read of size 1 at addr ffff888027bc1606 by task kworker/u5:3/4173 [ 170.526325][ T4173] [ 170.528661][ T4173] CPU: 1 PID: 4173 Comm: kworker/u5:3 Not tainted 5.15.177-syzkaller #0 [ 170.537006][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 170.547097][ T4173] Workqueue: hci3 hci_rx_work [ 170.551840][ T4173] Call Trace: [ 170.555125][ T4173] [ 170.558081][ T4173] dump_stack_lvl+0x1e3/0x2d0 [ 170.562776][ T4173] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 170.568425][ T4173] ? _printk+0xd1/0x120 [ 170.572602][ T4173] ? __wake_up_klogd+0xcc/0x100 [ 170.577468][ T4173] ? panic+0x860/0x860 [ 170.581550][ T4173] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 170.587045][ T4173] print_address_description+0x63/0x3b0 [ 170.592608][ T4173] ? hci_le_meta_evt+0x11f1/0x3f50 [ 170.597733][ T4173] kasan_report+0x16b/0x1c0 [ 170.602271][ T4173] ? hci_le_meta_evt+0x11f1/0x3f50 [ 170.607411][ T4173] hci_le_meta_evt+0x11f1/0x3f50 [ 170.612369][ T4173] ? __lock_acquire+0x1ff0/0x1ff0 [ 170.617424][ T4173] ? hci_remote_host_features_evt+0x280/0x280 [ 170.623504][ T4173] ? __mutex_unlock_slowpath+0x218/0x750 [ 170.629153][ T4173] ? hci_event_packet+0x3b4/0x1550 [ 170.634285][ T4173] ? mutex_unlock+0x10/0x10 [ 170.638817][ T4173] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 170.644806][ T4173] ? print_irqtrace_events+0x210/0x210 [ 170.650278][ T4173] hci_event_packet+0xc41/0x1550 [ 170.655246][ T4173] ? rcu_lock_release+0x20/0x20 [ 170.660132][ T4173] ? hci_send_to_monitor+0x99/0x4d0 [ 170.665351][ T4173] hci_rx_work+0x237/0xa10 [ 170.669797][ T4173] process_one_work+0x8a1/0x10c0 [ 170.674781][ T4173] ? worker_detach_from_pool+0x260/0x260 [ 170.680476][ T4173] ? _raw_spin_lock_irqsave+0x120/0x120 [ 170.686057][ T4173] ? kthread_data+0x4e/0xc0 [ 170.690574][ T4173] ? wq_worker_running+0x97/0x170 [ 170.695613][ T4173] worker_thread+0xaca/0x1280 [ 170.700342][ T4173] kthread+0x3f6/0x4f0 [ 170.704426][ T4173] ? rcu_lock_release+0x20/0x20 [ 170.709303][ T4173] ? kthread_blkcg+0xd0/0xd0 [ 170.713912][ T4173] ret_from_fork+0x1f/0x30 [ 170.718364][ T4173] [ 170.721384][ T4173] [ 170.723706][ T4173] Allocated by task 5577: [ 170.728036][ T4173] ____kasan_kmalloc+0xba/0xf0 [ 170.732843][ T4173] __kmalloc_node_track_caller+0x195/0x390 [ 170.738668][ T4173] __alloc_skb+0x12c/0x590 [ 170.743093][ T4173] vhci_write+0xbc/0x430 [ 170.747343][ T4173] vfs_write+0xacd/0xe50 [ 170.751589][ T4173] ksys_write+0x1a2/0x2c0 [ 170.755933][ T4173] do_syscall_64+0x3b/0xb0 [ 170.760375][ T4173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.766279][ T4173] [ 170.768606][ T4173] The buggy address belongs to the object at ffff888027bc1400 [ 170.768606][ T4173] which belongs to the cache kmalloc-512 of size 512 [ 170.782660][ T4173] The buggy address is located 6 bytes to the right of [ 170.782660][ T4173] 512-byte region [ffff888027bc1400, ffff888027bc1600) [ 170.796315][ T4173] The buggy address belongs to the page: [ 170.801948][ T4173] page:ffffea00009ef000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27bc0 [ 170.812120][ T4173] head:ffffea00009ef000 order:2 compound_mapcount:0 compound_pincount:0 [ 170.820456][ T4173] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 170.828459][ T4173] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441c80 [ 170.837049][ T4173] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 170.845630][ T4173] page dumped because: kasan: bad access detected [ 170.852052][ T4173] page_owner tracks the page as allocated [ 170.857774][ T4173] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 12073385998, free_ts 0 [ 170.875744][ T4173] get_page_from_freelist+0x3b78/0x3d40 [ 170.881307][ T4173] __alloc_pages+0x272/0x700 [ 170.885941][ T4173] alloc_page_interleave+0x22/0x1c0 [ 170.891151][ T4173] new_slab+0xbb/0x4b0 [ 170.895238][ T4173] ___slab_alloc+0x6f6/0xe10 [ 170.899846][ T4173] __kmalloc_node+0x1fa/0x390 [ 170.904533][ T4173] kvmalloc_node+0x80/0x140 [ 170.909057][ T4173] v4l2_ctrl_new+0x6fb/0x12b0 [ 170.913748][ T4173] v4l2_ctrl_new_std+0x445/0x5a0 [ 170.918699][ T4173] vivid_create_controls+0x1b44/0x3500 [ 170.924172][ T4173] vivid_probe+0x42bf/0x72f0 [ 170.928774][ T4173] platform_probe+0x131/0x1b0 [ 170.933477][ T4173] really_probe+0x24e/0xb60 [ 170.937993][ T4173] __driver_probe_device+0x1a2/0x3d0 [ 170.943292][ T4173] driver_probe_device+0x50/0x420 [ 170.948332][ T4173] __driver_attach+0x479/0x690 [ 170.953112][ T4173] page_owner free stack trace missing [ 170.958483][ T4173] [ 170.960812][ T4173] Memory state around the buggy address: [ 170.966444][ T4173] ffff888027bc1500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 170.974527][ T4173] ffff888027bc1580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 170.982600][ T4173] >ffff888027bc1600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.990751][ T4173] ^ [ 170.994824][ T4173] ffff888027bc1680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 171.002902][ T4173] ffff888027bc1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 171.010982][ T4173] ================================================================== [ 171.019048][ T4173] Disabling lock debugging due to kernel taint [ 171.035140][ T4173] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.042401][ T4173] CPU: 1 PID: 4173 Comm: kworker/u5:3 Tainted: G B 5.15.177-syzkaller #0 [ 171.052120][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 171.062171][ T4173] Workqueue: hci3 hci_rx_work [ 171.066851][ T4173] Call Trace: [ 171.070125][ T4173] [ 171.073140][ T4173] dump_stack_lvl+0x1e3/0x2d0 [ 171.077846][ T4173] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 171.083493][ T4173] ? panic+0x860/0x860 [ 171.087570][ T4173] ? rcu_is_watching+0x11/0xa0 [ 171.092336][ T4173] ? preempt_schedule_common+0xa6/0xd0 [ 171.097887][ T4173] panic+0x318/0x860 [ 171.101787][ T4173] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 171.107964][ T4173] ? check_panic_on_warn+0x1d/0xa0 [ 171.113090][ T4173] ? fb_is_primary_device+0xd0/0xd0 [ 171.118300][ T4173] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 171.124292][ T4173] ? _raw_spin_unlock+0x40/0x40 [ 171.129157][ T4173] check_panic_on_warn+0x7e/0xa0 [ 171.134105][ T4173] ? hci_le_meta_evt+0x11f1/0x3f50 [ 171.139229][ T4173] end_report+0x6d/0xf0 [ 171.143394][ T4173] kasan_report+0x18e/0x1c0 [ 171.147912][ T4173] ? hci_le_meta_evt+0x11f1/0x3f50 [ 171.153040][ T4173] hci_le_meta_evt+0x11f1/0x3f50 [ 171.158007][ T4173] ? __lock_acquire+0x1ff0/0x1ff0 [ 171.163048][ T4173] ? hci_remote_host_features_evt+0x280/0x280 [ 171.169143][ T4173] ? __mutex_unlock_slowpath+0x218/0x750 [ 171.174782][ T4173] ? hci_event_packet+0x3b4/0x1550 [ 171.179912][ T4173] ? mutex_unlock+0x10/0x10 [ 171.184419][ T4173] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 171.190548][ T4173] ? print_irqtrace_events+0x210/0x210 [ 171.196016][ T4173] hci_event_packet+0xc41/0x1550 [ 171.200972][ T4173] ? rcu_lock_release+0x20/0x20 [ 171.205842][ T4173] ? hci_send_to_monitor+0x99/0x4d0 [ 171.211063][ T4173] hci_rx_work+0x237/0xa10 [ 171.215490][ T4173] process_one_work+0x8a1/0x10c0 [ 171.220446][ T4173] ? worker_detach_from_pool+0x260/0x260 [ 171.226093][ T4173] ? _raw_spin_lock_irqsave+0x120/0x120 [ 171.231648][ T4173] ? kthread_data+0x4e/0xc0 [ 171.236161][ T4173] ? wq_worker_running+0x97/0x170 [ 171.241200][ T4173] worker_thread+0xaca/0x1280 [ 171.245899][ T4173] kthread+0x3f6/0x4f0 [ 171.249976][ T4173] ? rcu_lock_release+0x20/0x20 [ 171.254847][ T4173] ? kthread_blkcg+0xd0/0xd0 [ 171.259449][ T4173] ret_from_fork+0x1f/0x30 [ 171.263888][ T4173] [ 171.267242][ T4173] Kernel Offset: disabled [ 171.271655][ T4173] Rebooting in 86400 seconds..