last executing test programs: 6.811904764s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x224020, &(0x7f00000000c0), 0x0, 0x501, &(0x7f0000000100)="$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") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) r1 = eventfd2(0x5, 0x80000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x8, 0x2}) 6.685668554s ago: executing program 0 (id=6): syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200001, &(0x7f0000000100)={[{@delalloc}, {@journal_async_commit}, {@journal_ioprio}, {@nobarrier}, {@noquota}, {@data_ordered}]}, 0x84, 0x4bc, &(0x7f0000000a00)="$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") socket(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x55, &(0x7f0000000580)=@string={0x55, 0x3, "f34c2a690f9edebae6e528230fbc28a8648b019527eaa18106f93b2762db6c23ee51dd91b80c0423907b5013a6212e814d37637d351fcd98c90e4fdfaaf16079e116382e7c5d3d57b4e88f26024cfb18dce543"}}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) 6.587448582s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x2, 0x11000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) 6.321070093s ago: executing program 1 (id=7): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x101, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x2, 0x1, 0x79, 0x53321d91e62d2041, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0xb, 0x12}, [@mdlm_detail={0x93, 0x24, 0x13, 0x80, "6e877876ce1648e7919500271511a16bc86d2432ff0e483b57c92d509e3f0b5043b0543683bbafd98910320ca91082559c3e477fd6f2b6c56b35380089ee69ae3b3b50b2aca31982b802f2b93d251da168ef2de76a60610d4a744f765eed8c99037fcd330626ec12247db86ebabdba8da36b753f886c72b693688b2ca778dafb08e0d4ad395cf64ca874cdbc978248"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x6, 0x3}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x4, 0xa, 0x68, 0xff, 0x2}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "3d04a12b156a0dd8bc8ee6bcbc98aee3"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4001}}, {0x45, &(0x7f0000000280)=@string={0x45, 0x3, "79c49bbe02a2ef21d852379039972fcd232deb6d99f11447080bd27b2edf6cad2427d095d59b3ae414dc66f75e883d4cc5575b82326975d0b03bc146bb38a5ba8326ec"}}, {0x49, &(0x7f0000000300)=@string={0x49, 0x3, "b5c3a69abcecb4a8885b1c5a207b27bfbd892029f6c7bd66ecc52cd3c27e7ebb2f3cc218d76ada553b107a51e381fabf05b7e3f39f8ac20c6f5c8adc28be810e7d0e64a3e37f59"}}, {0x4f, &(0x7f0000000380)=@string={0x4f, 0x3, "6615c58ad84c8dac348296a86903e76cc54e7d4ccb19c4a7198f087274ae32963d0002b9f6edb9a08faba22715e3a0071053f15b7e05970a3d58891104cfeb5f9724a8af545c4804c4c51891c6"}}]}) syz_usb_connect$cdc_ncm(0x5, 0xae, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x2, 0x1, 0x7, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "51d4543dec"}, {0x5, 0x24, 0x0, 0x36}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x100, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0xfc01}, @mbim={0xc, 0x24, 0x1b, 0xfff, 0x45, 0x7, 0xfd, 0x401, 0x7}, @country_functional={0xc, 0x24, 0x7, 0x9, 0x2, [0x2, 0xcd7, 0x9]}, @network_terminal={0x7, 0x24, 0xa, 0xf5, 0x5, 0x4, 0x9}, @dmm={0x7, 0x24, 0x14, 0x4, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x8, 0x7}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x8, 0x81, 0x3, 0x8, 0x80}, 0x1e2, &(0x7f0000000600)={0x5, 0xf, 0x1e2, 0x3, [@generic={0x86, 0x10, 0xb, "801578e25e98c72cc42ea99c01056d98685bd206570f0f43f1caee33c482771dfffae1ef4b6f3ef41d8acb720d475ae068d90562efec8349dc179bc5c058f2ecf008ad54094e078f3cac988b001f6278610872dc876953d51eaf4cc2573ddd6a431d0d828af8e426b7790a82b87edfa5191581150b8465e2599949eed4554a5d01695a"}, @generic={0x8a, 0x10, 0x1, "6d05f5c47d7f0092e4826a63d4c4b4c5806fd4a6c36240a0ceeaf64017537450c1dca9000b9b012c60a34028247a156183931afb45c5049d208cbc5dea08f6ede4f964662689cdf80e5095cd6928b711f33c748545731ee0acb8e653d55ff2414485225b3d3ed692141524a00f10a1fe90ec187f692720c6f7dcc9835c375e4a65253f9f23de2c"}, @generic={0xcd, 0x10, 0xb, "20041b069d77d6c1e4e30a26fb6eda16739d8720ca7ce1c51272b648af63bfe36f2f053c7111acf8ba24981de64311a184911c9b59b77698319f0724d462e0d51bf2f5791a0f6fb3ddc71a7468e1b1c47980a9865830cb7c13de418ff7b067151176b1b7889922ecf78a2e175cda5209ee950804b76c4e99dafac5a261552aa51d461f62570bb8685c5fbe93ed541ee31ce18588e033974d9bcb8fe3c24d89e418879875f19a5ed0a103a15fc92d98cdafd2b914b56d41de64f6638f33a8b50b8612f83b2220fc35a9a9"}]}, 0x1, [{0x91, &(0x7f0000000800)=@string={0x91, 0x3, "eb4a30d7593c09f98d604d91b3e0a7aaf90e2dbc709467a2e113e7780dcbf3f21579e84f6ec5ac9c6d5748444c8096c82198a81567d5cc912a6fdd10d78dc822ae46177bfbd7d7d82a18d462d91fd8eb94c34a6b182a1f784e70332b599302e404036eeac74b02cf3060d4765d17448bbed0d5769ee9dacdee7b9037ce5098908a711df76212836a41b934d62ab75a"}}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.924502935s ago: executing program 3 (id=10): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000029b70500499a143c0000100100000d0000000020"], 0x18}, 0x0) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x46a, 0x4) 5.807924934s ago: executing program 3 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x2, 0x11000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) 5.751383369s ago: executing program 3 (id=12): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000300)={{r0}, "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"}) r1 = syz_io_uring_setup(0x88e, &(0x7f0000001300)={0x0, 0x3cfa, 0x0, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = memfd_create(0x0, 0x7) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5.560387284s ago: executing program 4 (id=13): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) statx(r0, 0x0, 0x1000, 0x310, &(0x7f00000004c0)) 5.459859452s ago: executing program 0 (id=14): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000c1f000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.435245114s ago: executing program 4 (id=15): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.390683448s ago: executing program 4 (id=16): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000280)={r4, 0xfffffffffffffff9, 0x9, 0x2}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, 0x0, 0x0) unshare(0x40020000) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x6d85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 3.643961698s ago: executing program 4 (id=17): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x2b}, {0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x40000000000000}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0x40000000, 0x3}}, 0xe8) 3.606652551s ago: executing program 4 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.570954584s ago: executing program 0 (id=19): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x5885, 0x0, 0x1, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 3.347900672s ago: executing program 4 (id=20): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xcb81806a06260cef, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x8, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x6, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3.323356074s