last executing test programs: 12.220699204s ago: executing program 4 (id=348): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120104009d6fce202505882843d00000000109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 11.203998705s ago: executing program 0 (id=351): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) write$tun(r1, &(0x7f0000000240)={@void, @val={0x1, 0x1, 0x100, 0x2, 0x6f, 0x30}, @eth={@random="7dabc1dc8f9a", @local, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "d23e56", 0x2f, 0x6, 0x1, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x1, 0x1, 0xb, 0x0, 0x2, 0x2, 0x0, 0x2, 0x3, 0x4, 0x1, 0xe, 0x40, 0x3, 0x4e21, 0x4e21}, 0x2, 0x1}, 0x0, 0x4}, 0x2}}, [0x0, 0x0, 0x0]}}}}}}}, 0x6f) 10.697415881s ago: executing program 0 (id=352): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008011}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0xb70, 0x400000) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) 9.027230192s ago: executing program 2 (id=360): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4001) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8484, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+'], 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 8.14456919s ago: executing program 1 (id=362): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) write$tun(r1, &(0x7f0000000240)={@void, @val={0x1, 0x1, 0x100, 0x2, 0x6f, 0x30}, @eth={@random="7dabc1dc8f9a", @local, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "d23e56", 0x2f, 0x6, 0x1, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x1, 0x1, 0xb, 0x0, 0x2, 0x2, 0x0, 0x2, 0x3, 0x4, 0x1, 0xe, 0x40, 0x3, 0x4e21, 0x4e21}, 0x2, 0x1}, 0x0, 0x4}, 0x2}}, [0x0, 0x0, 0x0]}}}}}}}, 0x6f) 8.087079921s ago: executing program 2 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x0, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.49244023s ago: executing program 1 (id=364): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40002019}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x7) userfaultfd(0x80001) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/68) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0xf6}, [], {0x2, 0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 7.243165067s ago: executing program 4 (id=365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 6.444845172s ago: executing program 3 (id=366): iopl(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000800)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff5c24}], 0x1c) sendmsg$inet_sctp(r5, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) close(r4) 6.348041685s ago: executing program 0 (id=367): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x2251024, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x7, 0x8000001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.284781537s ago: executing program 1 (id=368): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000cdb000/0x4000)=nil, 0x4000}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000000c0)) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d08, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000006c0)="48b801000000000000000f23d80f21f835400000900f23f8b805000000b9008800000f01c1653e3e2e66410f388285d6e7d8f8b97a0200000f32430f21d4c462f91d0b430f01c8410f2367410f019b91c4a22566b81c010f00d8", 0x5a}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000080)='pZ', 0x2, 0x20080, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x2, 0x48000) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000a00)={r7, 0x80000001}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x30}}, 0xd570, 0x9d18}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000380)={r8}, &(0x7f00000003c0)=0x8) syz_open_dev$video(&(0x7f0000000140), 0x14, 0x20200) 6.055983814s ago: executing program 4 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000001c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2b, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e3279f"}}}}, 0x3b) 5.54263959s ago: executing program 0 (id=370): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, &(0x7f0000000040)={0x400, 0xf}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) write(r2, &(0x7f0000000000)="00000000000010000000", 0xffffffad) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r4 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 5.481455622s ago: executing program 3 (id=371): getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 5.477142452s ago: executing program 2 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.980548377s ago: executing program 3 (id=373): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000010101010000000000400000020000000c0019800800010008000000100001800c000280050001003a000000"], 0xfde2}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) syz_emit_ethernet(0xad, &(0x7f0000001100)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x1, 0x6, 0x9f, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0xe5, 0x0, 0x9, [0x3, 0x9b, 0xa8, 0x23]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x4, "f0c0"}, {0x2, 0x2}, {0x5, 0xc, "2a285014176a8f428930"}, {0x6, 0xc, "be5f39f0b3ebc16ce1df"}, {0x5, 0x6, "0ac356ab"}, {0x1, 0x5, "36cfab"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6, 0x81}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "f80f83"}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80200) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x8) 4.978195787s ago: executing program 4 (id=374): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) write$tun(r1, &(0x7f0000000240)={@void, @val={0x1, 0x1, 0x100, 0x2, 0x6f, 0x30}, @eth={@random="7dabc1dc8f9a", @local, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "d23e56", 0x2f, 0x6, 0x1, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x1, 0x1, 0xb, 0x0, 0x2, 0x2, 0x0, 0x2, 0x3, 0x4, 0x1, 0xe, 0x40, 0x3, 0x4e21, 0x4e21}, 0x2, 0x1}, 0x0, 0x4}, 0x2}}, [0x0, 0x0, 0x0]}}}}}}}, 0x6f) 4.966866828s ago: executing program 1 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 4.906977979s ago: executing program 0 (id=376): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 3.198476962s ago: executing program 1 (id=377): unshare(0x22020400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10, 0x80002, 0x2) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r0, 0x0, 0x0, 0xa) 1.063927647s ago: executing program 3 (id=378): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 992.924979ms ago: executing program 4 (id=379): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0xfffffffc, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x1, 0x0, 0x401}]}]}, 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 992.634629ms ago: executing program 3 (id=380): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x2251024, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x7, 0x8000001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 988.206419ms ago: executing program 2 (id=381): iopl(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000800)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff5c24}], 0x1c) sendmsg$inet_sctp(r5, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) close(r4) 772.465096ms ago: executing program 1 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x0, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 179.932335ms ago: executing program 0 (id=383): close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x2, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x20004090) ftruncate(r0, 0x8800000) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x578410eb) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000080)) 179.679164ms ago: executing program 2 (id=384): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x7577e0b0a29503e5) 166.710205ms ago: executing program 4 (id=385): syz_usb_connect(0x4, 0x59, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) syz_usb_connect$midi(0x2, 0xf1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500200000040732b29004000010203010902df"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 42.407579ms ago: executing program 3 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) 0s ago: executing program 2 (id=387): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xf7fffffa) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 44.725301][ T4174] cgroup: Unknown subsys name 'net' [ 44.854985][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.079944][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 47.393736][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 47.407546][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 47.464737][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 47.502261][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 47.538319][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 47.583000][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.590735][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.598497][ T4193] device bridge_slave_0 entered promiscuous mode [ 47.633855][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.641182][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.648802][ T4191] device bridge_slave_0 entered promiscuous mode [ 47.656365][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.663503][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.672141][ T4193] device bridge_slave_1 entered promiscuous mode [ 47.681909][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.688947][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.697281][ T4189] device bridge_slave_0 entered promiscuous mode [ 47.710593][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.717633][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.725725][ T4191] device bridge_slave_1 entered promiscuous mode [ 