last executing test programs: 1m2.335821214s ago: executing program 0 (id=163): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f0000000180)={0xc80, 0x5, 0x2, 0x0, 0x80000001}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000540)="f20ea8accdb7d9e2", 0x8, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1m1.360031363s ago: executing program 0 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) 1m1.289759274s ago: executing program 0 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048e5}, 0x2004c050) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 59.887299691s ago: executing program 0 (id=173): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0xc) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1) symlink(0x0, &(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000740)='\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x7, 0x2, 0x7, 0x4d942c23, 0x4, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) 58.92741313s ago: executing program 0 (id=186): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 58.529593527s ago: executing program 0 (id=189): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x17, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 58.087417686s ago: executing program 32 (id=189): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x17, 0x402, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 12.059710187s ago: executing program 5 (id=419): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x8001, 0xd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) 10.743680702s ago: executing program 2 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000b00)={0x58, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x8000000000000fc, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x3c85, &(0x7f00000004c0)={0x0, 0xe7cb, 0x100, 0x1, 0x376, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000540)) syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x20, 0x4, 0x2165, 0x0, r6}, &(0x7f0000000000), &(0x7f0000000280)) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 10.33990552s ago: executing program 5 (id=423): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000300)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x4) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) lseek(0xffffffffffffffff, 0xfffffffc, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x0, 0xa}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 8.563988765s ago: executing program 2 (id=431): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e90904000001030000000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2}) 6.960281006s ago: executing program 5 (id=442): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.504536714s ago: executing program 5 (id=447): openat$ppp(0xffffffffffffff9c, 0x0, 0x206040, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f00005e3000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f000097b000/0x2000)=nil) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) fsopen(0x0, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x108843, 0x190) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$kcm(0x2d, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.349337947s ago: executing program 2 (id=448): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 4.763648708s ago: executing program 2 (id=458): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e90904000001030000000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2}) 3.11631982s ago: executing program 5 (id=466): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000008400"], 0x10}}], 0x2, 0xc88c5) 3.035837052s ago: executing program 5 (id=467): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a310000000005000100070000f7280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064010101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x5c}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a9", 0x69}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c684552", 0x6a}], 0x6, 0x9, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x1000201, 0x4) 2.147006839s ago: executing program 2 (id=472): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="cb05000050000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d4db1093c"], 0x0, 0x5}, 0x94) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.451909332s ago: executing program 3 (id=479): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.375545834s ago: executing program 3 (id=480): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 1.352042684s ago: executing program 4 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31002000001c00048018000180080001006c6f67000c0002800800024047504c000900020073797a320000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(r0) 1.183213688s ago: executing program 2 (id=482): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e90904000001030000000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2}) 1.131886779s ago: executing program 4 (id=483): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.131671539s ago: executing program 3 (id=484): openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010000000000000002000700", @ANYRES32=0x0, @ANYBLOB="0400000000000000100001000000000020"], 0x2c, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.019673711s ago: executing program 4 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x200048e5}, 0x2004c050) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 994.864261ms ago: executing program 3 (id=486): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0xbe4, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0x108) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r3, &(0x7f0000000440)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) 814.810264ms ago: executing program 3 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) mkdirat(0xffffffffffffffff, 0x0, 0xc4) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x260) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000800)={"54a4023433fffffffffffd00", 0x0, 0x0, {0x2, 0x616}, {0x103, 0x4}, 0x2, [0x7, 0x0, 0x2, 0x1, 0x7, 0x7, 0x8, 0x3, 0x80000003, 0x2d, 0x0, 0x7, 0x6f740588, 0x1fffbfffffff, 0x10100, 0x2]}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40001) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x12000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) socket$alg(0x26, 0x5, 0x0) 702.343037ms ago: executing program 1 (id=490): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 693.241337ms ago: executing program 4 (id=491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) syz_clone3(0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001640)="54c2d4a0cd5b46cf08fc67fb48025219da536518d4951e7d16de306398cca5a3bb91cb04c3ea0b2874715a7a1d8c279680fc232ec4a4724d0480fe1abf77b57f9c14fb80f5475923242a6d87864e453bf8bcb834b93ce2e6ca9532e67d38bba6d214989ed0a58a429a25d30e21e61c5db9492d2b20efd170bd88be0abf3221bcb31aa49af55411de1cc70fae7e2db69d4a7748f349cd6cb3f656050cdff975823b35cc4a48", 0xa5}, {0x0}, {&(0x7f0000001740)="b17629837467c4ba972b52e9d224a0c2e0d0fd2b3a9e6b2d16e637da008e4fb98c3ae6adc30f837737bb4140d27849cd224ed166aa30fe7d3c2bbdcbb8d02894e6014111ad7167b7b5821bed3901e6044b415e8fe89cb73e43424eee8856ffaa4df1bb53eea5e65fb771b1eec6936d2360a616e35336550701705371ed411112b3be50e21f5aa4fe5e831adfcd36c40c53fac2be8d75c89427ec13c342c33601e04799edb98bfd1516b6c85902f7879ec667107e4e65d9584decb79e7643", 0xbe}, {&(0x7f0000001840)="094e1d36f3c97f3eb3627964cc79e796ce5be22075391797854acf9e4a7d112856be21f6ce4a8b9ab8ff8756239b64e74791033cb746b1aba94c005816116857c099945aedd0e1ec44b657c3999be141269e1bccd788c1da7f1c23ef34cc4c608895af24ac0ae6bd10dff5e518c7e690f89c110658c974f612068e58b643", 0x7e}, {&(0x7f0000001900)="65c2ce9864b96b73278b89e3f8b815e49f7e2412919638b8be0c84d93ec25ee6ffd632aa6a21d3c041fcc8e7b95d33be85dd19ce289b8f1ad345d0918fe85cc594dc115446606d83d709", 0x4a}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="a89a4230916bd4685a8d4dcaa767d52b9dda12", 0x13}], 0x7}}], 0x2, 0x40) 587.847379ms ago: executing program 3 (id=492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="cb05000050000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d4db1093c"], 0x0, 0x5}, 0x94) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 579.293339ms ago: executing program 4 (id=493): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2000003, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 422.321592ms ago: executing program 1 (id=494): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000800)="ebe3a0e979501a148a0d0b129e6cfd164772219d205e81f4a7f71c1926aae1efd7e005ed863f045cfe6cb55b5bb9fa6935849e6098ed884e7ccb12b672c9f097ca4fe035bbb00400304c09b0294272dfee37fec456574c41ea5cd3860cb2a72de2e1448fdb5f428f5c7fb8f40442d4b9b2bcfb8d5a8dd39ea038222eb4976f868eacd03f282aae735aac5ae16f460275a3f2369b477602669969c3590c7d10e93ebd81cff49585ef40e40b59bfb7a88e32e943f06a05ed228b0d4286d1290000000000000000000000a01e66c50d585ba50e67dd3be3a0a719dcea96541457145e4b4a6c21d882d84cd3934f8ec9f965", 0xf0}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 306.785395ms ago: executing program 4 (id=495): socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001840)="a905000000007464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000007"], 0x10}}], 0x2, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 212.759176ms ago: executing program 1 (id=496): syz_open_dev$dri(0x0, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}}}}}}, 0x0) 156.116297ms ago: executing program 1 (id=497): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001540)={'syztnl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000001780)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000001580)=@RTM_DELMDB={0x158, 0x55, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x4, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x4, {@in6_addr=@mcast2, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@in6_addr=@remote, 0x9edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x2, {@in6_addr=@mcast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@in6_addr=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@remote, 0x96dd}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x8004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x7, 0x409c, 0x0, 0x4, {{0xf, 0x4, 0x1, 0x1d, 0x3c, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x5c}, @rr={0x7, 0xb, 0xdb, [@broadcast, @dev={0xac, 0x14, 0x14, 0x24}]}, @cipso={0x86, 0xa, 0x3, [{0x6, 0x2}, {0x5, 0x2}]}, @ssrr={0x89, 0xb, 0x8c, [@rand_addr=0x64010101, @multicast1]}]}}}}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 15.92945ms ago: executing program 1 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) chdir(&(0x7f0000000140)='./bus\x00') 0s ago: executing program 1 (id=499): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x10, 0x10000}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r4, 0x9620}], 0x1, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x8, 0xffffffff, 0xc0001c8}, &(0x7f0000001300), &(0x7f0000001180)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000240)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 62.360092][ T4170] cgroup: Unknown subsys name 'net' [ 62.484692][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.810590][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.690801][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 65.742413][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.767498][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 65.836096][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.843440][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.852366][ T4183] device bridge_slave_0 entered promiscuous mode [ 65.863758][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.883288][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.890867][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.898539][ T4183] device bridge_slave_1 entered promiscuous mode [ 65.986159][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.995475][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.003027][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.010862][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.018219][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.025586][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.034289][ T4182] device bridge_slave_0 entered promiscuous mode [ 66.050037][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.059252][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.066301][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.074719][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.082011][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.089381][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.097030][ T4182] device bridge_slave_1 entered promiscuous mode [ 66.150017][ T4183] team0: Port device team_slave_0 added [ 66.163442][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.173806][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.185108][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.202817][ T4183] team0: Port device team_slave_1 added [ 