last executing test programs: 21.000361021s ago: executing program 0 (id=72): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) io_setup(0x6, &(0x7f00000002c0)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_async', 0x1a1081, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') mkdirat(r6, &(0x7f0000000380)='./file0\x00', 0x21) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000540)=""/74, 0x33e000, 0x1000}, 0x20) bind$xdp(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1c77c245997be8f3, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000006c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000780)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e24, 0x6, @loopback, 0x9fd3}, r8}}, 0x38) 18.593546047s ago: executing program 1 (id=76): getpgrp(0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x88800, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x0, 0x1d, 0x0, 0x0, 0x8}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) unlink(&(0x7f0000000040)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000001c0)=0x5) r4 = fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) write(r2, &(0x7f0000000000), 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) 16.140828408s ago: executing program 4 (id=81): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r5 = syz_io_uring_setup(0x31c5, &(0x7f00000002c0)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f0000000340), &(0x7f0000000380), 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f00000013c0)={0x0, 0x20, 0x27, 0x2, 0x2d8, 0x0, r5}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001440)='net/ip_vs\x00') pread64(r6, &(0x7f0000001480)=""/92, 0x5c, 0x4000000000000f3) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x1, 0x1) 16.139836608s ago: executing program 1 (id=91): getpgrp(0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x88800, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x0, 0x1d, 0x0, 0x0, 0x8}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) unlink(&(0x7f0000000040)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000001c0)=0x5) r4 = fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) 14.608197685s ago: executing program 0 (id=83): syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aa0100"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000002b00010028bd702ff0dbdf6845422504"], 0x14}], 0x1}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x2000000000000) 13.783770389s ago: executing program 0 (id=86): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000002a00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001ba00)=0x40003) mknodat$null(0xffffffffffffffff, 0x0, 0x1d4e, 0x103) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioprio_get$pid(0x2, r1) 12.388498283s ago: executing program 1 (id=87): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, 0x0) 12.369049025s ago: executing program 2 (id=88): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f00000003c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) 10.879951677s ago: executing program 4 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x11c0, 0x0) inotify_init1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000100)={0x3000, 0x2000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.866416988s ago: executing program 1 (id=92): socket(0x11, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f00000016c0)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f000001a6c0)=ANY=[], 0x2a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f000001a700)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 10.808117624s ago: executing program 0 (id=93): sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x10000000005) 9.491788509s ago: executing program 4 (id=95): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 8.355968825s ago: executing program 4 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000300)='.\x00', 0x0, 0x0, 0x0, 0x0) rmdir(0x0) sched_setaffinity(0x0, 0x0, 0x0) setrlimit(0xc, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ptrace(0x10, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r4, 0x0) 7.264066347s ago: executing program 3 (id=99): r0 = fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) 7.092652425s ago: executing program 4 (id=100): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019440)=ANY=[], 0x128}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000100)={0x8606, 0xffff}) io_setup(0x6573, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000019400)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) 6.952450599s ago: executing program 3 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8}]}]}, 0x30}}, 0x0) 5.492313858s ago: executing program 4 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) 5.287980799s ago: executing program 1 (id=103): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000002a00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001ba00)=0x40003) mknodat$null(0xffffffffffffffff, 0x0, 0x1d4e, 0x103) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioprio_get$pid(0x2, r1) 5.287781329s ago: executing program 3 (id=104): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 3.950454936s ago: executing program 1 (id=105): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000440), 0x0, 0x20008005, &(0x7f0000000480)={0x2, 0x4e20}, 0x10) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x45, 0x1, 0x2}, {0x1, 0x9, 0x7, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006a0005f37be64a00fcdb0900000000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000c40)={0xa, 0x3, 0x7, @mcast1, 0x9}, 0x1c) sendmsg(r4, &(0x7f0000000c80)={0x0, 0x3b, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) readv(r1, &(0x7f00000004c0), 0x0) recvfrom(r1, &(0x7f0000000bc0)=""/102, 0xfffffffffffffe66, 0x736, 0x0, 0x0) 3.899810501s ago: executing program 3 (id=106): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0xffffffffffff7fff, 0xffffffffffffffff, 'id0\x00'}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x6, 0xd, 0x14, "d45470026420cec3315dc67d5e43e4419c24a774db4368df0f652eedada15b1ab30e947e3a77a432297ca3b7c863829f387169a8897de13f47db8d644c1e7285", "9d4968785f6e66046620cb25536f706bfd428df8ac36afd09fc63b7800f711a79743c195776a7d0b6eb539cbc80a52472e6744fb137e539ce0e93b8faa8eb9d7", "19acd8698c183ded3109fbf9bb10f7d3f3637a9362880162e1acf457261adb90", [0x5, 0x80000001]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043"], 0xaf) close(r4) 3.81999248s ago: executing program 2 (id=107): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) io_setup(0x6, &(0x7f00000002c0)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_async', 0x1a1081, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') mkdirat(r6, &(0x7f0000000380)='./file0\x00', 0x21) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000005c0)=0x1, 0x4) bind$xdp(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1c77c245997be8f3, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000006c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000780)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e24, 0x6, @loopback, 0x9fd3}, r8}}, 0x38) 3.640440308s ago: executing program 0 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c00078005001500000000000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) 2.74568161s ago: executing program 0 (id=109): mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000ac0), 0x4, 0x402) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000b00)={0x1c, 0x2, 0xffd3, 0xf0, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) 2.633233961s ago: executing program 2 (id=110): syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aa0100"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000002b00010028bd702ff0dbdf6845422504"], 0x14}], 0x1}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x2000000000000) 2.078907298s ago: executing program 2 (id=111): r0 = fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x0) fsmount(r0, 0x1, 0x0) 1.95606722s ago: executing program 2 (id=112): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019440)=ANY=[], 0x128}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x6573, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000019400)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) 471.582702ms ago: executing program 2 (id=113): socket(0x11, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f00000016c0)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f000001a6c0)=ANY=[], 0x2a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f000001a700)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 192.991621ms ago: executing program 3 (id=114): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) 0s ago: executing program 3 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, &(0x7f0000000280)=0xffffffffffffff16) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe0000000073130000000000009c000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r4, 0x29, 0x3c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000f00)=ANY=[], 