47.756362][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.763512][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.771910][ T4189] device bridge_slave_1 entered promiscuous mode [ 47.783715][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.800432][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.847662][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.856901][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.864152][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.872182][ T4190] device bridge_slave_0 entered promiscuous mode [ 47.885495][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.892717][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.900483][ T4190] device bridge_slave_1 entered promiscuous mode [ 47.922067][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.933418][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.950692][ T4191] team0: Port device team_slave_0 added [ 47.967814][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.983220][ T4191] team0: Port device team_slave_1 added [ 47.990761][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.000757][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.007794][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.015531][ T4192] device bridge_slave_0 entered promiscuous mode [ 48.028630][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.035716][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.043804][ T4192] device bridge_slave_1 entered promiscuous mode [ 48.057056][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.080578][ T4193] team0: Port device team_slave_0 added [ 48.108887][ T4193] team0: Port device team_slave_1 added [ 48.116873][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.128885][ T4189] team0: Port device team_slave_0 added [ 48.141499][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.148439][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.174542][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.193056][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.203384][ T4189] team0: Port device team_slave_1 added [ 48.210921][ T4190] team0: Port device team_slave_0 added [ 48.217036][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.224171][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.250083][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.283721][ T4190] team0: Port device team_slave_1 added [ 48.297061][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.304108][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.330181][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.351033][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.357972][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.384243][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.414830][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.421846][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.447975][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.469795][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.476753][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.507261][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.520766][ T4192] team0: Port device team_slave_0 added [ 48.539277][ T4191] device hsr_slave_0 entered promiscuous mode [ 48.546413][ T4191] device hsr_slave_1 entered promiscuous mode [ 48.572742][ T4192] team0: Port device team_slave_1 added [ 48.586516][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.593763][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.620026][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.651334][ T4189] device hsr_slave_0 entered promiscuous mode [ 48.658013][ T4189] device hsr_slave_1 entered promiscuous mode [ 48.665200][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.672990][ T4189] Cannot create hsr debugfs directory [ 48.678818][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.685890][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.711827][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.742969][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.749973][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.776036][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.800793][ T4193] device hsr_slave_0 entered promiscuous mode [ 48.807416][ T4193] device hsr_slave_1 entered promiscuous mode [ 48.814270][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.821869][ T4193] Cannot create hsr debugfs directory [ 48.827999][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.835163][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.861170][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.888507][ T4190] device hsr_slave_0 entered promiscuous mode [ 48.895190][ T4190] device hsr_slave_1 entered promiscuous mode [ 48.901849][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.909401][ T4190] Cannot create hsr debugfs directory [ 49.032981][ T4192] device hsr_slave_0 entered promiscuous mode [ 49.042660][ T4192] device hsr_slave_1 entered promiscuous mode [ 49.049096][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.056736][ T4192] Cannot create hsr debugfs directory [ 49.120271][ T4196] Bluetooth: hci1: command 0x0409 tx timeout [ 49.125105][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 49.133033][ T26] Bluetooth: hci4: command 0x0409 tx timeout [ 49.139169][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 49.145887][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 49.264476][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.275553][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.289233][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.308087][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.328120][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.350851][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.373760][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.383855][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.411536][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.420667][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.438394][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.449285][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.526961][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.542802][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.557381][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.566157][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.576067][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.637209][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.646800][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.658728][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.668579][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.677819][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.693430][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.703113][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.718106][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.739770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.747459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.755594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.765057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.774674][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.781898][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.791565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.800487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.808750][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.815816][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.825145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.839017][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.857596][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.885655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.895732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.904520][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.911612][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.937844][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.948294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.956362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.966066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.975080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.985284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.993920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.003314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.012166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.021154][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.028216][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.036435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.048336][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.072542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.083399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.093134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.103148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.110992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.118546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.127055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.146144][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.157029][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.179870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.188401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.199204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.209075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.217069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.225064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.233894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