last executing test programs: 12.748098448s ago: executing program 0 (id=74): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone(0x13000040, &(0x7f0000000480)="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", 0xff, &(0x7f0000000140), 0x0, &(0x7f00000003c0)) sendmsg$nl_generic(r4, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x20004000) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x20048891) 12.008214231s ago: executing program 2 (id=77): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x281c9, 0x12) 11.453230303s ago: executing program 2 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='A'}) 11.175399559s ago: executing program 2 (id=83): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc}) r2 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x2, 0x0, 0x8d, "0062ba7d82070000000000000000000400"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0xa1cf, 0x9, @remote, 0x5}}}, 0xa0) r3 = syz_open_pts(r0, 0x82080) dup3(r3, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 10.82447279s ago: executing program 2 (id=86): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000193c0)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4844) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4014) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 9.188019115s ago: executing program 0 (id=88): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 9.068384902s ago: executing program 4 (id=89): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 8.361093424s ago: executing program 0 (id=90): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a42970d0a2ee3d8700"/103], 0x210) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x8000, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 8.239712341s ago: executing program 3 (id=92): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x1402, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x40) 5.335998089s ago: executing program 0 (id=93): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='A'}) 5.277829033s ago: executing program 2 (id=94): unshare(0x200) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRES16, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x81ad}}}, 0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 5.228155096s ago: executing program 3 (id=95): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 5.227563226s ago: executing program 4 (id=96): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)=[0x5, 0x0, 0x2], 0x0, 0x1ffffe73, 0x1}}, 0x40) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x280, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000180)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x10000000}}, 0x0, 0x1200) fsopen(&(0x7f0000000140)='nfs4\x00', 0x0) 5.090782274s ago: executing program 3 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x94, 0x30, 0x1, 0x2, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 4.276039511s ago: executing program 4 (id=99): r0 = socket(0x1d, 0x2, 0x6) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x14, "3eccd8fd0000000000000010000000040100"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x210a, 0xea2d, 0x4, 0x0, 0xa) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x3, {0x0, 0x1, 0x3}, 0x1}, 0x18) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfff) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x4}, 0x400800c) 4.270287461s ago: executing program 0 (id=100): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 4.268212551s ago: executing program 3 (id=101): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[], 0x27) 4.019839976s ago: executing program 0 (id=102): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r3, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}], 0x1}, 0x48050) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 4.019390956s ago: executing program 3 (id=103): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1778, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 3.866660985s ago: executing program 4 (id=105): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740100001a00330628bd7000fddbdf25ac141442000000000000000000000000e0000002000000000000000000000000000000004e2380010000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6401010100000000000000000000000000000000320000000000000000000000000000000000000023"], 0x174}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.753729891s ago: executing program 1 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xb5, &(0x7f0000000140)=""/181, 0x41000, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) accept4$llc(r5, 0x0, 0x0, 0x80000) 1.972068805s ago: executing program 4 (id=107): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 1.418324428s ago: executing program 1 (id=108): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 1.237157949s ago: executing program 4 (id=109): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRESOCT=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="a63e107b1f65945b63204beaf646e5756dcda8b5ebab0f178637534c51c62d6446a7d49f25692c0b04218f6b86be9072ee8d549ddbe2271f0014cb6f97499eed8d394bb9fb41923c0cf68ad1351c735fd33d6dec056e9be7d2be5f57902d114b09d2cb7fa8059618465e0b9da0c812a7b04b0d922e286d250d89bab93e9ba60faf295a00fe22cfeaf0b6a8b45261b61071b0f32309e5121807a0d9d532213b134655731dfe8e89e495bd77921dfb110c99d412d6b219a5f175ef0d50feba9ec1286eb016c36d5ccaf4189cd03bb9a5434370"], 