66.210481][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.255534][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.279884][ T4182] team0: Port device team_slave_0 added [ 66.293500][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.300740][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.308998][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.333680][ T4182] team0: Port device team_slave_1 added [ 66.341899][ T4188] team0: Port device team_slave_0 added [ 66.356494][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.363724][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.372187][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.387738][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.395036][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.421459][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.437193][ T4188] team0: Port device team_slave_1 added [ 66.459813][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.466784][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.493266][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.513949][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.521254][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.547290][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.560439][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.589980][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.597084][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.623186][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.635727][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.661804][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.668909][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.695238][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.733110][ T4191] team0: Port device team_slave_0 added [ 66.739644][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.746607][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.772756][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.784282][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.791479][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.799376][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.807811][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.815292][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.823084][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.837816][ T4191] team0: Port device team_slave_1 added [ 66.868424][ T4183] device hsr_slave_0 entered promiscuous mode [ 66.875591][ T4183] device hsr_slave_1 entered promiscuous mode [ 66.909689][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.916671][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.943087][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.955106][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.962200][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.988203][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.002805][ T4182] device hsr_slave_0 entered promiscuous mode [ 67.010046][ T4182] device hsr_slave_1 entered promiscuous mode [ 67.016755][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.024743][ T4182] Cannot create hsr debugfs directory [ 67.040746][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.074200][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.093266][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.100460][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.107054][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.114765][ T4188] Cannot create hsr debugfs directory [ 67.162145][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.169271][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.175707][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.183450][ T4191] Cannot create hsr debugfs directory [ 67.205984][ T4192] team0: Port device team_slave_0 added [ 67.216271][ T4192] team0: Port device team_slave_1 added [ 67.294190][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.301497][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.327918][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.339736][ T4184] Bluetooth: hci0: command 0x0409 tx timeout [ 67.346582][ T4184] Bluetooth: hci1: command 0x0409 tx timeout [ 67.373309][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.380386][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.406656][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.418814][ T4184] Bluetooth: hci2: command 0x0409 tx timeout [ 67.424935][ T4184] Bluetooth: hci4: command 0x0409 tx timeout [ 67.428897][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.553799][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.561455][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.568062][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.575840][ T4192] Cannot create hsr debugfs directory [ 67.673867][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.687736][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.712246][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.721768][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.756576][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.772284][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.783477][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.802637][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.870411][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.880956][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.891279][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.904362][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.974074][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.991115][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.001387][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.022961][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.031428][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.042200][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.063582][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.074525][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.098411][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.113685][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.123221][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.132833][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.142329][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.149790][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.158337][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.172316][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.183453][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.200709][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.208804][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.217508][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.241584][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.250813][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.260882][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.267935][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.278160][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.314339][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.323570][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.336292][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.346470][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.353600][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.362202][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.370944][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.386422][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.395996][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.415238][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.425407][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.436018][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.445329][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.454015][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.461107][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.489724][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.498937][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.507375][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.518289][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.527254][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.540186][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.548175][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.561346][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.574389][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.584411][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.595168][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.604195][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.645751][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.655114][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.665661][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.680205][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.690465][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.699498][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.732810][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.745678][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.758558][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.770401][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.777479][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.792416][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.802306][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.811683][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.818788][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.826345][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.835270][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.844600][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.853127][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.862034][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.870945][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.882290][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.899753][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.908203][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.916390][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.931694][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.943956][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.956899][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.965957][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.975628][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.984816][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.991937][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.001525][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.009753][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.026762][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.041473][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.054138][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.066643][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.081526][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.090648][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.100303][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.109351][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.116592][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.131066][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.142962][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.161479][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.176284][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.186030][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.202014][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.214135][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.224296][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.232349][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.241913][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.254004][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.282769][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.298347][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.307637][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.314760][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.330341][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.337870][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.346582][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.355459][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.366561][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.379338][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.391127][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.399700][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.406747][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.414761][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.423257][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 69.429248][ T4246] Bluetooth: hci0: command 0x041b tx timeout [ 