.243194][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.250282][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.257921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.267340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.275808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.284654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.293335][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.300417][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.308122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.316753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.332294][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.361591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.371733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.382997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.393227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.403950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.412777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.432565][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.441910][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.451955][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.459013][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.476268][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.510699][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.518600][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.531325][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.540013][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.548609][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.561035][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.568101][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.585617][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.594358][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.603309][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.611827][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.621584][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.630283][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.638528][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.648966][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.664989][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.673745][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.683132][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.691809][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.701283][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.709436][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.724449][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.734914][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.754101][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.767320][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.776440][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.787083][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.795755][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.825735][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.835756][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.843783][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.852017][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.872272][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.887275][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.896215][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.913311][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.928340][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.936176][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.944170][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.975340][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.984703][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.994833][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.001927][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.010233][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.019001][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.045679][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.052792][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.067076][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.075788][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.085136][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.105759][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.122606][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.140257][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.148980][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.164555][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.175305][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.183306][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.197984][ T4191] device veth0_vlan entered promiscuous mode [ 51.204561][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 51.221483][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 51.229128][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.239103][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.241515][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 51.249191][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.258795][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 51.260937][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.266596][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 51.274134][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.290317][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.298458][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.306286][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.314415][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.323079][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.331648][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.339437][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.347352][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.357897][ T4189] device veth0_vlan entered promiscuous mode [ 51.382925][ T4191] device veth1_vlan entered promiscuous mode [ 51.395116][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.403306][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.412279][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.421493][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.429934][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.438036][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.447066][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.458998][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.482971][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.492498][ T4189] device veth1_vlan entered promiscuous mode [ 51.550748][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.559235][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.574663][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.584053][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.593126][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.604453][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.614174][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.632091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.642010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.659478][ T4189] device veth0_macvtap entered promiscuous mode [ 51.679374][ T4190] device veth0_vlan entered promiscuous mode [ 51.688136][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.697971][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.712329][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.721689][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.729357][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.741133][ T4189] device veth1_macvtap entered promiscuous mode [ 51.748778][ T4191] device veth0_macvtap entered promiscuous mode [ 51.764998][ T4190] device veth1_vlan entered promiscuous mode [ 51.782309][ T4191] device veth1_macvtap entered promiscuous mode [ 51.796391][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.804729][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.813056][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.822090][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.830102][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.838566][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.859292][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.874947][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.884932][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.893765][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.904544][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.917027][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.930677][ T4190] device veth0_macvtap entered promiscuous mode [ 51.945415][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.955794][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.964378][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.974544][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.982348][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.991654][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.003211][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.015975][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.025599][ T4190] device veth1_macvtap entered promiscuous mode [ 