last executing test programs: 16.703771843s ago: executing program 1 (id=419): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0x9}, {0x7, 0x9}, {0x3}, {0xd, 0x8}, {0xd, 0xe0}, {0x200, 0x7ff}, {0x2, 0x3}, {0xfffffffc, 0xa}], 0xff, 0x28, 0x8, 0x1, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e8) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000002499b8f276dc7558ecf97a4449a2e3f8367d61f49e160ba48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendfile(r1, r3, &(0x7f00000000c0)=0xc, 0x2) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000480)={0x80000, 0x182, 0x5}, 0x18) name_to_handle_at(r4, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@orangefs_parent={0x28, 0x2, {{"b80c1057004fac0c929e5b126e930b5a", 0x3}, {"13041371982ae495e27232529f48968b", 0xdca5}}}, &(0x7f0000000580), 0x200) creat(&(0x7f0000000140)='./file1\x00', 0x10b) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x1000000000000}) 16.266562831s ago: executing program 1 (id=420): syz_io_uring_setup(0x131, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = gettid() tkill(r1, 0x13) 15.12558449s ago: executing program 1 (id=425): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 11.315490324s ago: executing program 2 (id=429): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) 10.980041998s ago: executing program 2 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x700, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) 10.564474556s ago: executing program 4 (id=432): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) 10.234678711s ago: executing program 1 (id=434): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@dstopts={{0x14, 0x29, 0x37, {0x88}}}, @hoplimit={{0x10, 0x29, 0x34, 0x6}}, @pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x44}}], 0x1, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000400)="a81dc4722d18f4100a4197458e4afeee150a88fa3cf794e36e24274e68be78b9d660799da6b044f0808e2794002c7749f0a2b86a50ededb9864df92f43333c7b23c65900075bf76d375a174cd6f9175d1608cc71f7d7444894", 0x59}], 0x1, 0x4000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000001a00)='\xff\xff', 0x2) sendfile(r4, r5, 0x0, 0x8000fb00) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) 9.09675955s ago: executing program 4 (id=435): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) recvfrom$ax25(r7, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 9.09596517s ago: executing program 2 (id=437): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 6.902642164s ago: executing program 2 (id=438): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 6.605778196s ago: executing program 4 (id=440): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) lseek(0xffffffffffffffff, 0xa, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) unshare(0x24060400) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64", 0x27}], 0x1) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e25, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0}, 0x0) 5.542762702s ago: executing program 0 (id=441): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) 5.460735396s ago: executing program 0 (id=442): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2af6ffffff0000", @ANYRES32=0x0, @ANYRESOCT], 0x24}}, 0x4044) 5.444641237s ago: executing program 2 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) 5.435984587s ago: executing program 4 (id=444): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 5.014695925s ago: executing program 0 (id=445): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) 4.20956477s ago: executing program 3 (id=446): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) dup3(r0, r1, 0x0) 4.106129534s ago: executing program 0 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.582718587s ago: executing program 3 (id=448): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x2, 0xffff, 0x8, 0x3, 0x772f6461, 0xaf4, "8ac9"}}, 0x11a) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) 3.064383459s ago: executing program 0 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, 0x0, &(0x7f0000000240)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) 3.040282619s ago: executing program 1 (id=450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0xdddd1000, 0x547d1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.858590737s ago: executing program 3 (id=451): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r2 = socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x7, &(0x7f0000000180)=""/57) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r3, 0x0, 0xfa, 0x9}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x288, 0x358, 0x1e8, 0x138, 0x138, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0xffffffff, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x32}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf7, 0x4, @ipv4=@loopback, 0x4e23}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 2.009483284s ago: executing program 0 (id=452): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x2, 0x2, &(0x7f0000000280)={0x1b, "faeb4a503bd08689e41751a4fc78219dae1d2a12fb0e65ccb19b79fdafbbf6b691"}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, 0x0) 1.905420288s ago: executing program 4 (id=453): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x7fffffff, 0x87b, 0xa, 0x24c, 0xffe, 0x7, 0x5, 0x5, 0x2, 0x105, 0xd11, 0x1, 0x2c03, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x8000, 0x800008, 0x4, 0x421, 0xfffffffd]}) sendfile(r0, r0, 0x0, 0x8) 1.831178052s ago: executing program 3 (id=454): unshare(0x2000400) lseek(0xffffffffffffffff, 0x7, 0x2) 1.194576029s ago: executing program 3 (id=455): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) lseek(0xffffffffffffffff, 0xa, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) unshare(0x24060400) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64", 0x27}], 0x1) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e25, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0}, 0x0) 1.178286369s ago: executing program 4 (id=456): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) 142.826014ms ago: executing program 2 (id=457): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) 66.655448ms ago: executing program 1 (id=458): write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0xe, 0x7, 0x0, 0x8000}, @ipv4=@udp={{0x5, 0x4, 0x2, 0x1e, 0x76, 0x66, 0x0, 0x4, 0x11, 0x0, @broadcast, @local}, {0x4e24, 0x4e21, 0x62, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x0, @void}, "4e2236dec428f0824526d4464a3893349d2da471656f29038215d47ae8e887170398c48105aaa94c58894ba6bacd062b3c308f9372ffd56f00988aede6510154db9cc566779fb4ee395823ab42cc4acb7ba2b993b327"}}}}, 0x84) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 0s ago: executing program 3 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 71.748192][ T4171] cgroup: Unknown subsys name 'net' [ 71.860608][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.455749][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.056458][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 75.129467][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 75.204284][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 75.247561][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 75.316144][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 75.350827][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.361410][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.372031][ T4181] device bridge_slave_0 entered promiscuous mode [ 75.409766][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.418335][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.428801][ T4181] device bridge_slave_1 entered promiscuous mode [ 75.471015][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.481371][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.490498][ T4184] device bridge_slave_0 entered promiscuous mode [ 75.531124][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.540475][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.551236][ T4184] device bridge_slave_1 entered promiscuous mode [ 75.569510][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.577900][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.588085][ T4187] device bridge_slave_0 entered promiscuous mode [ 75.606708][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.628977][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.638087][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.648016][ T4190] device bridge_slave_0 entered promiscuous mode [ 75.658925][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.668740][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.678974][ T4187] device bridge_slave_1 entered promiscuous mode [ 75.698695][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.722376][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.737681][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.746294][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.755281][ T4190] device bridge_slave_1 entered promiscuous mode [ 75.791060][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.826197][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.834549][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.844430][ T4189] device bridge_slave_0 entered promiscuous mode [ 75.865714][ T4181] team0: Port device team_slave_0 added [ 75.894256][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.909258][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.925913][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.933971][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.943160][ T4189] device bridge_slave_1 entered promiscuous mode [ 75.952351][ T4181] team0: Port device team_slave_1 added [ 75.977230][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.017592][ T4184] team0: Port device team_slave_0 added [ 76.026444][ T4184] team0: Port device team_slave_1 added [ 76.034875][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.063092][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.095649][ T4187] team0: Port device team_slave_0 added [ 76.103768][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.112116][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.141723][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.157074][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.185702][ T4187] team0: Port device team_slave_1 added [ 76.204719][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.212130][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.243939][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.265898][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.274071][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.304661][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.323306][ T4190] team0: Port device team_slave_0 added [ 76.330386][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.337588][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.367592][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.399899][ T4190] team0: Port device team_slave_1 added [ 76.409672][ T4189] team0: Port device team_slave_0 added [ 76.421372][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.429227][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.458355][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.495510][ T4189] team0: Port device team_slave_1 added [ 76.511409][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.519517][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.551990][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.599732][ T4181] device hsr_slave_0 entered promiscuous mode [ 76.607516][ T4181] device hsr_slave_1 entered promiscuous mode [ 76.624325][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.632273][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.665454][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.678524][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.690110][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.690661][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 76.732448][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.735586][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 76.755798][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 76.757433][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.771958][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.787805][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 76.805230][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.818909][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 76.861576][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.868968][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.901739][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.932668][ T4187] device hsr_slave_0 entered promiscuous mode [ 76.942370][ T4187] device hsr_slave_1 entered promiscuous mode [ 76.950677][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.959792][ T4187] Cannot create hsr debugfs directory [ 76.968921][ T4184] device hsr_slave_0 entered promiscuous mode [ 76.978549][ T4184] device hsr_slave_1 entered promiscuous mode [ 76.986947][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.996467][ T4184] Cannot create hsr debugfs directory [ 77.070361][ T4189] device hsr_slave_0 entered promiscuous mode [ 77.079048][ T4189] device hsr_slave_1 entered promiscuous mode [ 77.089599][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.102328][ T4189] Cannot create hsr debugfs directory [ 77.171310][ T4190] device hsr_slave_0 entered promiscuous mode [ 77.179355][ T4190] device hsr_slave_1 entered promiscuous mode [ 77.188214][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.202548][ T4190] Cannot create hsr debugfs directory [ 77.314649][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.322563][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.514784][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.531428][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.548385][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.569680][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.612015][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.629061][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.641433][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.671436][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.707229][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.717188][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.736557][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.762895][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.826203][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.877529][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.889408][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.903928][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.919083][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.934601][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.945088][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.986223][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.023196][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.044823][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.055484][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.066546][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.077948][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.085825][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.095251][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.105016][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.114965][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.131923][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.142367][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.152426][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.160843][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.172558][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.182769][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.193652][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.207568][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.273061][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.289527][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.299385][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.309876][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.319556][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.329074][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.340707][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.350777][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.358421][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.369439][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.379423][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.391645][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.401196][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.411126][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.421221][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.432178][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.442890][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.452561][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.464431][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.476253][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.486000][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.496226][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.516510][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.527922][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.551865][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.563358][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.587155][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.604511][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.615484][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.626513][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.635756][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.664000][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.677173][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.707941][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.717910][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.732610][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.751046][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 