ago: executing program 2 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uinput(0xffffff9c, &(0x7f0000000bc0), 0x802, 0x0) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000c00)='syz0\x00') 3.232500931s ago: executing program 2 (id=22): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) statx(0xffffffffffffffff, 0x0, 0x4000, 0x8, 0x0) 3.095855302s ago: executing program 3 (id=23): socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) 2.951096453s ago: executing program 3 (id=24): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1.930958275s ago: executing program 3 (id=25): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x40000001) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}, {0x1, 0x9}, {0x9, 0x900}, {0x4, 0x2}, {0xd, 0x9}, {0xd, 0x5}, {0xb, 0x6481}, {0x4, 0xfffffff9}, {0xf, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000340)=""/2, 0x7c, 0x2, 0x1, 0x47}, 0x28) 1.639885988s ago: executing program 1 (id=26): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d6, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.151251098s ago: executing program 2 (id=27): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2, 0x1bd}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 885.653979ms ago: executing program 1 (id=28): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 839.993993ms ago: executing program 2 (id=29): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x1, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, &(0x7f00000000c0)={0x0, 0x20, 0x2, 0x3, 0xffffffff, 0x3, 0x0, 0x8, 0x1c0, 0xffffffff, 0x2, 0x3, 0x0, 0x0, 0x0}) 839.774973ms ago: executing program 2 (id=30): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 731.319521ms ago: executing program 2 (id=31): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_usbip_server_init(0x3) r2 = syz_io_uring_setup(0x42e6, &(0x7f0000000280)={0x0, 0x5ed9, 0x10100, 0x2, 0x25d, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=32): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x401, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 50.677600][ T4171] cgroup: Unknown subsys name 'net' [ 50.804400][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.003824][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.990736][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.007217][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 54.071495][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 54.082408][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 54.094773][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.184045][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.191531][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.199368][ T4182] device bridge_slave_0 entered promiscuous mode [ 54.209950][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.216995][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.224700][ T4187] device bridge_slave_0 entered promiscuous mode [ 54.239036][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.246160][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.253811][ T4182] device bridge_slave_1 entered promiscuous mode [ 54.271547][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.278593][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.286502][ T4187] device bridge_slave_1 entered promiscuous mode [ 54.339117][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.360812][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.367837][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.376252][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.383659][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.390884][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.398437][ T4181] device bridge_slave_0 entered promiscuous mode [ 54.407458][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.423913][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.431112][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.438674][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.447455][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.456751][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.463894][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.471524][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.478458][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.485691][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.493294][ T4181] device bridge_slave_1 entered promiscuous mode [ 54.506457][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.513694][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.521369][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.530095][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.552784][ T4182] team0: Port device team_slave_0 added [ 54.585961][ T4182] team0: Port device team_slave_1 added [ 54.593961][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.617316][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.628780][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.639623][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.662443][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.673792][ T4187] team0: Port device team_slave_0 added [ 54.700385][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.710714][ T4187] team0: Port device team_slave_1 added [ 54.724058][ T4185] team0: Port device team_slave_0 added [ 54.730818][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.737747][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.763788][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.790190][ T4181] team0: Port device team_slave_0 added [ 54.796977][ T4185] team0: Port device team_slave_1 added [ 54.803057][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.810274][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.836230][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.861901][ T4181] team0: Port device team_slave_1 added [ 54.868546][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.875641][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.901587][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.925965][ T4191] team0: Port device team_slave_0 added [ 54.943484][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.950516][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.976931][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.996243][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.003293][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.029195][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.041070][ T4191] team0: Port device team_slave_1 added [ 