52.035511][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.044826][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.054544][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.063395][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.083104][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.091416][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.100530][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.109086][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.117674][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.127888][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.136890][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.148075][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.160452][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.175880][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.190856][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.200996][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.211512][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.222662][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.230771][ T4193] device veth0_vlan entered promiscuous mode [ 52.254245][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.262716][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.271493][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.280091][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.288604][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.297517][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.309451][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.323525][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.333859][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.346965][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.359230][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.373142][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.383069][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.393776][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.411996][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.428572][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.438088][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.447161][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.457011][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.474924][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.490880][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.512455][ T4193] device veth1_vlan entered promiscuous mode [ 52.561350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.616718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.625564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.662124][ T4193] device veth0_macvtap entered promiscuous mode [ 52.683688][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.694831][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.703669][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.715432][ T4193] device veth1_macvtap entered promiscuous mode [ 52.755196][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.772820][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.786955][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.797855][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.808433][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.820428][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.830404][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.840978][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.852956][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.868864][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.876576][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.877462][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.891891][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.893370][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.907788][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.916719][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.931259][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.946639][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.956700][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.968056][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.978089][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.988744][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.000324][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.025462][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.034307][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.044531][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.052901][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.063513][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.072657][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.084767][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.093695][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.108763][ T4192] device veth0_vlan entered promiscuous mode [ 53.120999][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.128824][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.137028][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.145786][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.155184][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.186106][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.199487][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.203369][ T4192] device veth1_vlan entered promiscuous mode [ 53.220714][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.228534][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.249832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.262435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.270845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.290693][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 53.304142][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.312450][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 53.316994][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.329028][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 53.344915][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 53.361562][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.370219][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 53.376428][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.385169][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.398540][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.419801][ T4192] device veth0_macvtap entered promiscuous mode [ 53.432490][ T4192] device veth1_macvtap entered promiscuous mode [ 53.439326][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.509656][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.527687][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.550056][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.561910][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.572701][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.582941][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.610579][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.626949][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.637753][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.665375][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.699809][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.711417][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.721543][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.732155][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.743313][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.753765][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.765128][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.776576][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.797134][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.855454][ T4273] Zero length message leads to an empty skb [ 54.550060][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.559167][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.568355][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.607494][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.618029][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.636428][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.679196][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.722524][ T4284] ======================================================= [ 54.722524][ T4284] WARNING: The mand mount option has been deprecated and [ 54.722524][ T4284] and is ignored by this kernel. Remove the mand [ 54.722524][ T4284] option from the mount to silence this warning. [ 54.722524][ T4284] ======================================================= [ 55.449639][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 55.459651][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 55.469634][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 55.479638][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 55.489676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 55.499677][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 55.531947][ T4243] Bluetooth: hci2: command 0x0419 tx timeout [ 55.541331][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.580287][ T4243] Bluetooth: hci0: command 0x0419 tx timeout [ 55.586441][ T4243] Bluetooth: hci4: command 0x0419 tx timeout [ 55.593060][ T4243] Bluetooth: hci3: command 0x0419 tx timeout [ 55.599218][ T4243] Bluetooth: hci1: command 0x0419 tx timeout [ 55.667989][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.676907][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.686109][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752802][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.790309][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.801571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.940248][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 56.843622][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 56.904875][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.935725][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.099881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 