last executing test programs: 17.303872355s ago: executing program 0 (id=18): pipe2(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 16.137505397s ago: executing program 0 (id=19): socket$kcm(0xa, 0x1, 0x106) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000060a0b1600000000000004"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000007010e0000000000000000050000020c000640005250000000007c08"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000320015062bbd7000fbdbdf250c"], 0x90}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x98}}, 0x74800) socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 13.874999907s ago: executing program 0 (id=24): syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) 11.617864076s ago: executing program 0 (id=33): syz_open_dev$loop(0x0, 0x9, 0x2400) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000040)={[{}, {@noquota}]}, 0x1, 0x5b9, &(0x7f0000001640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.221373502s ago: executing program 2 (id=36): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x26000, 0x200000, 0xe, 0xbb, 0x2, 0x6, 0xfe, 0x0, 0xe, 0x4, 0x4, 0x6}, {0x3000, 0x0, 0x3, 0x7, 0x3, 0x1, 0x8, 0x4, 0x4, 0x5, 0x9, 0x5}, {0x30000, 0x58000, 0x3, 0xf, 0x0, 0x5, 0xfa, 0x5, 0x1, 0x1, 0x7, 0x1}, {0x100000, 0x2000, 0xb, 0x0, 0x6, 0x49, 0x7, 0xff, 0xb, 0x9d, 0x85, 0x3}, {0x8080000, 0x26000, 0xa, 0x7, 0x6, 0x3, 0xd, 0x1, 0x8, 0xe, 0x21, 0x5}, {0xffffffff, 0xffff1000, 0xe, 0x63, 0x7, 0x2, 0x4, 0x7, 0x5, 0x0, 0x5, 0xa}, {0x1, 0x70000, 0xf, 0x0, 0x2, 0x7a, 0x1, 0x7f, 0x3, 0x5, 0x2, 0xd}, {0x70000, 0xffff1000, 0x1c, 0x0, 0x6, 0x87, 0x7, 0x6a, 0x4, 0x4, 0x6}, {0x200000, 0x401}, {0x60000, 0x7fff}, 0xe, 0x0, 0xdddd0000, 0x4000, 0xc, 0xb001, 0xfec00000, [0x4, 0xc, 0x8000000000000001, 0x3]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x8, 0x0, &(0x7f0000bbdffc)) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001c00070c27bd70000000000008000000", @ANYRES32=r3, @ANYBLOB="3f00a20a0a000100ffffffffffff00001400030009"], 0x48}}, 0x0) 7.917257291s ago: executing program 0 (id=39): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x42, 0x100405, 0x10}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x18, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}, [@typed={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x11, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x6, 0x3, 0x7, 0x4, 0x9], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.563003424s ago: executing program 2 (id=42): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=@generic={0x0, 0x2, 0x0, "15e9839e"}) 6.394952872s ago: executing program 4 (id=44): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.354529094s ago: executing program 4 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5", 0x2c}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x8000000000000000, 0xa1d, 0x4, 0x5, 0x0, 0x3, 0xfffffffffffffff9], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.05208851s ago: executing program 0 (id=46): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, 0xfffffffffffffffe) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.449037342s ago: executing program 32 (id=46): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, 0xfffffffffffffffe) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.436758783s ago: executing program 4 (id=50): pipe2(0x0, 0x80) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x82bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000006c0)={0x2, {{0x2, 0x4e1c, @multicast2}}, {{0x2, 0x4e21, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x8000, @empty}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 5.380123785s ago: executing program 1 (id=51): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) 5.28928821s ago: executing program 1 (id=52): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 5.261164402s ago: executing program 1 (id=53): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20130400"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.999851896s ago: executing program 3 (id=54): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {0x0, 0x2710}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003}) 4.872991723s ago: executing program 3 (id=55): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 4.185143429s ago: executing program 3 (id=56): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8b, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902790002010000400904000001020d00000b2406000100000000000005240009800d240f0102000000000000000006241a00000007240a7302b3ff08241c020005090008241cfeff09e70009058103fe010b02050904010000020d00000904010102020d0000090582020800000200090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.660545057s ago: executing program 4 (id=57): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.03397338s ago: executing program 2 (id=58): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 2.912167567s ago: executing program 2 (id=59): ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r0 = gettid() syz_usb_connect(0x6, 0x36, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.376884255s ago: executing program 1 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, 0x0) 2.27876131s ago: executing program 2 (id=61): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) 2.219593423s ago: executing program 1 (id=62): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2.210097784s ago: executing program 1 (id=63): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.187487035s ago: executing program 2 (id=64): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000010c0)={0x1c, &(0x7f0000000bc0)={0x0, 0x10, 0x1, "ac"}, 0x0, 0x0}) 1.252816534s ago: executing program 3 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r1, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 1.092064763s ago: executing program 3 (id=66): pipe2(0x0, 0x80) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x82bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000006c0)={0x2, {{0x2, 0x4e1c, @multicast2}}, {{0x2, 0x4e21, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x8000, @empty}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 912.722242ms ago: executing program 4 (id=67): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001600)="f776", 0x2}], 0x1}}], 0x1, 0x80) 104.715875ms ago: executing program 3 (id=68): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 4 (id=69): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0xac8, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @win={{0x81, 0x4, 0x5, 0x7ff}, 0x4, 0x6, &(0x7f0000000340)={{0x4, 0x80000001, 0x4, 0x8001}}, 0x80000001, 0x0, 0x4}}) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 59.792197][ T4172] cgroup: Unknown subsys name 'net' [ 59.922310][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.217751][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.497049][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.593927][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.621042][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.697782][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 62.707831][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.715042][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.723393][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.735070][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.742358][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.750459][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.779524][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.808345][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.815432][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.823799][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.854197][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.861579][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.869814][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.879042][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.917251][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.941881][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.949297][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.957645][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.987978][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.995029][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.003126][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.018298][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.032392][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.039937][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.048098][ T4195] device bridge_slave_0 entered promiscuous mode [ 63.072741][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.084130][ T4186] team0: Port device team_slave_0 added [ 63.090424][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.097663][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.105466][ T4195] device bridge_slave_1 entered promiscuous mode [ 63.114602][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.123786][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.131011][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.139569][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.153518][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.160782][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.168684][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.176931][ T4186] team0: Port device team_slave_1 added [ 63.200785][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.222359][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.239976][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.262017][ T4194] team0: Port device team_slave_0 added [ 63.281311][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.292459][ T4185] team0: Port device team_slave_0 added [ 63.300298][ T4185] team0: Port device team_slave_1 added [ 63.307688][ T4194] team0: Port device team_slave_1 added [ 63.314062][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.321168][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.347439][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.364811][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.372203][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.398210][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.411869][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.434353][ T4192] team0: Port device team_slave_0 added [ 63.442306][ T4192] team0: Port device team_slave_1 added [ 63.489825][ T4195] team0: Port device team_slave_0 added [ 63.496197][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.503599][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.530091][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.541905][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.549293][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.575662][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.588015][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.594980][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.621172][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.640744][ T4195] team0: Port device team_slave_1 added [ 63.654396][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.661625][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.687773][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.699428][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.706596][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.733066][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.759322][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.766341][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.792324][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.820530][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.827281][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.857538][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.864253][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.870910][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.878825][ T4185] Cannot create hsr debugfs directory [ 63.885117][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.892212][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.918158][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.931315][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.938599][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.964686][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.014944][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.022433][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.029617][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.037569][ T4192] Cannot create hsr debugfs directory [ 64.085427][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.092332][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.099328][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.107274][ T4194] Cannot create hsr debugfs directory [ 64.141374][ T4195] device hsr_slave_0 entered promiscuous mode [ 64.148382][ T4195] device hsr_slave_1 entered promiscuous mode [ 64.154972][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.163058][ T4195] Cannot create hsr debugfs directory [ 64.257281][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 64.264050][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 64.326374][ T4197] Bluetooth: hci4: command 0x0409 tx timeout [ 64.335963][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 64.351329][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 64.436017][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.447851][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.457020][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.470163][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.503745][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.525243][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.547860][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.558262][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.581488][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.605090][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.617731][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.631220][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.675632][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.707478][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.730367][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.742403][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.752182][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.761573][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.781105][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.796702][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.804471][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.814598][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.824195][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.831506][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.840964][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.875125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.884541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.894406][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.901540][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.913252][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.922529][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.933436][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.945786][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.967089][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.988354][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.004317][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.028230][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.037261][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.045062][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.058773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.068472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.079779][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.093548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.101854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.111459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.141355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.149645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.159106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.167910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.177565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.186040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.194632][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.201710][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.212085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.221305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.230124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.244486][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.256061][