0x47) syz_emit_vhci(&(0x7f0000000f40)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. syzkaller login: [ 63.069169][ T4175] cgroup: Unknown subsys name 'net' [ 63.208526][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.697341][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.987283][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 65.988015][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.996463][ T4196] rdma_rxe: failed to add rxe_eth0 [ 66.008560][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 66.019429][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 66.027638][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 66.041991][ T4190] rdma_rxe: failed to add rxe_eth0 [ 66.048541][ T4188] rdma_rxe: failed to add rxe_eth0 [ 66.058734][ T4191] rdma_rxe: failed to add rxe_eth0 [ 66.069332][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.128708][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.292223][ T4177] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.301265][ T4189] infiniband rxe0: set active [ 66.306238][ T4189] infiniband rxe0: added rxe_eth0 [ 66.370245][ T4189] RDS/IB: rxe0: added [ 66.375187][ T4189] smc: adding ib device rxe0 with port count 1 [ 66.381603][ T4189] smc: ib device rxe0 port 1 has pnetid [ 66.417423][ T1112] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.428071][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.456636][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.584014][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.613461][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.628991][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.688756][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.752779][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.759898][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.791229][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.834926][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.842970][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.852382][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.912682][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.935648][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.943371][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.956940][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.972821][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.985940][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.011590][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.018802][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.028355][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.059757][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.067779][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.076445][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.109616][ T4196] team0: Port device team_slave_0 added [ 67.117222][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.125545][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.134081][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.150218][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.159892][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.167211][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.175782][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.184846][ T4196] team0: Port device team_slave_1 added [ 67.190781][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.198417][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.206498][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.214086][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.248242][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.278460][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.293392][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.314219][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.323811][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.354944][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.368807][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.384923][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.420534][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.427782][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.453901][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.480370][ T4191] team0: Port device team_slave_0 added [ 67.496746][ T4188] team0: Port device team_slave_0 added [ 67.507625][ T4188] team0: Port device team_slave_1 added [ 67.520909][ T4191] team0: Port device team_slave_1 added [ 67.536424][ T4190] team0: Port device team_slave_0 added [ 67.543203][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.547222][ T4190] team0: Port device team_slave_1 added [ 67.619112][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.626223][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.673112][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.690875][ T4196] device hsr_slave_0 entered promiscuous mode [ 67.712091][ T4196] device hsr_slave_1 entered promiscuous mode [ 67.734319][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.741403][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.769421][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.786556][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.794845][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.825976][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.838931][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.846414][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.877467][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.892244][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.899247][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.930636][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.947508][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.954786][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.974024][ T4177] Bluetooth: hci4: command 0x0409 tx timeout [ 67.989475][ T1112] Bluetooth: hci2: command 0x0409 tx timeout [ 67.997651][ T1112] Bluetooth: hci1: command 0x0409 tx timeout [ 67.998010][ T4177] Bluetooth: hci3: command 0x0409 tx timeout [ 68.004104][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.012540][ T4177] Bluetooth: hci0: command 0x0409 tx timeout [ 68.149705][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.156927][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.164219][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.172766][ T4190] Cannot create hsr debugfs directory [ 68.193264][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.206784][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.213811][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.222120][ T4188] Cannot create hsr debugfs directory [ 68.242471][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.249974][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.257127][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.264883][ T4191] Cannot create hsr debugfs directory [ 68.319924][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.426855][ T3853] infiniband rxe0: set active [ 68.466864][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.618713][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.692995][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.700212][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.708608][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.717712][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.725769][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.734194][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.770291][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.788925][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.805532][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.816367][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.828567][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.838960][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.870971][ T4189] team0: Port device team_slave_0 added [ 68.883628][ T4189] team0: Port device team_slave_1 added [ 68.913999][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.920995][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.947712][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.960690][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.967737][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.994838][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.029593][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.039788][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.065831][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.077275][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.093898][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.101984][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.108668][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.116831][ T4189] Cannot create hsr debugfs directory [ 