69.431584][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.480760][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.490796][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.499242][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 69.501699][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.505586][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 69.520429][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 69.521484][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.536402][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.545848][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.555630][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.564441][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.573192][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.582309][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.593811][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.602684][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.611456][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.620112][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.628444][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.637143][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.645639][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.664145][ T4183] device veth0_vlan entered promiscuous mode [ 69.677443][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.692379][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.700609][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.712988][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.721506][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.729208][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.736692][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.745861][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.755122][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.763043][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.774671][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.819213][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.827945][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.849888][ T4183] device veth1_vlan entered promiscuous mode [ 69.863885][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.877019][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.941169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.950396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.972073][ T4182] device veth0_vlan entered promiscuous mode [ 69.991907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.005218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.014398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.028235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.038057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.047738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.056701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.065993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.076931][ T4191] device veth0_vlan entered promiscuous mode [ 70.097188][ T4182] device veth1_vlan entered promiscuous mode [ 70.107728][ T4183] device veth0_macvtap entered promiscuous mode [ 70.122238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.131200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.140524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.148016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.168506][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.182224][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.191850][ T4183] device veth1_macvtap entered promiscuous mode [ 70.201460][ T4191] device veth1_vlan entered promiscuous mode [ 70.209204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.218765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.227171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.235933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.248391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.285682][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.305695][ T4182] device veth0_macvtap entered promiscuous mode [ 70.319857][ T4182] device veth1_macvtap entered promiscuous mode [ 70.329876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.338510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.347772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.357583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.366254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.375341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.385075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.398512][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.435700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.444863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.455485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.466195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.475410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.484617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.500718][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.510169][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.519752][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.528542][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.542871][ T4191] device veth0_macvtap entered promiscuous mode [ 70.556408][ T4191] device veth1_macvtap entered promiscuous mode [ 70.570325][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.581447][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.593055][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.613770][ T4188] device veth0_vlan entered promiscuous mode [ 70.628220][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.641069][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.652561][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.663174][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.674177][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.684913][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.693842][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.702945][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.711783][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.721126][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.729590][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.737940][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.746792][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.755919][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.765131][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.774097][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.783374][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.807298][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.818095][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.833291][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.843302][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.854292][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.865881][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.877920][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.889640][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.912172][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.921118][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.930108][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.940884][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.950177][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.958417][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.967201][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.975686][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.986005][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.994979][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.004444][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.013465][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.026997][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.036073][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.045195][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.054168][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.070964][ T4192] device veth0_vlan entered promiscuous mode [ 71.117587][ T4188] device veth1_vlan entered promiscuous mode [ 71.136384][ T4192] device veth1_vlan entered promiscuous mode [ 71.243275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.252014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.262247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.272242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.281367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.290552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.316618][ T4188] device veth0_macvtap entered promiscuous mode [ 71.325633][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.327049][ T4192] device veth0_macvtap entered promiscuous mode [ 71.340691][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.365113][ T4188] device veth1_macvtap entered promiscuous mode [ 71.381263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.390655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.398854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.406992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.416534][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.417630][ T4192] device veth1_macvtap entered promiscuous mode [ 71.427586][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.448364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.459300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.482171][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.499764][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 71.504917][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.505887][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 71.525268][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.531036][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.544869][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.545063][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.555487][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.574675][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.579219][ T4259] Bluetooth: hci2: command 0x040f tx timeout [ 71.585625][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.596319][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 71.601411][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.607483][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 71.619338][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.631753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.639955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.648012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.657858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.674244][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.686398][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.696853][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.707812][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.717977][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.729038][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.740650][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.751378][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.763311][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.773916][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.784460][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.794774][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.806349][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.816985][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.827745][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.840077][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.851652][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.862843][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.873017][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.883977][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.894304][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.906350][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.916831][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.927713][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.939959][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.983997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.995591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.005381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.017735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.032422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.043672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.055966][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.066979][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.075995][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.085142][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.098597][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.107870][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.116637][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.125500][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.159565][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.167853][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.185708][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.223199][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.238710][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.248259][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.468360][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.479118][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.487110][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.514987][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.570792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.586207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.599325][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.615030][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.636578][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.662636][ T4302] device syzkaller0 entered promiscuous mode [ 72.662674][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.711515][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.735057][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.917048][ T4293] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 72.923784][ T4293] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.955179][ T4308] Zero length message leads to an empty skb [ 72.957418][ T4293] vhci_hcd vhci_hcd.0: Device attached [ 73.085457][ T4313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.199271][ T4238] vhci_hcd: vhci_device speed not set [ 73.278799][ T4238] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 73.362166][ T4309] vhci_hcd: connection reset by peer [ 73.369805][ T4245] vhci_hcd: stop threads [ 73.379100][ T4245] vhci_hcd: release socket [ 73.415217][ T4245] vhci_hcd: disconnect device [ 73.590018][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 73.599584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.608647][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.617769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.626942][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.636580][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.645689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.654876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.663981][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.673082][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 73.949871][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 74.010542][ T4320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.381329][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 74.387577][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 74.393728][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 74.405605][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 74.622798][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.634377][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.648906][ T4320] usb 4-1: device descriptor read/64, error -71 [ 74.938955][ T4320] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.141248][ T4193] Bluetooth: Wrong link type (-57) [ 75.157824][ T4329] 9pnet_virtio: no channels available for device syz [ 75.179348][ T4320] usb 4-1: device descriptor read/64, error -71 [ 75.299015][ T4320] usb usb4-port1: attempt power cycle [ 75.370923][ T4336] overlayfs: failed to resolve './bus/file0': -2 [ 75.740202][ T4353] device syzkaller0 entered promiscuous mode [ 75.748915][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.938924][ T4320] usb 4-1: device descriptor read/8, error -71 [ 75.991110][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.041293][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 77.372075][ T4416] capability: warning: `syz.4.39' uses 32-bit capabilities (legacy support in use) [ 77.436615][ T26] audit: type=1326 audit(1757568130.595:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4408 comm="syz.4.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bba219ba9 code=0x7ffc0000 [ 77.539820][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.625826][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 77.666091][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 77.738761][ T7] usb 1-1: device descriptor read/64, error -71 [ 78.008821][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.218798][ T7] usb 1-1: device descriptor read/64, error -71 [ 78.339549][ T7] usb usb1-port1: attempt power cycle [ 78.466422][ T4451] device syzkaller0 entered promiscuous mode [ 78.478504][ T4238] vhci_hcd: vhci_device speed not set [ 78.664245][ T4459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.45'. [ 78.758733][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.859747][ T7] usb 1-1: device descriptor read/8, error -71 [ 79.698877][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.859064][ T7] usb 1-1: device descriptor read/8, error -71 [ 79.990085][ T7] usb usb1-port1: unable to enumerate USB device [ 81.435434][ T4501] device syzkaller0 entered promiscuous mode [ 81.579526][ T4506] binder: 4504:4506 unknown command 1074553619 [ 81.625722][ T4506] binder: 4504:4506 ioctl c0306201 200000000140 returned -22 [ 82.288754][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.491053][ T13] usb 3-1: device descriptor read/64, error -71 [ 82.509307][ T4533] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 82.743981][ T4540] tipc: Started in network mode [ 82.775236][ T4540] tipc: Node identity f6b11dc0216c, cluster identity 4711 [ 82.790018][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.822227][ T4540] tipc: Enabled bearer , priority 0 [ 82.854758][ T4540] tipc: Resetting bearer [ 82.890752][ T4539] tipc: Disabling bearer [ 82.991866][ T13] usb 3-1: device descriptor read/64, error -71 [ 83.158771][ T13] usb usb3-port1: attempt power cycle [ 83.295510][ T4547] 9pnet_virtio: no channels available for device syz [ 83.678745][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.770701][ T13] usb 3-1: device descriptor read/8, error -71 [ 84.038728][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.139026][ T13] usb 3-1: device descriptor read/8, error -71 [ 84.259258][ T13] usb usb3-port1: unable to enumerate USB device [ 85.283080][ T4580] tipc: Enabling of bearer rejected, failed to enable media [ 86.266389][ T4598] overlayfs: missing 'lowerdir' [ 88.696176][ T4624] tipc: Started in network mode [ 88.706116][ T4624] tipc: Node identity 72d3415a2228, cluster identity 4711 [ 88.748931][ T4624] tipc: Enabled bearer , priority 0 [ 88.799338][ T4624] tipc: Resetting bearer [ 88.818845][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.841330][ T4621] tipc: Disabling bearer [ 89.078763][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 89.199350][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.234016][ T13] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.245551][ T4193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 89.255324][ T4193] CPU: 0 PID: 4193 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 89.262873][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.272916][ T4193] Workqueue: hci0 hci_rx_work [ 89.277607][ T4193] Call Trace: [ 89.280873][ T4193] [ 89.283971][ T4193] dump_stack_lvl+0x168/0x230 [ 89.288682][ T4193] ? show_regs_print_info+0x20/0x20 [ 89.293866][ T4193] ? load_image+0x3b0/0x3b0 [ 89.298359][ T4193] sysfs_create_dir_ns+0x252/0x280 [ 89.303674][ T4193] ? __lock_acquire+0x7c60/0x7c60 [ 89.308747][ T4193] ? sysfs_warn_dup+0xa0/0xa0 [ 89.313529][ T4193] ? le_conn_complete_evt+0xcbc/0x1590 [ 89.319032][ T4193] ? hci_event_packet+0xe05/0x12f0 [ 89.324178][ T4193] ? process_one_work+0x863/0x1000 [ 89.329286][ T4193] ? do_raw_spin_unlock+0x11d/0x230 [ 89.334467][ T4193] kobject_add_internal+0x662/0xd00 [ 89.339671][ T4193] kobject_add+0x152/0x210 [ 89.344068][ T4193] ? kobject_init+0x1d0/0x1d0 [ 89.348836][ T4193] ? klist_children_get+0x50/0x50 [ 89.353839][ T4193] ? get_device_parent+0x121/0x3f0 [ 89.358937][ T4193] device_add+0x483/0xfb0 [ 89.363270][ T4193] hci_conn_add_sysfs+0xd1/0x1e0 [ 89.368203][ T4193] le_conn_complete_evt+0xcbc/0x1590 [ 89.373478][ T4193] ? cs_le_create_conn+0x5e0/0x5e0 [ 89.378575][ T4193] ? __mutex_trylock_common+0x14f/0x250 [ 89.384105][ T4193] hci_le_meta_evt+0x289/0x3b80 [ 89.388950][ T4193] ? hci_event_packet+0x36d/0x12f0 [ 89.394049][ T4193] ? hci_event_packet+0x2e2/0x12f0 [ 89.399157][ T4193] ? __lock_acquire+0x7c60/0x7c60 [ 89.404167][ T4193] ? hci_remote_host_features_evt+0x280/0x280 [ 89.410335][ T4193] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 89.416040][ T4193] ? mark_lock+0x94/0x320 [ 89.420532][ T4193] ? mutex_unlock+0x10/0x10 [ 89.425016][ T4193] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 89.430980][ T4193] ? lock_chain_count+0x20/0x20 [ 89.435824][ T4193] ? __rwlock_init+0x140/0x140 [ 89.441297][ T4193] hci_event_packet+0xe05/0x12f0 [ 89.446464][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 89.451731][ T4193] ? rcu_lock_release+0x20/0x20 [ 89.456581][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 89.461797][ T4193] hci_rx_work+0x255/0xa10 [ 89.466216][ T4193] process_one_work+0x863/0x1000 [ 89.471165][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 89.476797][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 89.482086][ T4193] ? _raw_spin_lock_irq+0xab/0xe0 [ 89.487196][ T4193] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 89.492558][ T4193] ? wq_worker_running+0x97/0x170 [ 89.497573][ T4193] worker_thread+0xaa8/0x12a0 [ 89.502296][ T4193] kthread+0x436/0x520 [ 89.506370][ T4193] ? rcu_lock_release+0x20/0x20 [ 89.511223][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 89.515811][ T4193] ret_from_fork+0x1f/0x30 [ 89.520227][ T4193] [ 89.524088][ T4193] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.537921][ T4193] Bluetooth: hci0: failed to register connection device [ 89.547870][ T13] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 89.557118][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.572002][ T13] usb 5-1: config 0 descriptor?? [ 90.218957][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.488721][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 90.619465][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.627256][ T13] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 90.637071][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.658398][ T13] usb 2-1: config 0 descriptor?? [ 91.173303][ T13] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 91.304958][ T4660] tipc: Started in network mode [ 91.339159][ T4660] tipc: Node identity c2fb35c54d22, cluster identity 4711 [ 91.383377][ T4660] tipc: Enabled bearer , priority 0 [ 91.391288][ T13] usb 2-1: USB disconnect, device number 2 [ 91.454903][ T4662] device syzkaller0 entered promiscuous mode [ 91.483198][ T4659] tipc: Resetting bearer [ 91.528472][ T4659] tipc: Disabling bearer [ 91.546766][ T4231] usb 5-1: USB disconnect, device number 2 [ 91.737668][ T4672] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 91.845063][ T4676] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.870634][ T4676] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 91.942797][ T26] audit: type=1326 audit(1757568145.105:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bba219ba9 code=0x7ffc0000 [ 92.126641][ T26] audit: type=1326 audit(1757568145.125:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7bba219ba9 code=0x7ffc0000 [ 92.176766][ T26] audit: type=1326 audit(1757568145.125:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bba219ba9 code=0x7ffc0000 [ 92.569136][ T26] audit: type=1326 audit(1757568145.135:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7bba219ba9 code=0x7ffc0000 [ 92.772281][ T26] audit: type=1326 audit(1757568145.145:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bba1b5da9 code=0x7ffc0000 [ 92.813399][ T26] audit: type=1326 audit(1757568145.145:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bba1b5da9 code=0x7ffc0000 [ 92.845976][ T26] audit: type=1326 audit(1757568145.145:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bba1b5da9 code=0x7ffc0000 [ 92.916348][ T26] audit: type=1326 audit(1757568145.155:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bba1b5da9 code=0x7ffc0000 [ 93.014845][ T26] audit: type=1326 audit(1757568145.155:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bba1b5da9 code=0x7ffc0000 [ 93.090082][ T4698] tipc: Enabled bearer , priority 0 [ 93.117066][ T26] audit: type=1326 audit(1757568145.155:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bba1b5da9 code=0x7ffc0000 [ 93.144301][ T4699] device syzkaller0 entered promiscuous mode [ 93.181037][ T4697] tipc: Resetting bearer [ 93.221129][ T4697] tipc: Disabling bearer [ 95.100661][ T1108] cfg80211: failed to load regulatory.db [ 95.192273][ T4722] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.223009][ T4722] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 95.510611][ T4734] tipc: Started in network mode [ 95.556441][ T4734] tipc: Node identity 5a4de0220f44, cluster