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.265314][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.277981][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.285035][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.297809][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.308548][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.347310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.358671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.367920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.377597][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.384660][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.393116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.401532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.409844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.419112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.429594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.438624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.447819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.456533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.464938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.483456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.492270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.500571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.512453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.521191][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.528304][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.537249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.548828][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.562689][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.572980][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.581768][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.598693][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.624096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.638859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.659847][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.666972][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.698421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.708935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.719658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.728498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.736138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.744949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.753113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.763899][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.788002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.802506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.811937][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.819314][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.833717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.843161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.858238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.867798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.876055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.885153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.893799][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.900927][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.926721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.935310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.946926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.955389][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.962498][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.972466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.982667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.990507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.998035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.007272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.016794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.024950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.035106][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.056844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.065682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.075378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.085770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.095427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.103849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.112770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.123701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.131763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.143559][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.174977][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.190739][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.203787][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.215044][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.229024][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.239933][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.251903][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.265683][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.283760][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.310993][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.319919][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.328440][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 66.334873][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 66.340971][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.342361][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.358184][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.367511][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.375683][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.384853][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.396133][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.409157][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 66.416906][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 66.432878][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 66.509731][ T4185] device veth0_vlan entered promiscuous mode [ 66.536862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.545791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.578071][ T4185] device veth1_vlan entered promiscuous mode [ 66.599009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.608404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.628074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.690411][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.699772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.709937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.726744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.753197][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.768713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.776163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.784160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.794249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.808114][ T4185] device veth0_macvtap entered promiscuous mode [ 66.825808][ T4185] device veth1_macvtap entered promiscuous mode [ 66.858976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.867869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.877273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.886072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.897264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.906186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.913940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.925221][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.939478][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.959828][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.969040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.979625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.988845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.998179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.007892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.016921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.040763][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.051115][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.061018][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.070046][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.087471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.095950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.125306][ T4194] device veth0_vlan entered promiscuous mode [ 67.136079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.144766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.152951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.162113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.171209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.179807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.188618][ T4186] device veth0_vlan entered promiscuous mode [ 67.195565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.203625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.212118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.220135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.231258][ T4192] device veth0_vlan entered promiscuous mode [ 67.256489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.265245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.280880][ T4192] device veth1_vlan entered promiscuous mode [ 67.295840][ T4194] device veth1_vlan entered promiscuous mode [ 67.321417][ T4186] device veth1_vlan entered promiscuous mode [ 67.379615][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.394678][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.413676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.422858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.431517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.440479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.451857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.460782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.469708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.478389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.488206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.496793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.505078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.514054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.522301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.532321][ T4194] device veth0_macvtap entered promiscuous mode [ 67.545624][ T4194] device veth1_macvtap entered promiscuous mode [ 67.556856][ T4195] device veth0_vlan entered promiscuous mode [ 67.573760][ T4186] device veth0_macvtap entered promiscuous mode [ 67.584560][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.593377][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.602125][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.611888][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.620642][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.629256][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.638056][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.661722][ T4195] device veth1_vlan entered promiscuous mode [ 67.669468][ T4192] device veth0_macvtap entered promiscuous mode [ 67.680427][ T4192] device veth1_macvtap entered promiscuous mode [ 67.695427][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.705093][ T4186] device veth1_macvtap entered promiscuous mode [ 67.711546][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.729290][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.738875][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.747577][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.755463][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.763986][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.779845][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.800387][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.811677][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.829548][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.844961][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.868539][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.882120][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.894883][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.912384][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.923385][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.934948][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.946026][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.956723][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.966961][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.977650][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.988994][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.996858][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.005592][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.016443][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.024957][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.036284][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.044861][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.056047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.064701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.074943][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.086053][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.098132][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.108062][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.124253][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.134363][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.152732][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.164762][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.201587][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.212211][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.223188][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.235420][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.245433][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.258505][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.270148][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.280754][ T4195] device veth0_macvtap entered promiscuous mode [ 68.289420][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.298558][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.308724][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.318531][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.328981][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.338048][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.347868][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.364249][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.373580][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.382574][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.391816][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.407741][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 68.414153][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 68.421191][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.431161][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.440173][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.449197][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.462367][ T4195] device veth1_macvtap entered promiscuous mode [ 68.470749][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.481798][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.491060][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 68.497150][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.506000][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.506975][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 68.520888][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 