55.047246][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.054355][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.080267][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.109111][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.116158][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.142202][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.175623][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.182678][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.208598][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.233287][ T4182] device hsr_slave_0 entered promiscuous mode [ 55.240308][ T4182] device hsr_slave_1 entered promiscuous mode [ 55.254379][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.261396][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.287394][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.318618][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.325608][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.351508][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.375499][ T4187] device hsr_slave_0 entered promiscuous mode [ 55.382427][ T4187] device hsr_slave_1 entered promiscuous mode [ 55.388861][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.396850][ T4187] Cannot create hsr debugfs directory [ 55.405227][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.411948][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.418354][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.425993][ T4185] Cannot create hsr debugfs directory [ 55.436960][ T4181] device hsr_slave_0 entered promiscuous mode [ 55.443949][ T4181] device hsr_slave_1 entered promiscuous mode [ 55.450660][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.458200][ T4181] Cannot create hsr debugfs directory [ 55.528219][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.534988][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.541729][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.549477][ T4191] Cannot create hsr debugfs directory [ 55.690285][ T3977] Bluetooth: hci4: command 0x0409 tx timeout [ 55.696938][ T3977] Bluetooth: hci3: command 0x0409 tx timeout [ 55.703119][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 55.703466][ T3977] Bluetooth: hci2: command 0x0409 tx timeout [ 55.709124][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 55.826510][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.840630][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.872354][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.883591][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.895101][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.905036][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.918211][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.941740][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.959562][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.969115][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.977951][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.986835][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.042945][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.052783][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.074949][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.090984][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.155721][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.168827][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.192355][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.204659][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.222818][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.239215][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.247696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.257938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.275041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.284966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.294188][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.301437][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.323525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.339036][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.353695][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.363720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.374221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.387847][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.394978][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.416228][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.424425][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.432625][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.441684][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.455216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.463230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.485725][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.496020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.506586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.515810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.543081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.551766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.561036][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.568071][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.576021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.587459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.596044][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.603115][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.616058][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.624919][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.645120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.653435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.662696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.692024][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.699132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.708501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.717562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.727215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.738551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.746685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.754619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.763079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.771963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.780868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.789144][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.796205][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.803907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.813489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.822159][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.829187][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.839087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.847631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.858910][