identity 4711 [ 95.592327][ T4734] tipc: Enabled bearer , priority 0 [ 95.612418][ T4736] device syzkaller0 entered promiscuous mode [ 95.694726][ T4733] tipc: Resetting bearer [ 95.726795][ T4733] tipc: Disabling bearer [ 95.749492][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 95.960641][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 97.219739][ T4749] sched: RT throttling activated [ 97.333363][ T4751] netlink: 52 bytes leftover after parsing attributes in process `syz.4.147'. [ 97.345086][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 97.609179][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.631596][ T1108] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.642350][ T1108] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.651559][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.653378][ T1108] usb 3-1: config 0 descriptor?? [ 98.852261][ T4768] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.864691][ T4768] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 98.978559][ T4779] Device name cannot be null; rc = [-22] [ 98.985815][ T4782] tipc: Enabling of bearer rejected, failed to enable media [ 99.202436][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 99.227548][ T4791] device macvtap1 entered promiscuous mode [ 99.239627][ T4791] device vlan0 entered promiscuous mode [ 99.628088][ T13] usb 3-1: USB disconnect, device number 6 [ 100.253461][ T4809] kvm: pic: non byte read [ 100.326875][ T4809] kvm: pic: level sensitive irq not supported [ 100.326952][ T4809] kvm: pic: non byte read [ 100.393747][ T4809] kvm: pic: single mode not supported [ 100.393771][ T4809] kvm: pic: level sensitive irq not supported [ 100.475482][ T4809] kvm: pic: non byte read [ 100.501205][ T4815] tipc: Enabled bearer , priority 0 [ 100.536320][ T4815] device syzkaller0 entered promiscuous mode [ 100.584385][ T4809] kvm: pic: non byte read [ 100.596638][ T4809] kvm: pic: non byte read [ 100.597325][ T4815] tipc: Resetting bearer [ 100.602035][ T4809] kvm: pic: non byte read [ 100.615051][ T4809] kvm: pic: non byte read [ 100.623090][ T4809] kvm: pic: non byte read [ 100.627708][ T4809] kvm: pic: non byte read [ 100.655740][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 100.813821][ T4814] tipc: Resetting bearer [ 100.844285][ T4814] tipc: Disabling bearer [ 102.208817][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.416627][ T4856] tipc: Enabled bearer , priority 0 [ 102.428143][ T4856] device syzkaller0 entered promiscuous mode [ 102.448716][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 102.505549][ T4856] tipc: Resetting bearer [ 102.531325][ T4855] tipc: Resetting bearer [ 102.556636][ T4855] tipc: Disabling bearer [ 102.568833][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.590051][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.611548][ T13] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 102.623476][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.655525][ T13] usb 5-1: config 0 descriptor?? [ 102.723541][ T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 103.740698][ T4886] 9pnet_virtio: no channels available for device syz [ 103.769760][ T4886] overlayfs: './file0' not a directory [ 104.460276][ T4896] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 104.693900][ T4887] chnl_net:caif_netlink_parms(): no params data found [ 104.751453][ T4896] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.956372][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.963775][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.979138][ T4887] device bridge_slave_0 entered promiscuous mode [ 104.986149][ T4230] usb 5-1: USB disconnect, device number 3 [ 105.003183][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.080834][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.101250][ T4887] device bridge_slave_1 entered promiscuous mode [ 105.150808][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 105.193726][ T4904] tipc: Enabled bearer , priority 0 [ 105.211391][ T4907] device syzkaller0 entered promiscuous mode [ 105.230289][ T4887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.277793][ T4904] tipc: Resetting bearer [ 105.298198][ T4887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.325305][ T4903] tipc: Resetting bearer [ 105.347849][ T4903] tipc: Disabling bearer [ 105.431156][ T4887] team0: Port device team_slave_0 added [ 105.476355][ T4887] team0: Port device team_slave_1 added [ 105.626002][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.666773][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.793369][ T4887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.889250][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.916735][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.972659][ T4887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.058913][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 106.208306][ T4887] device hsr_slave_0 entered promiscuous mode [ 106.225793][ T4887] device hsr_slave_1 entered promiscuous mode [ 106.257179][ T4887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.276495][ T4887] Cannot create hsr debugfs directory [ 106.369776][ T4292] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.608864][ T4292] usb 2-1: Using ep0 maxpacket: 16 [ 107.237924][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.268163][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.276385][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.283902][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.292620][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.300361][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.307781][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.315552][ T4292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.326144][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.333948][ T4292] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.347972][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.365013][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.372577][ T4292] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 107.381728][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.390112][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.398998][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.406570][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.414930][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.424075][ T4292] usb 2-1: config 0 descriptor?? [ 107.430119][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.437634][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.445144][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.452867][ T7] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 107.470771][ T4292] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 107.490721][ T7] hid-generic 000F:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 107.507567][ T4946] tipc: Enabling of bearer rejected, failed to enable media [ 107.555280][ T4951] fido_id[4951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.708846][ T4955] overlayfs: failed to clone upperpath [ 107.850375][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.911470][ T4961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 107.977381][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.067590][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.172812][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.347407][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 109.434971][ T1108] usb 2-1: USB disconnect, device number 3 [ 109.638545][ T4991] tipc: Enabling of bearer rejected, failed to enable media [ 110.863026][ T4231] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 110.878814][ T4231] Bluetooth: hci3: Injecting HCI hardware error event [ 110.893776][ T4193] Bluetooth: hci3: hardware error 0x00 [ 110.992750][ T4887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.015730][ T4887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.122710][ T154] tipc: Left network mode [ 111.126539][ T4887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.187683][ T4887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.418856][ T4320] Bluetooth: hci2: command 0x040f tx timeout [ 111.819021][ T4184] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.871333][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.898583][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.913651][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.010293][ T4887] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.039538][ T4320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.318874][ T4184] usb 5-1: Using ep0 maxpacket: 16 [ 112.324246][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.332575][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 112.345523][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.362317][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.369483][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.378196][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.399021][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.407926][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.415046][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.440793][ T5045] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.479163][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.484545][ T4320] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.498007][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.508745][ T4320] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.519330][ T4184] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.539112][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.564640][ T4320] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.567644][ T4184] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.599186][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.605626][ T4320] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.615302][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.649152][ T4320] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.668713][ T4184] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.677914][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.679024][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.698695][ T4184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.738207][ T4184] usb 5-1: config 0 descriptor?? [ 112.750529][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.761487][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.770830][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.780391][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.789730][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.801019][ T4184] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 112.809218][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.850770][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.903041][ T5055] tipc: Enabling of bearer rejected, failed to enable media [ 112.958853][ T4320] usb 2-1: GET_CAPABILITIES returned 0 [ 112.964458][ T4320] usbtmc 2-1:16.0: can't read capabilities [ 113.297501][ T5072] process 'syz.1.232' launched './file1' with NULL argv: empty string added [ 113.421576][ T154] device hsr_slave_0 left promiscuous mode [ 113.436679][ T4185] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 113.448993][ T4185] CPU: 1 PID: 4185 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 113.449031][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.457865][ T154] device hsr_slave_1 left promiscuous mode [ 113.466751][ T4185] Workqueue: hci4 hci_rx_work [ 113.466780][ T4185] Call Trace: [ 113.466788][ T4185] [ 113.466795][ T4185] dump_stack_lvl+0x168/0x230 [ 113.466819][ T4185] ? show_regs_print_info+0x20/0x20 [ 113.466835][ T4185] ? load_image+0x3b0/0x3b0 [ 113.466861][ T4185] sysfs_create_dir_ns+0x252/0x280 [ 113.466883][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 113.466903][ T4185] ? sysfs_warn_dup+0xa0/0xa0 [ 113.466919][ T4185] ? le_conn_complete_evt+0xcbc/0x1590 [ 113.466936][ T4185] ? hci_event_packet+0xe05/0x12f0 [ 113.466952][ T4185] ? process_one_work+0x863/0x1000 [ 113.466969][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 113.466984][ T4185] kobject_add_internal+0x662/0xd00 [ 113.467010][ T4185] kobject_add+0x152/0x210 [ 113.543408][ T4185] ? kobject_init+0x1d0/0x1d0 [ 113.548111][ T4185] ? klist_children_get+0x50/0x50 [ 113.553126][ T4185] ? get_device_parent+0x121/0x3f0 [ 113.558259][ T4185] device_add+0x483/0xfb0 [ 113.562593][ T4185] hci_conn_add_sysfs+0xd1/0x1e0 [ 113.567517][ T4185] le_conn_complete_evt+0xcbc/0x1590 [ 113.572794][ T4185] ? cs_le_create_conn+0x5e0/0x5e0 [ 113.577897][ T4185] ? __mutex_trylock_common+0x14f/0x250 [ 113.583429][ T4185] hci_le_meta_evt+0x289/0x3b80 [ 113.588295][ T4185] ? hci_event_packet+0x36d/0x12f0 [ 113.593399][ T4185] ? hci_event_packet+0x2e2/0x12f0 [ 113.598535][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 113.603562][ T4185] ? hci_remote_host_features_evt+0x280/0x280 [ 113.609616][ T4185] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 113.615236][ T4185] ? mark_lock+0x94/0x320 [ 