69.248076][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.279111][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.312947][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.325341][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.332997][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.356164][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.381960][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.413001][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.426294][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.435732][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.456954][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.467126][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.476149][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.484590][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.496119][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.509630][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.541742][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.558105][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.568377][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.578231][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.588226][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.595705][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.605786][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.617697][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.626433][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.633678][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.642830][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.651846][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.660298][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.667540][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.676555][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.685769][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.697892][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.714439][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.727756][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.754421][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.764385][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.774746][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.781900][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.789872][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.805521][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.815591][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.824382][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.833448][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.846589][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.863622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.889683][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.901082][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.917772][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.926952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.936655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.947277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.956844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.987719][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.996217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.006934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.017431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.028246][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.040873][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.051997][ T1109] Bluetooth: hci0: command 0x041b tx timeout [ 70.058850][ T1109] Bluetooth: hci1: command 0x041b tx timeout [ 70.070357][ T1109] Bluetooth: hci3: command 0x041b tx timeout [ 70.077605][ T1109] Bluetooth: hci4: command 0x041b tx timeout [ 70.093512][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.101703][ T1109] Bluetooth: hci2: command 0x041b tx timeout [ 70.108586][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.123756][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.133757][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.142892][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.179409][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.215244][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.248596][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.259957][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.275388][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.306982][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.331414][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.340512][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.353400][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.360506][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.370182][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.378517][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.386412][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.396632][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.405731][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.412871][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.420770][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.429831][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.438768][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.448627][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.458597][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.467533][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.490464][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.504584][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.521598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.533500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.544720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.554306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.573394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.592409][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.608772][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.619016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.628170][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.635325][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.644561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.653026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.673788][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.707440][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.726968][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.737383][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.744540][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.754529][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.764623][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.782171][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.797978][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.806812][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.831144][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.843502][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.859416][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.870550][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.885895][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.896041][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.903750][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.913395][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.928754][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.940496][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.975480][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.986547][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.999680][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.009532][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.018701][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.027772][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.035613][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.045572][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.054508][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.061643][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.069460][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.078929][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.087727][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.094913][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.103370][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.113600][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.121660][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.144665][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.163960][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.184066][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.202932][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.218114][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.229374][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.255131][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.262385][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.297967][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.314593][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.330741][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.341127][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.348695][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.365685][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.379454][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.391019][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.413268][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.432988][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.449755][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.468555][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.488545][ T4188] device veth0_vlan entered promiscuous mode [ 71.516607][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.540713][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.558143][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.568794][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.598075][ T4196] device veth0_vlan entered promiscuous mode [ 71.623230][ T4188] device veth1_vlan entered promiscuous mode [ 71.643664][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.660335][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.669759][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.679193][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.689278][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.700310][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.722363][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.750015][ T4196] device veth1_vlan entered promiscuous mode [ 71.818456][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.829911][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.849669][ T4188] device veth0_macvtap entered promiscuous mode [ 71.867282][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.881282][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.890826][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.906005][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.925325][ T4188] device veth1_macvtap entered promiscuous mode [ 71.946566][ T4196] device veth0_macvtap entered promiscuous mode [ 71.954180][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.963893][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.975533][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.984601][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.993555][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.003635][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.021013][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.031690][ T4196] device veth1_macvtap entered promiscuous mode [ 72.050430][ T4191] device veth0_vlan entered promiscuous mode [ 72.057964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.067184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.076766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.086633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.095700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.105033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.113827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.131523][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 72.137831][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 72.144442][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 72.155030][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.162780][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 72.169014][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 72.189511][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.201375][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.214842][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.226498][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.235760][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.247931][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.257338][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.266789][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.276558][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.286259][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.295740][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.304695][ T4191] device veth1_vlan entered promiscuous mode [ 72.315026][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.324076][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.338902][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.348147][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.369613][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.388909][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.400324][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.412693][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.424523][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.433760][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.443116][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.453383][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.479602][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.488140][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.497964][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.506978][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.579256][ T4190] device veth0_vlan entered promiscuous mode [ 72.594796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.606628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.618803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.627432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.649924][ T4191] device veth0_macvtap entered promiscuous mode [ 72.682436][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.694397][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.703978][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.713556][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.723119][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.736974][ T4190] device veth1_vlan entered promiscuous mode [ 72.787047][ T4191] device veth1_macvtap entered promiscuous mode [ 72.815172][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.832866][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.835164][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.840732][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.867999][ T4189] device veth0_vlan entered promiscuous mode [ 72.893757][ T4189] device veth1_vlan entered promiscuous mode [ 72.903049][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.912385][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.920655][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.930629][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.942819][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.951710][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.960874][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.970514][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.978711][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.997959][ T4190] device veth0_macvtap entered promiscuous mode [ 73.037274][ T4190] device veth1_macvtap entered promiscuous mode [ 73.064358][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.064864][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.083021][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.090872][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.099614][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.110077][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.112245][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.128495][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.140065][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.164504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.173361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.182297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.190414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.200468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.209042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.223774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.242414][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.254021][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.264400][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.275380][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.289303][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.314723][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.329979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.341003][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.352517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.373214][ T4189] device veth0_macvtap entered promiscuous mode [ 