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.881747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.890603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.901035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.909311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.917761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.926966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.935854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.944971][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.952028][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.961840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.970851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.979102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.986975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.995658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.008465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.018105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.026637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.035270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.044867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.054383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.063331][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.070416][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.083855][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.104854][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.116231][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.137549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.146419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.159112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.167511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.175942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.184388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.193093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.202911][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.236977][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.251319][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.280375][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.291676][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.311967][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.338266][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.350597][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.359144][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.367815][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.376762][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.386236][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.394613][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.404674][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.414640][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.425073][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.433399][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.460195][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.469021][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.476133][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.526470][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.535164][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.544498][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.559481][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.574261][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.584177][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.597901][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.605013][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.615233][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.625730][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.634560][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.644183][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.652858][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.677578][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.688439][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.713327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.723683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.733493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.742129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.752527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.760163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.767604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.775952][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 57.779531][ T4248] Bluetooth: hci1: command 0x041b tx timeout [ 57.783487][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 57.794592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.802636][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 57.809488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.816918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.824331][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 57.826392][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.847019][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.859693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.893535][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.909781][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.925690][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.951189][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.970419][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.979146][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.002722][ T4187] device veth0_vlan entered promiscuous mode [ 58.021660][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.030918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.039685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.048095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.056168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.073116][ T4187] device veth1_vlan entered promiscuous mode [ 58.094283][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.102560][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.111297][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.127866][ T4182] device veth0_vlan entered promiscuous mode [ 58.140444][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.147880][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.155630][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.165041][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.174826][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.183338][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.191791][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.200056][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.213694][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.231458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.241200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.272927][ T4187] device veth0_macvtap entered promiscuous mode [ 58.281685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.291020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.298624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.307771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.316205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.324433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.342137][ T4181] device veth0_vlan entered promiscuous mode [ 58.355587][ T4185] device veth0_vlan entered promiscuous mode [ 58.362841][ T4182] device veth1_vlan entered promiscuous mode [ 58.376581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.384911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.392882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.420511][ T4181] device veth1_vlan entered promiscuous mode [ 58.431636][ T4187] device veth1_macvtap entered promiscuous mode [ 58.439228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.447728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.456730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.464945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.474448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.492920][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.501246][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.512865][ T4185] device veth1_vlan entered promiscuous mode [ 58.530613][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.539283][ T4191] device veth0_vlan entered promiscuous mode [ 58.547956][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.556479][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.564546][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.573746][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.583459][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.599168][ T4182] device veth0_macvtap entered promiscuous mode [ 58.610462][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.622576][ T4191] device veth1_vlan entered promiscuous mode [ 58.629947][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.638377][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.646856][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.656678][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.665533][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.674046][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.682996][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.707782][ T4185] device veth0_macvtap entered promiscuous mode [ 58.718471][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.727791][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.738514][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.747476][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.758236][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.766640][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.775419][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.784074][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.792879][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.801482][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.811784][ T4182] device veth1_macvtap entered promiscuous mode [ 58.823730][ T4185] device veth1_macvtap entered promiscuous mode [ 58.836837][ T4181] device veth0_macvtap entered promiscuous mode [ 58.866098][ T4181] device veth1_macvtap entered promiscuous mode [ 58.893050][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.904077][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.915960][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.934731][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.945803][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.957385][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.968073][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.979952][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.990556][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.001210][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.011127][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.021760][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.031833][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.042518][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.056399][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.064597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.073008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.081189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.089019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.097259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.106216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.115071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.124534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.133607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.151412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.160436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.168847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.180214][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.191484][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.202784][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.221480][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.235199][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.245304][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.256477][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.269184][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.279109][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.288065][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.297603][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.307770][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.335914][ T4191] device veth0_macvtap entered promiscuous mode [ 59.344487][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.355229][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.365088][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.376334][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.391874][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.402512][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.413637][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.424748][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.433533][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.442469][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.451531][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.464382][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.473286][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.483856][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.492652][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.508780][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.517748][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.531437][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.540462][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.549136][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.558133][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.576561][ T4191] device veth1_macvtap entered promiscuous mode [ 59.602728][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.613947][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.660443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.669908][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.680958][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.692488][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.703120][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.713826][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.724694][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.735591][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.746197][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.757480][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.771923][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.783040][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.792896][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.803374][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.813367][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.824500][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.834402][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.844894][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.855201][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 59.861043][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.866110][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 59.875079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.883851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.888305][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 59.894144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.898104][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 59.907560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.917016][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 59.941080][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.960023][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.968745][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.977898][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.007652][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.044730][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.055530][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.059016][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.075068][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.083407][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.092110][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.103342][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.111333][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.148449][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.161569][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.190715][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.209611][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.217516][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.243562][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.245514][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.266498][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.289589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.297304][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.311106][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.320428][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.321649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.334134][ T4302] loop0: detected capacity change from 0 to 512 [ 60.339860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.380879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.441679][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.499103][ T4304] loop0: detected capacity change from 0 to 512 [ 60.519319][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.545187][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.567744][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.601934][ T4307] loop4: detected capacity change from 0 to 512 [ 60.697554][ T4304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.700680][ T4307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.730938][ T4307] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.744114][ T4304] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.868588][ T4304] loop6: detected capacity change from 0 to 7 [ 60.924974][ T4304] Dev loop6: unable to read RDB block 7 [ 60.944468][ T4328] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 60.949491][ T4304] loop6: AHDI p1 p2 p3 p4 [ 60.966571][ T4304] loop6: partition table partially beyond EOD, truncated [ 60.991939][ T4304] loop6: p1 start 2401632844 is beyond EOD, truncated [ 60.998809][ T4304] loop6: p2 size 47 extends beyond EOD, truncated [ 61.008392][ T4304] loop6: p3 start 1886353253 is beyond EOD, truncated [ 61.076400][ T4333] loop4: detected capacity change from 0 to 256 [ 61.081421][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 61.109465][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.135405][ T4333] FAT-fs (loop4): Directory bread(block 64) failed [ 61.147429][ T4333] FAT-fs (loop4): Directory bread(block 65) failed [ 61.157436][ T4333] FAT-fs (loop4): Directory bread(block 66) failed [ 61.170577][ T4333] FAT-fs (loop4): Directory bread(block 67) failed [ 61.177239][ T4333] FAT-fs (loop4): Directory bread(block 68) failed [ 61.184427][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.204055][ T4333] FAT-fs (loop4): Directory bread(block 69) failed [ 61.221463][ T4333] FAT-fs (loop4): Directory bread(block 70) failed [ 61.228387][ T4333] FAT-fs (loop4): Directory bread(block 71) failed [ 61.236685][ T4333] FAT-fs (loop4): Directory bread(block 72) failed [ 61.243707][ T4333] FAT-fs (loop4): Directory bread(block 73) failed [ 61.299810][ T26] usb 3-1: device descriptor read/64, error -71 [ 61.417187][ T4341] raw_sendmsg: syz.4.9 forgot to set AF_INET. Fix it! [ 61.469436][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 61.500058][ T4333] trusted_key: encrypted_key: key trusted:syz not found [ 61.522984][ T9] attempt to access beyond end of device [ 61.522984][ T9] loop4: rw=1, want=1172, limit=256 [ 61.579472][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 61.596422][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 61.822521][ T26] usb 3-1: device descriptor read/64, error -71 [ 61.869598][ T4233] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 