57.121034][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.343504][ T4310] syz.0.12 (4310): drop_caches: 2 [ 58.346107][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.586345][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.929570][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.343581][ T4333] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 59.422263][ T4334] process 'syz.1.15' launched './file1' with NULL argv: empty string added [ 59.437720][ T4334] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure [ 59.473081][ T4334] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 59.792985][ T4333] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.209633][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 60.229635][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.239622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.722226][ T4354] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.496654][ T4411] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.542822][ T4428] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.587496][ T4428] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.727292][ T4436] futex_wake_op: syz.0.48 tries to shift op by 144; fix this program [ 67.944740][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.272225][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 68.421175][ T1107] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 68.446856][ T1107] usb 3-1: config 0 has no interface number 0 [ 68.454592][ T1107] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 70.400478][ T1107] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 70.409545][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.467421][ T1107] usb 3-1: Product: syz [ 70.483265][ T1107] usb 3-1: Manufacturer: syz [ 70.488714][ T4451] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.500739][ T1107] usb 3-1: SerialNumber: syz [ 70.533076][ T1107] usb 3-1: config 0 descriptor?? [ 70.564164][ T4433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.107715][ T1107] asix: probe of 3-1:0.188 failed with error -71 [ 71.154864][ T1107] usb 3-1: USB disconnect, device number 2 [ 71.323119][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.330160][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.637492][ T4473] futex_wake_op: syz.3.60 tries to shift op by 144; fix this program [ 74.247268][ T4486] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.504074][ T4519] futex_wake_op: syz.0.73 tries to shift op by 144; fix this program [ 76.048483][ T4516] loop1: detected capacity change from 0 to 2048 [ 76.818978][ T7] cfg80211: failed to load regulatory.db [ 76.855373][ T4516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.006168][ T4532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.034661][ T25] audit: type=1800 audit(1782262711.312:2): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.74" name="file1" dev="loop1" ino=1369 res=0 errno=0 [ 77.239901][ T4537] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.380882][ T4562] loop2: detected capacity change from 0 to 512 [ 80.452594][ T4568] futex_wake_op: syz.1.88 tries to shift op by 144; fix this program [ 80.467443][ T4562] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 80.502051][ T4562] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 80.584567][ T4562] EXT4-fs (loop2): 1 truncate cleaned up [ 80.611717][ T4562] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 81.528450][ T4585] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 81.708489][ T1109] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.008364][ T1109] usb 2-1: Using ep0 maxpacket: 16 [ 83.207147][ T1109] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.232704][ T1109] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 83.244556][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.259856][ T1109] usb 2-1: config 0 descriptor?? [ 83.339304][ T1109] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 83.409808][ T4595] loop2: detected capacity change from 0 to 2048 [ 83.555623][ T4595] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.578372][ T3546] bcm5974 2-1:0.0: could not read from device [ 83.599099][ T1109] usb 2-1: USB disconnect, device number 2 [ 84.106491][ T4595] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.137455][ T25] audit: type=1800 audit(1782262718.412:3): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.93" name="file1" dev="loop2" ino=1369 res=0 errno=0 [ 86.234898][ T4621] futex_wake_op: syz.2.102 tries to shift op by 144; fix this program [ 88.928071][ T4646] loop2: detected capacity change from 0 to 2048 [ 91.151001][ T4646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.339416][ T25] audit: type=1800 audit(1782262725.622:4): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.112" name="file1" dev="loop2" ino=1369 res=0 errno=0 [ 91.388731][ T4666] futex_wake_op: syz.3.117 tries to shift op by 144; fix this program [ 93.624975][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 93.863920][ T4701] loop0: detected capacity change from 0 to 512 [ 94.766193][ T4701] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 94.889638][ T4701] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 94.936916][ T4701] EXT4-fs (loop0): 1 truncate cleaned up [ 94.938392][ T4705] loop2: detected capacity change from 0 to 2048 [ 95.052505][ T4701] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 95.085228][ T4705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.146210][ T25] audit: type=1800 audit(1782262729.422:5): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.130" name="file1" dev="loop2" ino=1369 res=0 errno=0 [ 96.500354][ T4722] futex_wake_op: syz.4.133 tries to shift op by 144; fix this program [ 97.838174][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.118308][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 98.198638][ T4752] loop4: detected capacity change from 0 to 512 [ 98.239840][ T4754] loop3: detected capacity change from 0 to 2048 [ 98.249452][ T4752] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 98.256776][ T4752] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 98.266032][ T4232] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 98.276430][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.291902][ T4232] usb 2-1: config 0 descriptor?? [ 98.301560][ T4752] EXT4-fs (loop4): 1 truncate cleaned up [ 98.313754][ T4752] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 98.370444][ T4754] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.454487][ T4754] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.477753][ T25] audit: type=1800 audit(1782262732.762:6): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.145" name="file1" dev="loop3" ino=1369 res=0 errno=0 [ 98.485449][ T4232] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 99.184903][ T4763] futex_wake_op: syz.0.147 tries to shift op by 144; fix this program [ 99.556736][ T4776] tun0: tun_chr_ioctl cmd 1074025675 [ 99.562192][ T4776] tun0: persist enabled [ 99.754603][ T4232] gspca_vc032x: reg_w err -71 [ 99.760728][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.766149][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.771657][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.779331][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.786875][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.797513][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.804862][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.814667][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.821169][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.826560][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.833053][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.838466][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 99.858373][ T1109] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.208645][ T1109] usb 5-1: Using ep0 maxpacket: 16 [ 100.498377][ T1109] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.557511][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.562917][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.568241][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.573536][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.578921][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.584299][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.591341][ T4232] gspca_vc032x: Unknown sensor... [ 100.596520][ T4232] vc032x: probe of 2-1:0.0 failed with error -22 [ 100.771649][ T4232] usb 2-1: USB disconnect, device number 3 [ 101.295246][ T1109] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 101.458305][ T1109] usb 5-1: New USB device found, idVendor=85d3, idProduct=2357, bcdDevice= 0.40 [ 101.470370][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.479183][ T1109] usb 5-1: Product: syz [ 101.483364][ T1109] usb 5-1: Manufacturer: syz [ 101.490820][ T1109] usb 5-1: SerialNumber: syz [ 102.041124][ T4236] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.147009][ T4804] loop1: detected capacity change from 0 to 512 [ 102.336612][ T4804] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 102.354776][ T4299] usb 5-1: USB disconnect, device number 2 [ 102.374350][ T4804] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 102.388191][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 102.411926][ T4804] EXT4-fs (loop1): 1 truncate cleaned up [ 102.420134][ T4804] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 103.198809][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.238492][ T4236] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 190, changing to 7 [ 103.257760][ T4818] futex_wake_op: syz.3.167 