last executing test programs: 34.209795856s ago: executing program 0 (id=132): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x2, 0x3}, 0x4) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 33.700829752s ago: executing program 0 (id=137): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000400)=""/102400, 0x19000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="050000000000000000001000fd67bd094fe65f4f21823fabc9fd4197640f7839ba1c7aabbc4f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 32.944411402s ago: executing program 0 (id=142): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x8) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 32.476571305s ago: executing program 0 (id=146): syz_emit_ethernet(0xf65, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 30.229361133s ago: executing program 0 (id=151): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x6, 0x3, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x67, 0x0, 0x5e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_secret(0x80000) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1c5d741dd17c1ac0d38ef2a565ef1e833630000000000005c38a19d00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c725df8a69ea917deb7ba193b7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x1]}}) 28.125306067s ago: executing program 0 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x5, 0x0, 0x7, 0x8, 0x6a, 0x8001}) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000100a477e3826b289b064093845c5a7828a831ebb73a6b3823000104000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000140)={0x1}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x3, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=r6}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r0, 0x0, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sched_setparam(r6, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 21.177102767s ago: executing program 1 (id=177): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000500), 0xfffffffffffffffe, 0x48203) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0x1, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4241, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="31a161df84ff8b2883d2", 0xa}, {&(0x7f00000007c0)="55ed4fd173c52bae2c5afa86c5276c6fbf8e4d8877bbdd5be20f2eb4032820e05f100bba7b3af0d5d49dda224ec17260bc4a1bc3ac39ca521254ed4072f0d5da378cf7c2f0454343cb4a0a26174a5a6c17e971dba3d55654ba188bcc0889da9315c09245e8e692bf2ef14feb620af769eb", 0x71}, {0x0}], 0x3, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x233f9d9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff49}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbc}}], 0x60}, 0x20000800) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 14.345570637s ago: executing program 1 (id=191): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101880, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) 11.961009417s ago: executing program 32 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x5, 0x0, 0x7, 0x8, 0x6a, 0x8001}) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000100a477e3826b289b064093845c5a7828a831ebb73a6b3823000104000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000140)={0x1}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x3, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=r6}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r0, 0x0, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sched_setparam(r6, &(0x7f0000000080)=0x5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11.917134791s ago: executing program 3 (id=196): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 10.917200604s ago: executing program 3 (id=198): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 10.151079114s ago: executing program 1 (id=199): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x20, 0x19, 0x28, 0x8, 0x93a, 0x2601, 0xb376, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x0, 0xf9, 0x23, 0xe4}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 9.965644541s ago: executing program 3 (id=200): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x5}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x114c83, 0x0) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82602, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x840000000002, 0x3, 0x105) chdir(&(0x7f0000000100)='./file0\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.189691833s ago: executing program 3 (id=203): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8840) sched_setaffinity(0x0, 0xffffffffffffff2b, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000abe000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00008a7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x203, 0xc4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 6.897598324s ago: executing program 1 (id=209): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x1000000, 0x300b, 0x5, 0x9, 0x9fb0, 0xc}) 6.198040159s ago: executing program 4 (id=210): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.724991192s ago: executing program 1 (id=213): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x2, 0x5002) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 4.961407183s ago: executing program 4 (id=217): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000940)={0x14, &(0x7f0000000840)={0x0, 0x7, 0x2, {0x2}}, 0x0}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002280)={0x1c, &(0x7f00000021c0)={0x20, 0x6}, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) 4.515277933s ago: executing program 3 (id=220): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0xa, 0x3, "e2af06"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) 3.672011331s ago: executing program 2 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 3.071725267s ago: executing program 1 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x6, {0x9, 0x2c0, 0xfff, 0xffffffff}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.769080885s ago: executing program 2 (id=224): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) 2.620688918s ago: executing program 2 (id=225): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 1.770458496s ago: executing program 2 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup(0x68af, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000001ffc)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.573698885s ago: executing program 4 (id=227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4004054}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$sock(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}}, {{0x0, 0x0, 0x0}}], 0x564, 0x4040) splice(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xd, 0x3) 1.356307585s ago: executing program 4 (id=228): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x3, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x9000}, 0x80) 919.945685ms ago: executing program 4 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x9) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 845.612772ms ago: executing program 3 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f00000006c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10af9cd970fa80895a0ab6cabf63e8c52104572f16d388de2d4fe7c4809b5dcab54b1bcb5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d7"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(0xffffffffffffffff, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x10) 845.242362ms ago: executing program 2 (id=231): io_uring_setup(0xda6, &(0x7f0000000540)={0x0, 0x73bc, 0x2, 0x2, 0x274}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 214.02948ms ago: executing program 4 (id=232): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x80, 0x0, 0xfffef034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4002280, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 0s ago: executing program 2 (id=233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r1, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000200)=0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4) sendto$inet6(r5, &(0x7f0000000040)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 59.063977][ T4170] cgroup: Unknown subsys name 'net' [ 59.213334][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.739719][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.440766][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 62.493722][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.511708][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.582981][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.617569][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.624755][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.633368][ T4180] device bridge_slave_0 entered promiscuous mode [ 62.666076][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.673406][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.681954][ T4180] device bridge_slave_1 entered promiscuous mode [ 62.701764][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.741082][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.778673][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.788025][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.795108][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.804149][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.840480][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.848025][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.856428][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.863393][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.870816][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.879045][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.891517][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.898672][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.907232][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.932086][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.939346][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.948231][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.964109][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.971448][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.980338][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.990186][ T4180] team0: Port device team_slave_0 added [ 63.027441][ T4180] team0: Port device team_slave_1 added [ 63.043949][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.086999][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.098088][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.108922][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.118403][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.125516][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.134655][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.143061][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.150112][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.176098][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.197680][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.209680][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.219239][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.226945][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.235168][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.242788][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.250172][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.276715][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.332477][ T4188] team0: Port device team_slave_0 added [ 63.354880][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.376070][ T4188] team0: Port device team_slave_1 added [ 63.390904][ T4191] team0: Port device team_slave_0 added [ 63.399047][ T4184] team0: Port device team_slave_0 added [ 63.407440][ T4191] team0: Port device team_slave_1 added [ 63.415578][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.441539][ T4184] team0: Port device team_slave_1 added [ 63.465621][ T4180] device hsr_slave_0 entered promiscuous mode [ 63.472699][ T4180] device hsr_slave_1 entered promiscuous mode [ 63.514784][ T4192] team0: Port device team_slave_0 added [ 63.521214][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.534972][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.561576][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.580758][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.587908][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.614380][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.627968][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.634958][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.661331][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.682537][ T4192] team0: Port device team_slave_1 added [ 63.689309][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.696755][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.723130][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.734820][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.741843][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.767947][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.799283][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.806460][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.832448][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.893966][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.901426][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.928318][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.951068][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.958026][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.964642][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.972631][ T4188] Cannot create hsr debugfs directory [ 63.990613][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.997779][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.023969][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.047195][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.053996][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.061119][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.069003][ T4191] Cannot create hsr debugfs directory [ 64.077860][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.084738][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.089686][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 64.091237][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 64.104489][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 64.110861][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 64.117130][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.124727][ T4184] Cannot create hsr debugfs directory [ 64.166360][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 64.281039][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.289056][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.295751][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.303571][ T4192] Cannot create hsr debugfs directory [ 64.493337][ T4180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.525013][ T4180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.541769][ T4180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.552164][ T4180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.581393][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.600882][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.613549][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.633893][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.701621][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.718123][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.751469][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.773651][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.796885][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.807461][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.839672][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.851098][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.899322][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.923935][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.938571][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.958288][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.977551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.988283][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.000148][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.013591][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.024267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.033231][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.042623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.053143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.062684][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.070184][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.080178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.097868][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.116031][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.134601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.143646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.152673][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.159819][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.168647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.177827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.186942][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.194045][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.205071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.220132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.264089][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.274075][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.283154][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.290321][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.300511][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.310665][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.319955][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.330485][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.339871][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.349373][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.358835][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.382146][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.391526][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.401542][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.412237][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.432328][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.450715][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.460350][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.469870][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.479364][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.489594][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.498472][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.513542][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.522321][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.539148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.548775][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.561873][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.578351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.589189][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.608789][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.635730][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.664594][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.701006][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.731145][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.741572][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.751762][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.758911][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.767477][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.778051][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.787008][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.794132][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.808253][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.817825][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.825845][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.861635][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.881702][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.895703][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.921025][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.940714][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.953732][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.966582][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.975728][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.990946][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.998114][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.006004][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.015221][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.023939][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.031075][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.041178][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.050382][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.062063][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.071048][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.097336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.104906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.113502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.125825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.139548][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.150199][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.163523][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.175432][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.184153][ T4181] Bluetooth: hci0: command 0x041b tx timeout [ 66.190657][ T4181] Bluetooth: hci2: command 0x041b tx timeout [ 66.204769][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.212073][ T4181] Bluetooth: hci1: command 0x041b tx timeout [ 66.218831][ T4181] Bluetooth: hci3: command 0x041b tx timeout [ 66.227717][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.236917][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.245424][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.253085][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 66.254998][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.267576][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.277317][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.286718][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.295551][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.307172][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.328588][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.339301][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.348947][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.358536][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.367576][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.374677][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.383066][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.391994][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.400886][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.408080][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.417627][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.428472][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.452030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.470069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.479900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.492798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.513658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.529211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.542582][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.573967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.590273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.600323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.609669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.620390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.629810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.654200][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.672574][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.695716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.704539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.727940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.747058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.755630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.790976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.814870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.838824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.866868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.875264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.896714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.904886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.923401][ T4188] device veth0_vlan entered promiscuous mode [ 66.938640][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.954352][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.965676][ T4180] device veth0_vlan entered promiscuous mode [ 66.985936][ T4188] device veth1_vlan entered promiscuous mode [ 66.995183][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.006927][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.014998][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.031257][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.041579][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.072522][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.091705][ T4180] device veth1_vlan entered promiscuous mode [ 67.103820][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.113288][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.122693][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.131650][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.170897][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.179338][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.189324][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.211591][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.233597][ T4188] device veth0_macvtap entered promiscuous mode [ 67.255364][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.264129][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.279983][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.294740][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.304283][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.317061][ T4188] device veth1_macvtap entered promiscuous mode [ 67.341163][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.350965][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.375478][ T4180] device veth0_macvtap entered promiscuous mode [ 67.391433][ T4184] device veth0_vlan entered promiscuous mode [ 67.417018][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.425755][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.439228][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.449007][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.458179][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.468285][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.480176][ T4180] device veth1_macvtap entered promiscuous mode [ 67.492218][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.514801][ T4184] device veth1_vlan entered promiscuous mode [ 67.523153][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.532948][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.542547][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.553858][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.562123][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.570719][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.581049][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.597950][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.640991][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.652971][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.670441][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.683768][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.708107][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.717186][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.725507][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.734379][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.743994][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.753219][ T4191] device veth0_vlan entered promiscuous mode [ 67.763468][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.776377][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.785133][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.794702][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.824920][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.833528][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.850868][ T4191] device veth1_vlan entered promiscuous mode [ 67.858986][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.869919][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.882084][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.904286][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.913148][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.923022][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.932620][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.942115][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.954308][ T4180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.963969][ T4180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.979443][ T4180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.988462][ T4180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.054393][ T4184] device veth0_macvtap entered promiscuous mode [ 68.063942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.079474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.091333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.118177][ T4184] device veth1_macvtap entered promiscuous mode [ 68.137833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.147953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.157203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.165763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.175596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.185285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.194501][ T4192] device veth0_vlan entered promiscuous mode [ 68.212123][ T4191] device veth0_macvtap entered promiscuous mode [ 68.234237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.245595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.255174][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 68.261735][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 68.267921][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 68.274721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.282526][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 68.297799][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.310318][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.320742][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.333961][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.337832][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 68.350872][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.360405][ T4191] device veth1_macvtap entered promiscuous mode [ 68.371867][ T4192] device veth1_vlan entered promiscuous mode [ 68.377997][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.386037][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.412563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.421262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.431398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.440894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.449863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.481791][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.492787][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.506462][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.518335][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.530139][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.554062][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.571781][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.582514][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.593615][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.605653][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.616485][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.628446][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.638236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.647804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.657667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.667228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.675881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.697844][ T4192] device veth0_macvtap entered promiscuous mode [ 68.707783][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.717701][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.729154][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.739345][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.763612][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.776085][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.786672][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.797482][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.808740][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.819484][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.831450][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.843008][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.852211][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.861393][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.870260][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.882313][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.883199][ T4192] device veth1_macvtap entered promiscuous mode [ 68.902520][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.921192][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.932246][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.942038][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.950910][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.967897][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.977646][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.985912][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.042212][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.054525][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.065940][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.079498][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.089976][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.100796][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.110975][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.122384][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.135848][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.169919][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.195343][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.208401][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.218019][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.238355][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.251267][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.262455][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.275442][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.285648][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.299578][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.309608][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.321193][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.332562][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.344579][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.353809][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.363021][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.372142][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.412859][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.422538][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.439985][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.529552][ T4292] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.553479][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.566976][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.611970][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.625087][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.634894][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.645662][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.724953][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.733883][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.743799][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.758417][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.778252][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.778931][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.806408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.827400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.854269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.939424][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.949827][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.965702][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.978673][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.995603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.121804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.167184][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.176284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 70.185213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 70.217763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.320280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.422481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 70.524831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 70.577211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.627221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 70.937376][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 70.967748][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 70.989005][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 71.206691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.527685][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.534561][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.207231][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 72.213439][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 73.017435][ T4300] binder: 4296:4300 ioctl c0306201 0 returned -14 [ 73.101261][ T4300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 73.159278][ T4326] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1 [ 73.626027][ T4331] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.286114][ T4330] overlayfs: unrecognized mount option "/" or missing value [ 74.399523][ T4346] process 'syz.2.15' launched './file2' with NULL argv: empty string added [ 74.686802][ T4288] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.090675][ T4360] NILFS (nullb0): couldn't find nilfs on the device [ 75.349996][ T4288] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 75.886374][ T4288] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 75.956317][ T4288] usb 1-1: config 0 interface 0 has no altsetting 0 [ 77.826495][ T4288] usb 1-1: string descriptor 0 read error: -71 [ 77.836359][ T4288] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.885784][ T4288] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.281920][ T4288] usb 1-1: config 0 descriptor?? [ 78.678867][ T4288] usb 1-1: can't set config #0, error -71 [ 78.834964][ T4288] usb 1-1: USB disconnect, device number 2 [ 81.066349][ T4288] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.295760][ T4395] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 81.346290][ T4288] usb 1-1: Using ep0 maxpacket: 8 [ 81.486478][ T4288] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 81.522536][ T4288] usb 1-1: config 179 has no interface number 0 [ 81.537133][ T4288] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 81.592365][ T4288] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 81.675085][ T4288] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.715172][ T4288] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 81.727163][ T4288] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 81.740762][ T4288] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 81.913028][ T4288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.961512][ T4410] capability: warning: `syz.3.25' uses deprecated v2 capabilities in a way that may be insecure [ 82.027171][ T4392] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.296936][ T26] audit: type=1800 audit(1767127982.472:2): pid=4400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.27" name="bus" dev="ramfs" ino=32404 res=0 errno=0 [ 82.467281][ T4288] usb 1-1: USB disconnect, device number 3 [ 82.496224][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.068508][ T4235] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.115182][ T4461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.43'. [ 85.132396][ T4461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.43'. [ 85.386288][ T4235] usb 1-1: Using ep0 maxpacket: 8 [ 85.659201][ T4460] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 85.746401][ T4235] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.764469][ T4235] usb 1-1: no configurations [ 85.770270][ T4235] usb 1-1: can't read configurations, error -22 [ 86.819073][ T1108] cfg80211: failed to load regulatory.db [ 86.926378][ T4249] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.153915][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 87.163095][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 87.726545][ T4249] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.747041][ T4249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.771075][ T4249] usb 2-1: Product: syz [ 87.788319][ T4249] usb 2-1: Manufacturer: syz [ 87.805894][ T4249] usb 2-1: SerialNumber: syz [ 87.880155][ T4249] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.125615][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 88.185210][ T26] audit: type=1326 audit(1767127988.362:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd670f749 code=0x7ffc0000 [ 88.222133][ T26] audit: type=1326 audit(1767127988.392:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd670f749 code=0x7ffc0000 [ 89.542841][ T1111] usb 2-1: USB disconnect, device number 2 [ 89.546695][ T4249] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 89.586709][ T1111] usb 2-1: ath9k_htc: USB layer deinitialized [ 89.858274][ T4516] ======================================================= [ 89.858274][ T4516] WARNING: The mand mount option has been deprecated and [ 89.858274][ T4516] and is ignored by this kernel. Remove the mand [ 89.858274][ T4516] option from the mount to silence this warning. [ 89.858274][ T4516] ======================================================= [ 91.098109][ T4522] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.227596][ T4496] syz.3.56 (4496) used greatest stack depth: 21024 bytes left [ 93.500612][ T4536] netlink: 'syz.1.68': attribute type 15 has an invalid length. [ 93.597448][ T4538] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 97.296648][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.322000][ T4570] Zero length message leads to an empty skb [ 97.533525][ T26] audit: type=1326 audit(1767127997.712:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.2.85" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8233d50749 code=0x0 [ 98.424113][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'. [ 98.437864][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'. [ 98.454723][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'. [ 98.464476][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'. [ 98.697555][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 98.716278][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.724831][ T23] usb 1-1: Product: syz [ 98.741377][ T23] usb 1-1: Manufacturer: syz [ 98.746323][ T23] usb 1-1: SerialNumber: syz [ 100.036667][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 100.049794][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 100.061221][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 100.071298][ T23] lan78xx: probe of 1-1:1.0 failed with error -71 [ 100.089796][ T23] usb 1-1: USB disconnect, device number 6 [ 101.189500][ T4642] tmpfs: Unknown parameter 'usrquota' [ 101.196407][ T4288] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.107949][ T4288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.136590][ T4288] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 103.181522][ T4288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.518793][ T4288] usb 4-1: config 0 descriptor?? [ 103.676397][ T4288] usb 4-1: can't set config #0, error -71 [ 103.690881][ T4288] usb 4-1: USB disconnect, device number 2 [ 104.836051][ T4666] orangefs_mount: mount request failed with -4 [ 106.848162][ T4703] syz.4.121[4703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.848270][ T4703] syz.4.121[4703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.884800][ T4288] kernel write not supported for file /input/mouse0 (pid: 4288 comm: kworker/0:6) [ 109.004004][ T4591] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 111.426362][ T4591] usb 4-1: device descriptor read/all, error -71 [ 114.046159][ C0] sched: RT throttling activated [ 118.091092][ T4240] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.649241][ T4843] sctp: failed to load transform for md5: -2 [ 119.530123][ T4240] usb 2-1: Using ep0 maxpacket: 16 [ 119.647166][ T4240] usb 2-1: config 0 has no interfaces? [ 119.816772][ T4240] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 119.826097][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.866311][ T4240] usb 2-1: Product: syz [ 119.866338][ T4240] usb 2-1: Manufacturer: syz [ 119.866350][ T4240] usb 2-1: SerialNumber: syz [ 119.873785][ T4240] usb 2-1: config 0 descriptor?? [ 119.986747][ T4220] usb 2-1: USB disconnect, device number 3 [ 120.125373][ T4870] overlayfs: upper fs does not support file handles, falling back to index=off. [ 120.186350][ T4240] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 120.310406][ T4875] sctp: [Deprecated]: syz.2.170 (pid 4875) Use of int in max_burst socket option. [ 120.310406][ T4875] Use struct sctp_assoc_value instead [ 120.558933][ T4240] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.588647][ T4240] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 120.614156][ T4240] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 120.641155][ T4240] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 120.676336][ T4235] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.829061][ T4240] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.848244][ T4240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.865672][ T4240] usb 4-1: Product: syz [ 120.871115][ T4240] usb 4-1: Manufacturer: syz [ 120.879682][ T4240] usb 4-1: SerialNumber: syz [ 120.916691][ T4861] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.937728][ T4240] cdc_mbim 4-1:1.0: skipping garbage [ 121.138444][ T4861] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.156477][ T4861] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.267997][ T4235] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.986916][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.994971][ T4235] usb 2-1: Product: syz [ 122.066967][ T4235] usb 2-1: Manufacturer: syz [ 122.204462][ T4235] usb 2-1: SerialNumber: syz [ 122.552482][ T4885] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.976644][ T4885] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.986400][ T4240] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 123.010556][ T4240] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 123.027422][ T4235] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 123.092888][ T4240] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 7a:a8:76:86:25:b9 [ 123.203328][ T4240] usb 4-1: USB disconnect, device number 5 [ 123.229139][ T4240] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 123.473248][ T4220] usb 2-1: USB disconnect, device number 4 [ 123.486442][ T4235] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 124.347107][ T4220] usb 2-1: ath9k_htc: USB layer deinitialized [ 126.507074][ T4919] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 130.716400][ T4240] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.776328][ T4240] usb 4-1: Using ep0 maxpacket: 32 [ 132.086319][ T4240] usb 4-1: device descriptor read/all, error -71 [ 133.135731][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.142111][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.533538][ T4972] xt_TCPMSS: Only works on TCP SYN packets [ 135.447917][ T4235] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 135.886533][ T4235] usb 2-1: config 2 has an invalid interface number: 219 but max is 0 [ 136.046604][ T4235] usb 2-1: config 2 has no interface number 0 [ 136.052896][ T4235] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 136.069000][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.337985][ T4235] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 137.776330][ T4235] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 137.784263][ T4235] pac7311: probe of 2-1:2.219 failed with error -71 [ 137.909870][ T4982] chnl_net:caif_netlink_parms(): no params data found [ 138.042918][ T4235] usb 2-1: USB disconnect, device number 5 [ 138.154242][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.175557][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.206285][ T4240] Bluetooth: hci5: command 0x0409 tx timeout [ 139.222152][ T4982] device bridge_slave_0 entered promiscuous mode [ 139.347331][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.354464][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.586522][ T4982] device bridge_slave_1 entered promiscuous mode [ 139.793814][ T4982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.867795][ T4982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.118014][ T4982] team0: Port device team_slave_0 added [ 140.292390][ T4982] team0: Port device team_slave_1 added [ 140.629109][ T4982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.649850][ T4982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.676224][ T4249] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 140.816714][ T4982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.046513][ T4249] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.156330][ T4235] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.413528][ T4240] Bluetooth: hci5: command 0x041b tx timeout [ 141.464255][ T4249] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 141.488664][ T4249] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.559128][ T4982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.574760][ T4982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.658939][ T4982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.726501][ T4249] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 141.736411][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 141.746534][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 141.772490][ T4249] usb 5-1: Product: syz [ 141.782649][ T4249] usb 5-1: Manufacturer: syz [ 141.787820][ T4249] usb 5-1: SerialNumber: syz [ 141.846194][ T4249] usb 5-1: config 0 descriptor?? [ 141.856765][ T4235] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 141.866664][ T4235] usb 4-1: config 0 has no interface number 0 [ 141.872884][ T4235] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.889051][ T4249] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 141.899286][ T5056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.909439][ T4249] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 141.918429][ T4249] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 141.963551][ T4982] device hsr_slave_0 entered promiscuous mode [ 141.979081][ T4982] device hsr_slave_1 entered promiscuous mode [ 141.992264][ T4982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.001027][ T4982] Cannot create hsr debugfs directory [ 142.036476][ T4235] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 142.076350][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.095203][ T4235] usb 4-1: Product: syz [ 142.099690][ T4235] usb 4-1: Manufacturer: syz [ 142.105352][ T4235] usb 4-1: SerialNumber: syz [ 142.125394][ T4235] usb 4-1: config 0 descriptor?? [ 142.137686][ T4471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.169640][ T4235] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 142.190476][ T4235] em28xx 4-1:0.132: Video interface 132 found: [ 142.269172][ T4471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.326002][ T4471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.399626][ T4471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.619522][ T4235] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 143.015689][ T5074] overlayfs: failed to clone upperpath [ 143.546296][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 143.582685][ T4982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.606655][ T4287] Bluetooth: hci2: command 0x201b tx timeout [ 143.633145][ T4982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.678076][ T4220] usb 5-1: USB disconnect, device number 2 [ 143.719614][ T4982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.786362][ T4235] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 143.799520][ T4982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.826271][ T4235] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 143.877455][ T4235] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 144.026207][ T4235] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 144.047084][ T4235] em28xx 4-1:0.132: analog set to bulk mode. [ 144.137652][ T4235] usb 4-1: USB disconnect, device number 8 [ 144.306874][ T4235] em28xx 4-1:0.132: Disconnecting em28xx [ 144.315982][ T4287] em28xx 4-1:0.132: Registering V4L2 extension [ 144.330465][ T4982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.618126][ T4982] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.445915][ T4287] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 145.457948][ T4287] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 145.465537][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.481327][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.516190][ T4287] em28xx 4-1:0.132: No AC97 audio processor [ 145.543051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.582493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.639246][ T4287] usb 4-1: Decoder not found [ 145.643996][ T4287] em28xx 4-1:0.132: failed to create media graph [ 145.649463][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.657440][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.769182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.787728][ T4287] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 145.817038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.840117][ T4287] em28xx 4-1:0.132: Remote control support is not available for this card. [ 145.841416][ T5128] ================================================================== [ 145.857323][ T5128] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.864336][ T5128] Read of size 8 at addr ffff88805d8a0900 by task v4l_id/5128 [ 145.871910][ T5128] [ 145.874265][ T5128] CPU: 0 PID: 5128 Comm: v4l_id Not tainted syzkaller #0 [ 145.881405][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.891548][ T5128] Call Trace: [ 145.894868][ T5128] [ 145.897840][ T5128] dump_stack_lvl+0x168/0x230 [ 145.902535][ T5128] ? show_regs_print_info+0x20/0x20 [ 145.907737][ T5128] ? _printk+0xcc/0x110 [ 145.911924][ T5128] ? v4l2_fh_open+0xc6/0x430 [ 145.916524][ T5128] ? load_image+0x3b0/0x3b0 [ 145.921036][ T5128] print_address_description+0x60/0x2d0 [ 145.926592][ T5128] ? v4l2_fh_open+0xc6/0x430 [ 145.931209][ T5128] kasan_report+0xdf/0x130 [ 145.935647][ T5128] ? v4l2_fh_open+0xc6/0x430 [ 145.940252][ T5128] v4l2_fh_open+0xc6/0x430 [ 145.944676][ T5128] em28xx_v4l2_open+0x152/0x990 [ 145.949753][ T5128] ? __lock_acquire+0x7c60/0x7c60 [ 145.954938][ T5128] v4l2_open+0x20b/0x360 [ 145.959273][ T5128] chrdev_open+0x597/0x670 [ 145.963694][ T5128] ? cd_forget+0x160/0x160 [ 145.968117][ T5128] ? tomoyo_file_open+0xe9/0x170 [ 145.973060][ T5128] ? fsnotify_perm+0x3a7/0x560 [ 145.977829][ T5128] ? cd_forget+0x160/0x160 [ 145.982260][ T5128] do_dentry_open+0x7ff/0xf80 [ 145.986951][ T5128] path_openat+0x2682/0x2f30 [ 145.991557][ T5128] ? __kasan_slab_alloc+0xb3/0xd0 [ 145.996586][ T5128] ? __kasan_slab_alloc+0x9c/0xd0 [ 146.001759][ T5128] ? slab_post_alloc_hook+0x4c/0x380 [ 146.007065][ T5128] ? verify_lock_unused+0x140/0x140 [ 146.012474][ T5128] ? __x64_sys_openat+0x135/0x160 [ 146.017520][ T5128] ? do_filp_open+0x3e0/0x3e0 [ 146.022219][ T5128] do_filp_open+0x1b3/0x3e0 [ 146.026729][ T5128] ? vfs_tmpfile+0x300/0x300 [ 146.031360][ T5128] ? _raw_spin_unlock+0x24/0x40 [ 146.036231][ T5128] ? alloc_fd+0x598/0x630 [ 146.040589][ T5128] do_sys_openat2+0x142/0x4a0 [ 146.045315][ T5128] ? __lock_acquire+0x7c60/0x7c60 [ 146.050347][ T5128] ? do_sys_open+0xe0/0xe0 [ 146.054771][ T5128] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 146.060753][ T5128] ? lock_chain_count+0x20/0x20 [ 146.065603][ T5128] ? vtime_user_exit+0x2dc/0x400 [ 146.070546][ T5128] __x64_sys_openat+0x135/0x160 [ 146.075405][ T5128] do_syscall_64+0x4c/0xa0 [ 146.079823][ T5128] ? clear_bhb_loop+0x30/0x80 [ 146.084500][ T5128] ? clear_bhb_loop+0x30/0x80 [ 146.089191][ T5128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.095133][ T5128] RIP: 0033:0x7fcf32179407 [ 146.099586][ T5128] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 146.100355][ T4235] em28xx 4-1:0.132: Closing input extension [ 146.119230][ T5128] RSP: 002b:00007fff6d664120 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 146.119261][ T5128] RAX: ffffffffffffffda RBX: 00007fcf3208b880 RCX: 00007fcf32179407 [ 146.119276][ T5128] RDX: 0000000000000000 RSI: 00007fff6d665f1b RDI: ffffffffffffff9c [ 146.119290][ T5128] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 146.119301][ T5128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 146.119314][ T5128] R13: 00007fff6d664370 R14: 00007fcf32907000 R15: 0000564abe8cb4d8 [ 146.119345][ T5128] [ 146.119353][ T5128] [ 146.179101][ T5128] The buggy address belongs to the page: [ 146.184761][ T5128] page:ffffea0001762800 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d8a0 [ 146.194927][ T5128] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 146.202158][ T5128] raw: 00fff00000000000 ffffea0001980c08 ffff8880b91409f0 0000000000000000 [ 146.210762][ T5128] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 146.219361][ T5128] page dumped because: kasan: bad access detected [ 146.225780][ T5128] page_owner tracks the page as freed [ 146.231150][ T5128] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 4287, ts 144326879389, free_ts 145839107857 [ 146.246859][ T5128] get_page_from_freelist+0x1b77/0x1c60 [ 146.252426][ T5128] __alloc_pages+0x1e1/0x470 [ 146.257017][ T5128] kmalloc_order+0x40/0x150 [ 146.261519][ T5128] kmalloc_order_trace+0x14/0xf0 [ 146.266573][ T5128] em28xx_v4l2_init+0xe2/0x2e50 [ 146.271435][ T5128] em28xx_init_extension+0x118/0x1b0 [ 146.276716][ T5128] process_one_work+0x863/0x1000 [ 146.281671][ T5128] worker_thread+0xd76/0x12a0 [ 146.286464][ T5128] kthread+0x436/0x520 [ 146.290530][ T5128] ret_from_fork+0x1f/0x30 [ 146.294996][ T5128] page last free stack trace: [ 146.299664][ T5128] free_unref_page_prepare+0x637/0x6c0 [ 146.305130][ T5128] free_unref_page+0x94/0x280 [ 146.309841][ T5128] free_nonslab_page+0xe2/0x150 [ 146.314692][ T5128] em28xx_v4l2_init+0x1649/0x2e50 [ 146.319716][ T5128] em28xx_init_extension+0x118/0x1b0 [ 146.325001][ T5128] process_one_work+0x863/0x1000 [ 146.329959][ T5128] worker_thread+0xd76/0x12a0 [ 146.334633][ T5128] kthread+0x436/0x520 [ 146.338713][ T5128] ret_from_fork+0x1f/0x30 [ 146.343153][ T5128] [ 146.345490][ T5128] Memory state around the buggy address: [ 146.351115][ T5128] ffff88805d8a0800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.359373][ T5128] ffff88805d8a0880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.367432][ T5128] >ffff88805d8a0900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.375483][ T5128] ^ [ 146.379545][ T5128] ffff88805d8a0980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.387601][ T5128] ffff88805d8a0a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 146.395656][ T5128] ================================================================== [ 146.403773][ T5128] Disabling lock debugging due to kernel taint [ 146.436859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.466634][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.473833][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.533759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.577799][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 146.875320][ T5128] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.882582][ T5128] CPU: 0 PID: 5128 Comm: v4l_id Tainted: G B syzkaller #0 [ 146.891036][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.901121][ T5128] Call Trace: [ 146.904453][ T5128] [ 146.907402][ T5128] dump_stack_lvl+0x168/0x230 [ 146.912107][ T5128] ? show_regs_print_info+0x20/0x20 [ 146.917321][ T5128] ? load_image+0x3b0/0x3b0 [ 146.921852][ T5128] panic+0x2c9/0x7f0 [ 146.925774][ T5128] ? bpf_jit_dump+0xd0/0xd0 [ 146.930289][ T5128] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 146.936395][ T5128] ? _raw_spin_unlock+0x40/0x40 [ 146.941264][ T5128] ? print_memory_metadata+0x314/0x400 [ 146.946753][ T5128] ? v4l2_fh_open+0xc6/0x430 [ 146.951359][ T5128] check_panic_on_warn+0x80/0xa0 [ 146.956316][ T5128] ? v4l2_fh_open+0xc6/0x430 [ 146.961016][ T5128] end_report+0x6d/0xf0 [ 146.965192][ T5128] kasan_report+0x102/0x130 [ 146.969713][ T5128] ? v4l2_fh_open+0xc6/0x430 [ 146.974316][ T5128] v4l2_fh_open+0xc6/0x430 [ 146.978744][ T5128] em28xx_v4l2_open+0x152/0x990 [ 146.983612][ T5128] ? __lock_acquire+0x7c60/0x7c60 [ 146.988656][ T5128] v4l2_open+0x20b/0x360 [ 146.992946][ T5128] chrdev_open+0x597/0x670 [ 146.997384][ T5128] ? cd_forget+0x160/0x160 [ 147.001828][ T5128] ? tomoyo_file_open+0xe9/0x170 [ 147.006830][ T5128] ? fsnotify_perm+0x3a7/0x560 [ 147.011620][ T5128] ? cd_forget+0x160/0x160 [ 147.016059][ T5128] do_dentry_open+0x7ff/0xf80 [ 147.020758][ T5128] path_openat+0x2682/0x2f30 [ 147.025378][ T5128] ? __kasan_slab_alloc+0xb3/0xd0 [ 147.030427][ T5128] ? __kasan_slab_alloc+0x9c/0xd0 [ 147.035461][ T5128] ? slab_post_alloc_hook+0x4c/0x380 [ 147.040760][ T5128] ? verify_lock_unused+0x140/0x140 [ 147.045971][ T5128] ? __x64_sys_openat+0x135/0x160 [ 147.051010][ T5128] ? do_filp_open+0x3e0/0x3e0 [ 147.055704][ T5128] do_filp_open+0x1b3/0x3e0 [ 147.060227][ T5128] ? vfs_tmpfile+0x300/0x300 [ 147.064849][ T5128] ? _raw_spin_unlock+0x24/0x40 [ 147.069723][ T5128] ? alloc_fd+0x598/0x630 [ 147.074066][ T5128] do_sys_openat2+0x142/0x4a0 [ 147.078764][ T5128] ? __lock_acquire+0x7c60/0x7c60 [ 147.083813][ T5128] ? do_sys_open+0xe0/0xe0 [ 147.088245][ T5128] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 147.094335][ T5128] ? lock_chain_count+0x20/0x20 [ 147.099200][ T5128] ? vtime_user_exit+0x2dc/0x400 [ 147.104174][ T5128] __x64_sys_openat+0x135/0x160 [ 147.109046][ T5128] do_syscall_64+0x4c/0xa0 [ 147.113479][ T5128] ? clear_bhb_loop+0x30/0x80 [ 147.118190][ T5128] ? clear_bhb_loop+0x30/0x80 [ 147.122915][ T5128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.128827][ T5128] RIP: 0033:0x7fcf32179407 [ 147.133269][ T5128] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 147.152915][ T5128] RSP: 002b:00007fff6d664120 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 147.161339][ T5128] RAX: ffffffffffffffda RBX: 00007fcf3208b880 RCX: 00007fcf32179407 [ 147.169328][ T5128] RDX: 0000000000000000 RSI: 00007fff6d665f1b RDI: ffffffffffffff9c [ 147.177322][ T5128] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 147.185310][ T5128] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 147.193296][ T5128] R13: 00007fff6d664370 R14: 00007fcf32907000 R15: 0000564abe8cb4d8 [ 147.201293][ T5128] [ 147.204604][ T5128] Kernel Offset: disabled [ 147.208953][ T5128] Rebooting in 86400 seconds..