61.962900][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 63.127793][ T26] usb usb3-port1: attempt power cycle [ 63.133380][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.142526][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.151588][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.156012][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 63.160954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.179356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.189321][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.198340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.207353][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.216392][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.225405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.254428][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.255851][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 63.267930][ T4233] usb 2-1: Product: syz [ 63.273508][ T4233] usb 2-1: Manufacturer: syz [ 63.274454][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 63.278105][ T4233] usb 2-1: SerialNumber: syz [ 63.284691][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 63.311695][ T4233] usb 2-1: config 0 descriptor?? [ 63.405488][ T4233] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 63.415154][ T4233] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 63.575399][ T4362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18'. [ 63.597792][ T4362] device vlan2 entered promiscuous mode [ 63.611163][ T4362] device syz_tun entered promiscuous mode [ 63.693590][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 63.779508][ T26] usb 3-1: device descriptor read/8, error -71 [ 64.000465][ T4325] udc-core: couldn't find an available UDC or it's busy [ 64.007423][ T4325] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 64.045196][ T4325] udc-core: couldn't find an available UDC or it's busy [ 64.069098][ T4325] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 64.091317][ T4233] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 64.909895][ T4233] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 65.003768][ T4233] em28xx 2-1:0.0: board has no eeprom [ 65.143242][ T4233] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 65.162177][ T4233] em28xx 2-1:0.0: dvb set to bulk mode. [ 65.184138][ T4233] usb 2-1: USB disconnect, device number 2 [ 65.191461][ T4233] em28xx 2-1:0.0: Disconnecting em28xx [ 65.199972][ T21] em28xx 2-1:0.0: Binding DVB extension [ 65.401051][ T21] em28xx 2-1:0.0: Registering input extension [ 65.407860][ T4233] em28xx 2-1:0.0: Closing input extension [ 65.453242][ T4233] em28xx 2-1:0.0: Freeing device [ 65.645751][ T4391] Bluetooth: hci5: Frame reassembly failed (-84) [ 65.678391][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 66.423350][ T4403] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 66.430150][ T4403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.465409][ T4403] vhci_hcd vhci_hcd.0: Device attached [ 66.472654][ T4406] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 66.479257][ T4406] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.502762][ T4403] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.520455][ T4406] vhci_hcd vhci_hcd.0: Device attached [ 66.543520][ T4403] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 66.550125][ T4403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.593794][ T4403] vhci_hcd vhci_hcd.0: Device attached [ 66.612750][ T4406] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(18) [ 66.619364][ T4406] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.635198][ T4413] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.663168][ T4403] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.679489][ T4406] vhci_hcd vhci_hcd.0: Device attached [ 66.729479][ T13] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 66.739772][ T4403] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.778987][ T4403] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(33) [ 66.785603][ T4403] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.815052][ T4403] vhci_hcd vhci_hcd.0: Device attached [ 66.865428][ T4411] vhci_hcd: connection closed [ 66.866380][ T4409] vhci_hcd: connection closed [ 66.873401][ T4407] vhci_hcd: connection closed [ 66.873550][ T4404] vhci_hcd: connection reset by peer [ 66.896499][ T9] vhci_hcd: stop threads [ 66.920328][ T9] vhci_hcd: release socket [ 66.928133][ T9] vhci_hcd: disconnect device [ 66.946737][ T9] vhci_hcd: stop threads [ 66.961427][ T9] vhci_hcd: release socket [ 66.976096][ T9] vhci_hcd: disconnect device [ 66.994528][ T9] vhci_hcd: stop threads [ 67.003313][ T9] vhci_hcd: release socket [ 67.019105][ T9] vhci_hcd: disconnect device [ 67.039592][ T9] vhci_hcd: stop threads [ 67.043836][ T9] vhci_hcd: release socket [ 67.059523][ T9] vhci_hcd: disconnect device [ 67.232505][ T4197] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 67.232599][ T4197] ================================================================== [ 67.247917][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 67.255704][ T4197] Read of size 1 at addr ffff888058a25c0a by task kworker/u5:7/4197 [ 67.263654][ T4197] [ 67.265959][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:7 Not tainted 5.15.189-syzkaller #0 [ 67.274253][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.284282][ T4197] Workqueue: hci2 hci_rx_work [ 67.288943][ T4197] Call Trace: [ 67.292205][ T4197] [ 67.295117][ T4197] dump_stack_lvl+0x168/0x230 [ 67.299777][ T4197] ? show_regs_print_info+0x20/0x20 [ 67.304951][ T4197] ? load_image+0x3b0/0x3b0 [ 67.309434][ T4197] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 67.314802][ T4197] print_address_description+0x60/0x2d0 [ 67.320327][ T4197] ? hci_le_meta_evt+0x12c0/0x3b80 [ 67.325412][ T4197] kasan_report+0xdf/0x130 [ 67.329804][ T4197] ? hci_le_meta_evt+0x12c0/0x3b80 [ 67.334893][ T4197] hci_le_meta_evt+0x12c0/0x3b80 [ 67.339814][ T4197] ? hci_event_packet+0x1f0/0x12f0 [ 67.344923][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 67.350967][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 67.356574][ T4197] ? mark_lock+0x94/0x320 [ 67.360879][ T4197] ? mutex_unlock+0x10/0x10 [ 67.365356][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 67.371311][ T4197] ? lock_chain_count+0x20/0x20 [ 67.376136][ T4197] ? __rwlock_init+0x140/0x140 [ 67.380878][ T4197] hci_event_packet+0xe05/0x12f0 [ 67.385804][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 67.390985][ T4197] ? rcu_lock_release+0x20/0x20 [ 67.395815][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 67.400988][ T4197] hci_rx_work+0x255/0xa10 [ 67.405389][ T4197] process_one_work+0x863/0x1000 [ 67.410312][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 67.415919][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 67.421186][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 