tries to shift op by 144; fix this program [ 103.408647][ T4236] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 103.450762][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.503733][ T4236] usb 1-1: Product: syz [ 103.536542][ T4236] usb 1-1: Manufacturer: syz [ 103.572750][ T4236] usb 1-1: SerialNumber: syz [ 103.868273][ T4232] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 104.773815][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.782380][ T4232] usb 3-1: Product: syz [ 104.786546][ T4232] usb 3-1: Manufacturer: syz [ 104.791195][ T4232] usb 3-1: SerialNumber: syz [ 104.858511][ T4236] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 104.954745][ T4831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 104.961470][ T4831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.980275][ T4831] vhci_hcd vhci_hcd.0: Device attached [ 105.085967][ T4236] usb 1-1: USB disconnect, device number 2 [ 105.201717][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.368431][ T4234] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 106.100910][ T4835] vhci_hcd: connection reset by peer [ 106.140926][ T144] vhci_hcd: stop threads [ 106.145667][ T144] vhci_hcd: release socket [ 106.175643][ T144] vhci_hcd: disconnect device [ 106.196103][ T4851] loop1: detected capacity change from 0 to 512 [ 106.294444][ T4851] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 106.326303][ T4851] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 106.419452][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 106.446437][ T4851] EXT4-fs (loop1): 1 truncate cleaned up [ 106.463580][ T4851] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 106.481943][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 106.525889][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 106.562237][ T4232] lan78xx: probe of 3-1:1.0 failed with error -71 [ 106.580325][ T4232] usb 3-1: USB disconnect, device number 3 [ 106.675427][ T4865] loop5: detected capacity change from 0 to 7 [ 106.686167][ T4183] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 106.692395][ T4183] loop5: partition table partially beyond EOD, truncated [ 106.712510][ T4183] loop5: p1 size 487441168 extends beyond EOD, truncated [ 107.018170][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.280959][ T4865] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 107.295276][ T4865] loop5: partition table partially beyond EOD, truncated [ 107.296707][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 107.303003][ T4865] loop5: p1 size 487441168 extends beyond EOD, truncated [ 107.320691][ T4876] bridge_slave_0: default FDB implementation only supports local addresses [ 107.369191][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 107.439258][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 107.511474][ T4232] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.527856][ T4232] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.545658][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 107.570375][ T4232] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.275626][ T25] audit: type=1326 audit(1782262742.552:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.314067][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.323817][ T4232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.333505][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.347325][ T4232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.357175][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.370260][ T4232] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.379369][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.401057][ T4232] usb 3-1: config 0 descriptor?? [ 108.406473][ T25] audit: type=1326 audit(1782262742.582:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.430794][ T25] audit: type=1326 audit(1782262742.582:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.459863][ T25] audit: type=1326 audit(1782262742.582:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.484914][ T25] audit: type=1326 audit(1782262742.582:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.532236][ T25] audit: type=1326 audit(1782262742.582:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.604911][ T25] audit: type=1326 audit(1782262742.582:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.695446][ T25] audit: type=1326 audit(1782262742.582:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.731779][ T25] audit: type=1326 audit(1782262742.582:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.755710][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.810742][ T25] audit: type=1326 audit(1782262742.582:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4884 comm="syz.0.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2cf04e59 code=0x7fc00000 [ 108.846108][ T4897] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 108.852641][ T4897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.073294][ T4232] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.318303][ T4232] usb 3-1: USB disconnect, device number 4 [ 109.540951][ T4897] vhci_hcd vhci_hcd.0: Device attached [ 109.549589][ T4907] vhci_hcd: connection closed [ 109.573878][ T4323] vhci_hcd: stop threads [ 109.613499][ T4323] vhci_hcd: release socket [ 109.622165][ T4323] vhci_hcd: disconnect device [ 109.644826][ T4232] usblp0: removed [ 111.656925][ T4234] vhci_hcd: vhci_device speed not set [ 112.378648][ T4955] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 112.385200][ T4955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.421906][ T4955] vhci_hcd vhci_hcd.0: Device attached [ 112.518267][ T4299] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.599600][ T4957] vhci_hcd: connection closed [ 112.605284][ T154] vhci_hcd: stop threads [ 112.624785][ T154] vhci_hcd: release socket [ 112.638691][ T154] vhci_hcd: disconnect device [ 112.728879][ T4234] vhci_hcd: vhci_device speed not set [ 114.003250][ T4300] Bluetooth: hci1: command 0x0405 tx timeout [ 114.038445][ T4299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.074552][ T4299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.154426][ T4977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 114.210584][ T4299] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.226359][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.237050][ T4299] usb 1-1: SerialNumber: syz [ 115.471084][ T4299] usb 1-1: 0:2 : does not exist [ 115.733881][ T4299] usb 1-1: USB disconnect, device number 3 [ 115.913413][ T4196] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.136353][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.984492][ T4196] usb 3-1: Using ep0 maxpacket: 32 [ 117.758370][ T4196] usb 3-1: config 0 has no interfaces? [ 117.764405][ T4196] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 117.781808][ T4196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.801040][ T4196] usb 3-1: config 0 descriptor?? [ 118.125206][ T4990] sg_write: data in/out 360512/136 bytes for SCSI command 0x0-- guessing data in; [ 118.125206][ T4990] program syz.2.221 not setting count and/or reply_len properly [ 118.639444][ T4196] usb 3-1: USB disconnect, device number 5 [ 118.712878][ T5023] sctp: failed to load transform for md5: -2 [ 119.998389][ T7] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 121.688100][ C0] sched: RT throttling activated [ 123.627011][ T7] usb 2-1: device not accepting address 4, error -71 [ 129.178280][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.838426][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.885230][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.916539][ T7] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 129.940787][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.973457][ T7] usb 4-1: config 0 descriptor?? [ 129.993416][ T5122] device syzkaller0 entered promiscuous mode [ 130.058788][ T5122] tipc: Started in network mode [ 130.077396][ T5122] tipc: Node identity 0e336ef50d6, cluster identity 4711 [ 130.098817][ T5122] tipc: Enabled bearer , priority 0 [ 130.162848][ T5121] tipc: Resetting bearer [ 130.226058][ T5121] tipc: Disabling bearer [ 130.532469][ T7] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 130.560213][ T7] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 130.615032][ T7] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 132.761043][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.767393][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.996961][ T7] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 136.412599][ T7] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 136.420547][ T7] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 136.428426][ T7] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 136.446117][ T7] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 136.458357][ T7] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 136.472447][ T7] usb 4-1: USB disconnect, device number 2 [ 136.478336][ C0] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -71 [ 136.640950][ T5144] fido_id[5144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 136.804669][ T5152] loop2: detected capacity change from 0 to 512 [ 136.947407][ T5152] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 136.959316][ T5152] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 137.033947][ T5152] EXT4-fs (loop2): 1 truncate cleaned up [ 137.058653][ T5152] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 137.404216][ T5162] program syz.3.