last executing test programs: 17.776004354s ago: executing program 3 (id=272): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000085f000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000dd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000013b000/0x4000)=nil, &(0x7f00009f3000/0x3000)=nil, &(0x7f0000c6a000/0x1000)=nil, &(0x7f0000336000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="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", 0xff, r4}, 0x68) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x2c, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x2f, r6}) 15.139859402s ago: executing program 4 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001300)=""/102392, 0x18ff8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) 13.579056958s ago: executing program 4 (id=286): openat$dir(0xffffffffffffff9c, 0x0, 0x200040, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_setup(0x194e, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) 12.48102536s ago: executing program 0 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000400)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.519687539s ago: executing program 1 (id=290): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getresgid(&(0x7f0000000040), 0x0, 0x0) getpid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fsopen(0x0, 0x1) socket$l2tp(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="d8babd", 0x3}], 0x1}}], 0x1, 0x20000010) io_uring_enter(r1, 0x800046f3, 0x4, 0x40, 0x0, 0x0) 10.386063031s ago: executing program 4 (id=291): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[], 0x24}], 0x1}, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"/46], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) 10.385565511s ago: executing program 1 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10.357827662s ago: executing program 0 (id=293): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x10000, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x30481, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 10.199155484s ago: executing program 3 (id=294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 8.268021304s ago: executing program 3 (id=295): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x4b6, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000780), 0x2, r0}, 0x38) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setscheduler(r4, 0x5, &(0x7f00000000c0)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/notes', 0x3, 0x25) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x44200, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x90000000}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.892903778s ago: executing program 1 (id=296): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 5.8001981s ago: executing program 2 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) 5.71999311s ago: executing program 1 (id=298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f00000005c0), 0x0}, 0x20) 5.71973108s ago: executing program 4 (id=299): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001040)) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.591026232s ago: executing program 0 (id=300): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x20, 0x132, 0x3}) ioctl$VT_DISALLOCATE(r0, 0x5608) 5.576899132s ago: executing program 3 (id=301): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000106ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x20000000) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0) close(r7) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0xe}, 0x0, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02864c3, &(0x7f0000001740)={0x0, 0x7, 0x0, 0x2}) 5.505028432s ago: executing program 1 (id=302): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a327172040201b655a290102030109021b0801000010000904e800017c577a00090582"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_enter(r0, 0x2ded, 0xef92, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72746532342c74696d0e6f75743d3078303030303030303030303030303030302c00"/63]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x0, 0xf69aa1672a52aba3}, [@IFLA_PHYS_PORT_ID={0x7, 0x22, "940293"}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4101810, 0xffffffffffffffff, 0xc9781000) 4.535949803s ago: executing program 2 (id=303): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getresgid(&(0x7f0000000040), 0x0, 0x0) getpid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fsopen(0x0, 0x1) socket$l2tp(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="d8babd", 0x3}], 0x1}}], 0x1, 0x20000010) io_uring_enter(r1, 0x800046f3, 0x4, 0x40, 0x0, 0x0) 3.767157251s ago: executing program 0 (id=304): mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000009e40)='./file0\x00', 0x40) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) 3.675185352s ago: executing program 4 (id=305): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x1004050, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000000)={0x3, 0x8000005, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x83}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbd2f52abeb3b6abb}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) 3.572594233s ago: executing program 2 (id=306): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) 2.023987459s ago: executing program 1 (id=307): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) 1.97136749s ago: executing program 2 (id=308): r0 = io_uring_setup(0x37b1, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x1, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 1.878485011s ago: executing program 3 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) 1.877319991s ago: executing program 0 (id=310): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 1.840486611s ago: executing program 4 (id=311): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x10000, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x30481, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 1.648038903s ago: executing program 2 (id=312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f00000005c0), 0x0}, 0x20) 715.305413ms ago: executing program 3 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000400)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 274.990437ms ago: executing program 0 (id=314): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 0s ago: executing program 2 (id=315): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001040)) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 68.952098][ T4254] cgroup: Unknown subsys name 'net' [ 69.084831][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.581302][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.181891][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.188408][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.076325][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.085070][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.094126][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.096833][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.109433][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.109445][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.117422][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.124767][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.131345][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.138188][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.145667][ T4272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.151903][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.159259][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.166111][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.173532][ T4272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.180643][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.187963][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.193811][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.201368][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.208903][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.216005][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.229258][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.236344][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.243878][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.251380][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.258988][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.260793][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.268297][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.273373][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.323124][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.732526][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 72.781251][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 72.831885][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 72.940697][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.947865][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.960504][ T4277] device bridge_slave_0 entered promiscuous mode [ 72.969315][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 72.999573][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.006808][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.015263][ T4277] device bridge_slave_1 entered promiscuous mode [ 73.040920][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.048048][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.056557][ T4264] device bridge_slave_0 entered promiscuous mode [ 73.080974][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 73.091165][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.098280][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.106384][ T4264] device bridge_slave_1 entered promiscuous mode [ 73.123395][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.164571][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.210814][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.217915][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.225963][ T4267] device bridge_slave_0 entered promiscuous mode [ 73.239548][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.254577][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.271720][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.279056][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.286871][ T4267] device bridge_slave_1 entered promiscuous mode [ 73.315632][ T4277] team0: Port device team_slave_0 added [ 73.360506][ T4277] team0: Port device team_slave_1 added [ 73.368225][ T4264] team0: Port device team_slave_0 added [ 73.378624][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.404719][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.411911][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.420276][ T4273] device bridge_slave_0 entered promiscuous mode [ 73.429378][ T4264] team0: Port device team_slave_1 added [ 73.435286][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.442445][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.450511][ T4273] device bridge_slave_1 entered promiscuous mode [ 73.459247][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.510117][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.517110][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.543352][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.555690][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.562925][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.571021][ T4269] device bridge_slave_0 entered promiscuous mode [ 73.602244][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.609582][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.635907][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.647469][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.654970][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.663124][ T4269] device bridge_slave_1 entered promiscuous mode [ 73.671253][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.678216][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.704310][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.718195][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.730013][ T4267] team0: Port device team_slave_0 added [ 73.738085][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.766488][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.773631][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.799835][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.817436][ T4267] team0: Port device team_slave_1 added [ 73.850468][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.891790][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.923469][ T4273] team0: Port device team_slave_0 added [ 73.934411][ T4277] device hsr_slave_0 entered promiscuous mode [ 73.941585][ T4277] device hsr_slave_1 entered promiscuous mode [ 73.974104][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.981231][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.007402][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.020263][ T4273] team0: Port device team_slave_1 added [ 74.026541][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.033669][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.059840][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.082442][ T4264] device hsr_slave_0 entered promiscuous mode [ 74.089224][ T4264] device hsr_slave_1 entered promiscuous mode [ 74.095819][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.103767][ T4264] Cannot create hsr debugfs directory [ 74.112176][ T4269] team0: Port device team_slave_0 added [ 74.141609][ T4269] team0: Port device team_slave_1 added [ 74.172060][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.179111][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.205638][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.251225][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.258205][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.284647][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.299631][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.306609][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.333404][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 74.333617][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.378599][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 74.384856][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 74.391220][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 74.391240][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 74.404943][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.412071][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.438000][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.459218][ T4267] device hsr_slave_0 entered promiscuous mode [ 74.466448][ T4267] device hsr_slave_1 entered promiscuous mode [ 74.473338][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.481122][ T4267] Cannot create hsr debugfs directory [ 74.536343][ T4273] device hsr_slave_0 entered promiscuous mode [ 74.543640][ T4273] device hsr_slave_1 entered promiscuous mode [ 74.550481][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.558067][ T4273] Cannot create hsr debugfs directory [ 74.621875][ T4269] device hsr_slave_0 entered promiscuous mode [ 74.628758][ T4269] device hsr_slave_1 entered promiscuous mode [ 74.636579][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.644831][ T4269] Cannot create hsr debugfs directory [ 74.812439][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.826628][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.865215][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.894733][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.949291][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.982403][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.997853][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.010436][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.053438][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.077792][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.108279][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.136700][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.174675][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.212991][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.222554][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.232443][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.262189][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.269396][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.280364][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.290340][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.335302][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.344883][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.355160][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.362523][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.399357][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.426366][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.435339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.446635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.456541][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.463835][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.472052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.484992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.510617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.521247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.531331][ T4269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.542707][ T4269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.554609][ T4269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.565309][ T4269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.578034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.617420][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.635435][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.646224][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.669998][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.676869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.685893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.696728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.705119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.712987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.721523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.730444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.739057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.751856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.762684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.771779][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.778954][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.787484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.802224][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.810495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.820300][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.833803][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.861706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.870672][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.883364][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.892660][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.902440][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.909938][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.917890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.931290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.940440][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.947544][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.955305][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.964964][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.973857][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.982771][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.989930][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.005391][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.014630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.029843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.073961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.083402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.100751][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.107888][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.125126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.135135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.152823][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.160017][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.169766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.179720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.189045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.198069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.207257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.217247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.226524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.255265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.267526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.284249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.297431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.313167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.325467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.337704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.353787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.363976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.380126][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 76.388104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.398039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.407415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.416016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.424537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.433374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.441621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.456010][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.466701][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 