113.619551][ T4185] ? mutex_unlock+0x10/0x10 [ 113.624047][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 113.630025][ T4185] ? lock_chain_count+0x20/0x20 [ 113.634995][ T4185] ? __rwlock_init+0x140/0x140 [ 113.639742][ T4185] hci_event_packet+0xe05/0x12f0 [ 113.645111][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 113.650299][ T4185] ? rcu_lock_release+0x20/0x20 [ 113.655228][ T4185] ? hci_send_to_monitor+0x9c/0x4a0 [ 113.660408][ T4185] hci_rx_work+0x255/0xa10 [ 113.664816][ T4185] process_one_work+0x863/0x1000 [ 113.669865][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 113.675569][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 113.680840][ T4185] ? _raw_spin_lock_irq+0xab/0xe0 [ 113.685855][ T4185] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 113.691237][ T4185] ? wq_worker_running+0x97/0x170 [ 113.696245][ T4185] worker_thread+0xaa8/0x12a0 [ 113.700945][ T4185] kthread+0x436/0x520 [ 113.705048][ T4185] ? rcu_lock_release+0x20/0x20 [ 113.709891][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 113.714465][ T4185] ret_from_fork+0x1f/0x30 [ 113.718875][ T4185] [ 113.726045][ T4320] Bluetooth: hci2: command 0x0419 tx timeout [ 113.732134][ T4185] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.746170][ T4185] Bluetooth: hci4: failed to register connection device [ 113.756410][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.756503][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.758611][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.758778][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.763211][ T154] device bridge_slave_1 left promiscuous mode [ 113.764515][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.785381][ T154] device bridge_slave_0 left promiscuous mode [ 113.785517][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.792270][ T1111] usb 2-1: USB disconnect, device number 4 [ 113.822555][ T154] device vlan0 left promiscuous mode [ 113.835680][ T154] device veth1_macvtap left promiscuous mode [ 113.835910][ T154] device veth0_macvtap left promiscuous mode [ 113.835999][ T154] device veth1_vlan left promiscuous mode [ 113.836077][ T154] device veth0_vlan left promiscuous mode [ 114.092019][ T154] bond2 (unregistering): Released all slaves [ 114.125083][ T154] bond1 (unregistering): Released all slaves [ 114.330851][ T154] team0 (unregistering): Port device team_slave_1 removed [ 114.348003][ T154] team0 (unregistering): Port device team_slave_0 removed [ 114.356158][ T5101] 9pnet_virtio: no channels available for device syz [ 114.382519][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.415730][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.060935][ T13] usb 5-1: USB disconnect, device number 4 [ 115.504431][ T154] bond0 (unregistering): Released all slaves [ 115.618587][ T5120] tipc: Enabled bearer , priority 0 [ 115.663687][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.706784][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.795813][ T5120] tipc: Disabling bearer [ 115.837753][ T4887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.523441][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.548923][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.669290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.694581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.730941][ T4887] device veth0_vlan entered promiscuous mode [ 116.741196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.793771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.832471][ T4887] device veth1_vlan entered promiscuous mode [ 116.973773][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.990171][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.015651][ T4887] device veth0_macvtap entered promiscuous mode [ 117.059944][ T4887] device veth1_macvtap entered promiscuous mode [ 117.133756][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.181537][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.228716][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.271489][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.318665][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.388901][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.409403][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.448989][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.537551][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.587079][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.619331][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.664976][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.717613][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.860740][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.087294][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.278844][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.426917][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.480582][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.513769][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.605133][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.630165][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.713643][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.789855][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.805978][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.866709][ T5172] tipc: Enabled bearer , priority 0 [ 118.897864][ T4887] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.922735][ T4887] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.945939][ T4887] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.977740][ T4887] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.024746][ T5172] tipc: Disabling bearer [ 119.355349][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.390820][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.409721][ T5186] loop6: detected capacity change from 0 to 524287999 [ 120.480803][ T4184] Bluetooth: hci4: command 0x0406 tx timeout [ 120.496262][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.507452][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.563107][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.616103][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.627058][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.638926][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.649868][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.660663][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.676352][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.711401][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.722449][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.741581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.780565][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.791685][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.818985][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.830011][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.894263][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.905211][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.006713][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.017734][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.025707][ T5186] ldm_validate_partition_table(): Disk read failed. [ 121.070858][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.081818][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.090791][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.101701][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.193428][ T5186] Dev loop6: unable to read RDB block 0 [ 121.204443][ T5186] loop6: unable to read partition table [ 121.210441][ T5186] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 121.625259][ T5215] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 121.631803][ T5215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.648895][ T4230] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.661547][ T5215] vhci_hcd vhci_hcd.0: Device attached [ 121.921242][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 121.928937][ T1111] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 122.059671][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.089945][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.161105][ T4230] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.208825][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.260616][ T4230] usb 2-1: config 0 descriptor?? [ 122.330752][ T4230] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 122.744109][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 122.751141][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 122.785516][ T5242] ceph: No mds server is up or the cluster is laggy [ 122.896253][ T5216] vhci_hcd: connection reset by peer [ 122.925432][ T4333] vhci_hcd: stop threads [ 123.050822][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 123.057287][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 123.059892][ T4333] vhci_hcd: release socket [ 123.149292][ T4333] vhci_hcd: disconnect device [ 123.821147][ T5262] tipc: Enabling of bearer rejected, failed to enable media [ 124.265464][ T26] kauditd_printk_skb: 527 callbacks suppressed [ 124.265477][ T26] audit: type=1326 audit(1757568177.425:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5281 comm="syz.5.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d9d24ba9 code=0x7ffc0000 [ 124.338293][ T13] usb 2-1: USB disconnect, device number 5 [ 124.458471][ T26] audit: type=1326 audit(1757568177.455:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5281 comm="syz.5.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d9d24ba9 code=0x7ffc0000 [ 125.967023][ T5331] tipc: Enabling of bearer rejected, failed to enable media [ 127.100459][ T1111] vhci_hcd: vhci_device speed not set [ 127.174816][ T5351] overlayfs: failed to clone upperpath [ 127.671853][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.705548][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.778861][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.788098][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.798091][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.813549][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.826941][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.871370][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.880844][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.888425][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.896206][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.904015][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.911717][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.919434][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 127.926831][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 128.088714][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 128.110576][ T4231] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 128.141873][ T4231] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 128.422862][ T5380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.293'. [ 128.499431][ T5377] fido_id[5377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.529514][ T5380] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.538463][ T5380] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.125929][ T5395] tipc: Enabled bearer , priority 0 [ 130.250717][ T4320] tipc: Node number set to 1358643546 [ 130.831268][ T5403] tipc: Disabling bearer [ 130.879109][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.148903][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 131.279811][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.363579][ T4230] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 131.512798][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.650282][ T5407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.301'. [ 131.684119][ T4230] usb 5-1: config 0 descriptor?? [ 131.772088][ T4230] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 132.093977][ T5444] tipc: Enabling of bearer rejected, failed to enable media [ 132.613572][ T5466] binder: 5464:5466 ioctl 4018620d 0 returned -22 [ 132.662479][ T5470] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 132.672161][ T5468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.317'. [ 132.748756][ T4320] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.906482][ T5481] binder: 5480:5481 ioctl c0306201 200000000080 returned -14 [ 132.988707][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 133.108947][ T4320] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.117741][ T4320] usb 3-1: config 0 has no interface number 0 [ 133.124112][ T4320] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 133.135434][ T4320] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 133.146647][ T4320] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.160400][ T4320] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.169794][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.194102][ T4320] usb 3-1: config 0 descriptor?? [ 133.240561][ T4320] ldusb 3-1:0.55: Interrupt in endpoint not found [ 133.446859][ T13] usb 3-1: USB disconnect, device