78.752495][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.787701][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.798777][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.809048][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.816857][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.830820][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 78.837283][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.839424][ T4251] Bluetooth: hci3: command 0x041b tx timeout [ 78.870343][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.883744][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.895252][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.897498][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 78.933267][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.940967][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.942370][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 78.951437][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.972802][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.999391][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.036616][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.052749][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.069012][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.079555][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.091337][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.103845][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.114506][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.126309][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.140647][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.151237][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.161161][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.175517][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.192835][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.205667][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.219164][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.247381][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.257214][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.276165][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.286498][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.299379][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.307117][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.349188][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.358119][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.367766][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.377835][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.391409][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.401216][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.408559][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.418383][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.433923][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.443209][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.454329][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.470798][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.483339][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.494401][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.513145][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.525096][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.536808][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.547834][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.586620][ T4181] device veth0_vlan entered promiscuous mode [ 79.597488][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.608901][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.620290][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.627887][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.639443][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.652271][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.664147][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.673445][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.683590][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.694759][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.706135][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.722394][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.732431][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.744066][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.755354][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.764986][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.774832][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.789801][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.801858][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.812301][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.822912][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.856823][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.869523][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.884485][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.894945][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.908306][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.923547][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.934924][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.945311][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.956139][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.968448][ T4181] device veth1_vlan entered promiscuous mode [ 79.981092][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.999108][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.017337][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.032463][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.053951][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.063794][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.076710][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.090628][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.102059][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.115057][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.156979][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.175389][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.227975][ T4187] device veth0_vlan entered promiscuous mode [ 80.236411][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.247421][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.265269][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.276888][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.287046][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.296647][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.317140][ T4181] device veth0_macvtap entered promiscuous mode [ 80.383828][ T4187] device veth1_vlan entered promiscuous mode [ 80.404155][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.413904][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.427260][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.438321][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.453198][ T4184] device veth0_vlan entered promiscuous mode [ 80.462311][ T4181] device veth1_macvtap entered promiscuous mode [ 80.494992][ T4184] device veth1_vlan entered promiscuous mode [ 80.535850][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.559875][ T4187] device veth0_macvtap entered promiscuous mode [ 80.578804][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.587903][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.599129][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.611960][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.623070][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.631111][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.639137][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.653001][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.664442][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.679874][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.695179][ T4184] device veth0_macvtap entered promiscuous mode [ 80.705588][ T4187] device veth1_macvtap entered promiscuous mode [ 