73.383722][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.398988][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.412597][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.423634][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.434586][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.447114][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.457531][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.469004][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.479165][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.490981][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.506313][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.528045][ T4189] device veth1_macvtap entered promiscuous mode [ 73.539083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.548935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.557576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.566905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.587496][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.598553][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.608806][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.619781][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.630455][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.642150][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.654894][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.684864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.697823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.766009][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.331061][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 74.341104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.351060][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.361067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.551076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.561082][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.571078][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.841120][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.851097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.861095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.462535][ T4177] Bluetooth: hci0: command 0x0419 tx timeout [ 75.483763][ T4177] Bluetooth: hci1: command 0x0419 tx timeout [ 75.490177][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.704483][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.759383][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.795773][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.833270][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.865672][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.904470][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.907652][ T4177] Bluetooth: hci3: command 0x0419 tx timeout [ 75.920470][ T4177] Bluetooth: hci4: command 0x0419 tx timeout [ 75.933023][ T4177] Bluetooth: hci2: command 0x0419 tx timeout [ 75.947806][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.956737][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.972303][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.982188][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.990919][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.003000][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.017200][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.030365][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.060092][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.074142][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.087613][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.099535][ T26] audit: type=1326 audit(1792850101.667:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.102748][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.140245][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.141432][ T26] audit: type=1326 audit(1792850101.697:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.151971][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.181826][ T26] audit: type=1326 audit(1792850101.697:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.213357][ T4321] FAULT_INJECTION: forcing a failure. [ 76.213357][ T4321] name failslab, interval 1, probability 0, space 0, times 1 [ 76.215750][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.232805][ T4321] CPU: 0 PID: 4321 Comm: syz.0.6 Not tainted syzkaller #0 [ 76.243785][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.254719][ T4321] Call Trace: [ 76.255591][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.258037][ T4321] [ 76.258049][ T4321] dump_stack_lvl+0x188/0x250 [ 76.258099][ T4321] ? show_regs_print_info+0x20/0x20 [ 76.280976][ T4321] ? load_image+0x410/0x410 [ 76.285431][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.285528][ T4321] ? __lock_acquire+0x7d40/0x7d40 [ 76.297812][ T4321] should_fail+0x383/0x4b0 [ 76.302297][ T4321] should_failslab+0x5/0x20 [ 76.306855][ T4321] slab_pre_alloc_hook+0x51/0xc0 [ 76.311950][ T4321] __kmalloc+0x6b/0x340 [ 76.316155][ T4321] ? apply_wqattrs_prepare+0xb3/0xad0 [ 76.321588][ T4321] apply_wqattrs_prepare+0xb3/0xad0 [ 76.326943][ T4321] ? mutex_lock_io_nested+0x60/0x60 [ 76.332214][ T4321] apply_workqueue_attrs+0xd0/0x170 [ 76.337467][ T4321] alloc_workqueue+0xf1e/0x1450 [ 76.342384][ T4321] ? kfree+0x4a/0x2a0 [ 76.346424][ T4321] ? dev_set_name+0xdf/0x130 [ 76.351065][ T4321] ? apply_workqueue_attrs+0x170/0x170 [ 76.356579][ T4321] hci_register_dev+0x259/0x980 [ 76.361472][ T4321] hci_uart_tty_ioctl+0x875/0xa80 [ 76.366560][ T4321] ? hci_uart_tty_write+0x10/0x10 [ 76.371608][ T4321] tty_ioctl+0x8e3/0xc30 [ 76.375877][ T4321] ? security_file_ioctl+0x7c/0xa0 [ 76.381007][ T4321] ? tty_get_icount+0xa0/0xa0 [ 76.385710][ T4321] __se_sys_ioctl+0xfa/0x170 [ 76.390336][ T4321] do_syscall_64+0x4c/0xa0 [ 76.394786][ T4321] ? clear_bhb_loop+0x30/0x80 [ 76.399485][ T4321] ? clear_bhb_loop+0x30/0x80 [ 76.404191][ T4321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.410133][ T4321] RIP: 0033:0x7fc79772e559 [ 76.414595][ T4321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.434240][ T4321] RSP: 002b:00007fc795985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.442685][ T4321] RAX: ffffffffffffffda RBX: 00007fc7979b4fa0 RCX: 00007fc79772e559 [ 76.450681][ T4321] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 [ 76.458683][ T4321] RBP: 00007fc7977c5b20 R08: 0000000000000000 R09: 0000000000000000 [ 76.466674][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.474662][ T4321] R13: 00007fc7979b5038 R14: 00007fc7979b4fa0 R15: 00007ffc65a94e58 [ 76.482671][ T4321] [ 76.509934][ T26] audit: type=1326 audit(1792850101.697:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.540483][ T4321] Bluetooth: Can't register HCI device [ 76.556264][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.620502][ T26] audit: type=1326 audit(1792850101.707:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.645395][ T26] audit: type=1326 audit(1792850101.707:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.659445][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.685524][ T26] audit: type=1326 audit(1792850101.707:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.728068][ T26] audit: type=1326 audit(1792850101.707:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.752840][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.763765][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.775932][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.785750][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.791465][ T26] audit: type=1326 audit(1792850101.707:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.852543][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.860532][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.884847][ T26] audit: type=1326 audit(1792850101.707:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4320 comm="syz.0.6" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79772e559 code=0x7ffc0000 [ 76.949205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.037791][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.057704][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.095336][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.096219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.141143][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.152774][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.178575][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.225100][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.249055][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.281899][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.281905][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.281922][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.289799][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.319883][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.418643][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.771044][ C1] sched: RT