67.426188][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 67.431533][ T4197] ? wq_worker_running+0x97/0x170 [ 67.436533][ T4197] worker_thread+0xaa8/0x12a0 [ 67.441186][ T4197] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 67.447057][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 67.452233][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 67.457406][ T4197] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 67.463279][ T4197] kthread+0x436/0x520 [ 67.467323][ T4197] ? rcu_lock_release+0x20/0x20 [ 67.472163][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 67.476732][ T4197] ret_from_fork+0x1f/0x30 [ 67.481133][ T4197] [ 67.484127][ T4197] [ 67.486424][ T4197] Allocated by task 4420: [ 67.490731][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 67.495310][ T4197] __alloc_skb+0x22c/0x750 [ 67.499701][ T4197] vhci_write+0xbc/0x450 [ 67.503921][ T4197] vfs_write+0x712/0xd00 [ 67.508218][ T4197] ksys_write+0x14d/0x250 [ 67.512535][ T4197] do_syscall_64+0x4c/0xa0 [ 67.516928][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.522799][ T4197] [ 67.525096][ T4197] The buggy address belongs to the object at ffff888058a25800 [ 67.525096][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 67.539116][ T4197] The buggy address is located 10 bytes to the right of [ 67.539116][ T4197] 1024-byte region [ffff888058a25800, ffff888058a25c00) [ 67.553248][ T4197] The buggy address belongs to the page: [ 67.558848][ T4197] page:ffffea0001628800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58a20 [ 67.568969][ T4197] head:ffffea0001628800 order:3 compound_mapcount:0 compound_pincount:0 [ 67.577262][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 67.585217][ T4197] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016841dc0 [ 67.593775][ T4197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 67.602501][ T4197] page dumped because: kasan: bad access detected [ 67.608893][ T4197] page_owner tracks the page as allocated [ 67.614578][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9, ts 67207807420, free_ts 10889895560 [ 67.632692][ T4197] get_page_from_freelist+0x1b77/0x1c60 [ 67.638228][ T4197] __alloc_pages+0x1e1/0x470 [ 67.642794][ T4197] new_slab+0xc0/0x4b0 [ 67.646843][ T4197] ___slab_alloc+0x81e/0xdf0 [ 67.651414][ T4197] __kmalloc+0x1cd/0x330 [ 67.655629][ T4197] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 67.661331][ T4197] ieee80211_bss_info_update+0x75d/0xaa0 [ 67.666938][ T4197] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 67.673068][ T4197] ieee80211_iface_work+0x70e/0xc60 [ 67.678240][ T4197] process_one_work+0x863/0x1000 [ 67.683149][ T4197] worker_thread+0xaa8/0x12a0 [ 67.687796][ T4197] kthread+0x436/0x520 [ 67.691837][ T4197] ret_from_fork+0x1f/0x30 [ 67.696232][ T4197] page last free stack trace: [ 67.700874][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 67.706302][ T4197] free_unref_page+0x94/0x280 [ 67.710949][ T4197] free_contig_range+0x96/0xf0 [ 67.715689][ T4197] destroy_args+0xef/0x8b0 [ 67.720086][ T4197] debug_vm_pgtable+0x318/0x370 [ 67.724913][ T4197] do_one_initcall+0x1ee/0x680 [ 67.729649][ T4197] do_initcall_level+0x137/0x1f0 [ 67.734574][ T4197] do_initcalls+0x4b/0x90 [ 67.738875][ T4197] kernel_init_freeable+0x3ce/0x560 [ 67.744050][ T4197] kernel_init+0x19/0x1b0 [ 67.748354][ T4197] ret_from_fork+0x1f/0x30 [ 67.752743][ T4197] [ 67.755039][ T4197] Memory state around the buggy address: [ 67.760646][ T4197] ffff888058a25b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.768703][ T4197] ffff888058a25b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.776751][ T4197] >ffff888058a25c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.784784][ T4197] ^ [ 67.789087][ T4197] ffff888058a25c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.797130][ T4197] ffff888058a25d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.805160][ T4197] ================================================================== [ 67.813190][ T4197] Disabling lock debugging due to kernel taint [ 67.825345][ T3977] Bluetooth: hci5: command 0x1003 tx timeout [ 67.832165][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 67.839348][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:7 Tainted: G B 5.15.189-syzkaller #0 [ 67.849036][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.859064][ T4197] Workqueue: hci2 hci_rx_work [ 67.863719][ T4197] Call Trace: [ 67.866972][ T4197] [ 67.869877][ T4197] dump_stack_lvl+0x168/0x230 [ 67.874526][ T4197] ? show_regs_print_info+0x20/0x20 [ 67.879699][ T4197] ? load_image+0x3b0/0x3b0 [ 67.884176][ T4197] panic+0x2c9/0x7f0 [ 67.888040][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 67.892516][ T4197] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 67.898402][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 67.903230][ T4197] ? hci_le_meta_evt+0x12c0/0x3b80 [ 67.908314][ T4197] check_panic_on_warn+0x80/0xa0 [ 67.913223][ T4197] ? hci_le_meta_evt+0x12c0/0x3b80 [ 67.918329][ T4197] end_report+0x6d/0xf0 [ 67.922455][ T4197] kasan_report+0x102/0x130 [ 67.926933][ T4197] ? hci_le_meta_evt+0x12c0/0x3b80 [ 67.932027][ T4197] hci_le_meta_evt+0x12c0/0x3b80 [ 67.936940][ T4197] ? hci_event_packet+0x1f0/0x12f0 [ 67.942030][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 67.948092][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 67.953724][ T4197] ? mark_lock+0x94/0x320 [ 67.958044][ T4197] ? mutex_unlock+0x10/0x10 [ 67.962532][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 67.968488][ T4197] ? lock_chain_count+0x20/0x20 [ 67.973312][ T4197] ? __rwlock_init+0x140/0x140 [ 67.978076][ T4197] hci_event_packet+0xe05/0x12f0 [ 67.982997][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 67.988176][ T4197] ? rcu_lock_release+0x20/0x20 [ 67.993004][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 67.998177][ T4197] hci_rx_work+0x255/0xa10 [ 68.002568][ T4197] process_one_work+0x863/0x1000 [ 68.007483][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 68.013176][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 68.018440][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 68.023439][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 68.028784][ T4197] ? wq_worker_running+0x97/0x170 [ 68.033784][ T4197] worker_thread+0xaa8/0x12a0 [ 68.038435][ T4197] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 68.044304][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 68.049479][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 68.054651][ T4197] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 68.060520][ T4197] kthread+0x436/0x520 [ 68.064560][ T4197] ? rcu_lock_release+0x20/0x20 [ 68.069381][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 68.073943][ T4197] ret_from_fork+0x1f/0x30 [ 68.078336][ T4197] [ 68.081518][ T4197] Kernel Offset: disabled [ 68.085831][ T4197] Rebooting in 86400 seconds..