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.665843][ T5165] tipc: Enabling of bearer rejected, failed to enable media [ 139.944278][ T4296] wlan1: Trigger new scan to find an IBSS to join [ 143.051445][ T5214] tipc: Enabling of bearer rejected, failed to enable media [ 143.622612][ T5217] loop4: detected capacity change from 0 to 512 [ 143.791512][ T5217] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 143.938776][ T5217] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 144.014150][ T5217] EXT4-fs (loop4): 1 truncate cleaned up [ 144.939434][ T5217] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 145.986719][ T144] wlan1: Trigger new scan to find an IBSS to join [ 146.691073][ T5192] kernel read not supported for file /dsp1 (pid: 5192 comm: kworker/0:9) [ 149.943021][ T5261] tipc: Enabling of bearer rejected, failed to enable media [ 152.289402][ T9] wlan1: Creating new IBSS network, BSSID b2:25:2e:dc:83:1f [ 152.302477][ T5284] sg_write: data in/out 32734/24 bytes for SCSI command 0x0-- guessing data in; [ 152.302477][ T5284] program syz.4.309 not setting count and/or reply_len properly [ 156.129933][ T5311] device syzkaller0 entered promiscuous mode [ 156.527091][ T4299] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.202430][ T4299] usb 1-1: device descriptor read/all, error -71 [ 164.370177][ T5349] device syzkaller0 entered promiscuous mode [ 164.989364][ T4300] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.278185][ T4300] usb 1-1: Using ep0 maxpacket: 16 [ 165.384627][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 165.394495][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 165.402060][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.412119][ T4202] Workqueue: hci4 hci_rx_work [ 165.416825][ T4202] Call Trace: [ 165.420108][ T4202] [ 165.423038][ T4202] dump_stack_lvl+0x188/0x250 [ 165.427725][ T4202] ? show_regs_print_info+0x20/0x20 [ 165.432928][ T4202] ? load_image+0x400/0x400 [ 165.437448][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 165.442563][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 165.447243][ T4202] ? process_one_work+0x85f/0x1010 [ 165.452366][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 165.457573][ T4202] kobject_add_internal+0x6e0/0xd90 [ 165.462786][ T4202] kobject_add+0x160/0x230 [ 165.467228][ T4202] ? kobject_init+0x1d0/0x1d0 [ 165.471911][ T4202] ? klist_children_get+0x50/0x50 [ 165.476940][ T4202] ? get_device_parent+0x121/0x3f0 [ 165.482064][ T4202] device_add+0x48c/0x1000 [ 165.486501][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 165.491445][ T4202] le_conn_complete_evt+0xc4b/0x15c0 [ 165.496750][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 165.501877][ T4202] ? __mutex_trylock_common+0x155/0x260 [ 165.507437][ T4202] hci_le_meta_evt+0x285/0x3cb0 [ 165.512291][ T4202] ? hci_event_packet+0x37e/0x1370 [ 165.517406][ T4202] ? __lock_acquire+0x7d10/0x7d10 [ 165.522438][ T4202] ? hci_remote_host_features_evt+0x290/0x290 [ 165.528508][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 165.534153][ T4202] ? mark_lock+0x94/0x320 [ 165.538486][ T4202] ? mutex_unlock+0x10/0x10 [ 165.542998][ T4202] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 165.548985][ T4202] ? lock_chain_count+0x20/0x20 [ 165.553838][ T4202] ? __rwlock_init+0x140/0x140 [ 165.558607][ T4202] hci_event_packet+0xe4b/0x1370 [ 165.563551][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 165.568761][ T4202] ? rcu_lock_release+0x20/0x20 [ 165.573617][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 165.578823][ T4202] hci_rx_work+0x255/0xa10 [ 165.583261][ T4202] process_one_work+0x85f/0x1010 [ 165.588219][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 165.593853][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 165.599147][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 165.604176][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 165.609722][ T4202] ? wq_worker_running+0x97/0x170 [ 165.614749][ T4202] worker_thread+0xaa6/0x1290 [ 165.619461][ T4202] kthread+0x436/0x520 [ 165.623536][ T4202] ? rcu_lock_release+0x20/0x20 [ 165.628378][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 165.632960][ T4202] ret_from_fork+0x1f/0x30 [ 165.637376][ T4202] [ 165.640471][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.648477][ T4202] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 165.662099][ T4202] Bluetooth: hci4: failed to register connection device [ 165.668943][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.918543][ T4300] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.942609][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.978573][ T4300] usb 1-1: Product: syz [ 165.995702][ T4300] usb 1-1: Manufacturer: syz [ 166.001073][ T4300] usb 1-1: SerialNumber: syz [ 166.089162][ T5399] device syzkaller0 entered promiscuous mode [ 166.123476][ T4300] usb 1-1: config 0 descriptor?? [ 166.186862][ T4300] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.234231][ T5404] binder_alloc: 5395: binder_alloc_buf, no vma [ 166.622023][ T4300] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 167.032782][ T5412] netlink: 'syz.2.346': attribute type 10 has an invalid length. [ 168.112839][ T4300] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 168.368665][ T4300] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 168.501389][ T4300] em28xx 1-1:0.0: board has no eeprom [ 168.914097][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.950991][ T4300] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 168.963505][ T4300] em28xx 1-1:0.0: dvb set to bulk mode. [ 169.003329][ T4300] usb 1-1: USB disconnect, device number 6 [ 169.052665][ T4299] em28xx 1-1:0.0: Binding DVB extension [ 169.066711][ T4300] em28xx 1-1:0.0: Disconnecting em28xx [ 169.258258][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 169.400205][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.436002][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 169.711554][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.856788][ T4299] em28xx 1-1:0.0: Registering input extension [ 169.928868][ T4300] em28xx 1-1:0.0: Closing input extension [ 169.966055][ T7] usb 5-1: config 0 descriptor?? [ 169.974030][ T4300] em28xx 1-1:0.0: Freeing device [ 170.132149][ T5454] device syzkaller0 entered promiscuous mode [ 170.440986][ T4300] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.818562][ T7] cdc_subset: probe of 5-1:0.0 failed with error -22 [ 170.880072][ T4299] Bluetooth: hci1: command 0x0406 tx timeout [ 170.886119][ T4299] Bluetooth: hci0: command 0x0406 tx timeout [ 170.892559][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 170.948267][ T4299] Bluetooth: hci3: command 0x0406 tx timeout [ 170.954482][ T4299] Bluetooth: hci4: command 0x0406 tx timeout [ 171.082662][ T7] usb 5-1: USB disconnect, device number 3 [ 171.098240][ T4300] usb 1-1: device descriptor read/64, error -71 [ 171.268395][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 171.278174][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 171.285728][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.295784][ T4202] Workqueue: hci2 hci_rx_work [ 171.300466][ T4202] Call Trace: [ 171.303733][ T4202] [ 171.306658][ T4202] dump_stack_lvl+0x188/0x250 [ 171.311328][ T4202] ? show_regs_print_info+0x20/0x20 [ 171.316515][ T4202] ? load_image+0x400/0x400 [ 171.321014][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 171.326114][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 171.330775][ T4202] ? preempt_schedule_thunk+0x16/0x18 [ 171.336142][ T4202] kobject_add_internal+0x6e0/0xd90 [ 171.341332][ T4202] kobject_add+0x160/0x230 [ 171.345743][ T4202] ? kobject_init+0x1d0/0x1d0 [ 171.350410][ T4202] ? klist_children_get+0x50/0x50 [ 171.355420][ T4202] ? get_device_parent+0x121/0x3f0 [ 171.360520][ T4202] device_add+0x48c/0x1000 [ 171.364929][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 171.369860][ T4202] le_conn_complete_evt+0xc4b/0x15c0 [ 171.375139][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 171.380234][ T4202] ? __switch_to_asm+0x34/0x60 [ 171.384988][ T4202] ? __mutex_trylock_common+0x155/0x260 [ 171.390527][ T4202] hci_le_meta_evt+0x285/0x3cb0 [ 171.395361][ T4202] ? hci_event_packet+0x37e/0x1370 [ 171.400455][ T4202] ? __lock_acquire+0x7d10/0x7d10 [ 171.405468][ T4202] ? release_firmware_map_entry+0x190/0x190 [ 171.411348][ T4202] ? hci_remote_host_features_evt+0x290/0x290 [ 171.417401][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 171.423023][ T4202] ? mutex_unlock+0x10/0x10 [ 171.427512][ T4202] ? preempt_schedule+0xbc/0xd0 [ 171.432346][ T4202] ? schedule_preempt_disabled+0x20/0x20 [ 171.437964][ T4202] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 171.443586][ T4202] hci_event_packet+0xe4b/0x1370 [ 171.448514][ T4202] ? rcu_lock_release+0x20/0x20 [ 171.453351][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 171.458535][ T4202] hci_rx_work+0x255/0xa10 [ 171.462945][ T4202] process_one_work+0x85f/0x1010 [ 171.467879][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 171.473493][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 171.478765][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 171.483770][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 171.489302][ T4202] ? wq_worker_running+0x97/0x170 [ 171.494310][ T4202] worker_thread+0xaa6/0x1290 [ 171.498996][ T4202] kthread+0x436/0x520 [ 171.503047][ T4202] ? rcu_lock_release+0x20/0x20 [ 171.507877][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 171.512451][ T4202] ret_from_fork+0x1f/0x30 [ 171.516867][ T4202] [ 171.523517][ T4202] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.536941][ T4202] Bluetooth: hci2: failed to register connection device [ 171.598362][ T4300] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.838182][ T4300] usb 1-1: device descriptor read/64, error -71 [ 171.958533][ T4300] usb usb1-port1: attempt power cycle [ 173.129061][ T26] Bluetooth: hci4: command 0x0406 tx timeout [ 173.623133][ T5490] device syzkaller1 