80.729665][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.738510][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.748505][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.760768][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.770954][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.780854][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.788760][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.799471][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.808926][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.826491][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.830816][ T4251] Bluetooth: hci2: command 0x040f tx timeout [ 80.844262][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.855895][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.867861][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.878446][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.892949][ T4184] device veth1_macvtap entered promiscuous mode [ 80.910264][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 80.911534][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.930231][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 80.938491][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.952215][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.981843][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.990953][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 80.992323][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.998750][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 81.008645][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.056153][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.069347][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.081573][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.093337][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.105420][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.122819][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.134386][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.149347][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.173223][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.187377][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.200825][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.222275][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.241437][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.254308][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.265119][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.276185][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.287967][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.298610][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.311344][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.321915][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.332140][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.350165][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.359032][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.374767][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.384568][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.410593][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.420329][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.429153][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.438277][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.518409][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.529882][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.553711][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.566417][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.578536][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.662020][ T4189] device veth0_vlan entered promiscuous mode [ 81.671514][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.681781][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.691735][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.702523][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.716158][ T4190] device veth0_vlan entered promiscuous mode [ 81.730933][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.753371][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.758965][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.774682][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.784058][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.793306][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.807015][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.819468][ T4189] device veth1_vlan entered promiscuous mode [ 81.861456][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.869803][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.902502][ T4190] device veth1_vlan entered promiscuous mode [ 81.933309][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.945271][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.965457][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.968585][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.987858][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.997291][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.007485][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.018094][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.028399][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.070653][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.093027][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.101273][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.121563][ T4189] device veth0_macvtap entered promiscuous mode [ 82.143961][ T4190] device veth0_macvtap entered promiscuous mode [ 82.157295][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.169835][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.187029][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.214970][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.227650][ T4189] device veth1_macvtap entered promiscuous mode [ 82.240743][ T4190] device veth1_macvtap entered promiscuous mode [ 82.254564][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.259912][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.273554][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.289830][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.307441][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.347415][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.391454][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.408855][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.547307][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.578186][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.619908][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.632936][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.643844][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.655601][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.666774][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.680629][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.692518][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.734013][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.833275][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.912509][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 82.996815][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 83.012689][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 83.051496][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.101387][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 83.149129][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.166316][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 83.301229][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.323697][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.345860][ T4299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.418251][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.431423][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.448697][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.460739][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.472949][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.497852][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.516345][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.527638][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.547568][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.841539][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.909720][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.048155][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.216076][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.287544][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.298489][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.320329][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.434948][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.468088][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.505119][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.528265][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.550204][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.575040][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.593962][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.609028][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.640824][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.712108][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.728756][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.969376][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.208827][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.377585][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.478200][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.686021][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.182530][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.254847][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.337202][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.357437][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.371233][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.447009][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.455740][ T2279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.470542][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.478999][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.492860][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.505473][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.560858][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.840125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #2c2!!! [ 87.860020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 87.870721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 87.890649][ T2279] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 88.249262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 88.260851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 88.289984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 88.303887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 88.313787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 88.323847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.335712][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.660237][ T4350] tipc: Can't bind to reserved service type 0 [ 89.481153][ T2279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.648469][ T2279] usb 2-1: config 0 descriptor?? [ 89.671132][ T2279] usb 2-1: can't set config #0, error -71 [ 93.366660][ T4353] sched: RT throttling activated [ 93.769036][ T2279] usb 2-1: USB disconnect, device number 2 [ 94.044274][ T4369] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 94.437468][ T4373] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 95.490042][ T2279] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.730055][ T2279] usb 3-1: device descriptor read/all, error -71 [ 96.845994][ T4388] process 'syz.1.22' launched './file0' with NULL argv: empty string added [ 97.805194][ T1111] cfg80211: failed to load regulatory.db [ 102.759221][ T4440] lo speed is unknown, defaulting to 1000 [ 102.921363][ T4440] lo speed is unknown, defaulting to 1000 [ 103.764610][ T4440] lo speed is unknown, defaulting to 1000 [ 103.798363][ T26] audit: type=1326 audit(1764070279.040:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 103.827223][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 103.838407][ T4440] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.960976][ T26] audit: type=1326 audit(1764070279.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 104.141912][ T4440] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.229576][ T26] audit: type=1326 audit(1764070279.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 105.277904][ T4235] Bluetooth: hci4: command 0x0407 tx timeout [ 105.285230][ T26] audit: type=1326 audit(1764070279.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 105.315830][ T26] audit: type=1326 audit(1764070279.120:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 105.431037][ T26] audit: type=1326 audit(1764070279.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 105.578840][ T26] audit: type=1326 audit(1764070279.120:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 105.642099][ T4440] lo speed is unknown, defaulting to 1000 [ 106.327839][ T4440] lo speed is unknown, defaulting to 1000 [ 106.335916][ T4440] lo speed is unknown, defaulting to 1000 [ 106.342884][ T26] audit: type=1326 audit(1764070279.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 106.372141][ T4440] lo speed is unknown, defaulting to 1000 [ 106.376014][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 106.391451][ T4440] lo speed is unknown, defaulting to 1000 [ 106.558249][ T26] audit: type=1326 audit(1764070279.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 106.612283][ T26] audit: type=1326 audit(1764070279.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 109.250398][ T4517] netlink: set zone limit has 8 unknown bytes [ 111.200649][ T4235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.740366][ T4563] rdma_op ffff88807c63c9f0 conn xmit_rdma 0000000000000000 [ 115.005522][ T4565] netlink: set zone limit has 8 unknown bytes [ 115.030792][ T4565] overlayfs: failed to resolve './file0': -2 [ 116.944141][ T4582] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.010026][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.410110][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 118.341277][ T7] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 118.428482][ T7] usb 3-1: config 0 has no interface number 0 [ 118.822212][ T7] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.931340][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.950122][ T7] usb 3-1: Product: syz [ 119.970400][ T7] usb 3-1: config 0 descriptor?? [ 119.990255][ T7] usb 3-1: can't set config #0, error -71 [ 119.999562][ T7] usb 3-1: USB disconnect, device number 4 [ 123.192800][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 126.461111][ T4295] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 128.270218][ T4295] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 128.281916][ T4295] usb 4-1: can't read configurations, error -71 [ 130.207667][ T150] block nbd1: Attempted send on invalid socket [ 130.216423][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.236099][ T150] block nbd1: Attempted send on invalid socket [ 130.245082][ T150] blk_update_request: I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.421463][ T4676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 130.432859][ T150] block nbd1: Attempted send on invalid socket [ 130.440507][ T150] blk_update_request: I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.453425][ T4676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 130.466061][ T150] block nbd1: Attempted send on invalid socket [ 130.473348][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.487573][ T150] block nbd1: Attempted send on invalid socket [ 130.495501][ T150] blk_update_request: I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.514405][ T4676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 130.528267][ T150] block nbd1: Attempted send on invalid socket [ 130.536255][ T150] blk_update_request: I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.549649][ T4676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 130.563042][ T150] block nbd1: Attempted send on invalid socket [ 130.570506][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.582313][ T150] block nbd1: Attempted send on invalid socket [ 130.589127][ T150] blk_update_request: I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.602022][ T4676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 130.612664][ T150] block nbd1: Attempted send on invalid socket [ 130.619318][ T150] blk_update_request: I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.631888][ T4676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 130.643999][ T150] block nbd1: Attempted send on invalid socket [ 130.652069][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.671407][ T4676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 130.681921][ T4676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 130.691951][ T4676] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 134.661512][ T4721] ALSA: mixer_oss: invalid OSS volume '' [ 134.684804][ T4724] sctp: [Deprecated]: syz.2.119 (pid 4724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.684804][ T4724] Use struct sctp_sack_info instead [ 134.751273][ T4725] ======================================================= [ 134.751273][ T4725] WARNING: The mand mount option has been deprecated and [ 134.751273][ T4725] and is ignored by this kernel. Remove the mand [ 134.751273][ T4725] option from the mount to silence this warning. [ 134.751273][ T4725] ======================================================= [ 134.811344][ T4725] hpfs: hpfs_map_sector(): read error [ 135.616783][ T4738] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.771172][ T4744] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 135.771172][ T4744] The task syz.1.125 (4744) triggered the difference, watch for misbehavior. [ 137.202422][ T4759] netlink: set zone limit has 8 unknown bytes [ 139.169576][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.176223][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.870342][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 142.434142][ T7] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 142.464932][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.539996][ T7] usb 1-1: Product: syz [ 142.544221][ T7] usb 1-1: Manufacturer: syz [ 142.584960][ T7] usb 1-1: SerialNumber: syz [ 142.735166][ T7] usb 1-1: config 0 descriptor?? [ 143.872609][ T7] airspy 1-1:0.0: Board ID: 00 [ 143.877685][ T7] airspy 1-1:0.0: Firmware version: [ 145.450194][ T7] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 145.462726][ T7] airspy 1-1:0.0: Registered as swradio24 [ 145.468627][ T7] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 145.498492][ T7] usb 1-1: USB disconnect, device number 2 [ 146.080600][ T4237] hid-generic FFFF:0008:0003.0001: item fetching failed at offset 0/2 [ 146.680347][ T4237] hid-generic: probe of FFFF:0008:0003.0001 failed with error -22 [ 146.917494][ T4852] device vlan2 entered promiscuous mode [ 146.947434][ T4852] device wlan1 entered promiscuous mode [ 148.588119][ T4871] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.515585][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 149.515599][ T26] audit: type=1326 audit(1764070324.760:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f55733749 code=0x7ffc0000 [ 149.589263][ T26] audit: type=1326 audit(1764070324.830:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f5572a5e7 code=0x7ffc0000 [ 149.648772][ T26] audit: type=1326 audit(1764070324.830:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f556cf829 code=0x7ffc0000 [ 149.810595][ T26] audit: type=1326 audit(1764070324.830:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f55733749 code=0x7ffc0000 [ 149.834919][ T26] audit: type=1326 audit(1764070324.830:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f55733749 code=0x7ffc0000 [ 149.865566][ T26] audit: type=1326 audit(1764070324.830:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f55733749 code=0x7ffc0000 [ 150.009620][ T4888] hub 2-0:1.0: USB hub found [ 150.018302][ T4888] hub 2-0:1.0: 1 port detected [ 150.258834][ T26] audit: type=1326 audit(1764070324.830:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f55733749 code=0x7ffc0000 [ 150.674661][ T26] audit: type=1326 audit(1764070324.830:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f55733749 code=0x7ffc0000 [ 150.709136][ T26] audit: type=1326 audit(1764070324.830:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f55733749 code=0x7ffc0000 [ 150.890283][ T26] audit: type=1326 audit(1764070324.830:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f55733749 code=0x7ffc0000 [ 151.769782][ T4897] netlink: set zone limit has 8 unknown bytes [ 152.510011][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.775672][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 152.906051][ T1111] usb 2-1: config 0 has no interfaces? [ 152.913053][ T1111] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 152.960878][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.999176][ T1111] usb 2-1: config 0 descriptor?? [ 153.095033][ T4920] netlink: set zone limit has 8 unknown bytes [ 153.811438][ T1111] usb 2-1: USB disconnect, device number 3 [ 154.113390][ T4864] syz.0.165 (4864): drop_caches: 1 [ 154.460036][ T1111] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.940238][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 155.594799][ T1111] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 19910, setting to 64 [ 155.640340][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.730156][ T1111] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 156.739264][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.804488][ T1111] usb 2-1: Product: syz [ 156.819555][ T1111] usb 2-1: Manufacturer: syz [ 157.250174][ T1111] usb 2-1: SerialNumber: syz [ 157.261739][ T1111] usb 2-1: config 0 descriptor?? [ 157.321377][ T1111] usb 2-1: can't set config #0, error -71 [ 157.441785][ T1111] usb 2-1: USB disconnect, device number 4 [ 160.012253][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 160.012268][ T26] audit: type=1326 audit(1764070335.260:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320806749 code=0x7ffc0000 [ 160.178303][ T26] audit: type=1326 audit(1764070335.260:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6320808667 code=0x7ffc0000 [ 160.435222][ T26] audit: type=1326 audit(1764070335.260:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320806749 code=0x7ffc0000 [ 160.467541][ T26] audit: type=1326 audit(1764070335.260:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6320806749 code=0x7ffc0000 [ 160.658050][ T26] audit: type=1326 audit(1764070335.260:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320806749 code=0x7ffc0000 [ 160.693547][ T26] audit: type=1326 audit(1764070335.260:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6320806749 code=0x7ffc0000 [ 160.785757][ T26] audit: type=1326 audit(1764070335.260:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320806749 code=0x7ffc0000 [ 160.846248][ T26] audit: type=1326 audit(1764070335.260:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6320806749 code=0x7ffc0000 [ 160.898958][ T26] audit: type=1326 audit(1764070335.260:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.0.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320806749 code=0x7ffc0000 [ 164.699247][ T5029] sd 0:0:1:0: device reset [ 172.429172][ T26] audit: type=1326 audit(1764070347.670:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.0.239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6320806749 code=0x0 [ 172.639045][ T5116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.099968][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.278004][ T5132] syz.0.244 (5132): /proc/5131/oom_adj is deprecated, please use /proc/5131/oom_score_adj instead. [ 175.710358][ T21] usb 4-1: device not accepting address 4, error -71 [ 179.220036][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.519994][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 179.602830][ T5188] netlink: 'syz.4.259': attribute type 11 has an invalid length. [ 179.626010][ T5188] netlink: 'syz.4.259': attribute type 1 has an invalid length. [ 179.655453][ T5188] netlink: 3593 bytes leftover after parsing attributes in process `syz.4.259'. [ 179.715854][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.730980][ T21] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 180.020622][ T21] usb 1-1: config 4 interface 0 has no altsetting 0 [ 181.360009][ T21] usb 1-1: config 4 interface 0 has no altsetting 0 [ 181.800555][ T21] usb 1-1: config 4 interface 0 has no altsetting 0 [ 182.370400][ T21] usb 1-1: unable to read config index 3 descriptor/start: -71 [ 182.378628][ T21] usb 1-1: can't read configurations, error -71 [ 182.800097][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 183.200450][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.641634][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.760367][ T21] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 184.731194][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.942322][ T21] usb 1-1: config 0 descriptor?? [ 185.924150][ T1092] nbd_handle_cmd: 3 callbacks suppressed [ 185.924248][ T1092] block nbd3: Attempted send on invalid socket [ 185.937300][ T1092] print_req_error: 3 callbacks suppressed [ 185.937312][ T1092] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.955456][ T5229] hpfs: hpfs_map_sector(): read error [ 186.499505][ T21] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 186.507981][ T21] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 186.528410][ T21] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input5 [ 186.644601][ T21] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 190.114684][ T4235] usb 1-1: USB disconnect, device number 4 [ 194.839709][ T5285] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.846291][ T4236] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 195.661136][ T4236] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.551054][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.449750][ T4296] Bluetooth: hci0: command 0x0406 tx timeout [ 197.457119][ T4236] usb 3-1: config 0 descriptor?? [ 197.462387][ T4296] Bluetooth: hci1: command 0x0406 tx timeout [ 197.480267][ T4296] Bluetooth: hci2: command 0x0406 tx timeout [ 197.486464][ T4296] Bluetooth: hci3: command 0x0406 tx timeout [ 197.520140][ T4236] usb 3-1: can't set config #0, error -71 [ 197.540838][ T4236] usb 3-1: USB disconnect, device number 5 [ 197.963652][ T4295] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 198.611097][ T4295] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 198.887419][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.789360][ T4295] usb 4-1: Product: syz [ 199.793860][ T4295] usb 4-1: Manufacturer: syz [ 199.798490][ T4295] usb 4-1: SerialNumber: syz [ 199.840881][ T4295] usb 4-1: config 0 descriptor?? [ 199.931050][ T5324] netlink: 'syz.4.298': attribute type 4 has an invalid length. [ 200.207262][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.839110][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.071610][ T4295] airspy 4-1:0.0: usb_control_msg() failed -110 request 09 [ 201.078888][ T4295] airspy 4-1:0.0: Could not detect board [ 201.090896][ T5332] tc_dump_action: action bad kind [ 201.099980][ T4295] airspy: probe of 4-1:0.0 failed with error -110 [ 201.154402][ T5332] netlink: 'syz.2.301': attribute type 10 has an invalid length. [ 201.173018][ T25] usb 4-1: USB disconnect, device number 6 [ 203.929566][ T5344] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 204.179434][ T5332] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.301314][ T4237] Bluetooth: hci4: command 0x0405 tx timeout [ 208.358730][ T5415] ODEBUG: Out of memory. ODEBUG disabled [ 212.701234][ T5467] blktrace: Concurrent blktraces are not allowed on loop0 [ 214.390239][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 215.587936][ T4296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 216.630836][ T4296] usb 5-1: Using ep0 maxpacket: 16 [ 216.671882][ T4295] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.460152][ T4296] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.824395][ T4295] usb 4-1: Using ep0 maxpacket: 16 [ 218.003316][ T4296] usb 5-1: config 4 has an invalid interface number: 176 but max is 0 [ 218.012500][ T4296] usb 5-1: config 4 has no interface number 0 [ 218.020323][ T4296] usb 5-1: config 4 interface 176 has no altsetting 0 [ 218.050184][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.446726][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.456781][ T4295] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 218.466355][ T4296] usb 5-1: string descriptor 0 read error: -71 [ 218.474320][ T4296] usb 5-1: New USB device found, idVendor=2c42, idProduct=1634, bcdDevice=eb.09 [ 218.483628][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.510306][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.522659][ T4295] usb 4-1: config 0 descriptor?? [ 218.563564][ T4296] usb 5-1: can't set config #4, error -71 [ 220.027214][ T4296] usb 5-1: USB disconnect, device number 2 [ 220.150922][ T4295] usbhid 4-1:0.0: can't add hid device: -71 [ 220.157014][ T4295] usbhid: probe of 4-1:0.0 failed with error -71 [ 220.219074][ T4295] usb 4-1: USB disconnect, device number 7 [ 220.501499][ T5548] blktrace: Concurrent blktraces are not allowed on loop6 [ 222.639147][ T5570] capability: warning: `syz.4.368' uses deprecated v2 capabilities in a way that may be insecure [ 224.488491][ T21] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 226.320175][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 226.914003][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 227.240060][ T21] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 227.247697][ T21] usb 4-1: can't read configurations, error -71 [ 227.268327][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 228.254648][ T26] audit: type=1326 audit(1764070403.500:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 228.289845][ T26] audit: type=1326 audit(1764070403.530:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 228.329976][ T26] audit: type=1326 audit(1764070403.560:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 228.465230][ T26] audit: type=1326 audit(1764070403.560:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.1.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa514635749 code=0x7ffc0000 [ 228.980065][ T5640] rdma_op ffff8880225779f0 conn xmit_rdma 0000000000000000 [ 235.831694][ T4295] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 235.858089][ T5687] netlink: set zone limit has 8 unknown bytes [ 235.881975][ T5688] blktrace: Concurrent blktraces are not allowed on loop2 [ 236.250212][ T4295] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.258608][ T4295] usb 3-1: config 0 has no interface number 0 [ 236.271945][ T4295] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 236.286661][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.394685][ T5692] hub 2-0:1.0: USB hub found [ 236.401582][ T5692] hub 2-0:1.0: 1 port detected [ 237.100990][ T4295] usb 3-1: config 0 descriptor?? [ 237.152273][ T4295] usb 3-1: selecting invalid altsetting 1 [ 237.189244][ T4295] dvb_ttusb_budget: ttusb_init_controller: error [ 237.525652][ T4295] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 238.718295][ T4295] DVB: Unable to find symbol cx22700_attach() [ 238.856997][ T4295] DVB: Unable to find symbol tda10046_attach() [ 238.870272][ T4295] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 238.916579][ T4295] usb 3-1: USB disconnect, device number 6 [ 241.290855][ T5739] blktrace: Concurrent blktraces are not allowed on loop6 [ 243.469272][ T5765] netlink: set zone limit has 8 unknown bytes [ 249.118155][ T5811] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 253.153822][ T5839] netlink: set zone limit has 8 unknown bytes [ 253.229821][ T5841] blktrace: Concurrent blktraces are not allowed on loop0 [ 254.978822][ T4235] hid-generic FFFF:0008:0003.0003: item fetching failed at offset 0/2 [ 254.989098][ T4235] hid-generic: probe of FFFF:0008:0003.0003 failed with error -22 [ 255.245357][ T26] audit: type=1326 audit(1764070430.490:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5857 comm="syz.3.451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f55733749 code=0x0 [ 255.956306][ T5862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.280446][ T4295] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 256.860129][ T4295] usb 1-1: Using ep0 maxpacket: 8 [ 257.773798][ T5877] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 257.780284][ T4295] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 257.789619][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.912906][ T4295] pvrusb2: Hardware description: Terratec Grabster AV400 [ 257.929564][ T4295] pvrusb2: ********** [ 257.944371][ T4295] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 258.195326][ T5883] ================================================================== [ 258.203843][ T5883] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640 [ 258.211340][ T5883] Read of size 4 at addr ffff8880286dab38 by task syz.4.456/5883 [ 258.219189][ T5883] [ 258.221541][ T5883] CPU: 0 PID: 5883 Comm: syz.4.456 Not tainted syzkaller #0 [ 258.228848][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.239148][ T5883] Call Trace: [ 258.242453][ T5883] [ 258.245409][ T5883] dump_stack_lvl+0x168/0x230 [ 258.250124][ T5883] ? show_regs_print_info+0x20/0x20 [ 258.255354][ T5883] ? _printk+0xcc/0x110 [ 258.259545][ T5883] ? ax25_fillin_cb+0x459/0x640 [ 258.264532][ T5883] ? load_image+0x3b0/0x3b0 [ 258.269076][ T5883] print_address_description+0x60/0x2d0 [ 258.274647][ T5883] ? ax25_fillin_cb+0x459/0x640 [ 258.279611][ T5883] kasan_report+0xdf/0x130 [ 258.284052][ T5883] ? ax25_fillin_cb+0x459/0x640 [ 258.288927][ T5883] ax25_fillin_cb+0x459/0x640 [ 258.293635][ T5883] ax25_setsockopt+0x8a2/0xa40 [ 258.298454][ T5883] ? ax25_shutdown+0x10/0x10 [ 258.303169][ T5883] ? aa_sock_opt_perm+0x74/0x100 [ 258.308140][ T5883] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 258.313731][ T5883] ? security_socket_setsockopt+0x7a/0xa0 [ 258.319473][ T5883] ? ax25_shutdown+0x10/0x10 [ 258.324096][ T5883] __sys_setsockopt+0x2bf/0x3d0 [ 258.328980][ T5883] __x64_sys_setsockopt+0xb1/0xc0 [ 258.334230][ T5883] do_syscall_64+0x4c/0xa0 [ 258.338867][ T5883] ? clear_bhb_loop+0x30/0x80 [ 258.343574][ T5883] ? clear_bhb_loop+0x30/0x80 [ 258.348805][ T5883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.354751][ T5883] RIP: 0033:0x7f7e97652749 [ 258.359317][ T5883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.379045][ T5883] RSP: 002b:00007f7e95877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.387497][ T5883] RAX: ffffffffffffffda RBX: 00007f7e978a9180 RCX: 00007f7e97652749 [ 258.395587][ T5883] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 000000000000000e [ 258.403585][ T5883] RBP: 00007f7e976d6f91 R08: 0000000000000010 R09: 0000000000000000 [ 258.411588][ T5883] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 258.419586][ T5883] R13: 00007f7e978a9218 R14: 00007f7e978a9180 R15: 00007fff2ecb3c38 [ 258.427598][ T5883] [ 258.430642][ T5883] [ 258.432977][ T5883] Allocated by task 4487: [ 258.437317][ T5883] __kasan_kmalloc+0xb5/0xf0 [ 258.442050][ T5883] ax25_dev_device_up+0x50/0x580 [ 258.447024][ T5883] ax25_device_event+0x483/0x4f0 [ 258.452071][ T5883] raw_notifier_call_chain+0xcb/0x160 [ 258.457467][ T5883] __dev_notify_flags+0x178/0x2d0 [ 258.462515][ T5883] dev_change_flags+0xe3/0x1a0 [ 258.467303][ T5883] dev_ifsioc+0x147/0xe70 [ 258.471655][ T5883] dev_ioctl+0x55f/0xe50 [ 258.475918][ T5883] sock_do_ioctl+0x222/0x2f0 [ 258.480544][ T5883] sock_ioctl+0x4ed/0x6e0 [ 258.484917][ T5883] __se_sys_ioctl+0xfa/0x170 [ 258.489536][ T5883] do_syscall_64+0x4c/0xa0 [ 258.493971][ T5883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.499970][ T5883] [ 258.502309][ T5883] Freed by task 5813: [ 258.506303][ T5883] kasan_set_track+0x4b/0x70 [ 258.511004][ T5883] kasan_set_free_info+0x1f/0x40 [ 258.515973][ T5883] ____kasan_slab_free+0xd5/0x110 [ 258.521016][ T5883] slab_free_freelist_hook+0xea/0x170 [ 258.526411][ T5883] kfree+0xef/0x2a0 [ 258.530322][ T5883] ax25_release+0x661/0x870 [ 258.534841][ T5883] sock_close+0xd5/0x240 [ 258.539109][ T5883] __fput+0x234/0x930 [ 258.543376][ T5883] task_work_run+0x125/0x1a0 [ 258.547994][ T5883] do_exit+0x61e/0x20a0 [ 258.552172][ T5883] do_group_exit+0x12e/0x300 [ 258.556779][ T5883] get_signal+0x6ca/0x12c0 [ 258.561219][ T5883] arch_do_signal_or_restart+0xc1/0x1300 [ 258.566880][ T5883] exit_to_user_mode_loop+0x9e/0x130 [ 258.572198][ T5883] exit_to_user_mode_prepare+0xee/0x180 [ 258.577763][ T5883] syscall_exit_to_user_mode+0x16/0x40 [ 258.583247][ T5883] do_syscall_64+0x58/0xa0 [ 258.587766][ T5883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.593683][ T5883] [ 258.596022][ T5883] Last potentially related work creation: [ 258.601748][ T5883] kasan_save_stack+0x35/0x60 [ 258.606451][ T5883] kasan_record_aux_stack+0xb8/0x100 [ 258.611756][ T5883] insert_work+0x54/0x3d0 [ 258.616191][ T5883] __queue_work+0x9c5/0xd50 [ 258.620709][ T5883] queue_work_on+0x11d/0x1d0 [ 258.625312][ T5883] inetaddr_event+0xe0/0x140 [ 258.629937][ T5883] blocking_notifier_call_chain+0x103/0x1b0 [ 258.635862][ T5883] __inet_insert_ifa+0x9e9/0xbc0 [ 258.640826][ T5883] inet_rtm_newaddr+0x940/0x1800 [ 258.645782][ T5883] rtnetlink_rcv_msg+0x7ff/0xe90 [ 258.650744][ T5883] netlink_rcv_skb+0x1e0/0x430 [ 258.655525][ T5883] netlink_unicast+0x774/0x920 [ 258.660312][ T5883] netlink_sendmsg+0x8ab/0xbc0 [ 258.665089][ T5883] __sys_sendto+0x423/0x580 [ 258.669717][ T5883] __x64_sys_sendto+0xda/0xf0 [ 258.674501][ T5883] do_syscall_64+0x4c/0xa0 [ 258.678939][ T5883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.684858][ T5883] [ 258.687206][ T5883] Second to last potentially related work creation: [ 258.693861][ T5883] kasan_save_stack+0x35/0x60 [ 258.698579][ T5883] kasan_record_aux_stack+0xb8/0x100 [ 258.703906][ T5883] insert_work+0x54/0x3d0 [ 258.708268][ T5883] __queue_work+0x9c5/0xd50 [ 258.712796][ T5883] queue_work_on+0x11d/0x1d0 [ 258.717412][ T5883] call_usermodehelper_exec+0x26b/0x460 [ 258.722983][ T5883] kobject_uevent_env+0x681/0x890 [ 258.728034][ T5883] device_add+0x91c/0xfb0 [ 258.732390][ T5883] cdev_device_add+0x1a4/0x340 [ 258.737175][ T5883] cec_register_adapter+0x29c/0x5f0 [ 258.742397][ T5883] vivid_create_devnodes+0x72d/0x2cd0 [ 258.747791][ T5883] vivid_probe+0x50a1/0x6950 [ 258.752403][ T5883] platform_probe+0x137/0x1c0 [ 258.757187][ T5883] really_probe+0x284/0xc80 [ 258.761705][ T5883] __driver_probe_device+0x18c/0x330 [ 258.767006][ T5883] driver_probe_device+0x4f/0x420 [ 258.772048][ T5883] __driver_attach+0x46b/0x670 [ 258.776844][ T5883] bus_for_each_dev+0x175/0x1e0 [ 258.781709][ T5883] bus_add_driver+0x30a/0x5a0 [ 258.786404][ T5883] driver_register+0x32d/0x430 [ 258.791282][ T5883] vivid_init+0x39/0x70 [ 258.795460][ T5883] do_one_initcall+0x1ee/0x680 [ 258.800332][ T5883] do_initcall_level+0x137/0x1f0 [ 258.805286][ T5883] do_initcalls+0x4b/0x90 [ 258.809639][ T5883] kernel_init_freeable+0x3ce/0x560 [ 258.814854][ T5883] kernel_init+0x19/0x1b0 [ 258.819204][ T5883] ret_from_fork+0x1f/0x30 [ 258.823651][ T5883] [ 258.825989][ T5883] The buggy address belongs to the object at ffff8880286dab00 [ 258.825989][ T5883] which belongs to the cache kmalloc-192 of size 192 [ 258.840432][ T5883] The buggy address is located 56 bytes inside of [ 258.840432][ T5883] 192-byte region [ffff8880286dab00, ffff8880286dabc0) [ 258.853663][ T5883] The buggy address belongs to the page: [ 258.859330][ T5883] page:ffffea0000a1b680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x286da [ 258.869518][ T5883] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 258.877106][ T5883] raw: 00fff00000000200 ffffea0000a32bc0 0000000a0000000a ffff888016841a00 [ 258.885726][ T5883] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 258.894431][ T5883] page dumped because: kasan: bad access detected [ 258.900884][ T5883] page_owner tracks the page as allocated [ 258.906624][ T5883] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 27677545022, free_ts 0 [ 258.921673][ T5883] get_page_from_freelist+0x1b77/0x1c60 [ 258.927237][ T5883] __alloc_pages+0x1e1/0x470 [ 258.931833][ T5883] alloc_page_interleave+0x24/0x1e0 [ 258.937042][ T5883] new_slab+0xc0/0x4b0 [ 258.941238][ T5883] ___slab_alloc+0x81e/0xdf0 [ 258.945882][ T5883] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 258.951280][ T5883] call_usermodehelper_setup+0x8a/0x260 [ 258.956862][ T5883] kobject_uevent_env+0x65e/0x890 [ 258.961986][ T5883] device_add+0x91c/0xfb0 [ 258.966351][ T5883] __video_register_device+0x38e1/0x4670 [ 258.972012][ T5883] vivid_create_devnodes+0x1186/0x2cd0 [ 258.977491][ T5883] vivid_probe+0x50a1/0x6950 [ 258.982087][ T5883] platform_probe+0x137/0x1c0 [ 258.986782][ T5883] really_probe+0x284/0xc80 [ 258.991435][ T5883] __driver_probe_device+0x18c/0x330 [ 258.996749][ T5883] driver_probe_device+0x4f/0x420 [ 259.001885][ T5883] page_owner free stack trace missing [ 259.007267][ T5883] [ 259.009590][ T5883] Memory state around the buggy address: [ 259.015227][ T5883] ffff8880286daa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 259.023690][ T5883] ffff8880286daa80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 259.031771][ T5883] >ffff8880286dab00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.040048][ T5883] ^ [ 259.046242][ T5883] ffff8880286dab80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 259.054341][ T5883] ffff8880286dac00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 259.062527][ T5883] ================================================================== [ 259.070656][ T5883] Disabling lock debugging due to kernel taint [ 259.080507][ T5883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 259.087756][ T5883] CPU: 0 PID: 5883 Comm: syz.4.456 Tainted: G B syzkaller #0 [ 259.096449][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.106662][ T5883] Call Trace: [ 259.109970][ T5883] [ 259.112918][ T5883] dump_stack_lvl+0x168/0x230 [ 259.117642][ T5883] ? show_regs_print_info+0x20/0x20 [ 259.122872][ T5883] ? load_image+0x3b0/0x3b0 [ 259.127412][ T5883] panic+0x2c9/0x7f0 [ 259.131335][ T5883] ? bpf_jit_dump+0xd0/0xd0 [ 259.135974][ T5883] ? ax25_fillin_cb+0x459/0x640 [ 259.141014][ T5883] ? check_panic_on_warn+0x6c/0xa0 [ 259.146244][ T5883] ? ax25_fillin_cb+0x459/0x640 [ 259.151568][ T5883] check_panic_on_warn+0x80/0xa0 [ 259.156537][ T5883] ? ax25_fillin_cb+0x459/0x640 [ 259.161414][ T5883] end_report+0x6d/0xf0 [ 259.165618][ T5883] kasan_report+0x102/0x130 [ 259.170138][ T5883] ? ax25_fillin_cb+0x459/0x640 [ 259.175006][ T5883] ax25_fillin_cb+0x459/0x640 [ 259.179863][ T5883] ax25_setsockopt+0x8a2/0xa40 [ 259.184664][ T5883] ? ax25_shutdown+0x10/0x10 [ 259.189271][ T5883] ? aa_sock_opt_perm+0x74/0x100 [ 259.194225][ T5883] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 259.199794][ T5883] ? security_socket_setsockopt+0x7a/0xa0 [ 259.205537][ T5883] ? ax25_shutdown+0x10/0x10 [ 259.210148][ T5883] __sys_setsockopt+0x2bf/0x3d0 [ 259.215048][ T5883] __x64_sys_setsockopt+0xb1/0xc0 [ 259.220097][ T5883] do_syscall_64+0x4c/0xa0 [ 259.224531][ T5883] ? clear_bhb_loop+0x30/0x80 [ 259.229310][ T5883] ? clear_bhb_loop+0x30/0x80 [ 259.234004][ T5883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.239917][ T5883] RIP: 0033:0x7f7e97652749 [ 259.244350][ T5883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.264077][ T5883] RSP: 002b:00007f7e95877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.272613][ T5883] RAX: ffffffffffffffda RBX: 00007f7e978a9180 RCX: 00007f7e97652749 [ 259.280792][ T5883] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 000000000000000e [ 259.288772][ T5883] RBP: 00007f7e976d6f91 R08: 0000000000000010 R09: 0000000000000000 [ 259.296758][ T5883] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 259.304938][ T5883] R13: 00007f7e978a9218 R14: 00007f7e978a9180 R15: 00007fff2ecb3c38 [ 259.313159][ T5883] [ 259.316448][ T5883] Kernel Offset: disabled [ 259.320795][ T5883] Rebooting in 86400 seconds..