68.575453][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.588651][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.599022][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.610303][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.620493][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.631154][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.641520][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.652837][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.664130][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.705262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.717421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.727277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.742399][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.753270][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.763555][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.774443][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.784543][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.795239][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.805446][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.817719][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.831300][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.871212][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.883726][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.895904][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.907174][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.915893][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.924634][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.958738][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.974427][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.997643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.042533][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.068169][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.104540][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.113017][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.123875][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.158184][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.165806][ T4268] loop1: detected capacity change from 0 to 512 [ 69.179137][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.189329][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.200054][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.205953][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.230333][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.249576][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.270201][ T4268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.6: missing EA_INODE flag [ 69.292496][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.301667][ T4268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.6: error while reading EA inode 12 err=-117 [ 69.309810][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.325373][ T4268] EXT4-fs (loop1): 1 orphan inode deleted [ 69.332301][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.336713][ T4268] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 69.361063][ T1509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.373028][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.382979][ T1509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.391493][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.401154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.415419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.821429][ T4282] loop2: detected capacity change from 0 to 256 [ 69.834681][ T4281] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 69.877364][ T4277] binfmt_misc: register: failed to install interpreter file ./file2 [ 69.963145][ T4281] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 70.257328][ T4286] Cannot find add_set index 0 as target [ 70.287116][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.456485][ T4282] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 70.493790][ T4197] Bluetooth: hci1: command 0x0419 tx timeout [ 70.500235][ T4197] Bluetooth: hci0: command 0x0419 tx timeout [ 70.694961][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 70.701128][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 70.707267][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 71.437177][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.443811][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.562048][ T4297] loop1: detected capacity change from 0 to 512 [ 72.624416][ T4297] ======================================================= [ 72.624416][ T4297] WARNING: The mand mount option has been deprecated and [ 72.624416][ T4297] and is ignored by this kernel. Remove the mand [ 72.624416][ T4297] option from the mount to silence this warning. [ 72.624416][ T4297] ======================================================= [ 72.663097][ T4304] loop3: detected capacity change from 0 to 512 [ 72.722556][ T4297] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.739456][ T4305] process 'syz.4.12' launched '/dev/fd/5' with NULL argv: empty string added [ 72.749264][ T4297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.793314][ T4310] loop4: detected capacity change from 0 to 256 [ 72.805715][ T4304] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,noquota,,errors=continue. Quota mode: writeback. [ 72.874044][ T4297] EXT4-fs (loop1): 1 truncate cleaned up [ 72.926387][ T4297] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.043252][ T4310] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.087622][ T4310] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 73.135375][ T4310] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.159925][ T4319] loop1: detected capacity change from 0 to 256 [ 73.330661][ T4319] FAT-fs (loop1): Directory bread(block 64) failed [ 73.407350][ T4319] FAT-fs (loop1): Directory bread(block 65) failed [ 73.427511][ T4319] FAT-fs (loop1): Directory bread(block 66) failed [ 73.456828][ T4319] FAT-fs (loop1): Directory bread(block 67) failed [ 73.554516][ T4319] FAT-fs (loop1): Directory bread(block 68) failed [ 73.652425][ T4319] FAT-fs (loop1): Directory bread(block 69) failed [ 73.765549][ T4319] FAT-fs (loop1): Directory bread(block 70) failed [ 73.861992][ T4319] FAT-fs (loop1): Directory bread(block 71) failed [ 73.957668][ T4319] FAT-fs (loop1): Directory bread(block 72) failed [ 74.271665][ T4319] FAT-fs (loop1): Directory bread(block 73) failed [ 74.324458][ T4309] loop2: detected capacity change from 0 to 40427 [ 74.428748][ T4309] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 74.450770][ T4309] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.503778][ T4309] F2FS-fs (loop2): invalid crc value [ 74.551690][ T4309] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.776747][ T4309] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 74.784463][ T4309] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.306118][ T4336] loop3: detected capacity change from 0 to 256 [ 75.359074][ T4336] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.418757][ T4336] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 75.471827][ T4336] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 76.801112][ T4349] loop1: detected capacity change from 0 to 512 [ 77.015915][ T4352] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.025587][ T4352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 77.392922][ T4349] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.26: missing EA_INODE flag [ 77.577726][ T4349] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.26: error while reading EA inode 12 err=-117 [ 77.682806][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 77.707532][ T4349] EXT4-fs (loop1): 1 orphan inode deleted [ 77.713462][ T4349] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 77.770459][ T4357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 78.295733][ T4349] binfmt_misc: register: failed to install interpreter file ./file2 [ 78.577864][ T4368] device syzkaller1 entered promiscuous mode [ 80.214569][ T4379] loop0: detected capacity change from 0 to 512 [ 80.493806][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noquota,,errors=continue. Quota mode: writeback. [ 80.616818][ T4359] loop2: detected capacity change from 0 to 40427 [ 80.679775][ T4359] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 80.693727][ T4359] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 80.770901][ T4359] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 80.877822][ T4359] F2FS-fs (loop2): invalid crc value [ 80.896624][ T4359] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 81.047786][ T4372] loop1: detected capacity change from 0 to 40427 [ 81.070903][ T4372] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.091377][ T4359] F2FS-fs (loop2): Start checkpoint disabled! [ 81.121849][ T4372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.144093][ T4359] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 81.157847][ T4359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 81.179681][ T4372] F2FS-fs (loop1): invalid crc value [ 81.379777][ T4372] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.472922][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.481255][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.577854][ T4399] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 82.624439][ T4399] netlink: 'syz.2.36': attribute type 3 has an