throttling activated [ 79.096808][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.113576][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.124440][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.134906][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.144643][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.591216][ T4265] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.601336][ T2286] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.982997][ T4357] FAULT_INJECTION: forcing a failure. [ 79.982997][ T4357] name failslab, interval 1, probability 0, space 0, times 0 [ 80.031988][ T4357] CPU: 1 PID: 4357 Comm: syz.2.7 Not tainted syzkaller #0 [ 80.039188][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.049387][ T4357] Call Trace: [ 80.052738][ T4357] [ 80.055789][ T4357] dump_stack_lvl+0x188/0x250 [ 80.060515][ T4357] ? show_regs_print_info+0x20/0x20 [ 80.066109][ T4357] ? load_image+0x410/0x410 [ 80.070664][ T4357] ? __might_sleep+0xf0/0xf0 [ 80.075300][ T4357] ? __lock_acquire+0x7d40/0x7d40 [ 80.080481][ T4357] ? verify_lock_unused+0x140/0x140 [ 80.085732][ T4357] should_fail+0x383/0x4b0 [ 80.090206][ T4357] should_failslab+0x5/0x20 [ 80.094755][ T4357] slab_pre_alloc_hook+0x51/0xc0 [ 80.099741][ T4357] ? __kernfs_new_node+0xa8/0x6b0 [ 80.104814][ T4357] __kmalloc_track_caller+0x69/0x330 [ 80.110145][ T4357] ? __kernfs_new_node+0xa8/0x6b0 [ 80.115219][ T4357] kstrdup_const+0x51/0x90 [ 80.119678][ T4357] __kernfs_new_node+0xa8/0x6b0 [ 80.124576][ T4357] ? widen_string+0x3b/0x320 [ 80.129231][ T4357] ? kernfs_new_node+0x250/0x250 [ 80.134230][ T4357] ? snprintf+0xe5/0x140 [ 80.138530][ T4357] kernfs_new_node+0x148/0x250 [ 80.143353][ T4357] __kernfs_create_file+0x47/0x2e0 [ 80.148607][ T4357] cgroup_addrm_files+0xac3/0x1020 [ 80.153815][ T4357] ? rcu_lock_release+0x20/0x20 [ 80.158709][ T4357] ? vfs_mkdir+0x386/0x570 [ 80.163202][ T4357] ? __x64_sys_mkdirat+0x85/0x90 [ 80.168192][ T4357] ? do_syscall_64+0x4c/0xa0 [ 80.172818][ T4357] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.178937][ T4357] ? mark_lock+0x94/0x320 [ 80.183334][ T4357] ? __local_bh_enable_ip+0x136/0x1c0 [ 80.188752][ T4357] ? lockdep_hardirqs_on+0x94/0x140 [ 80.194179][ T4357] css_populate_dir+0x155/0x350 [ 80.199089][ T4357] cgroup_apply_control_enable+0x641/0xb00 [ 80.204979][ T4357] cgroup_mkdir+0xcbd/0xeb0 [ 80.209550][ T4357] ? css_task_iter_end+0x280/0x280 [ 80.214722][ T4357] ? do_raw_spin_unlock+0x11d/0x230 [ 80.220108][ T4357] ? kernfs_iop_permission+0x22d/0x310 [ 80.225624][ T4357] ? css_task_iter_end+0x280/0x280 [ 80.230812][ T4357] kernfs_iop_mkdir+0x23d/0x3d0 [ 80.235735][ T4357] vfs_mkdir+0x386/0x570 [ 80.240064][ T4357] do_mkdirat+0x1dd/0x5c0 [ 80.244470][ T4357] ? vfs_mkdir+0x570/0x570 [ 80.248965][ T4357] __x64_sys_mkdirat+0x85/0x90 [ 80.253785][ T4357] do_syscall_64+0x4c/0xa0 [ 80.258235][ T4357] ? clear_bhb_loop+0x30/0x80 [ 80.262949][ T4357] ? clear_bhb_loop+0x30/0x80 [ 80.267704][ T4357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.273646][ T4357] RIP: 0033:0x7fa7e4bff559 [ 80.278101][ T4357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.297775][ T4357] RSP: 002b:00007fa7e2e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 80.306248][ T4357] RAX: ffffffffffffffda RBX: 00007fa7e4e85fa0 RCX: 00007fa7e4bff559 [ 80.314268][ T4357] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 80.322308][ T4357] RBP: 00007fa7e4c96b20 R08: 0000000000000000 R09: 0000000000000000 [ 80.330353][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.338779][ T4357] R13: 00007fa7e4e86038 R14: 00007fa7e4e85fa0 R15: 00007fff7e12a2b8 [ 80.346837][ T4357] [ 80.427688][ T4265] usb 2-1: Using ep0 maxpacket: 8 [ 80.472688][ T4357] cgroup: cgroup_addrm_files: failed to add throttle.read_bps_device, err=-12 [ 80.589581][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.619630][ T4265] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.651304][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.691943][ T4270] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.695830][ T4265] usb 2-1: config 0 descriptor?? [ 80.718202][ T4378] input: syz0 as /devices/virtual/input/input5 [ 80.761723][ T4265] usb 2-1: can't set config #0, error -71 [ 80.900535][ T4308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.920651][ T4265] usb 2-1: USB disconnect, device number 2 [ 80.942562][ T4270] usb 1-1: Using ep0 maxpacket: 8 [ 81.252112][ T4270] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 81.715712][ T4270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.757310][ T4270] usb 1-1: Product: syz [ 81.772896][ T4270] usb 1-1: Manufacturer: syz [ 81.800866][ T4270] usb 1-1: SerialNumber: syz [ 81.832675][ T4270] usb 1-1: config 0 descriptor?? [ 81.874723][ T4270] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 82.025229][ T4308] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.046902][ T4308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.077340][ T4308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.113814][ T4308] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.492012][ T4270] gspca_sonixj: reg_r err -110 [ 83.496980][ T4270] sonixj: probe of 1-1:0.0 failed with error -110 [ 83.534444][ T4270] usb 1-1: USB disconnect, device number 2 [ 83.812601][ T4308] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.147586][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.226839][ T4308] usb 4-1: can't set config #1, error -71 [ 84.259806][ T4308] usb 4-1: USB disconnect, device number 2 [ 84.360669][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.377049][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.386860][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.397063][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.406527][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.738780][ T4394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.587117][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.052125][ T21] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 86.195032][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.411124][ T4270] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.569848][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 86.569863][ T26] audit: type=1326 audit(1792850112.137:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 86.615520][ T7] cfg80211: failed to load regulatory.db [ 86.645330][ T26] audit: type=1326 audit(1792850112.217:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 86.675322][ T4270] usb 1-1: Using ep0 maxpacket: 8 [ 86.715450][ T4462] FAULT_INJECTION: forcing a failure. [ 86.715450][ T4462] name failslab, interval 1, probability 0, space 0, times 0 [ 86.731382][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.740650][ T21] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.749047][ T21] usb 5-1: Product: syz [ 86.753360][ T21] usb 5-1: Manufacturer: syz [ 86.757985][ T21] usb 5-1: SerialNumber: syz [ 86.764852][ T21] usb 5-1: config 0 descriptor?? [ 86.793867][ T26] audit: type=1326 audit(1792850112.257:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 86.813605][ T4270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.839303][ T4462] CPU: 0 PID: 4462 Comm: syz.3.38 Not tainted syzkaller #0 [ 86.846593][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.856688][ T4462] Call Trace: [ 86.860027][ T4462] [ 86.862991][ T4462] dump_stack_lvl+0x188/0x250 [ 86.863317][ T26] audit: type=1326 audit(1792850112.257:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 86.867724][ T4462] ? show_regs_print_info+0x20/0x20 [ 86.896802][ T4462] ? load_image+0x410/0x410 [ 86.901397][ T4462] ? __lock_acquire+0x7d40/0x7d40 [ 86.906484][ T4462] should_fail+0x383/0x4b0 [ 86.910952][ T4462] should_failslab+0x5/0x20 [ 86.915500][ T4462] slab_pre_alloc_hook+0x51/0xc0 [ 86.920482][ T4462] ? kasprintf+0xdf/0x130 [ 86.924936][ T4462] __kmalloc_track_caller+0x69/0x330 [ 86.930324][ T4462] ? kasprintf+0xdf/0x130 [ 86.934708][ T4462] kvasprintf+0xe3/0x1a0 [ 86.939135][ T4462] ? bust_spinlocks+0xd0/0xd0 [ 86.943863][ T4462] ? lockdep_lock+0xf1/0x1f0 [ 86.948467][ T4462] ? lockdep_unlock+0x143/0x2e0 [ 86.953332][ T4462] kasprintf+0xdf/0x130 [ 86.957525][ T4462] ? kvasprintf_const+0x240/0x240 [ 86.962564][ T4462] ? __raw_spin_lock_init+0x41/0x100 [ 86.968052][ T4462] alloc_workqueue+0x5ae/0x1450 [ 86.972925][ T4462] ? kfree+0x4a/0x2a0 [ 86.976929][ T4462] ? dev_set_name+0xdf/0x130 [ 86.981559][ T4462] ? apply_workqueue_attrs+0x170/0x170 [ 86.987054][ T4462] hci_register_dev+0x259/0x980 [ 86.992003][ T4462] hci_uart_tty_ioctl+0x875/0xa80 [ 86.997067][ T4462] ? hci_uart_tty_write+0x10/0x10 [ 87.002161][ T4462] tty_ioctl+0x8e3/0xc30 [ 87.006420][ T4462] ? security_file_ioctl+0x7c/0xa0 [ 87.011542][ T4462] ? tty_get_icount+0xa0/0xa0 [ 87.016233][ T4462] __se_sys_ioctl+0xfa/0x170 [ 87.020844][ T4462] do_syscall_64+0x4c/0xa0 [ 87.025309][ T4462] ? clear_bhb_loop+0x30/0x80 [ 87.030032][ T4462] ? clear_bhb_loop+0x30/0x80 [ 87.034757][ T4462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.040705][ T4462] RIP: 0033:0x7f64c7fbb559 [ 87.045145][ T4462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.064757][ T4462] RSP: 002b:00007f64c6212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.073286][ T4462] RAX: ffffffffffffffda RBX: 00007f64c8241fa0 RCX: 00007f64c7fbb559 [ 87.081267][ T4462] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 [ 87.089243][ T4462] RBP: 00007f64c8052b20 R08: 0000000000000000 R09: 0000000000000000 [ 87.097237][ T4462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.105306][ T4462] R13: 00007f64c8242038 R14: 00007f64c8241fa0 R15: 00007ffe39a413b8 [ 87.113620][ T4462] [ 87.127800][ T4270] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 87.149715][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.159196][ T21] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 87.171846][ T26] audit: type=1326 audit(1792850112.257:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 87.206471][ T4270] usb 1-1: config 0 descriptor?? [ 87.296699][ T26] audit: type=1326 audit(1792850112.257:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 87.347025][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.411125][ T26] audit: type=1326 audit(1792850112.257:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 87.509100][ T4270] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 87.521212][ T26] audit: type=1326 audit(1792850112.267:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 87.587528][ T4270] usb 1-1: USB disconnect, device number 3 [ 87.771232][ T26] audit: type=1326 audit(1792850112.267:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 87.797823][ T26] audit: type=1326 audit(1792850112.267:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.3.38" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c7fbb559 code=0x7ffc0000 [ 88.886646][ T21] usb 5-1: USB disconnect, device number 2 [ 89.621813][ T4270] Bluetooth: hci5: command 0x1003 tx timeout [ 89.629137][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 91.690328][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 91.975780][ T4499] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.994435][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 93.639022][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.891217][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 93.903965][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 93.918801][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 93.929918][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 93.940363][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 93.949977][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 94.796314][ T4177] Bluetooth: hci5: command 0x1009 tx timeout [ 94.911241][ T7] usb 1-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 94.931368][ T7] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.946165][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 95.671340][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 95.841726][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.590973][ T7] usb 1-1: Product: syz [ 96.611281][ T7] usb 1-1: can't set config #1, error -71 [ 96.659420][ T7] usb 1-1: USB disconnect, device number 4 [ 96.702766][ T4534] bridge0: port 3(veth0) entered blocking state [ 96.709198][ T4534] bridge0: port 3(veth0) entered disabled state [ 96.823765][ T4534] device veth0 entered promiscuous mode [ 96.829970][ T4534] bridge0: port 3(veth0) entered blocking state [ 96.836691][ T4534] bridge0: port 3(veth0) entered forwarding state [ 108.641312][ T4177] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.938827][ T4611] FAULT_INJECTION: forcing a failure. [ 108.938827][ T4611] name failslab, interval 1, probability 0, space 0, times 0 [ 109.021376][ T4177] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 109.022701][ T4611] CPU: 1 PID: 4611 Comm: syz.1.76 Not tainted syzkaller #0 [ 109.039400][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.049491][ T4611] Call Trace: [ 109.052808][ T4611] [ 109.055773][ T4611] dump_stack_lvl+0x188/0x250 [ 109.057659][ T4177] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.060504][ T4611] ? show_regs_print_info+0x20/0x20 [ 109.072311][ T4611] ? load_image+0x410/0x410 [ 109.076861][ T4611] ? __might_sleep+0xf0/0xf0 [ 109.081531][ T4611] ? __lock_acquire+0x7d40/0x7d40 [ 109.086607][ T4611] ? verify_lock_unused+0x140/0x140 [ 109.091859][ T4611] should_fail+0x383/0x4b0 [ 109.096337][ T4611] should_failslab+0x5/0x20 [ 109.100872][ T4611] slab_pre_alloc_hook+0x51/0xc0 [ 109.105855][ T4611] ? __kernfs_new_node+0xa8/0x6b0 [ 109.110919][ T4611] __kmalloc_track_caller+0x69/0x330 [ 109.116249][ T4611] ? __kernfs_new_node+0xa8/0x6b0 [ 109.121326][ T4611] kstrdup_const+0x51/0x90 [ 109.125782][ T4611] __kernfs_new_node+0xa8/0x6b0 [ 109.130672][ T4611] ? widen_string+0x3b/0x320 [ 109.135308][ T4611] ? kernfs_new_node+0x250/0x250 [ 109.140300][ T4611] ? snprintf+0xe5/0x140 [ 109.144629][ T4611] kernfs_new_node+0x148/0x250 [ 109.149445][ T4611] __kernfs_create_file+0x47/0x2e0 [ 109.154616][ T4611] cgroup_addrm_files+0xac3/0x1020 [ 109.159789][ T4611] ? rcu_lock_release+0x20/0x20 [ 109.164699][ T4611] ? vfs_mkdir+0x386/0x570 [ 109.169177][ T4611] ? __x64_sys_mkdirat+0x85/0x90 [ 109.174153][ T4611] ? do_syscall_64+0x4c/0xa0 [ 109.178774][ T4611] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.184886][ T4611] ? mark_lock+0x94/0x320 [ 109.189273][ T4611] ? __local_bh_enable_ip+0x136/0x1c0 [ 109.194679][ T4611] ? lockdep_hardirqs_on+0x94/0x140 [ 109.199922][ T4611] css_populate_dir+0x155/0x350 [ 109.204835][ T4611] cgroup_apply_control_enable+0x641/0xb00 [ 109.210710][ T4611] cgroup_mkdir+0xcbd/0xeb0 [ 109.215256][ T4611] ? css_task_iter_end+0x280/0x280 [ 109.220408][ T4611] ? do_raw_spin_unlock+0x11d/0x230 [ 109.225678][ T4611] ? kernfs_iop_permission+0x22d/0x310 [ 109.231198][ T4611] ? css_task_iter_end+0x280/0x280 [ 109.236350][ T4611] kernfs_iop_mkdir+0x23d/0x3d0 [ 109.241249][ T4611] vfs_mkdir+0x386/0x570 [ 109.244699][ T4177] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.245561][ T4611] do_mkdirat+0x1dd/0x5c0 [ 109.258966][ T4611] ? vfs_mkdir+0x570/0x570 [ 109.263434][ T4611] __x64_sys_mkdirat+0x85/0x90 [ 109.263965][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.268252][ T4611] do_syscall_64+0x4c/0xa0 [ 109.268275][ T4611] ? clear_bhb_loop+0x30/0x80 [ 109.268299][ T4611] ? clear_bhb_loop+0x30/0x80 [ 109.290422][ T4611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.296354][ T4611] RIP: 0033:0x7f51f91ee559 [ 109.300813][ T4611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.320461][ T4611] RSP: 002b:00007f51f7445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 109.328915][ T4611] RAX: ffffffffffffffda RBX: 00007f51f9474fa0 RCX: 00007f51f91ee559 [ 109.331318][ T4177] usb 4-1: Product: syz [ 109.336938][ T4611] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 109.336957][ T4611] RBP: 00007f51f9285b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.336972][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.361387][ T4177] usb 4-1: Manufacturer: syz [ 109.365092][ T4611] R13: 00007f51f9475038 R14: 00007f51f9474fa0 R15: 00007ffd38fd9318 [ 109.369698][ T4177] usb 4-1: SerialNumber: syz [ 109.377693][ T4611] [ 109.447229][ T4606] ODEBUG: Out of memory. ODEBUG disabled [ 109.517380][ T4177] usb 4-1: config 0 descriptor?? [ 109.646060][ T4177] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 109.729727][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 109.751918][ T4583] udevd[4583]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.897807][ T4205] block nbd0: Receive control failed (result -1) [ 109.905239][ T4611] cgroup: cgroup_addrm_files: failed to add throttle.read_bps_device, err=-12 [ 109.948227][ T4265] usb 4-1: USB disconnect, device number 3 [ 111.593451][ T4625] FAULT_INJECTION: forcing a failure. [ 111.593451][ T4625] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.645869][ T4625] CPU: 1 PID: 4625 Comm: syz.1.91 Not tainted syzkaller #0 [ 111.653195][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.663257][ T4625] Call Trace: [ 111.666550][ T4625] [ 111.669490][ T4625] dump_stack_lvl+0x188/0x250 [ 111.674349][ T4625] ? show_regs_print_info+0x20/0x20 [ 111.679563][ T4625] ? load_image+0x410/0x410 [ 111.684095][ T4625] ? __lock_acquire+0x7d40/0x7d40 [ 111.689163][ T4625] should_fail+0x383/0x4b0 [ 111.693596][ T4625] strncpy_from_user+0x32/0x350 [ 111.698474][ T4625] getname_flags+0xf2/0x4f0 [ 111.703120][ T4625] do_sys_openat2+0xdd/0x500 [ 111.707929][ T4625] ? __lock_acquire+0x7d40/0x7d40 [ 111.712970][ T4625] ? do_sys_open+0xe0/0xe0 [ 111.717396][ T4625] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.723392][ T4625] ? lock_chain_count+0x20/0x20 [ 111.728258][ T4625] __x64_sys_openat+0x135/0x160 [ 111.733230][ T4625] do_syscall_64+0x4c/0xa0 [ 111.737664][ T4625] ? clear_bhb_loop+0x30/0x80 [ 111.742351][ T4625] ? clear_bhb_loop+0x30/0x80 [ 111.747049][ T4625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.752954][ T4625] RIP: 0033:0x7f51f91ee559 [ 111.757431][ T4625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.777045][ T4625] RSP: 002b:00007f51f7424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.785468][ T4625] RAX: ffffffffffffffda RBX: 00007f51f9475090 RCX: 00007f51f91ee559 [ 111.793530][ T4625] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 111.801526][ T4625] RBP: 00007f51f9285b20 R08: 0000000000000000 R09: 0000000000000000 [ 111.809590][ T4625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.817662][ T4625] R13: 00007f51f9475128 R14: 00007f51f9475090 R15: 00007ffd38fd9318 [ 111.825689][ T4625] [ 124.541159][ T1109] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.321476][ T1109] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 126.329920][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.403938][ T4720] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.441729][ T1109] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 126.462252][ T4720] xt_hashlimit: size too large, truncated to 1048576 [ 126.471816][ T1109] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 126.479889][ T1109] usb 1-1: Manufacturer: syz [ 126.507388][ T1109] usb 1-1: config 0 descriptor?? [ 126.799390][ T1109] rc_core: IR keymap rc-hauppauge not found [ 126.805986][ T1109] Registered IR keymap rc-empty [ 126.816301][ T1109] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 126.856575][ T1109] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 127.042392][ T4205] [ 127.044777][ T4205] ====================================================== [ 127.051810][ T4205] WARNING: possible circular locking dependency detected [ 127.058886][ T4205] syzkaller #0 Not tainted [ 127.063322][ T4205] ------------------------------------------------------ [ 127.070353][ T4205] kworker/u5:8/4205 is trying to acquire lock: [ 127.076512][ T4205] ffffffff8e3d27c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 127.085794][ T4205] [ 127.085794][ T4205] but task is already holding lock: [ 127.093166][ T4205] ffffffff8e3b2e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 127.102510][ T4205] [ 127.102510][ T4205] which lock already depends on the new lock. [ 127.102510][ T4205] [ 127.112928][ T4205] [ 127.112928][ T4205] the existing dependency chain (in reverse order) is: [ 127.121952][ T4205] [ 127.121952][ T4205] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 127.129732][ T4205] __mutex_lock_common+0x1e5/0x2400 [ 127.135479][ T4205] mutex_lock_nested+0x17/0x20 [ 127.140785][ T4205] hci_remote_features_evt+0x5d9/0xa10 [ 127.146784][ T4205] hci_event_packet+0x600/0x1310 [ 127.152275][ T4205] hci_rx_work+0x255/0xa10 [ 127.157245][ T4205] process_one_work+0x867/0xff0 [ 127.162647][ T4205] worker_thread+0xad7/0x12a0 [ 127.167863][ T4205] kthread+0x42e/0x520 [ 127.172470][ T4205] ret_from_fork+0x1f/0x30 [ 127.177430][ T4205] [ 127.177430][ T4205] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 127.184764][ T4205] __mutex_lock_common+0x1e5/0x2400 [ 127.190502][ T4205] mutex_lock_nested+0x17/0x20 [ 127.195802][ T4205] l2cap_chan_connect+0xfb/0xe20 [ 127.201290][ T4205] l2cap_sock_connect+0x5a3/0x770 [ 127.206970][ T4205] kernel_connect+0x11c/0x180 [ 127.212188][ T4205] rfcomm_dlc_open+0x600/0x10c0 [ 127.217603][ T4205] rfcomm_sock_connect+0x2e9/0x600 [ 127.223271][ T4205] __sys_connect+0x3cb/0x450 [ 127.228404][ T4205] __x64_sys_connect+0x76/0x80 [ 127.233708][ T4205] do_syscall_64+0x4c/0xa0 [ 127.238666][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.245101][ T4205] [ 127.245101][ T4205] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 127.252532][ T4205] __lock_acquire+0x38f7/0x7d40 [ 127.258034][ T4205] lock_acquire+0x19f/0x400 [ 127.263083][ T4205] __mutex_lock_common+0x1e5/0x2400 [ 127.268848][ T4205] mutex_lock_nested+0x17/0x20 [ 127.274150][ T4205] rfcomm_security_cfm+0x95/0x780 [ 127.279719][ T4205] hci_encrypt_cfm+0x363/0x4d0 [ 127.285029][ T4205] hci_encrypt_change_evt+0x62d/0xdd0 [ 127.290939][ T4205] hci_event_packet+0x67e/0x1310 [ 127.296415][ T4205] hci_rx_work+0x255/0xa10 [ 127.301368][ T4205] process_one_work+0x867/0xff0 [ 127.306763][ T4205] worker_thread+0xad7/0x12a0 [ 127.311996][ T4205] kthread+0x42e/0x520 [ 127.316604][ T4205] ret_from_fork+0x1f/0x30 [ 127.321566][ T4205] [ 127.321566][ T4205] other info that might help us debug this: [ 127.321566][ T4205] [ 127.331807][ T4205] Chain exists of: [ 127.331807][ T4205] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 127.331807][ T4205] [ 127.344345][ T4205] Possible unsafe locking scenario: [ 127.344345][ T4205] [ 127.351824][ T4205] CPU0 CPU1 [ 127.357208][ T4205] ---- ---- [ 127.362584][ T4205] lock(hci_cb_list_lock); [ 127.367111][ T4205] lock(&hdev->lock); [ 127.373734][ T4205] lock(hci_cb_list_lock); [ 127.380795][ T4205] lock(rfcomm_mutex); [ 127.384991][ T4205] [ 127.384991][ T4205] *** DEADLOCK *** [ 127.384991][ T4205] [ 127.393144][ T4205] 4 locks held by kworker/u5:8/4205: [ 127.398440][ T4205] #0: ffff888079109938 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 127.408885][ T4205] #1: ffffc9000303fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 127.420242][ T4205] #2: ffff88806332c478 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0xd9/0xdd0 [ 127.430114][ T4205] #3: ffffffff8e3b2e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 127.439887][ T4205] [ 127.439887][ T4205] stack backtrace: [ 127.445805][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 127.453367][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.463438][ T4205] Workqueue: hci3 hci_rx_work [ 127.468151][ T4205] Call Trace: [ 127.471451][ T4205] [ 127.474402][ T4205] dump_stack_lvl+0x188/0x250 [ 127.479106][ T4205] ? load_image+0x410/0x410 [ 127.483654][ T4205] ? show_regs_print_info+0x20/0x20 [ 127.488969][ T4205] ? print_circular_bug+0x12b/0x1a0 [ 127.494196][ T4205] check_noncircular+0x2f8/0x400 [ 127.499176][ T4205] ? print_deadlock_bug+0x5d0/0x5d0 [ 127.504392][ T4205] ? lockdep_lock+0xf1/0x1f0 [ 127.509007][ T4205] ? mark_lock+0x94/0x320 [ 127.513434][ T4205] ? _find_first_zero_bit+0xd1/0xf0 [ 127.518646][ T4205] __lock_acquire+0x38f7/0x7d40 [ 127.523507][ T4205] ? verify_lock_unused+0x140/0x140 [ 127.528710][ T4205] lock_acquire+0x19f/0x400 [ 127.533387][ T4205] ? rfcomm_security_cfm+0x95/0x780 [ 127.538600][ T4205] ? __might_sleep+0xf0/0xf0 [ 127.543184][ T4205] ? read_lock_is_recursive+0x10/0x10 [ 127.548571][ T4205] __mutex_lock_common+0x1e5/0x2400 [ 127.553785][ T4205] ? rfcomm_security_cfm+0x95/0x780 [ 127.558988][ T4205] ? rcu_lock_release+0x20/0x20 [ 127.563985][ T4205] ? rfcomm_security_cfm+0x95/0x780 [ 127.569377][ T4205] ? mutex_lock_io_nested+0x60/0x60 [ 127.574612][ T4205] ? l2cap_security_cfm+0x12b4/0x1340 [ 127.580026][ T4205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.586050][ T4205] ? l2cap_disconn_cfm+0xc0/0xc0 [ 127.591277][ T4205] mutex_lock_nested+0x17/0x20 [ 127.596045][ T4205] rfcomm_security_cfm+0x95/0x780 [ 127.601074][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 127.606726][ T4205] ? rfcomm_send_msc+0x340/0x340 [ 127.611680][ T4205] ? hci_encrypt_cfm+0x110/0x4d0 [ 127.616643][ T4205] ? rfcomm_send_msc+0x340/0x340 [ 127.621627][ T4205] hci_encrypt_cfm+0x363/0x4d0 [ 127.626399][ T4205] hci_encrypt_change_evt+0x62d/0xdd0 [ 127.631798][ T4205] ? lock_chain_count+0x20/0x20 [ 127.636652][ T4205] ? hci_remote_name_evt+0x5b0/0x5b0 [ 127.641950][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 127.647591][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 127.652834][ T4205] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 127.658754][ T4205] ? hci_event_packet+0x673/0x1310 [ 127.663970][ T4205] hci_event_packet+0x67e/0x1310 [ 127.668913][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 127.673884][ T4205] ? rcu_lock_release+0x20/0x20 [ 127.678776][ T4205] ? lock_acquire+0x209/0x400 [ 127.683468][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 127.688687][ T4205] hci_rx_work+0x255/0xa10 [ 127.693134][ T4205] process_one_work+0x867/0xff0 [ 127.698004][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 127.703647][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 127.708940][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 127.713987][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 127.719540][ T4205] ? wq_worker_running+0x97/0x170 [ 127.724566][ T4205] worker_thread+0xad7/0x12a0 [ 127.729256][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 127.735151][ T4205] kthread+0x42e/0x520 [ 127.739249][ T4205] ? rcu_lock_release+0x20/0x20 [ 127.744203][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 127.748809][ T4205] ret_from_fork+0x1f/0x30 [ 127.753237][ T4205] [ 127.796945][ T4725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.834231][ T1109] usb 1-1: USB disconnect, device number 5 [ 129.901348][ T1109] Bluetooth: hci3: command 0x0406 tx timeout [ 132.692601][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.698954][ T1427] ieee802154 phy1 wpan1: encryption failed: -22