76.467869][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.472906][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 76.472964][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 76.472996][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 76.518862][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.531841][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.544517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.558282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.569333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.577970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.592990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.602586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.612386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.621933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.637306][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.654405][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.683781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.695076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.771024][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.792503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.847935][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.886211][ T4277] device veth0_vlan entered promiscuous mode [ 76.929617][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.949026][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.957870][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.979853][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.992630][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.014352][ T4277] device veth1_vlan entered promiscuous mode [ 77.041738][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.069477][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.083573][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.140321][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.153909][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.169875][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.189031][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.196269][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.219274][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.234490][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.243759][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.250955][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.268145][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.278284][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.325739][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.337255][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.346356][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.355378][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.363228][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.379316][ T4277] device veth0_macvtap entered promiscuous mode [ 77.388225][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.396872][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.406182][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.416429][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.442436][ T4277] device veth1_macvtap entered promiscuous mode [ 77.453694][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.461616][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.470142][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.480102][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.491469][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.500592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.508009][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.518149][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.526667][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.534366][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.545703][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.554868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.564189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.576224][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.612818][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.638940][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.647676][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.669918][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.680443][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.694683][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.725886][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.737847][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.768293][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.780633][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.795959][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.805893][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.823199][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.840335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.849904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.859200][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.867816][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.876983][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.887013][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.895985][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.904880][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.936750][ T4264] device veth0_vlan entered promiscuous mode [ 77.965855][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.977191][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.987176][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.003766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.026706][ T4264] device veth1_vlan entered promiscuous mode [ 78.041324][ T4273] device veth0_vlan entered promiscuous mode [ 78.073366][ T4267] device veth0_vlan entered promiscuous mode [ 78.091821][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.101268][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.115802][ T4273] device veth1_vlan entered promiscuous mode [ 78.142699][ T4267] device veth1_vlan entered promiscuous mode [ 78.153829][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.167241][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.176683][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.185864][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.200593][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.214616][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.226972][ T4264] device veth0_macvtap entered promiscuous mode [ 78.281894][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.292242][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.302488][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.310946][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.319035][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.328263][ T4264] device veth1_macvtap entered promiscuous mode [ 78.347897][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.388073][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.399123][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.407370][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.425565][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.442663][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.452520][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.460196][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 78.474816][ T4273] device veth0_macvtap entered promiscuous mode [ 78.504220][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.526044][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.538748][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 78.540057][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 78.544793][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 78.551474][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 78.560838][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.580622][ T4267] device veth0_macvtap entered promiscuous mode [ 78.591806][ T4273] device veth1_macvtap entered promiscuous mode [ 78.610594][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.616202][ T4267] device veth1_macvtap entered promiscuous mode [ 78.634429][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.646413][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.647528][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.665912][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.687434][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.698874][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.710230][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.720755][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.732878][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.740765][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.752340][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.760798][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.769720][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.777760][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.787944][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.797457][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.807024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.824194][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.835281][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.847733][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.860613][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.875375][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.885770][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.897037][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.910013][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.920339][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.931903][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.951780][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.962017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.976064][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.987902][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.998529][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.009413][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.020527][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.031254][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.042960][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.054559][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.063594][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.072816][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.081853][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.096772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.120958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.182701][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.205917][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.225531][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.238537][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.253815][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.267280][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.283072][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.293434][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.302725][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.311931][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.322627][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.358073][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.367383][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.380579][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.390227][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.399887][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.439101][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.474987][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.485051][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.495696][ T4382] 9pnet_fd: p9_fd_create_unix (4382): problem connecting socket: éq‰Y’3aK: -111 [ 79.633605][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.652355][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.662531][ T27] audit: type=1326 audit(1752221084.198:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 79.670328][ T4269] device veth0_vlan entered promiscuous mode [ 79.693230][ T27] audit: type=1326 audit(1752221084.198:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 79.716497][ T27] audit: type=1326 audit(1752221084.228:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 79.746465][ T27] audit: type=1326 audit(1752221084.228:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 79.772550][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.774585][ T27] audit: type=1326 audit(1752221084.228:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 79.780829][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.818015][ T27] audit: type=1326 audit(1752221084.248:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 79.827606][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.877715][ T27] audit: type=1326 audit(1752221084.248:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 79.887743][ T4269] device veth1_vlan entered promiscuous mode [ 79.902376][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.925622][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.943907][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.970222][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.991400][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.000906][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.011449][ T27] audit: type=1326 audit(1752221084.248:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 80.068764][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.076781][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.086008][ T27] audit: type=1326 audit(1752221084.278:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 80.115965][ T27] audit: type=1326 audit(1752221084.278:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 80.174705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.194623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.237895][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.244278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.279399][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.292393][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.301128][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.313683][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.327166][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.355954][ T4269] device veth0_macvtap entered promiscuous mode [ 80.396475][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.413678][ T4269] device veth1_macvtap entered promiscuous mode [ 80.474308][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.512970][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.523836][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.538794][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 80.618534][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 80.624619][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 80.631888][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 80.637948][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 80.649687][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.689252][ T4397] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.716039][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.738508][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.776506][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.845327][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.897645][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.926075][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.947700][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.972053][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.014854][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.028345][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.039312][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.058604][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.077055][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.089575][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.101493][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.117986][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.128840][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.140282][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.150047][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.159981][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.169557][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.181851][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.201237][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.225204][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.242909][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.252854][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.415334][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.465227][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.510343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.518624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 81.526825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 81.616542][ T4406] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 81.667789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #380!!! [ 81.676139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.684528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.692836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.701157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.709469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 81.718345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 82.148595][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.188149][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.197603][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.255668][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.776212][ T4420] 9pnet_fd: p9_fd_create_unix (4420): problem connecting socket: éq‰Y’3aK: -111 [ 86.082750][ T4448] loop0: detected capacity change from 0 to 32768 [ 86.091008][ T4448] XFS: ikeep mount option is deprecated. [ 86.157006][ T4448] XFS (loop0): Mounting V5 Filesystem [ 86.260251][ T4448] XFS (loop0): Ending clean mount [ 86.277061][ T4448] XFS (loop0): Quotacheck needed: Please wait. [ 86.307793][ T4468] 9pnet_fd: p9_fd_create_unix (4468): problem connecting socket: éq‰Y’3aK: -111 [ 86.353285][ T4448] XFS (loop0): Quotacheck: Done. [ 86.408535][ T4309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.538127][ T4469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 86.568207][ T26] cfg80211: failed to load regulatory.db [ 86.853331][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 86.859391][ T4267] XFS (loop0): Unmounting Filesystem [ 86.874990][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 86.954059][ T4309] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.974966][ T4309] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.987523][ T4309] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.003706][ T4309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.036488][ T4456] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.310198][ T4309] usb 2-1: USB disconnect, device number 2 [ 87.703752][ T4471] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.775051][ T4471] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.903123][ T4471] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 87.992792][ T4471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.209211][ T4471] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.215319][ T4471] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 88.292440][ T4471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.313854][ T4471] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.327160][ T4471] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 88.358733][ T4471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.365003][ T4471] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.371253][ T4471] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 88.379096][ T4471] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 88.385188][ T4471] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 88.391251][ T4471] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 88.688927][ T4345] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.918728][ T4345] usb 1-1: Using ep0 maxpacket: 32 [ 88.936797][ T4345] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 88.946356][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.080828][ T4345] usb 1-1: config 0 has no interface number 0 [ 89.211874][ T4345] usb 1-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 89.323700][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 89.394558][ T4345] usb 1-1: SerialNumber: syz [ 89.434356][ T4345] usb 1-1: config 0 descriptor?? [ 89.488050][ T4345] ftdi_sio 1-1:0.50: FTDI USB Serial Device converter detected [ 89.542077][ T4345] ftdi_sio ttyUSB0: unknown device type: 0xbf71 [ 89.731306][ T4345] usb 1-1: USB disconnect, device number 2 [ 89.968448][ T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.242538][ T4280] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.268939][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 90.269002][ T27] audit: type=1326 audit(1752221094.808:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f598e929 code=0x7fc00000 [ 90.298532][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.381817][ T4280] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.458444][ T4280] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.688586][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 90.697144][ T126] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 90.742298][ T27] audit: type=1326 audit(1752221094.988:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51f59858e7 code=0x7fc00000 [ 90.831123][ T126] usb 2-1: config 0 has no interface number 0 [ 90.944183][ T126] usb 2-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 91.020679][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 91.141894][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 91.179949][ T27] audit: type=1326 audit(1752221094.988:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51f592ab19 code=0x7fc00000 [ 91.299646][ T126] usb 2-1: SerialNumber: syz [ 91.439349][ T126] usb 2-1: config 0 descriptor?? [ 91.507025][ T27] audit: type=1326 audit(1752221094.988:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f51f592abdf code=0x7fc00000 [ 91.652997][ T126] ftdi_sio 2-1:0.50: FTDI USB Serial Device converter detected [ 91.855859][ T126] ftdi_sio ttyUSB1: unknown device type: 0xbf71 [ 91.881486][ T27] audit: type=1326 audit(1752221095.008:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f51f598e929 code=0x7fc00000 [ 91.940529][ T4345] ftdi_sio 1-1:0.50: device disconnected [ 92.082326][ T126] usb 2-1: USB disconnect, device number 3 [ 92.275036][ T126] ftdi_sio 2-1:0.50: device disconnected [ 92.301247][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 92.378478][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 92.458471][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 92.538420][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 97.322341][ T4545] trusted_key: encrypted_key: insufficient parameters specified [ 97.630192][ T4546] Zero length message leads to an empty skb [ 98.848499][ T4345] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.921109][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 100.258625][ T4345] usb 3-1: device descriptor read/64, error -32 [ 100.558481][ T4345] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.888409][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.946073][ T4345] usb 3-1: Using ep0 maxpacket: 32 [ 100.989117][ T4345] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 101.007476][ T4345] usb 3-1: config 0 has no interface number 0 [ 101.030509][ T4345] usb 3-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 101.062401][ T4345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 101.098550][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 101.107646][ T22] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 101.128110][ T4345] usb 3-1: SerialNumber: syz [ 101.146521][ T22] usb 4-1: config 0 has no interface number 0 [ 101.153082][ T4345] usb 3-1: config 0 descriptor?? [ 101.175215][ T22] usb 4-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 101.186940][ T4345] ftdi_sio 3-1:0.50: FTDI USB Serial Device converter detected [ 101.215007][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 101.221088][ T4345] ftdi_sio ttyUSB0: unknown device type: 0xbf71 [ 101.230892][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 101.233699][ T22] usb 4-1: SerialNumber: syz [ 101.240951][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:7 Not tainted 6.1.144-syzkaller #0 [ 101.253724][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.263810][ T4280] Workqueue: hci0 hci_rx_work [ 101.268559][ T4280] Call Trace: [ 101.271858][ T4280] [ 101.274798][ T4280] dump_stack_lvl+0x168/0x22e [ 101.279523][ T4280] ? show_regs_print_info+0x12/0x12 [ 101.284755][ T4280] ? load_image+0x3b0/0x3b0 [ 101.289282][ T4280] sysfs_create_dir_ns+0x252/0x280 [ 101.294419][ T4280] ? hci_rx_work+0x3eb/0xd40 [ 101.299031][ T4280] ? sysfs_warn_dup+0xa0/0xa0 [ 101.303754][ T4280] ? do_raw_spin_unlock+0x11d/0x230 [ 101.308987][ T4280] kobject_add_internal+0x6b8/0xc80 [ 101.314220][ T4280] kobject_add+0x152/0x210 [ 101.318667][ T4280] ? kobject_init+0x1d0/0x1d0 [ 101.323374][ T4280] ? klist_children_get+0x50/0x50 [ 101.328429][ T4280] ? get_device_parent+0x121/0x3f0 [ 101.333574][ T4280] device_add+0x483/0xfb0 [ 101.337923][ T4280] ? kmem_cache_free+0xf7/0x290 [ 101.342805][ T4280] hci_conn_add_sysfs+0xd1/0x1e0 [ 101.347769][ T4280] le_conn_complete_evt+0xd1d/0x1320 [ 101.353084][ T4280] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 101.359343][ T4280] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 101.364998][ T4280] ? skb_pull_data+0xf7/0x200 [ 101.369704][ T4280] hci_le_conn_complete_evt+0x183/0x440 [ 101.375268][ T4280] ? hci_remote_host_features_evt+0x270/0x270 [ 101.381358][ T4280] hci_event_packet+0x791/0x1210 [ 101.386317][ T4280] ? bis_list+0x280/0x280 [ 101.390664][ T4280] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 101.396579][ T4280] ? kcov_remote_start+0x4c7/0x7e0 [ 101.401705][ T4280] ? nf_ct_l4proto_log_invalid+0x34/0x206 [ 101.407459][ T4280] ? hci_send_to_monitor+0x9c/0x4a0 [ 101.412701][ T4280] hci_rx_work+0x3eb/0xd40 [ 101.417147][ T4280] ? _raw_spin_unlock+0x40/0x40 [ 101.422045][ T4280] ? process_one_work+0x7a1/0x1160 [ 101.427184][ T4280] process_one_work+0x898/0x1160 [ 101.432159][ T4280] ? worker_detach_from_pool+0x240/0x240 [ 101.437824][ T4280] ? _raw_spin_lock_irq+0xab/0xe0 [ 101.442869][ T4280] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 101.448256][ T4280] ? kthread_data+0x4b/0xc0 [ 101.452786][ T4280] worker_thread+0xaa2/0x1250 [ 101.457492][ T4280] ? __kthread_parkme+0x162/0x1c0 [ 101.462545][ T4280] kthread+0x29d/0x330 [ 101.466636][ T4280] ? worker_clr_flags+0x1a0/0x1a0 [ 101.471697][ T4280] ? kthread_blkcg+0xd0/0xd0 [ 101.476326][ T4280] ret_from_fork+0x1f/0x30 [ 101.480783][ T4280] [ 101.499963][ T4280] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.513927][ T4280] Bluetooth: hci0: failed to register connection device [ 101.552237][ T22] usb 4-1: config 0 descriptor?? [ 101.586615][ T22] usb 4-1: can't set config #0, error -71 [ 101.610596][ T22] usb 4-1: USB disconnect, device number 2 [ 101.643932][ T4345] usb 3-1: USB disconnect, device number 3 [ 101.711589][ T4345] ftdi_sio 3-1:0.50: device disconnected [ 103.449816][ T4594] overlayfs: failed to resolve './file1/file0': -2 [ 103.652626][ T4597] trusted_key: encrypted_key: insufficient parameters specified [ 105.353739][ T27] audit: type=1326 audit(1752221109.888:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9beb8e929 code=0x7fc00000 [ 105.598577][ T27] audit: type=1326 audit(1752221109.888:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9beb8e929 code=0x7fc00000 [ 105.710820][ T4620] netlink: 'syz.0.69': attribute type 10 has an invalid length. [ 105.733091][ T4620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.745514][ T4620] team0: Port device bond0 added [ 105.928406][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.129120][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 106.144004][ T7] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 106.269378][ T7] usb 4-1: config 0 has no interface number 0 [ 106.366929][ T7] usb 4-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 106.420230][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 106.482511][ T7] usb 4-1: SerialNumber: syz [ 106.507991][ T7] usb 4-1: config 0 descriptor?? [ 106.517502][ T7] ftdi_sio 4-1:0.50: FTDI USB Serial Device converter detected [ 106.536831][ T7] ftdi_sio ttyUSB0: unknown device type: 0xbf71 [ 106.722556][ T7] usb 4-1: USB disconnect, device number 3 [ 106.757528][ T7] ftdi_sio 4-1:0.50: device disconnected [ 107.496423][ T27] audit: type=1326 audit(1752221112.028:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4601 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9beb2ab19 code=0x7fc00000 [ 109.756044][ T4646] overlayfs: failed to resolve './file1/file0': -2 [ 110.251663][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.353227][ T4657] input: syz0 as /devices/virtual/input/input6 [ 110.630217][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 110.652167][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 110.667077][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 110.682254][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 110.695789][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 110.710867][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 110.871826][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.883613][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.895296][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.906876][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.922942][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.934567][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.946506][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.963968][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.977365][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 110.989298][ T4655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 113.118487][ T4520] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.854766][ T4520] usb 3-1: Using ep0 maxpacket: 32 [ 113.871794][ T4520] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 113.891925][ T4520] usb 3-1: config 0 has no interface number 0 [ 113.918434][ T4520] usb 3-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 114.523901][ T4691] netlink: 224 bytes leftover after parsing attributes in process `syz.1.82'. [ 114.670530][ T4520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 114.678730][ T4520] usb 3-1: SerialNumber: syz [ 114.712168][ T4520] usb 3-1: config 0 descriptor?? [ 114.750128][ T4520] ftdi_sio 3-1:0.50: FTDI USB Serial Device converter detected [ 116.432113][ T4697] sched: RT throttling activated [ 116.809959][ T4520] ftdi_sio ttyUSB0: unknown device type: 0xbf71 [ 116.836241][ T4520] usb 3-1: USB disconnect, device number 4 [ 116.846395][ T4520] ftdi_sio 3-1:0.50: device disconnected [ 117.017699][ T4710] sctp_transport_update_pmtu: 49 callbacks suppressed [ 117.017735][ T4710] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.037372][ T4710] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.052296][ T4710] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.059677][ T4716] input: syz0 as /devices/virtual/input/input7 [ 119.113496][ T4721] tmpfs: Bad value for 'mpol' [ 123.232660][ T4520] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 123.351837][ T4752] overlayfs: './file0' not a directory [ 123.602896][ T4520] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 123.678903][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.369128][ T4520] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 124.388819][ T4520] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.422585][ T4520] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 124.437746][ T4520] usb 1-1: can't read configurations, error -71 [ 124.575676][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 124.582778][ T14] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 