invalid length. [ 82.632192][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 82.996381][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.094791][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.142347][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.554113][ T4382] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.563167][ T4382] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.572453][ T4382] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.582180][ T4382] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.596647][ T7] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 83.610089][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.619676][ T7] usb 2-1: Product: syz [ 83.623888][ T7] usb 2-1: Manufacturer: syz [ 83.632644][ T7] usb 2-1: SerialNumber: syz [ 83.651103][ T7] usb 2-1: config 0 descriptor?? [ 83.707723][ T7] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 83.743280][ T4382] syz.3.35 (4382) used greatest stack depth: 20784 bytes left [ 83.934791][ T4401] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 83.941551][ T4401] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 83.980804][ T4401] vhci_hcd vhci_hcd.0: Device attached [ 84.145297][ T4421] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.154398][ T4421] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.234524][ T4411] vhci_hcd: connection closed [ 84.299815][ T144] vhci_hcd: stop threads [ 84.399339][ T4197] usb 36-1: SetAddress Request (2) to port 0 [ 84.469782][ T144] vhci_hcd: release socket [ 84.475010][ T4197] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 84.580756][ T144] vhci_hcd: disconnect device [ 84.702021][ T7] gspca_stk1135: reg_w 0x0 err -71 [ 84.715706][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 84.739515][ T4423] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.774346][ T7] gspca_stk1135: Sensor write failed [ 84.786260][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 84.816708][ T7] gspca_stk1135: Sensor write failed [ 84.849626][ T4197] usb 36-1: enqueue for inactive port 0 [ 84.856888][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 84.876497][ T4299] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.886416][ T7] gspca_stk1135: Sensor read failed [ 84.891689][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 84.936449][ T7] gspca_stk1135: Sensor read failed [ 84.941977][ T7] gspca_stk1135: Detected sensor type unknown (0x0) [ 84.957924][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 84.969789][ T7] gspca_stk1135: Sensor read failed [ 85.003760][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 85.021067][ T7] gspca_stk1135: Sensor read failed [ 85.029296][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 85.036195][ T7] gspca_stk1135: Sensor write failed [ 85.042434][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 85.049486][ T7] gspca_stk1135: Sensor write failed [ 85.054830][ T7] stk1135: probe of 2-1:0.0 failed with error -71 [ 85.074038][ T7] usb 2-1: USB disconnect, device number 2 [ 85.107062][ T4248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.302195][ T4248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.319066][ T4197] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 85.326819][ T4197] usb usb36-port1: attempt power cycle [ 85.420455][ T4248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.486933][ T4299] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.511840][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.558437][ T4299] usb 3-1: Product: syz [ 85.586533][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.594351][ T4299] usb 3-1: Manufacturer: syz [ 85.604465][ T4299] usb 3-1: SerialNumber: syz [ 85.624773][ T4248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.637808][ T4447] vivid-001: ================= START STATUS ================= [ 85.651515][ T4447] vivid-001: Test Pattern: 75% Colorbar [ 85.666426][ T4197] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 85.673951][ T4447] vivid-001: Fill Percentage of Frame: 100 [ 85.683468][ T4299] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 85.728683][ T4447] vivid-001: Horizontal Movement: No Movement [ 85.749530][ T4447] vivid-001: Vertical Movement: No Movement [ 85.755552][ T4447] vivid-001: OSD Text Mode: All [ 85.763943][ T4447] vivid-001: Show Border: false [ 85.806596][ T4447] vivid-001: Show Square: false [ 85.851378][ T4447] vivid-001: Sensor Flipped Horizontally: false [ 85.858026][ T4447] vivid-001: Sensor Flipped Vertically: false [ 85.866527][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 85.872257][ T4447] vivid-001: Insert SAV Code in Image: false [ 85.881419][ T4447] vivid-001: Insert EAV Code in Image: false [ 85.890824][ T4447] vivid-001: Reduced Framerate: false [ 85.898217][ T4447] vivid-001: Enable Capture Cropping: true [ 85.904443][ T4447] vivid-001: Enable Capture Composing: true [ 85.913348][ T4447] vivid-001: Enable Capture Scaler: true [ 85.921054][ T4447] vivid-001: Timestamp Source: End of Frame [ 85.931035][ T4447] vivid-001: Colorspace: sRGB [ 85.935897][ T4447] vivid-001: Transfer Function: Default [ 85.941650][ T4447] vivid-001: Y'CbCr Encoding: Default [ 85.947276][ T4447] vivid-001: HSV Encoding: Hue 0-179 [ 85.952670][ T4447] vivid-001: Quantization: Default [ 85.957947][ T4447] vivid-001: Apply Alpha To Red Only: false [ 85.963956][ T4447] vivid-001: Standard Aspect Ratio: 4x3 [ 85.969799][ T4447] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 85.977948][ T4197] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 85.985691][ T4447] vivid-001: DV Timings: 640x480p59 inactive [ 85.992251][ T4197] usb usb36-port1: unable to enumerate USB device [ 85.998854][ T4447] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 86.011244][ T4447] vivid-001: Maximum EDID Blocks: 2 [ 86.016953][ T4447] vivid-001: Limited RGB Range (16-235): false [ 86.028040][ T4447] vivid-001: Rx RGB Quantization Range: Automatic [ 86.035158][ T7] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 86.035965][ T4447] vivid-001: Power Present: 0x00000001 [ 86.053694][ T4447] tpg source WxH: 640x360 (Y'CbCr) [ 86.059802][ T4447] tpg field: 1 [ 86.063276][ T4447] tpg crop: 640x360@0x0 [ 86.071401][ T7] usb 2-1: config 0 has no interface number 0 [ 86.080187][ T4442] chnl_net:caif_netlink_parms(): no params data found [ 86.087911][ T7] usb 2-1: config 0 interface 12 has no altsetting 0 [ 86.096805][ T4447] tpg compose: 640x360@0x0 [ 86.105022][ T4447] tpg colorspace: 8 [ 86.130227][ T4447] tpg transfer function: 0/0 [ 86.137458][ T4447] tpg Y'CbCr encoding: 0/0 [ 86.152057][ T4447] tpg quantization: 0/0 [ 86.171149][ T4447] tpg RGB range: 0/2 [ 86.175180][ T4447] vivid-001: ================== END STATUS ================== [ 86.282448][ T7] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 86.303018][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.337594][ T7] usb 2-1: Product: syz [ 86.358005][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.365206][ T7] usb 2-1: Manufacturer: syz [ 86.376380][ T7] usb 2-1: SerialNumber: syz [ 86.382051][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.404790][ T7] usb 2-1: config 0 descriptor?? [ 86.410423][ T4299] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.414603][ T1324] cfg80211: failed to load regulatory.db [ 86.433129][ T4442] device bridge_slave_0 entered promiscuous mode [ 86.469790][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.504953][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.523647][ T4442] device bridge_slave_1 entered promiscuous mode [ 86.526606][ T4197] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.659163][ T4442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.718147][ T4442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.788251][ T4442] team0: Port device team_slave_0 added [ 86.827665][ T4442] team0: Port device team_slave_1 added [ 86.906564][ T4197] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 86.928548][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.935731][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.974482][ T4264] usb 3-1: USB disconnect, device number 2 [ 87.023086][ T4442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.060738][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.068930][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.095665][ T4442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.126531][ T4197] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.135732][ T4197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.159465][ T4197] usb 4-1: Product: syz [ 87.163664][ T4197] usb 4-1: Manufacturer: syz [ 87.168692][ T4197] usb 4-1: SerialNumber: syz [ 87.204741][ T4442] device hsr_slave_0 entered promiscuous mode [ 87.212384][ T4442] device hsr_slave_1 entered promiscuous mode [ 87.221029][ T4442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.232319][ T4442] Cannot create hsr debugfs directory [ 87.351942][ T1324] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.438666][ T4454] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 87.447051][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 87.531774][ T4299] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 87.540972][ T4442] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.549589][ T4299] ath9k_htc: Failed to initialize the device [ 87.557877][ T4442] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.567112][ T4264] usb 3-1: ath9k_htc: USB layer deinitialized [ 87.623557][ T4442] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.635532][ T4442] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.703842][ T7] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 87.716541][ T1324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.720192][ T7] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 87.747962][ T1324] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 87.757325][ T7] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 87.766538][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.777530][ T4442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.790024][ T7] f81534: probe of 2-1:0.12 failed with error -71 [ 87.802529][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.806989][ T1324] usb 5-1: config 0 descriptor?? [ 87.820185][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.841757][ T7] usb 2-1: USB disconnect, device number 3 [ 87.858452][ T1324] pwc: Askey VC010 type 2 USB webcam detected. [ 87.880188][ T4442] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.900996][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.918218][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.929864][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.937149][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.954270][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.994604][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.007060][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.015761][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.022894][ T4251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.046732][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.087571][ T4454] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.129195][ T4248] device hsr_slave_0 left promiscuous mode [ 88.150513][ T4248] device hsr_slave_1 left promiscuous mode [ 88.189064][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.208561][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.219189][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.252430][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.261203][ T4248] device bridge_slave_1 left promiscuous mode [ 88.270102][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.287915][ T1324] pwc: recv_control_msg error -32 req 02 val 2b00 [ 88.290740][ T4248] device bridge_slave_0 left promiscuous mode [ 88.300713][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.318574][ T4248] device veth1_macvtap left promiscuous mode [ 88.324986][ T4248] device veth0_macvtap left promiscuous mode [ 88.333476][ T4248] device veth1_vlan left promiscuous mode [ 88.336568][ T1324] pwc: recv_control_msg error -32 req 02 val 2700 [ 88.341335][ T4248] device veth0_vlan left promiscuous mode [ 88.346903][ T4197] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 88.358308][ T4197] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 88.365791][ T4197] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 88.396430][ T1324] pwc: recv_control_msg error -32 req 02 val 2c00 [ 88.436405][ T1324] pwc: recv_control_msg error -32 req 04 val 1000 [ 88.476409][ T1324] pwc: recv_control_msg error -32 req 04 val 1300 [ 88.516411][ T1324] pwc: recv_control_msg error -32 req 04 val 1400 [ 88.546447][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.555418][ T4299] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.556641][ T1324] pwc: recv_control_msg error -32 req 02 val 2000 [ 88.569772][ T4197] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 88.590232][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 88.605012][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 88.616471][ T1324] pwc: recv_control_msg error -32 req 02 val 2100 [ 88.623505][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.640212][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.656597][ T1324] pwc: recv_control_msg error -32 req 04 val 1500 [ 88.696376][ T1324] pwc: recv_control_msg error -32 req 02 val 2500 [ 88.718320][ T4248] bond0 (unregistering): Released all slaves [ 88.800054][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.809918][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.820852][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.833704][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.846392][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 88.872889][ T4197] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 88.878296][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.918684][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.929123][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.938358][ T4197] usb 4-1: USB disconnect, device number 2 [ 88.943486][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.953947][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.963147][ T1324] pwc: recv_control_msg error -71 req 02 val 2600 [ 88.966975][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.984021][ T4197] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 88.987691][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.996706][ T1324] pwc: recv_control_msg error -71 req 02 val 2900 [ 89.003926][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 89.031981][ T4299] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.041266][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.048447][ T1324] pwc: recv_control_msg error -71 req 02 val 2800 [ 89.057747][ T4299] usb 3-1: config 0 descriptor?? [ 89.063839][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.086407][ T1324] pwc: recv_control_msg error -71 req 04 val 1100 [ 89.106490][ T1324] pwc: recv_control_msg error -71 req 04 val 1200 [ 89.113525][ T4299] pwc: Askey VC010 type 2 USB webcam detected. [ 89.207124][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 89.226730][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.236078][ T7] usb 2-1: Product: syz [ 89.242108][ T1324] pwc: Registered as video103. [ 89.260804][ T7] usb 2-1: Manufacturer: syz [ 89.265273][ T1324] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 89.275868][ T7] usb 2-1: SerialNumber: syz [ 89.297264][ T7] usb 2-1: config 0 descriptor?? [ 89.485953][ T1324] usb 5-1: USB disconnect, device number 2 [ 90.166449][ T4299] pwc: recv_control_msg error -32 req 02 val 2b00 [ 90.173673][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 90.217193][ T4299] pwc: recv_control_msg error -32 req 02 val 2700 [ 90.225535][ T4442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.245530][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.254458][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.277429][ T4299] pwc: recv_control_msg error -32 req 02 val 2c00 [ 90.336494][ T4299] pwc: recv_control_msg error -32 req 04 val 1000 [ 90.396695][ T4299] pwc: recv_control_msg error -32 req 04 val 1300 [ 90.448614][ T4299] pwc: recv_control_msg error -32 req 04 val 1400 [ 90.501219][ T4299] pwc: recv_control_msg error -32 req 02 val 2000 [ 90.547300][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 90.570105][ T4539] ================================================================== [ 90.578418][ T4539] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 90.585472][ T4539] Read of size 8 at addr ffff888062a20a08 by task syz.3.68/4539 [ 90.593115][ T4539] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.595462][ T4539] CPU: 0 PID: 4539 Comm: syz.3.68 Not tainted syzkaller #0 [ 90.602708][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.612785][ T4539] Call Trace: [ 90.616077][ T4539] [ 90.619066][ T4539] dump_stack_lvl+0x188/0x250 [ 90.623777][ T4539] ? show_regs_print_info+0x20/0x20 [ 90.628998][ T4539] ? _printk+0xda/0x130 [ 90.633178][ T4539] ? ax25_release+0x5ca/0x870 [ 90.637877][ T4539] ? load_image+0x400/0x400 [ 90.642403][ T4539] ? __timer_delete_sync+0x1f5/0x290 [ 90.647749][ T4539] print_address_description+0x60/0x2d0 [ 90.653329][ T4539] ? ax25_release+0x5ca/0x870 [ 90.658027][ T4539] kasan_report+0xdf/0x130 [ 90.662461][ T4539] ? ax25_release+0x5ca/0x870 [ 90.667158][ T4539] ax25_release+0x5ca/0x870 [ 90.671687][ T4539] sock_close+0xd5/0x240 [ 90.675957][ T4539] ? sock_mmap+0x90/0x90 [ 90.680214][ T4539] __fput+0x234/0x930 [ 90.684228][ T4539] task_work_run+0x125/0x1a0 [ 90.688853][ T4539] exit_to_user_mode_loop+0x10f/0x130 [ 90.694254][ T4539] exit_to_user_mode_prepare+0xee/0x180 [ 90.699817][ T4539] syscall_exit_to_user_mode+0x16/0x40 [ 90.705297][ T4539] do_syscall_64+0x58/0xa0 [ 90.709739][ T4539] ? clear_bhb_loop+0x30/0x80 [ 90.714434][ T4539] ? clear_bhb_loop+0x30/0x80 [ 90.719131][ T4539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.725061][ T4539] RIP: 0033:0x7f97a7ec7dd9 [ 90.729505][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.749126][ T4539] RSP: 002b:00007ffc0b49b808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 90.757563][ T4539] RAX: 0000000000000000 RBX: 00007ffc0b49b8f0 RCX: 00007f97a7ec7dd9 [ 90.765564][ T4539] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 90.773546][ T4539] RBP: 0000000000016187 R08: 0000000000000001 R09: 0000000000000000 [ 90.781538][ T4539] R10: 0000001b31720000 R11: 0000000000000246 R12: 00007ffc0b49b930 [ 90.789537][ T4539] R13: 00007f97a8140fac R14: 00000000000161cb R15: 00007f97a8140fa0 [ 90.797558][ T4539] [ 90.800594][ T4539] [ 90.802927][ T4539] Allocated by task 4541: [ 90.807264][ T4539] __kasan_kmalloc+0xb5/0xf0 [ 90.811894][ T4539] ax25_dev_device_up+0x50/0x580 [ 90.816851][ T4539] ax25_device_event+0x483/0x4f0 [ 90.821838][ T4539] raw_notifier_call_chain+0xcb/0x160 [ 90.827224][ T4539] __dev_notify_flags+0x194/0x300 [ 90.832348][ T4539] dev_change_flags+0xe3/0x1a0 [ 90.837129][ T4539] dev_ifsioc+0x130/0xd50 [ 90.841476][ T4539] dev_ioctl+0x545/0xe30 [ 90.845736][ T4539] sock_do_ioctl+0x245/0x320 [ 90.850359][ T4539] sock_ioctl+0x4d2/0x710 [ 90.854698][ T4539] __se_sys_ioctl+0xfa/0x170 [ 90.859298][ T4539] do_syscall_64+0x4c/0xa0 [ 90.863731][ T4539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.869653][ T4539] [ 90.871984][ T4539] Freed by task 4541: [ 90.875970][ T4539] kasan_set_track+0x4b/0x70 [ 90.880576][ T4539] kasan_set_free_info+0x1f/0x40 [ 90.885534][ T4539] ____kasan_slab_free+0xd5/0x110 [ 90.890572][ T4539] slab_free_freelist_hook+0xea/0x170 [ 90.895983][ T4539] kfree+0xef/0x2a0 [ 90.899803][ T4539] ax25_device_event+0x4b4/0x4f0 [ 90.904759][ T4539] raw_notifier_call_chain+0xcb/0x160 [ 90.910161][ T4539] __dev_notify_flags+0x158/0x300 [ 90.915232][ T4539] dev_change_flags+0xe3/0x1a0 [ 90.920034][ T4539] dev_ifsioc+0x130/0xd50 [ 90.924419][ T4539] dev_ioctl+0x545/0xe30 [ 90.928678][ T4539] sock_do_ioctl+0x245/0x320 [ 90.933282][ T4539] sock_ioctl+0x4d2/0x710 [ 90.937629][ T4539] __se_sys_ioctl+0xfa/0x170 [ 90.942341][ T4539] do_syscall_64+0x4c/0xa0 [ 90.946767][ T4539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.952683][ T4539] [ 90.955068][ T4539] The buggy address belongs to the object at ffff888062a20a00 [ 90.955068][ T4539] which belongs to the cache kmalloc-192 of size 192 [ 90.969134][ T4539] The buggy address is located 8 bytes inside of [ 90.969134][ T4539] 192-byte region [ffff888062a20a00, ffff888062a20ac0) [ 90.982249][ T4539] The buggy address belongs to the page: [ 90.987907][ T4539] page:ffffea00018a8800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62a20 [ 90.998069][ T4539] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 91.005662][ T4539] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016c41a00 [ 91.014346][ T4539] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 91.022940][ T4539] page dumped because: kasan: bad access detected [ 91.029374][ T4539] page_owner tracks the page as allocated [ 91.035204][ T4539] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4319, ts 74922021426, free_ts 74898202505 [ 91.052784][ T4539] get_page_from_freelist+0x1bbd/0x1ca0 [ 91.058360][ T4539] __alloc_pages+0x1ee/0x480 [ 91.062995][ T4539] new_slab+0xb6/0x4b0 [ 91.067107][ T4539] ___slab_alloc+0x80a/0xdd0 [ 91.071722][ T4539] __kmalloc_node+0x200/0x3b0 [ 91.076426][ T4539] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 91.082254][ T4539] new_slab+0x100/0x4b0 [ 91.086452][ T4539] ___slab_alloc+0x80a/0xdd0 [ 91.091069][ T4539] kmem_cache_alloc+0x195/0x290 [ 91.095946][ T4539] fat_alloc_inode+0x19/0xa0 [ 91.100564][ T4539] new_inode_pseudo+0x5f/0x210 [ 91.105406][ T4539] new_inode+0x25/0x1c0 [ 91.109595][ T4539] fat_build_inode+0x1fb/0x3d0 [ 91.114397][ T4539] vfat_create+0x1da/0x350 [ 91.118841][ T4539] path_openat+0x11db/0x2fa0 [ 91.123458][ T4539] do_filp_open+0x1e2/0x410 [ 91.128099][ T4539] page last free stack trace: [ 91.132793][ T4539] free_unref_page_prepare+0x637/0x6c0 [ 91.138289][ T4539] free_unref_page+0x8f/0x2a0 [ 91.143112][ T4539] qlist_free_all+0x35/0x90 [ 91.147784][ T4539] kasan_quarantine_reduce+0x150/0x160 [ 91.153282][ T4539] __kasan_slab_alloc+0x2f/0xd0 [ 91.158165][ T4539] slab_post_alloc_hook+0x4c/0x380 [ 91.163337][ T4539] kmem_cache_alloc+0x100/0x290 [ 91.168221][ T4539] getname_flags+0xb5/0x500 [ 91.172757][ T4539] do_sys_openat2+0xdd/0x4b0 [ 91.177373][ T4539] __x64_sys_openat+0x135/0x160 [ 91.182267][ T4539] do_syscall_64+0x4c/0xa0 [ 91.186716][ T4539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.192658][ T4539] [ 91.195002][ T4539] Memory state around the buggy address: [ 91.200682][ T4539] ffff888062a20900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.208769][ T4539] ffff888062a20980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 91.216865][ T4539] >ffff888062a20a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.224946][ T4539] ^ [ 91.229299][ T4539] ffff888062a20a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 91.237388][ T4539] ffff888062a20b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.245475][ T4539] ================================================================== [ 91.253567][ T4539] Disabling lock debugging due to kernel taint [ 91.502978][ T4539] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.510223][ T4539] CPU: 0 PID: 4539 Comm: syz.3.68 Tainted: G B syzkaller #0 [ 91.518833][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.528896][ T4539] Call Trace: [ 91.532189][ T4539] [ 91.535129][ T4539] dump_stack_lvl+0x188/0x250 [ 91.539831][ T4539] ? show_regs_print_info+0x20/0x20 [ 91.545077][ T4539] ? load_image+0x400/0x400 [ 91.549605][ T4539] panic+0x2e5/0x810 [ 91.553518][ T4539] ? bpf_jit_dump+0xd0/0xd0 [ 91.558049][ T4539] ? ax25_release+0x5ca/0x870 [ 91.562750][ T4539] ? check_panic_on_warn+0x6c/0xa0 [ 91.567899][ T4539] ? ax25_release+0x5ca/0x870 [ 91.572598][ T4539] check_panic_on_warn+0x80/0xa0 [ 91.577561][ T4539] ? ax25_release+0x5ca/0x870 [ 91.582261][ T4539] end_report+0x6d/0xf0 [ 91.586439][ T4539] kasan_report+0x102/0x130 [ 91.590967][ T4539] ? ax25_release+0x5ca/0x870 [ 91.595671][ T4539] ax25_release+0x5ca/0x870 [ 91.600187][ T4539] sock_close+0xd5/0x240 [ 91.604444][ T4539] ? sock_mmap+0x90/0x90 [ 91.608694][ T4539] __fput+0x234/0x930 [ 91.612694][ T4539] task_work_run+0x125/0x1a0 [ 91.617310][ T4539] exit_to_user_mode_loop+0x10f/0x130 [ 91.622719][ T4539] exit_to_user_mode_prepare+0xee/0x180 [ 91.628281][ T4539] syscall_exit_to_user_mode+0x16/0x40 [ 91.633758][ T4539] do_syscall_64+0x58/0xa0 [ 91.638191][ T4539] ? clear_bhb_loop+0x30/0x80 [ 91.642883][ T4539] ? clear_bhb_loop+0x30/0x80 [ 91.647577][ T4539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.653484][ T4539] RIP: 0033:0x7f97a7ec7dd9 [ 91.657921][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.677541][ T4539] RSP: 002b:00007ffc0b49b808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 91.685966][ T4539] RAX: 0000000000000000 RBX: 00007ffc0b49b8f0 RCX: 00007f97a7ec7dd9 [ 91.693953][ T4539] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 91.701937][ T4539] RBP: 0000000000016187 R08: 0000000000000001 R09: 0000000000000000 [ 91.709918][ T4539] R10: 0000001b31720000 R11: 0000000000000246 R12: 00007ffc0b49b930 [ 91.717913][ T4539] R13: 00007f97a8140fac R14: 00000000000161cb R15: 00007f97a8140fa0 [ 91.725903][ T4539] [ 91.729218][ T4539] Kernel Offset: disabled [ 91.733569][ T4539] Rebooting in 86400 seconds..