number 7 [ 133.519984][ T5491] tipc: Enabled bearer , priority 0 [ 133.623649][ T5495] device syzkaller0 entered promiscuous mode [ 133.642470][ T5491] tipc: Resetting bearer [ 133.650470][ T5490] tipc: Resetting bearer [ 133.659714][ T5490] tipc: Disabling bearer [ 133.750238][ T13] usb 5-1: USB disconnect, device number 5 [ 134.009681][ T5512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.329'. [ 136.027569][ T5543] tipc: Enabled bearer , priority 0 [ 136.061366][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.069800][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.089225][ T5544] device syzkaller0 entered promiscuous mode [ 136.119227][ T5543] tipc: Resetting bearer [ 136.145877][ T5540] tipc: Resetting bearer [ 136.159154][ T5540] tipc: Disabling bearer [ 136.268854][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.273761][ T4231] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 136.669526][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.758750][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 137.886529][ T4231] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 138.109876][ T4231] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 138.155594][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.158802][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.183710][ T4231] usb 5-1: SerialNumber: syz [ 138.183735][ T13] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.217887][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.235919][ T13] usb 6-1: config 0 descriptor?? [ 138.280747][ T13] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 138.428509][ T5558] syz.1.339 uses obsolete (PF_INET,SOCK_PACKET) [ 138.445510][ T13] usb 5-1: USB disconnect, device number 6 [ 138.465049][ T5562] overlayfs: missing 'lowerdir' [ 138.813575][ T5572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.343'. [ 139.628612][ T5593] 9pnet_virtio: no channels available for device syz [ 139.659402][ T5595] tipc: Enabled bearer , priority 0 [ 139.695821][ T5595] device syzkaller0 entered promiscuous mode [ 139.761597][ T5598] netlink: 72 bytes leftover after parsing attributes in process `syz.4.351'. [ 139.775194][ T5595] tipc: Resetting bearer [ 139.808884][ T5594] tipc: Resetting bearer [ 139.860609][ T5594] tipc: Disabling bearer [ 140.220096][ T5610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 140.247156][ T4259] usb 6-1: USB disconnect, device number 2 [ 140.330019][ T5608] bridge0: port 3(syz_tun) entered blocking state [ 140.350140][ T5608] bridge0: port 3(syz_tun) entered disabled state [ 141.117107][ T5608] device syz_tun entered promiscuous mode [ 141.124150][ T5608] bridge0: port 3(syz_tun) entered blocking state [ 141.131179][ T5608] bridge0: port 3(syz_tun) entered forwarding state [ 142.442433][ T5635] 9pnet_virtio: no channels available for device syz [ 143.290984][ T5665] tipc: Enabled bearer , priority 0 [ 143.318438][ T5665] device syzkaller0 entered promiscuous mode [ 143.376089][ T5665] tipc: Resetting bearer [ 143.407696][ T5663] tipc: Resetting bearer [ 143.424847][ T5663] tipc: Disabling bearer [ 143.528902][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 143.573825][ T5672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.369'. [ 143.682169][ T5681] netlink: 68 bytes leftover after parsing attributes in process `syz.3.371'. [ 143.768888][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 143.909178][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.929046][ T7] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.995804][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.042487][ T7] usb 6-1: config 0 descriptor?? [ 144.101406][ T7] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 144.112295][ T5693] block device autoloading is deprecated and will be removed. [ 144.125018][ T5699] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.250518][ T5708] capability: warning: `syz.3.378' uses deprecated v2 capabilities in a way that may be insecure [ 144.437785][ T5714] tipc: Enabled bearer , priority 0 [ 144.473977][ T5714] device syzkaller0 entered promiscuous mode [ 144.522719][ T5714] tipc: Resetting bearer [ 144.537664][ T5712] tipc: Resetting bearer [ 144.579450][ T5712] tipc: Disabling bearer [ 144.726143][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 145.100633][ T5730] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 145.115105][ T5730] tipc: Enabled bearer , priority 10 [ 145.229012][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 145.487818][ T5747] device ip6erspan0 entered promiscuous mode [ 145.498930][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 145.840891][ T5762] delete_channel: no stack [ 146.028819][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 146.271620][ T5763] tipc: Enabling of bearer rejected, failed to enable media [ 146.360764][ T7] usb 6-1: USB disconnect, device number 3 [ 146.664556][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 147.098799][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 147.997827][ T5810] fuse: Bad value for 'fd' [ 148.138796][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 148.488742][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.738769][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 148.790260][ T5828] tipc: Enabling of bearer rejected, failed to enable media [ 148.859096][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.915498][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.954670][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.412'. [ 149.002815][ T13] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 149.042906][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.114186][ T13] usb 5-1: config 0 descriptor?? [ 149.178771][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 149.632258][ T13] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 149.834742][ T13] usb 5-1: USB disconnect, device number 7 [ 150.218783][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.256300][ T5893] netlink: 165 bytes leftover after parsing attributes in process `syz.2.422'. [ 151.259025][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.285595][ T5893] netlink: 277 bytes leftover after parsing attributes in process `syz.2.422'. [ 151.708735][ T5898] tipc: Enabled bearer , priority 0 [ 151.775140][ T5898] device syzkaller0 entered promiscuous mode [ 152.135276][ T5897] tipc: Resetting bearer [ 152.298909][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 152.377038][ T5913] 9pnet_virtio: no channels available for device syz [ 152.382983][ T5897] tipc: Disabling bearer [ 152.799242][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'. [ 153.338802][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 153.418828][ T4230] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.681510][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 153.799021][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.859974][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.908744][ T4230] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 153.937608][ T5956] overlayfs: failed to clone lowerpath [ 153.963745][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.011411][ T5961] tipc: Enabled bearer , priority 0 [ 154.021074][ T4230] usb 3-1: config 0 descriptor?? [ 154.041111][ T5961] device syzkaller0 entered promiscuous mode [ 154.100509][ T5961] tipc: Resetting bearer [ 154.140567][ T5959] tipc: Resetting bearer [ 154.194808][ T5959] tipc: Disabling bearer [ 154.237188][ T4193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 154.247439][ T4193] CPU: 0 PID: 4193 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 154.254999][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.265064][ T4193] Workqueue: hci1 hci_rx_work [ 154.269793][ T4193] Call Trace: [ 154.273300][ T4193] [ 154.276227][ T4193] dump_stack_lvl+0x168/0x230 [ 154.280906][ T4193] ? show_regs_print_info+0x20/0x20 [ 154.286098][ T4193] ? load_image+0x3b0/0x3b0 [ 154.290602][ T4193] sysfs_create_dir_ns+0x252/0x280 [ 154.295710][ T4193] ? __lock_acquire+0x7c60/0x7c60 [ 154.300726][ T4193] ? sysfs_warn_dup+0xa0/0xa0 [ 154.305392][ T4193] ? le_conn_complete_evt+0xcbc/0x1590 [ 154.310834][ T4193] ? hci_event_packet+0xe05/0x12f0 [ 154.315974][ T4193] ? process_one_work+0x863/0x1000 [ 154.324066][ T4193] ? do_raw_spin_unlock+0x11d/0x230 [ 154.329288][ T4193] kobject_add_internal+0x662/0xd00 [ 154.334494][ T4193] kobject_add+0x152/0x210 [ 154.338901][ T4193] ? kobject_init+0x1d0/0x1d0 [ 154.343565][ T4193] ? klist_children_get+0x50/0x50 [ 154.348571][ T4193] ? get_device_parent+0x121/0x3f0 [ 154.353670][ T4193] device_add+0x483/0xfb0 [ 154.358125][ T4193] hci_conn_add_sysfs+0xd1/0x1e0 [ 154.363162][ T4193] le_conn_complete_evt+0xcbc/0x1590 [ 154.368457][ T4193] ? cs_le_create_conn+0x5e0/0x5e0 [ 154.373575][ T4193] ? __mutex_trylock_common+0x14f/0x250 [ 154.379134][ T4193] hci_le_meta_evt+0x289/0x3b80 [ 154.383999][ T4193] ? hci_event_packet+0x36d/0x12f0 [ 154.389116][ T4193] ? hci_event_packet+0x2e2/0x12f0 [ 154.394363][ T4193] ? __lock_acquire+0x7c60/0x7c60 [ 154.399411][ T4193] ? hci_remote_host_features_evt+0x280/0x280 [ 154.405572][ T4193] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 154.411202][ T4193] ? mark_lock+0x94/0x320 [ 154.415539][ T4193] ? mutex_unlock+0x10/0x10 [ 154.420027][ T4193] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 154.426003][ T4193] ? lock_chain_count+0x20/0x20 [ 154.430840][ T4193] ? __rwlock_init+0x140/0x140 [ 154.435587][ T4193] hci_event_packet+0xe05/0x12f0 [ 154.440504][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 154.445692][ T4193] ? rcu_lock_release+0x20/0x20 [ 154.450608][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 154.455794][ T4193] hci_rx_work+0x255/0xa10 [ 154.460201][ T4193] process_one_work+0x863/0x1000 [ 154.465132][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 154.470746][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 154.476016][ T4193] ? _raw_spin_lock_irq+0xab/0xe0 [ 154.481133][ T4193] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 154.486489][ T4193] ? wq_worker_running+0x97/0x170 [ 154.491499][ T4193] worker_thread+0xaa8/0x12a0 [ 154.496181][ T4193] kthread+0x436/0x520 [ 154.500243][ T4193] ? rcu_lock_release+0x20/0x20 [ 154.505074][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 154.509650][ T4193] ret_from_fork+0x1f/0x30 [ 154.514059][ T4193] [ 154.517182][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.519486][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 154.523698][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 154.540357][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'. [ 154.542567][ T4193] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 154.562968][ T4193] Bluetooth: hci1: failed to register connection device [ 154.579660][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 154.869024][ T4230] usbhid 3-1:0.0: can't add hid device: -71 [ 154.875139][ T4230] usbhid: probe of 3-1:0.0 failed with error -71 [ 154.985447][ T4230] usb 3-1: USB disconnect, device number 8 [ 155.578929][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 155.821457][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 156.122079][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.190199][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.298770][ T6013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.628878][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 156.714454][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.456'. [ 156.734430][ T6026] tipc: Enabling of bearer rejected, failed to enable media [ 156.925799][ T6031] netlink: 'syz.4.457': attribute type 2 has an invalid length. [ 156.975565][ T6031] netlink: 'syz.4.457': attribute type 2 has an invalid length. [ 157.248962][ T4259] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.658896][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.204555][ T4259] usb 3-1: Using ep0 maxpacket: 16 [ 158.318604][ T6051] overlayfs: failed to clone upperpath [ 158.341702][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.362742][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.401414][ T4259] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 158.428738][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.464442][ T4259] usb 3-1: config 0 descriptor?? [ 158.698785][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.049510][ T4259] usbhid 3-1:0.0: can't add hid device: -71 [ 159.055755][ T4259] usbhid: probe of 3-1:0.0 failed with error -71 [ 159.185526][ T4259] usb 3-1: USB disconnect, device number 9 [ 159.470465][ T6070] tipc: Enabled bearer , priority 0 [ 159.498180][ T6070] device syzkaller0 entered promiscuous mode [ 159.555788][ T6070] tipc: Resetting bearer [ 159.580637][ T6069] tipc: Resetting bearer [ 159.635803][ T6069] tipc: Disabling bearer [ 159.738786][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.726340][ T6119] tipc: Enabled bearer , priority 0 [ 160.734787][ T6119] device syzkaller0 entered promiscuous mode [ 160.769973][ T6119] tipc: Resetting bearer [ 160.777498][ T6117] tipc: Resetting bearer [ 