124.621636][ T14] usb 2-1: config 0 has no interface number 0 [ 124.777698][ T14] usb 2-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 125.563241][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 125.593710][ T14] usb 2-1: SerialNumber: syz [ 125.630342][ T14] usb 2-1: config 0 descriptor?? [ 125.708899][ T4768] input: syz0 as /devices/virtual/input/input8 [ 126.496813][ T14] usb 2-1: can't set config #0, error -71 [ 126.537677][ T14] usb 2-1: USB disconnect, device number 4 [ 132.358432][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.622279][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.628660][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.269052][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 133.277700][ T14] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 133.328523][ T14] usb 2-1: config 0 has no interface number 0 [ 133.347004][ T14] usb 2-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 133.393420][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 133.423120][ T14] usb 2-1: SerialNumber: syz [ 133.454195][ T14] usb 2-1: config 0 descriptor?? [ 133.470299][ T14] ftdi_sio 2-1:0.50: FTDI USB Serial Device converter detected [ 133.501364][ T14] ftdi_sio ttyUSB0: unknown device type: 0xbf71 [ 133.683656][ T14] usb 2-1: USB disconnect, device number 5 [ 133.696931][ T14] ftdi_sio 2-1:0.50: device disconnected [ 133.840622][ T4824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.123'. [ 134.755893][ T4747] Process accounting resumed [ 135.034162][ T4835] overlayfs: './file0' not a directory [ 135.071390][ T4837] 9pnet_fd: p9_fd_create_unix (4837): problem connecting socket: éq‰Y’3aK: -111 [ 135.228420][ T4433] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.965380][ T4834] Process accounting resumed [ 136.239489][ T4846] input: syz0 as /devices/virtual/input/input9 [ 136.652733][ T4433] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.700203][ T4433] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 136.725549][ T4433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.782102][ T4433] usb 3-1: config 0 descriptor?? [ 137.127131][ T4433] pwc: Askey VC010 type 2 USB webcam detected. [ 137.298363][ T4433] pwc: send_video_command error -71 [ 137.303873][ T4433] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 137.366900][ T4433] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 137.415215][ T4433] usb 3-1: USB disconnect, device number 5 [ 137.605065][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 137.619397][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 137.627530][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 137.635497][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 137.643705][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 137.651718][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 137.667264][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 137.842500][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.853588][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.864780][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.876161][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.894860][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.907090][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.918418][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.929731][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.941007][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 137.952251][ T4862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 138.656220][ T4433] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.917562][ T4877] overlayfs: './file0' not a directory [ 139.895354][ T4889] netlink: 224 bytes leftover after parsing attributes in process `syz.4.137'. [ 142.168213][ T4896] block device autoloading is deprecated and will be removed. [ 142.463882][ T4905] team0: No ports can be present during mode change [ 145.022089][ T4913] process 'syz.4.149' launched './file0' with NULL argv: empty string added [ 145.343158][ T4874] Process accounting resumed [ 146.774873][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.831534][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.906737][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.961404][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.282290][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.395831][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.492877][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.495725][ T4952] netlink: 412 bytes leftover after parsing attributes in process `syz.2.158'. [ 147.582386][ T4947] device bridge_slave_0 left promiscuous mode [ 147.615934][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.658537][ T4345] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.633886][ T4947] device bridge_slave_1 left promiscuous mode [ 148.668409][ T4345] usb 4-1: Using ep0 maxpacket: 16 [ 149.297817][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.345760][ T4345] usb 4-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 149.381777][ T4947] bond0: (slave bond_slave_0): Releasing backup interface [ 149.420032][ T4345] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 149.439447][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.457705][ T4947] bond0: (slave bond_slave_1): Releasing backup interface [ 149.479345][ T4345] usb 4-1: Product: syz [ 149.483532][ T4345] usb 4-1: Manufacturer: syz [ 149.522044][ T4345] usb 4-1: SerialNumber: syz [ 149.579528][ T4345] usb 4-1: config 0 descriptor?? [ 149.594181][ T4947] team0: Port device team_slave_0 removed [ 149.630747][ T4947] team0: Port device team_slave_1 removed [ 149.631246][ T4947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.631283][ T4947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.706874][ T4947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.706906][ T4947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.717019][ T4948] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 149.773548][ T4948] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.153248][ T951] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.453786][ T4966] syz.0.162 uses obsolete (PF_INET,SOCK_PACKET) [ 150.466823][ T951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.233070][ T951] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.242176][ T951] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 151.251282][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.289294][ T951] usb 2-1: config 0 descriptor?? [ 153.009536][ T4708] usb 2-1: USB disconnect, device number 6 [ 153.650058][ T26] usb 4-1: USB disconnect, device number 4 [ 153.746608][ T5003] fuse: Bad value for 'fd' [ 153.845944][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.880818][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.924477][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.971880][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.096430][ T5015] loop1: detected capacity change from 0 to 32768 [ 155.104550][ T5015] XFS: ikeep mount option is deprecated. [ 155.178561][ T4433] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.190967][ T5015] XFS (loop1): Mounting V5 Filesystem [ 155.388387][ T4433] usb 3-1: Using ep0 maxpacket: 8 [ 155.395305][ T4433] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 155.433534][ T4433] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.444371][ T5015] XFS (loop1): Ending clean mount [ 155.451513][ T5015] XFS (loop1): Quotacheck needed: Please wait. [ 155.484641][ T4433] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.508359][ T4433] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.528380][ T4433] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.553623][ T4433] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.569370][ T4433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.578650][ T5015] XFS (loop1): Quotacheck: Done. [ 155.725493][ T5030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.172'. [ 155.890227][ T4433] usb 3-1: GET_CAPABILITIES returned 0 [ 155.895862][ T4433] usbtmc 3-1:16.0: can't read capabilities [ 156.102737][ T7] usb 3-1: USB disconnect, device number 7 [ 156.889904][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 156.906566][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 156.926161][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 157.048913][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 157.061800][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 157.073566][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 157.087198][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 157.124230][ T5039] sctp_transport_update_pmtu: 49 callbacks suppressed [ 157.124282][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.142707][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.154626][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.171972][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.183699][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.195494][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.207111][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.219132][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.230567][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.242377][ T5039] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 157.750898][ T5044] Invalid ELF header magic: != ELF [ 158.473777][ T5048] overlayfs: failed to resolve './file1': -2 [ 159.986606][ T4264] XFS (loop1): Unmounting Filesystem [ 160.634486][ T5059] overlayfs: overlapping lowerdir path [ 161.218382][ T5070] bridge0: port 3(team0) entered blocking state [ 161.225047][ T5070] bridge0: port 3(team0) entered disabled state [ 161.241353][ T5070] device team0 entered promiscuous mode [ 161.247010][ T5070] device team_slave_0 entered promiscuous mode [ 161.254595][ T5070] device team_slave_1 entered promiscuous mode [ 161.264106][ T5070] bridge0: port 3(team0) entered blocking state [ 161.270507][ T5070] bridge0: port 3(team0) entered forwarding state [ 162.920254][ T4280] block nbd1: Receive control failed (result -32) [ 163.096476][ T5090] block nbd1: shutting down sockets [ 163.898376][ T4280] Bluetooth: hci4: command 0x0405 tx timeout [ 163.958518][ T951] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.101577][ T5100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.190'. [ 164.178374][ T951] usb 4-1: Using ep0 maxpacket: 32 [ 164.185445][ T951] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 164.241876][ T951] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 164.291496][ T951] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 164.421141][ T5084] netlink: 224 bytes leftover after parsing attributes in process `syz.0.187'. [ 164.431385][ T5111] overlayfs: './file0' not a directory [ 165.129919][ T951] usb 4-1: Product: syz [ 165.134210][ T951] usb 4-1: Manufacturer: syz [ 165.138967][ T951] usb 4-1: SerialNumber: syz [ 165.182959][ T951] usb 4-1: config 0 descriptor?? [ 165.186377][ T5122] overlayfs: failed to resolve './file1': -2 [ 165.188764][ T5098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.852410][ T5107] Process accounting resumed [ 166.607945][ T5155] overlayfs: failed to resolve './file1': -2 [ 168.065263][ T5164] loop0: detected capacity change from 0 to 32768 [ 168.072383][ T5164] XFS: ikeep mount option is deprecated. [ 168.115223][ T7] usb 4-1: USB disconnect, device number 5 [ 168.446055][ T5164] XFS (loop0): Mounting V5 Filesystem [ 169.503035][ T5164] XFS (loop0): Ending clean mount [ 169.518106][ T5164] XFS (loop0): Quotacheck needed: Please wait. [ 169.923188][ T5164] XFS (loop0): Quotacheck: Done. [ 170.149700][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'. [ 170.855262][ T4267] XFS (loop0): Unmounting Filesystem [ 170.957441][ T27] audit: type=1326 audit(1752221175.478:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 171.771024][ T27] audit: type=1326 audit(1752221175.478:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 171.917853][ T27] audit: type=1326 audit(1752221175.478:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 171.985970][ T27] audit: type=1326 audit(1752221175.478:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 172.108067][ T27] audit: type=1326 audit(1752221175.478:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 172.243023][ T27] audit: type=1326 audit(1752221175.488:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 172.270769][ T27] audit: type=1326 audit(1752221175.488:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 173.503552][ T27] audit: type=1326 audit(1752221175.488:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 173.698401][ T27] audit: type=1326 audit(1752221175.488:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 174.735102][ T27] audit: type=1326 audit(1752221175.488:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadf78e929 code=0x7ffc0000 [ 176.050449][ T5245] capability: warning: `syz.3.225' uses deprecated v2 capabilities in a way that may be insecure [ 177.071139][ T5265] overlayfs: './file0' not a directory [ 177.898140][ T5265] Process accounting resumed [ 181.257385][ T5306] autofs4:pid:5306:autofs_fill_super: called with bogus options [ 182.587111][ T5328] loop3: detected capacity change from 0 to 32768 [ 182.594338][ T5328] XFS: ikeep mount option is deprecated. [ 182.691983][ T5338] overlayfs: './file0' not a directory [ 182.775850][ T5328] XFS (loop3): Mounting V5 Filesystem [ 182.825286][ T5338] Process accounting resumed [ 182.972480][ T5328] XFS (loop3): Ending clean mount [ 182.980918][ T5328] XFS (loop3): Quotacheck needed: Please wait. [ 183.052239][ T5328] XFS (loop3): Quotacheck: Done. [ 183.184348][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 184.565897][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.633739][ T4277] XFS (loop3): Unmounting Filesystem [ 184.898393][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 184.905197][ T7] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 185.457443][ T7] usb 3-1: config 0 has no interface number 0 [ 185.497078][ T7] usb 3-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=bf.71 [ 185.577170][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=27 [ 185.601591][ T7] usb 3-1: SerialNumber: syz [ 185.651884][ T7] usb 3-1: config 0 descriptor?? [ 185.685676][ T7] ftdi_sio 3-1:0.50: FTDI USB Serial Device converter detected [ 185.733130][ T7] ftdi_sio ttyUSB0: unknown device type: 0xbf71 [ 185.881561][ T7] usb 3-1: USB disconnect, device number 8 [ 185.911598][ T7] ftdi_sio 3-1:0.50: device disconnected [ 187.680639][ T5389] autofs4:pid:5389:autofs_fill_super: called with bogus options [ 188.005611][ T5401] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 189.716974][ T5420] qrtr: Invalid version 0 [ 189.836890][ T5419] ptrace attach of "./syz-executor exec"[4273] was attempted by "./syz-executor exec"[5419] [ 193.696526][ T4338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 194.213380][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.219858][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.562249][ T5464] autofs4:pid:5464:autofs_fill_super: called with bogus options [ 196.308660][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 196.314773][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 196.314830][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 196.320913][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 196.320949][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 201.053068][ T5519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.293'. [ 201.092955][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.130789][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.270354][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 202.069597][ T5529] 9pnet_fd: Insufficient options for proto=fd [ 202.926938][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 202.983632][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 203.034376][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 203.242619][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 203.352532][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 203.411535][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 203.659158][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 203.697070][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 205.325334][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 205.348556][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 205.384846][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 205.411529][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.428563][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.449517][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.465362][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.778447][ T126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 206.908498][ T3653] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.987787][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.000757][ T126] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 207.012150][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.071222][ T126] usb 4-1: config 0 descriptor?? [ 207.104605][ T126] pwc: Askey VC010 type 2 USB webcam detected. [ 207.111434][ T3653] usb 2-1: Using ep0 maxpacket: 32 [ 207.125525][ T3653] usb 2-1: config index 0 descriptor too short (expected 2075, got 27) [ 207.136852][ T3653] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 207.147003][ T3653] usb 2-1: config 0 has no interface number 0 [ 207.153502][ T3653] usb 2-1: config 0 interface 232 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.208354][ T3653] usb 2-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 207.219241][ T3653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.229408][ T3653] usb 2-1: Product: syz [ 207.233715][ T3653] usb 2-1: Manufacturer: syz [ 207.240122][ T3653] usb 2-1: SerialNumber: syz [ 207.376618][ T5545] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 207.388520][ T3653] usb 2-1: config 0 descriptor?? [ 207.404216][ T3653] em28xx 2-1:0.232: New device syz syz @ 480 Mbps (2040:651b, interface 232, class 232) [ 207.426404][ T3653] em28xx 2-1:0.232: Video interface 232 found: [ 207.481340][ T5545] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.542301][ T5545] bond0: (slave team0): Enslaving as an active interface with an up link [ 207.608131][ T5551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.698822][ T3653] em28xx 2-1:0.232: unknown em28xx chip ID (0) [ 207.886848][ T3653] em28xx 2-1:0.232: reading from i2c device at 0xa0 failed (error=-5) [ 207.896231][ T3653] em28xx 2-1:0.232: board has no eeprom [ 207.968463][ T3653] em28xx 2-1:0.232: Identified as Hauppauge WinTV HVR 950 (card=16) [ 207.976868][ T3653] em28xx 2-1:0.232: analog set to bulk mode. [ 207.983684][ T126] pwc: recv_control_msg error -32 req 02 val 2b00 [ 208.099100][ T5534] em28xx 2-1:0.232: Registering V4L2 extension [ 208.116879][ T3653] usb 2-1: USB disconnect, device number 7 [ 208.131550][ T3653] em28xx 2-1:0.232: Disconnecting em28xx [ 208.422461][ T126] pwc: recv_control_msg error -71 req 02 val 2c00 [ 208.453357][ T126] pwc: recv_control_msg error -71 req 04 val 1000 [ 209.215496][ T126] pwc: recv_control_msg error -71 req 04 val 1300 [ 209.279741][ T126] pwc: recv_control_msg error -71 req 04 val 1400 [ 209.338366][ T126] pwc: recv_control_msg error -71 req 02 val 2000 [ 209.362271][ T126] pwc: recv_control_msg error -71 req 02 val 2100 [ 209.408373][ T126] pwc: recv_control_msg error -71 req 04 val 1500 [ 209.457690][ T126] pwc: recv_control_msg error -71 req 02 val 2500 [ 209.467110][ T126] pwc: recv_control_msg error -71 req 02 val 2400 [ 209.482029][ T126] pwc: recv_control_msg error -71 req 02 val 2600 [ 209.499441][ T126] pwc: recv_control_msg error -71 req 02 val 2900 [ 209.667166][ T5586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 209.676758][ T126] pwc: recv_control_msg error -71 req 02 val 2800 [ 209.686203][ T126] pwc: recv_control_msg error -71 req 04 val 1100 [ 209.982687][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 210.689352][ T126] pwc: recv_control_msg error -71 req 04 val 1200 [ 210.708305][ T126] pwc: Registered as video103. [ 210.740070][ T126] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 210.768828][ T126] usb 4-1: USB disconnect, device number 6 [ 210.958657][ T5534] em28xx 2-1:0.232: Config register raw data: 0xffffffed [ 210.966141][ T5534] em28xx 2-1:0.232: AC97 chip type couldn't be determined [ 210.980831][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 211.034270][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 211.058886][ T5534] em28xx 2-1:0.232: No AC97 audio processor [ 211.070595][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 211.107759][ T5534] usb 2-1: Decoder not found [ 211.133894][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 211.153184][ T5534] em28xx 2-1:0.232: failed to create media graph [ 211.196390][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 211.204079][ T5534] em28xx 2-1:0.232: V4L2 device video103 deregistered [ 211.248224][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 211.274960][ T5594] ================================================================== [ 211.283090][ T5594] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 211.290064][ T5594] Read of size 8 at addr ffff888079f34738 by task v4l_id/5594 [ 211.297545][ T5594] [ 211.299908][ T5594] CPU: 1 PID: 5594 Comm: v4l_id Not tainted 6.1.144-syzkaller #0 [ 211.307653][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.317734][ T5594] Call Trace: [ 211.321036][ T5594] [ 211.323986][ T5594] dump_stack_lvl+0x168/0x22e [ 211.328703][ T5594] ? __lock_acquire+0x7c50/0x7c50 [ 211.333768][ T5594] ? show_regs_print_info+0x12/0x12 [ 211.339000][ T5594] ? load_image+0x3b0/0x3b0 [ 211.343531][ T5594] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 211.348928][ T5594] ? __virt_addr_valid+0x188/0x540 [ 211.354084][ T5594] ? __virt_addr_valid+0x465/0x540 [ 211.359241][ T5594] ? v4l2_fh_open+0xc6/0x430 [ 211.363871][ T5594] print_report+0xa8/0x220 [ 211.368318][ T5594] kasan_report+0x10b/0x140 [ 211.372858][ T5594] ? v4l2_fh_open+0xc6/0x430 [ 211.377480][ T5594] v4l2_fh_open+0xc6/0x430 [ 211.381932][ T5594] em28xx_v4l2_open+0x152/0x990 [ 211.386815][ T5594] ? __lock_acquire+0x7c50/0x7c50 [ 211.391879][ T5594] v4l2_open+0x20b/0x360 [ 211.396157][ T5594] chrdev_open+0x597/0x670 [ 211.400611][ T5594] ? cd_forget+0x160/0x160 [ 211.405057][ T5594] ? tomoyo_file_open+0xe9/0x170 [ 211.410033][ T5594] ? fsnotify_perm+0x39b/0x550 [ 211.414867][ T5594] ? cd_forget+0x160/0x160 [ 211.419320][ T5594] do_dentry_open+0x7e9/0x10d0 [ 211.424124][ T5594] path_openat+0x25c6/0x2e70 [ 211.428747][ T5594] ? do_sys_openat2+0xcf/0x490 [ 211.433564][ T5594] ? __x64_sys_openat+0x135/0x160 [ 211.438627][ T5594] ? do_syscall_64+0x4c/0xa0 [ 211.443260][ T5594] ? do_filp_open+0x3c0/0x3c0 [ 211.447977][ T5594] do_filp_open+0x1c1/0x3c0 [ 211.452514][ T5594] ? vfs_tmpfile+0x480/0x480 [ 211.457141][ T5594] ? _raw_spin_unlock+0x24/0x40 [ 211.462031][ T5594] ? alloc_fd+0x58f/0x630 [ 211.466399][ T5594] do_sys_openat2+0x142/0x490 [ 211.471116][ T5594] ? up_read+0x20/0x20 [ 211.475216][ T5594] ? do_faccessat+0x681/0xa40 [ 211.479928][ T5594] ? kmem_cache_free+0xf7/0x290 [ 211.484807][ T5594] ? do_sys_open+0xe0/0xe0 [ 211.489255][ T5594] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 211.495267][ T5594] ? lock_chain_count+0x20/0x20 [ 211.500149][ T5594] __x64_sys_openat+0x135/0x160 [ 211.505039][ T5594] do_syscall_64+0x4c/0xa0 [ 211.509495][ T5594] ? clear_bhb_loop+0x60/0xb0 [ 211.514198][ T5594] ? clear_bhb_loop+0x60/0xb0 [ 211.518908][ T5594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.524826][ T5594] RIP: 0033:0x7f96a4aa7407 [ 211.529282][ T5594] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 211.548920][ T5594] RSP: 002b:00007ffd779df9d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 211.557380][ T5594] RAX: ffffffffffffffda RBX: 00007f96a5204880 RCX: 00007f96a4aa7407 [ 211.565380][ T5594] RDX: 0000000000000000 RSI: 00007ffd779dff1e RDI: ffffffffffffff9c [ 211.573372][ T5594] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 211.581360][ T5594] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 211.589354][ T5594] R13: 00007ffd779dfc20 R14: 00007f96a5363000 R15: 0000564b1d63e4d8 [ 211.597361][ T5594] [ 211.600490][ T5594] [ 211.602828][ T5594] Allocated by task 5534: [ 211.607176][ T5594] kasan_set_track+0x4b/0x70 [ 211.611803][ T5594] __kasan_kmalloc+0x8e/0xa0 [ 211.616431][ T5594] em28xx_v4l2_init+0x107/0x2e70 [ 211.621396][ T5594] em28xx_init_extension+0x118/0x1b0 [ 211.626708][ T5594] process_one_work+0x898/0x1160 [ 211.631671][ T5594] worker_thread+0xaa2/0x1250 [ 211.636369][ T5594] kthread+0x29d/0x330 [ 211.640471][ T5594] ret_from_fork+0x1f/0x30 [ 211.644914][ T5594] [ 211.647258][ T5594] Freed by task 5534: [ 211.651247][ T5594] kasan_set_track+0x4b/0x70 [ 211.655871][ T5594] kasan_save_free_info+0x2d/0x50 [ 211.660921][ T5594] ____kasan_slab_free+0x126/0x1e0 [ 211.666065][ T5594] slab_free_freelist_hook+0x131/0x1a0 [ 211.671550][ T5594] __kmem_cache_free+0xb6/0x1f0 [ 211.676422][ T5594] em28xx_v4l2_init+0x166c/0x2e70 [ 211.681470][ T5594] em28xx_init_extension+0x118/0x1b0 [ 211.686780][ T5594] process_one_work+0x898/0x1160 [ 211.691741][ T5594] worker_thread+0xaa2/0x1250 [ 211.696500][ T5594] kthread+0x29d/0x330 [ 211.700595][ T5594] ret_from_fork+0x1f/0x30 [ 211.705139][ T5594] [ 211.707489][ T5594] The buggy address belongs to the object at ffff888079f34000 [ 211.707489][ T5594] which belongs to the cache kmalloc-8k of size 8192 [ 211.721566][ T5594] The buggy address is located 1848 bytes inside of [ 211.721566][ T5594] 8192-byte region [ffff888079f34000, ffff888079f36000) [ 211.735046][ T5594] [ 211.737385][ T5594] The buggy address belongs to the physical page: [ 211.743823][ T5594] page:ffffea0001e7cc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79f30 [ 211.753997][ T5594] head:ffffea0001e7cc00 order:3 compound_mapcount:0 compound_pincount:0 [ 211.762336][ T5594] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 211.770455][ T5594] raw: 00fff00000010200 ffffea00008ec200 dead000000000003 ffff888017442280 [ 211.779061][ T5594] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 211.787656][ T5594] page dumped because: kasan: bad access detected [ 211.794094][ T5594] page_owner tracks the page as allocated [ 211.799819][ T5594] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4257, tgid 4257 (sh), ts 69306071185, free_ts 62346225294 [ 211.819553][ T5594] post_alloc_hook+0x173/0x1a0 [ 211.824367][ T5594] get_page_from_freelist+0x1a26/0x1ac0 [ 211.829929][ T5594] __alloc_pages+0x1df/0x4e0 [ 211.834538][ T5594] alloc_slab_page+0x5d/0x160 [ 211.839242][ T5594] new_slab+0x87/0x2c0 [ 211.843332][ T5594] ___slab_alloc+0xbc6/0x1220 [ 211.848029][ T5594] __kmem_cache_alloc_node+0x1a0/0x260 [ 211.853510][ T5594] kmalloc_trace+0x26/0xe0 [ 211.857944][ T5594] tomoyo_init_log+0x1081/0x1f50 [ 211.862907][ T5594] tomoyo_supervisor+0x326/0x10b0 [ 211.867962][ T5594] tomoyo_env_perm+0x146/0x1e0 [ 211.872752][ T5594] tomoyo_find_next_domain+0x157a/0x1a40 [ 211.878590][ T5594] tomoyo_bprm_check_security+0x100/0x150 [ 211.884346][ T5594] security_bprm_check+0x5e/0x90 [ 211.889309][ T5594] bprm_execve+0xa77/0x18a0 [ 211.893846][ T5594] do_execveat_common+0x51b/0x6c0 [ 211.898901][ T5594] page last free stack trace: [ 211.903595][ T5594] free_unref_page_prepare+0x8b4/0x9a0 [ 211.909088][ T5594] free_unref_page+0x2e/0x3f0 [ 211.913795][ T5594] qlist_free_all+0x76/0xe0 [ 211.918322][ T5594] kasan_quarantine_reduce+0x144/0x160 [ 211.923804][ T5594] __kasan_slab_alloc+0x1e/0x80 [ 211.928687][ T5594] slab_post_alloc_hook+0x4b/0x480 [ 211.933826][ T5594] __kmem_cache_alloc_node+0x140/0x260 [ 211.939308][ T5594] __kmalloc+0xa0/0x240 [ 211.943483][ T5594] tomoyo_realpath_from_path+0xdf/0x5d0 [ 211.949062][ T5594] tomoyo_path_perm+0x1fd/0x550 [ 211.953958][ T5594] security_inode_getattr+0xcf/0x120 [ 211.959274][ T5594] vfs_getattr+0x26/0x3a0 [ 211.963635][ T5594] __x64_sys_newfstat+0x102/0x1c0 [ 211.968697][ T5594] do_syscall_64+0x4c/0xa0 [ 211.973142][ T5594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.979074][ T5594] [ 211.981414][ T5594] Memory state around the buggy address: [ 211.987055][ T5594] ffff888079f34600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.995137][ T5594] ffff888079f34680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.003218][ T5594] >ffff888079f34700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.011293][ T5594] ^ [ 212.017203][ T5594] ffff888079f34780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.025282][ T5594] ffff888079f34800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.033356][ T5594] ================================================================== [ 212.041499][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.057095][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 212.065514][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 212.073164][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 212.081272][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 212.088958][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 212.090286][ T5534] em28xx 2-1:0.232: Binding DVB extension [ 212.096811][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 212.110076][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 212.120244][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.127690][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.138135][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.145796][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.147972][ T5601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.153992][ T5594] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 212.154009][ T5594] CPU: 0 PID: 5594 Comm: v4l_id Not tainted 6.1.144-syzkaller #0 [ 212.154032][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.154046][ T5594] Call Trace: [ 212.154053][ T5594] [ 212.154060][ T5594] dump_stack_lvl+0x168/0x22e [ 212.154095][ T5594] ? memcpy+0x3c/0x60 [ 212.154120][ T5594] ? show_regs_print_info+0x12/0x12 [ 212.154149][ T5594] ? load_image+0x3b0/0x3b0 [ 212.154176][ T5594] panic+0x2c9/0x710 [ 212.154209][ T5594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 212.154244][ T5594] ? bpf_jit_dump+0xd0/0xd0 [ 212.154284][ T5594] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 212.154306][ T5594] ? _raw_spin_unlock+0x40/0x40 [ 212.154331][ T5594] check_panic_on_warn+0x80/0xa0 [ 212.154358][ T5594] ? v4l2_fh_open+0xc6/0x430 [ 212.154384][ T5594] end_report+0x66/0x110 [ 212.154416][ T5594] kasan_report+0x118/0x140 [ 212.154452][ T5594] ? v4l2_fh_open+0xc6/0x430 [ 212.154481][ T5594] v4l2_fh_open+0xc6/0x430 [ 212.154520][ T5594] em28xx_v4l2_open+0x152/0x990 [ 212.154549][ T5594] ? __lock_acquire+0x7c50/0x7c50 [ 212.154585][ T5594] v4l2_open+0x20b/0x360 [ 212.154621][ T5594] chrdev_open+0x597/0x670 [ 212.154651][ T5594] ? cd_forget+0x160/0x160 [ 212.154680][ T5594] ? tomoyo_file_open+0xe9/0x170 [ 212.154715][ T5594] ? fsnotify_perm+0x39b/0x550 [ 212.154745][ T5594] ? cd_forget+0x160/0x160 [ 212.154773][ T5594] do_dentry_open+0x7e9/0x10d0 [ 212.154812][ T5594] path_openat+0x25c6/0x2e70 [ 212.154848][ T5594] ? do_sys_openat2+0xcf/0x490 [ 212.154881][ T5594] ? __x64_sys_openat+0x135/0x160 [ 212.154913][ T5594] ? do_syscall_64+0x4c/0xa0 [ 212.154945][ T5594] ? do_filp_open+0x3c0/0x3c0 [ 212.154978][ T5594] do_filp_open+0x1c1/0x3c0 [ 212.155004][ T5594] ? vfs_tmpfile+0x480/0x480 [ 212.155040][ T5594] ? _raw_spin_unlock+0x24/0x40 [ 212.155062][ T5594] ? alloc_fd+0x58f/0x630 [ 212.155100][ T5594] do_sys_openat2+0x142/0x490 [ 212.155131][ T5594] ? up_read+0x20/0x20 [ 212.155155][ T5594] ? do_faccessat+0x681/0xa40 [ 212.155187][ T5594] ? kmem_cache_free+0xf7/0x290 [ 212.155214][ T5594] ? do_sys_open+0xe0/0xe0 [ 212.155246][ T5594] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 212.155278][ T5594] ? lock_chain_count+0x20/0x20 [ 212.155310][ T5594] __x64_sys_openat+0x135/0x160 [ 212.155345][ T5594] do_syscall_64+0x4c/0xa0 [ 212.155372][ T5594] ? clear_bhb_loop+0x60/0xb0 [ 212.155397][ T5594] ? clear_bhb_loop+0x60/0xb0 [ 212.155426][ T5594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.155451][ T5594] RIP: 0033:0x7f96a4aa7407 [ 212.155472][ T5594] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 212.155491][ T5594] RSP: 002b:00007ffd779df9d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 212.155521][ T5594] RAX: ffffffffffffffda RBX: 00007f96a5204880 RCX: 00007f96a4aa7407 [ 212.155538][ T5594] RDX: 0000000000000000 RSI: 00007ffd779dff1e RDI: ffffffffffffff9c [ 212.155565][ T5594] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 212.155577][ T5594] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 212.155590][ T5594] R13: 00007ffd779dfc20 R14: 00007f96a5363000 R15: 0000564b1d63e4d8 [ 212.155614][ T5594] [ 212.164683][ T5594] Kernel Offset: disabled [ 212.487806][ T5594] Rebooting in 86400 seconds..