entered promiscuous mode [ 174.191714][ T5503] device syzkaller0 entered promiscuous mode [ 178.044097][ T4196] Bluetooth: hci2: command 0x0406 tx timeout [ 178.152479][ T5524] syz.1.377 uses obsolete (PF_INET,SOCK_PACKET) [ 178.265840][ T5529] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 178.306196][ T5529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.385595][ T5532] bond1: (slave geneve2): making interface the new active one [ 178.396115][ T5532] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 178.421148][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 178.504822][ T5536] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.964690][ T5532] syz.4.379 (5532) used greatest stack depth: 19536 bytes left [ 179.518506][ T4233] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 179.878310][ T4206] Bluetooth: hci3: Unknown advertising packet type: 0x3737 [ 179.878715][ T4206] ================================================================== [ 179.894152][ T4206] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x134e/0x3cb0 [ 179.901983][ T4206] Read of size 1 at addr ffff888075aae403 by task kworker/u5:7/4206 [ 179.909955][ T4206] [ 179.912280][ T4206] CPU: 1 PID: 4206 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 179.919815][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.929871][ T4206] Workqueue: hci3 hci_rx_work [ 179.934561][ T4206] Call Trace: [ 179.937833][ T4206] [ 179.940760][ T4206] dump_stack_lvl+0x188/0x250 [ 179.945438][ T4206] ? show_regs_print_info+0x20/0x20 [ 179.950636][ T4206] ? load_image+0x400/0x400 [ 179.955136][ T4206] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 179.960617][ T4206] print_address_description+0x60/0x2d0 [ 179.966170][ T4206] ? hci_le_meta_evt+0x134e/0x3cb0 [ 179.971286][ T4206] kasan_report+0xdf/0x130 [ 179.975721][ T4206] ? hci_le_meta_evt+0x134e/0x3cb0 [ 179.980838][ T4206] hci_le_meta_evt+0x134e/0x3cb0 [ 179.985797][ T4206] ? release_firmware_map_entry+0x190/0x190 [ 179.991699][ T4206] ? hci_remote_host_features_evt+0x290/0x290 [ 179.997769][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 180.003403][ T4206] ? mark_lock+0x94/0x320 [ 180.007732][ T4206] ? mutex_unlock+0x10/0x10 [ 180.012236][ T4206] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 180.018221][ T4206] ? lock_chain_count+0x20/0x20 [ 180.023072][ T4206] ? __rwlock_init+0x140/0x140 [ 180.027836][ T4206] hci_event_packet+0xe4b/0x1370 [ 180.032771][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 180.037990][ T4206] ? rcu_lock_release+0x20/0x20 [ 180.042846][ T4206] ? lock_acquire+0x208/0x400 [ 180.047533][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 180.052731][ T4206] hci_rx_work+0x255/0xa10 [ 180.057165][ T4206] process_one_work+0x85f/0x1010 [ 180.062119][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 180.067757][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 180.073178][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 180.078214][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 180.083768][ T4206] ? wq_worker_running+0x97/0x170 [ 180.088793][ T4206] worker_thread+0xaa6/0x1290 [ 180.093486][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 180.098686][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 180.104595][ T4206] kthread+0x436/0x520 [ 180.108667][ T4206] ? rcu_lock_release+0x20/0x20 [ 180.113518][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 180.118109][ T4206] ret_from_fork+0x1f/0x30 [ 180.122541][ T4206] [ 180.125558][ T4206] [ 180.127876][ T4206] Allocated by task 5550: [ 180.132202][ T4206] __kasan_kmalloc+0xb5/0xf0 [ 180.136792][ T4206] __alloc_skb+0x22c/0x750 [ 180.141204][ T4206] vhci_write+0xbc/0x450 [ 180.145469][ T4206] vfs_write+0x745/0xd60 [ 180.149723][ T4206] ksys_write+0x152/0x260 [ 180.154047][ T4206] do_syscall_64+0x4c/0xa0 [ 180.158459][ T4206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.164347][ T4206] [ 180.166663][ T4206] The buggy address belongs to the object at ffff888075aae000 [ 180.166663][ T4206] which belongs to the cache kmalloc-1k of size 1024 [ 180.180712][ T4206] The buggy address is located 3 bytes to the right of [ 180.180712][ T4206] 1024-byte region [ffff888075aae000, ffff888075aae400) [ 180.194416][ T4206] The buggy address belongs to the page: [ 180.200048][ T4206] page:ffffea0001d6aa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75aa8 [ 180.210197][ T4206] head:ffffea0001d6aa00 order:3 compound_mapcount:0 compound_pincount:0 [ 180.218515][ T4206] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 180.226512][ T4206] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 180.235090][ T4206] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 180.243659][ T4206] page dumped because: kasan: bad access detected [ 180.250073][ T4206] page_owner tracks the page as allocated [ 180.255778][ T4206] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3960, ts 29221953172, free_ts 29216811783 [ 180.274880][ T4206] get_page_from_freelist+0x1bbd/0x1ca0 [ 180.280429][ T4206] __alloc_pages+0x1ee/0x480 [ 180.285016][ T4206] new_slab+0xc0/0x4b0 [ 180.289080][ T4206] ___slab_alloc+0x80a/0xdd0 [ 180.293664][ T4206] __kmalloc+0x1cd/0x330 [ 180.297896][ T4206] load_elf_phdrs+0x132/0x230 [ 180.302565][ T4206] load_elf_binary+0x962/0x28e0 [ 180.307415][ T4206] bprm_execve+0xaee/0x1840 [ 180.311913][ T4206] do_execveat_common+0x51e/0x6d0 [ 180.316933][ T4206] __x64_sys_execve+0x8e/0xa0 [ 180.321603][ T4206] do_syscall_64+0x4c/0xa0 [ 180.326015][ T4206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.331904][ T4206] page last free stack trace: [ 180.336565][ T4206] free_unref_page_prepare+0x637/0x6c0 [ 180.342023][ T4206] free_unref_page+0x8f/0x2a0 [ 180.346699][ T4206] __unfreeze_partials+0x1a5/0x200 [ 180.351804][ T4206] put_cpu_partial+0x12d/0x190 [ 180.356564][ T4206] qlist_free_all+0x35/0x90 [ 180.361059][ T4206] kasan_quarantine_reduce+0x150/0x160 [ 180.366511][ T4206] __kasan_slab_alloc+0x2f/0xd0 [ 180.371357][ T4206] slab_post_alloc_hook+0x4c/0x380 [ 180.376461][ T4206] kmem_cache_alloc+0x100/0x290 [ 180.381311][ T4206] getname_flags+0xb5/0x500 [ 180.385821][ T4206] do_sys_openat2+0xdd/0x4b0 [ 180.390403][ T4206] __x64_sys_openat+0x135/0x160 [ 180.395249][ T4206] do_syscall_64+0x4c/0xa0 [ 180.399664][ T4206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.405559][ T4206] [ 180.407875][ T4206] Memory state around the buggy address: [ 180.413500][ T4206] ffff888075aae300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 180.421561][ T4206] ffff888075aae380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 180.429615][ T4206] >ffff888075aae400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.437668][ T4206] ^ [ 180.441733][ T4206] ffff888075aae480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.449786][ T4206] ffff888075aae500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.457833][ T4206] ================================================================== [ 180.465880][ T4206] Disabling lock debugging due to kernel taint [ 181.122979][ T5554] sctp: failed to load transform for md5: -2 [ 181.204646][ T4206] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 181.211868][ T4206] CPU: 1 PID: 4206 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 181.220798][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.230843][ T4206] Workqueue: hci3 hci_rx_work [ 181.235530][ T4206] Call Trace: [ 181.238799][ T4206] [ 181.241723][ T4206] dump_stack_lvl+0x188/0x250 [ 181.246396][ T4206] ? show_regs_print_info+0x20/0x20 [ 181.251591][ T4206] ? load_image+0x400/0x400 [ 181.256099][ T4206] panic+0x2e5/0x810 [ 181.259992][ T4206] ? bpf_jit_dump+0xd0/0xd0 [ 181.264493][ T4206] ? hci_le_meta_evt+0x134e/0x3cb0 [ 181.269597][ T4206] ? check_panic_on_warn+0x6c/0xa0 [ 181.274702][ T4206] ? hci_le_meta_evt+0x134e/0x3cb0 [ 181.279806][ T4206] check_panic_on_warn+0x80/0xa0 [ 181.284737][ T4206] ? hci_le_meta_evt+0x134e/0x3cb0 [ 181.289841][ T4206] end_report+0x6d/0xf0 [ 181.293990][ T4206] kasan_report+0x102/0x130 [ 181.298498][ T4206] ? hci_le_meta_evt+0x134e/0x3cb0 [ 181.303610][ T4206] hci_le_meta_evt+0x134e/0x3cb0 [ 181.308555][ T4206] ? release_firmware_map_entry+0x190/0x190 [ 181.314458][ T4206] ? hci_remote_host_features_evt+0x290/0x290 [ 181.320525][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 181.326156][ T4206] ? mark_lock+0x94/0x320 [ 181.330479][ T4206] ? mutex_unlock+0x10/0x10 [ 181.334983][ T4206] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 181.340957][ T4206] ? lock_chain_count+0x20/0x20 [ 181.345787][ T4206] ? __rwlock_init+0x140/0x140 [ 181.350526][ T4206] hci_event_packet+0xe4b/0x1370 [ 181.355442][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 181.360620][ T4206] ? rcu_lock_release+0x20/0x20 [ 181.365443][ T4206] ? lock_acquire+0x208/0x400 [ 181.370093][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 181.375268][ T4206] hci_rx_work+0x255/0xa10 [ 181.379661][ T4206] process_one_work+0x85f/0x1010 [ 181.384576][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 181.390179][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 181.395439][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 181.400439][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 181.405954][ T4206] ? wq_worker_running+0x97/0x170 [ 181.410952][ T4206] worker_thread+0xaa6/0x1290 [ 181.415608][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 181.420779][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 181.426649][ T4206] kthread+0x436/0x520 [ 181.430694][ T4206] ? rcu_lock_release+0x20/0x20 [ 181.435517][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 181.440084][ T4206] ret_from_fork+0x1f/0x30 [ 181.444477][ T4206] [ 181.447685][ T4206] Kernel Offset: disabled [ 181.451998][ T4206] Rebooting in 86400 seconds..