160.783476][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.824385][ T6117] tipc: Disabling bearer [ 160.828767][ T4230] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.088789][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 161.209039][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.236871][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.247559][ T4230] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.287865][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.323467][ T4230] usb 3-1: config 0 descriptor?? [ 161.665935][ C0] ------------[ cut here ]------------ [ 161.671795][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 161.682849][ C0] WARNING: CPU: 0 PID: 4182 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 161.692872][ C0] Modules linked in: [ 161.696759][ C0] CPU: 0 PID: 4182 Comm: syz-executor Not tainted syzkaller #0 [ 161.704481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.714551][ C0] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 161.720997][ C0] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 e0 de 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 a0 38 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 161.741129][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00010246 [ 161.747222][ C0] RAX: 617429709e8a9900 RBX: 000000000000000c RCX: ffff88807a73d940 [ 161.755317][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 161.763341][ C0] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000000e51 [ 161.771369][ C0] R10: fffff52000000e51 R11: 1ffff92000000e50 R12: ffff88801fafd8e8 [ 161.779376][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 161.787353][ C0] FS: 0000555584de3500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 161.796298][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.803071][ C0] CR2: 0000555584e06608 CR3: 0000000062a05000 CR4: 00000000003506f0 [ 161.811081][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.819106][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.827084][ C0] Call Trace: [ 161.830392][ C0] [ 161.833241][ C0] rate_control_send_low+0x194/0x790 [ 161.838515][ C0] rate_control_get_rate+0x207/0x5c0 [ 161.843857][ C0] __ieee80211_beacon_get+0x1512/0x1f80 [ 161.849451][ C0] ? __x64_sys_unlink+0x45/0x50 [ 161.854386][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 161.860439][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 161.865910][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 161.868838][ T4230] usbhid 3-1:0.0: can't add hid device: -71 [ 161.871418][ C0] __iterate_interfaces+0x243/0x500 [ 161.871454][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 161.871475][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 161.871495][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 161.871515][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 161.871536][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 161.871557][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 161.871574][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 161.871597][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 161.871625][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 161.871654][ C0] hrtimer_run_softirq+0x176/0x240 [ 161.871678][ C0] handle_softirqs+0x328/0x820 [ 161.871701][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 161.871724][ C0] ? do_softirq+0x200/0x200 [ 161.871744][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 161.871767][ C0] __irq_exit_rcu+0x12f/0x220 [ 161.871784][ C0] ? irq_exit_rcu+0x20/0x20 [ 161.871811][ C0] irq_exit_rcu+0x5/0x20 [ 161.871826][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 161.871847][ C0] [ 161.871854][ C0] [ 161.871861][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 161.871881][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 161.871904][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 161.871918][ C0] RSP: 0018:ffffc90002dff500 EFLAGS: 00000202 [ 161.871937][ C0] RAX: 0000000000000000 RBX: ffffc90002dff5c8 RCX: 0000000000000000 [ 161.871949][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90002dff628 [ 161.871961][ C0] RBP: ffffc90002dff610 R08: dffffc0000000000 R09: ffffc90002dff618 [ 161.871983][ C0] R10: fffff520005bfec5 R11: 1ffff920005bfec3 R12: 1ffffffff1bdc26e [ 161.871997][ C0] R13: dffffc0000000000 R14: ffffc90002dff618 R15: ffffc90002dff5fd [ 161.872025][ C0] unwind_next_frame+0xa3d/0x1d90 [ 161.872053][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 161.872078][ C0] ? stack_trace_save+0xe0/0xe0 [ 161.872096][ C0] arch_stack_walk+0x10c/0x140 [ 161.872117][ C0] ? slab_free_freelist_hook+0xea/0x170 [ 161.872133][ C0] ? kfree+0xef/0x2a0 [ 161.872159][ C0] stack_trace_save+0x98/0xe0 [ 161.872182][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 161.872207][ C0] kasan_set_track+0x4b/0x70 [ 161.872224][ C0] ? kasan_set_track+0x4b/0x70 [ 161.872240][ C0] ? kasan_set_free_info+0x1f/0x40 [ 161.872257][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 162.119464][ C0] kasan_set_free_info+0x1f/0x40 [ 162.124391][ C0] ____kasan_slab_free+0xd5/0x110 [ 162.129434][ C0] slab_free_freelist_hook+0xea/0x170 [ 162.134809][ C0] ? tomoyo_realpath_from_path+0x5d8/0x610 [ 162.140636][ C0] kfree+0xef/0x2a0 [ 162.144435][ C0] tomoyo_realpath_from_path+0x5d8/0x610 [ 162.150244][ C0] tomoyo_path_perm+0x1cd/0x510 [ 162.155104][ C0] ? tomoyo_path_permission+0x380/0x380 [ 162.160697][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 162.165725][ C0] ? __rwlock_init+0x140/0x140 [ 162.170527][ C0] tomoyo_path_unlink+0x9f/0xe0 [ 162.175478][ C0] ? tomoyo_path_truncate+0x20/0x20 [ 162.180960][ C0] security_path_unlink+0xd8/0x130 [ 162.186158][ C0] do_unlinkat+0x2ed/0x6f0 [ 162.190604][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 162.195715][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 162.200861][ C0] ? strncpy_from_user+0x1fb/0x360 [ 162.205971][ C0] ? getname_flags+0x1fe/0x500 [ 162.210782][ C0] __x64_sys_unlink+0x45/0x50 [ 162.215448][ C0] do_syscall_64+0x4c/0xa0 [ 162.219876][ C0] ? clear_bhb_loop+0x30/0x80 [ 162.224650][ C0] ? clear_bhb_loop+0x30/0x80 [ 162.229363][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.235271][ C0] RIP: 0033:0x7fc80327d157 [ 162.239726][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.259574][ C0] RSP: 002b:00007fff64921068 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 162.268081][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc80327d157 [ 162.276075][ C0] RDX: 00007fff64921090 RSI: 00007fff64921120 RDI: 00007fff64921120 [ 162.284066][ C0] RBP: 00007fff64921120 R08: 0000000000000000 R09: 0000000000000000 [ 162.292071][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff649221b0 [ 162.300205][ C0] R13: 00007fc803300c05 R14: 000000000002773b R15: 00007fff649221f0 [ 162.308203][ C0] [ 162.311280][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.318662][ C0] CPU: 0 PID: 4182 Comm: syz-executor Not tainted syzkaller #0 [ 162.326409][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.336455][ C0] Call Trace: [ 162.339722][ C0] [ 162.342566][ C0] dump_stack_lvl+0x168/0x230 [ 162.347239][ C0] ? show_regs_print_info+0x20/0x20 [ 162.352420][ C0] ? load_image+0x3b0/0x3b0 [ 162.356919][ C0] panic+0x2c9/0x7f0 [ 162.360799][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 162.365283][ C0] ? __rate_control_send_low+0x630/0x880 [ 162.370917][ C0] __warn+0x248/0x2b0 [ 162.374887][ C0] ? __rate_control_send_low+0x630/0x880 [ 162.380517][ C0] report_bug+0x1b7/0x2e0 [ 162.384849][ C0] handle_bug+0x3a/0x70 [ 162.388989][ C0] exc_invalid_op+0x16/0x40 [ 162.393475][ C0] asm_exc_invalid_op+0x16/0x20 [ 162.398304][ C0] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 162.404551][ C0] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 e0 de 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 a0 38 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 162.424135][ C0] RSP: 0018:ffffc90000007768 EFLAGS: 00010246 [ 162.430185][ C0] RAX: 617429709e8a9900 RBX: 000000000000000c RCX: ffff88807a73d940 [ 162.438143][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 162.446093][ C0] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000000e51 [ 162.454039][ C0] R10: fffff52000000e51 R11: 1ffff92000000e50 R12: ffff88801fafd8e8 [ 162.461998][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 162.469959][ C0] ? __rate_control_send_low+0x630/0x880 [ 162.475669][ C0] rate_control_send_low+0x194/0x790 [ 162.480939][ C0] rate_control_get_rate+0x207/0x5c0 [ 162.486219][ C0] __ieee80211_beacon_get+0x1512/0x1f80 [ 162.491752][ C0] ? __x64_sys_unlink+0x45/0x50 [ 162.496588][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 162.502566][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 162.508515][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 162.513981][ C0] __iterate_interfaces+0x243/0x500 [ 162.519271][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 162.525510][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 162.531753][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 162.538768][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 162.544003][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 162.549184][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 162.555176][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 162.561133][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 162.565791][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 162.570900][ C0] hrtimer_run_softirq+0x176/0x240 [ 162.576082][ C0] handle_softirqs+0x328/0x820 [ 162.580822][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 162.585652][ C0] ? do_softirq+0x200/0x200 [ 162.590139][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 162.595328][ C0] __irq_exit_rcu+0x12f/0x220 [ 162.599997][ C0] ? irq_exit_rcu+0x20/0x20 [ 162.604485][ C0] irq_exit_rcu+0x5/0x20 [ 162.608707][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 162.614425][ C0] [ 162.617423][ C0] [ 162.620339][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.626326][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 162.631247][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 162.650834][ C0] RSP: 0018:ffffc90002dff500 EFLAGS: 00000202 [ 162.656987][ C0] RAX: 0000000000000000 RBX: ffffc90002dff5c8 RCX: 0000000000000000 [ 162.664935][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90002dff628 [ 162.672884][ C0] RBP: ffffc90002dff610 R08: dffffc0000000000 R09: ffffc90002dff618 [ 162.680837][ C0] R10: fffff520005bfec5 R11: 1ffff920005bfec3 R12: 1ffffffff1bdc26e [ 162.688791][ C0] R13: dffffc0000000000 R14: ffffc90002dff618 R15: ffffc90002dff5fd [ 162.696757][ C0] unwind_next_frame+0xa3d/0x1d90 [ 162.701777][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 162.706955][ C0] ? stack_trace_save+0xe0/0xe0 [ 162.711799][ C0] arch_stack_walk+0x10c/0x140 [ 162.716565][ C0] ? slab_free_freelist_hook+0xea/0x170 [ 162.722093][ C0] ? kfree+0xef/0x2a0 [ 162.726070][ C0] stack_trace_save+0x98/0xe0 [ 162.730722][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 162.735812][ C0] kasan_set_track+0x4b/0x70 [ 162.740380][ C0] ? kasan_set_track+0x4b/0x70 [ 162.745118][ C0] ? kasan_set_free_info+0x1f/0x40 [ 162.750213][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 162.755443][ C0] kasan_set_free_info+0x1f/0x40 [ 162.760400][ C0] ____kasan_slab_free+0xd5/0x110 [ 162.765541][ C0] slab_free_freelist_hook+0xea/0x170 [ 162.770996][ C0] ? tomoyo_realpath_from_path+0x5d8/0x610 [ 162.776832][ C0] kfree+0xef/0x2a0 [ 162.780630][ C0] tomoyo_realpath_from_path+0x5d8/0x610 [ 162.786250][ C0] tomoyo_path_perm+0x1cd/0x510 [ 162.791114][ C0] ? tomoyo_path_permission+0x380/0x380 [ 162.796667][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 162.801680][ C0] ? __rwlock_init+0x140/0x140 [ 162.806538][ C0] tomoyo_path_unlink+0x9f/0xe0 [ 162.811377][ C0] ? tomoyo_path_truncate+0x20/0x20 [ 162.816567][ C0] security_path_unlink+0xd8/0x130 [ 162.821671][ C0] do_unlinkat+0x2ed/0x6f0 [ 162.826075][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 162.831174][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 162.836291][ C0] ? strncpy_from_user+0x1fb/0x360 [ 162.841432][ C0] ? getname_flags+0x1fe/0x500 [ 162.846191][ C0] __x64_sys_unlink+0x45/0x50 [ 162.850852][ C0] do_syscall_64+0x4c/0xa0 [ 162.855266][ C0] ? clear_bhb_loop+0x30/0x80 [ 162.860049][ C0] ? clear_bhb_loop+0x30/0x80 [ 162.864716][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.870689][ C0] RIP: 0033:0x7fc80327d157 [ 162.875094][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.894685][ C0] RSP: 002b:00007fff64921068 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 162.903131][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc80327d157 [ 162.911085][ C0] RDX: 00007fff64921090 RSI: 00007fff64921120 RDI: 00007fff64921120 [ 162.919040][ C0] RBP: 00007fff64921120 R08: 0000000000000000 R09: 0000000000000000 [ 162.926990][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff649221b0 [ 162.934951][ C0] R13: 00007fc803300c05 R14: 000000000002773b R15: 00007fff649221f0 [ 162.942918][ C0] [ 162.946152][ C0] Kernel Offset: disabled [ 162.950831][ C0] Rebooting in 86400 seconds..