0x48) migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e04079) umount2(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1e2) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x18001, 0x0) 1.20531369s ago: executing program 1 (id=110): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x12, 0x0, 0x0) 940.749315ms ago: executing program 3 (id=111): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {0x3ff, 0x1, 0x800}, 0x24, [0xfffffffc, 0x3, 0x6e, 0x4, 0x9, 0xfffffffc, 0x101, 0x859d, 0x1000, 0x7, 0x7, 0x1, 0x6, 0x401, 0x1, 0x5, 0x3, 0x4, 0x5, 0xffffffff, 0x3, 0xe2, 0x4, 0xe, 0x3, 0x80000001, 0x7, 0x1, 0x8407, 0x7, 0x6, 0x67, 0x4, 0xf4a, 0x1, 0x2, 0x5a39b125, 0xe45e, 0x8c, 0x8, 0x7ff, 0x40, 0x4, 0xab, 0x6, 0x10001, 0x3, 0xab, 0x7fffffff, 0x4, 0x7, 0x1, 0x7fff, 0x3, 0x4, 0x6, 0x100, 0x5, 0x3, 0x5, 0x9, 0x6, 0x47, 0xcc2], [0x3f1, 0x7, 0x3, 0x78e4, 0x4185, 0x1, 0x7ff, 0x9, 0x3, 0x3, 0x980, 0xfffffffe, 0x2, 0x91, 0x4, 0x7, 0x1, 0x2, 0x33, 0x3ff, 0x0, 0x0, 0x1ff, 0xfd7e, 0x80000001, 0x32, 0x8, 0x80000, 0x1, 0xfc9, 0x9, 0x9, 0x3, 0x70, 0x5, 0x0, 0xa, 0x3, 0x8, 0x0, 0x5, 0x74f3, 0xdf, 0x5, 0x4, 0x7, 0x10, 0x93e, 0x2e, 0xe8, 0x8001, 0xc68e, 0x401, 0x6, 0x80000003, 0x3, 0x101, 0x4, 0xc, 0x4, 0x4, 0x7fff, 0x4, 0xb], [0x9, 0x7345, 0x8, 0xb17, 0x2, 0x1, 0x10001, 0x7, 0x2, 0x7, 0x6, 0x8000, 0x3, 0x2, 0x0, 0x100, 0x3, 0xbd, 0x3a3b5806, 0x1a, 0xffff, 0x15e2, 0x9, 0x1, 0x40, 0x6, 0x4d, 0x0, 0x8001, 0x4, 0xfffffffd, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x1, 0x0, 0x5, 0x66b, 0x7, 0x1, 0x800, 0xfffffff5, 0x7, 0xa, 0x84, 0x0, 0x5, 0x8, 0xfffffffb, 0x2, 0x40, 0xa, 0x7ff, 0x401, 0x6, 0x4, 0x7, 0xcacc, 0x0, 0x1, 0x40], [0xe, 0x7658, 0x3, 0x40, 0x1, 0xffffff10, 0x100, 0x64b, 0xab6e, 0x4, 0x2, 0x2c, 0x7, 0x8, 0x3, 0x2, 0x7f, 0x65, 0x8, 0xf, 0x9, 0x30, 0x2, 0x6, 0xe2f, 0x5, 0x7, 0x5, 0x7, 0xc00000, 0x200003, 0xffffffff, 0x4e8, 0x8, 0x363, 0x840a, 0xce, 0x2, 0xb, 0x10, 0xfffffff8, 0x2, 0x4, 0x5, 0x0, 0x8, 0x2, 0x2, 0x23, 0x4, 0xf55, 0x1, 0x40, 0xbfbb, 0x9, 0x3, 0x4ab, 0x9, 0x5, 0x78f3, 0x7, 0x10000, 0xfffffff0, 0x1ff]}, 0x45c) 827.653962ms ago: executing program 1 (id=112): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 505.222311ms ago: executing program 1 (id=113): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 152.915981ms ago: executing program 1 (id=114): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 0s ago: executing program 2 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 62.501981][ T4253] cgroup: Unknown subsys name 'net' [ 62.628912][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.191609][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.245478][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.245757][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.254087][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.261217][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.268096][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.275836][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.282540][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.288984][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.296761][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.310536][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.310591][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.317835][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.325856][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.332121][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.340101][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.347365][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.353812][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.360627][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.367477][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.374731][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.388853][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.399347][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.408095][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.415767][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.423515][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.431506][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.437981][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.438726][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.455576][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.463202][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.855583][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 66.963136][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 67.015662][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 67.040501][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 67.087637][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.095754][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.103814][ T4267] device bridge_slave_0 entered promiscuous mode [ 67.134467][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 67.144037][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.151244][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.159928][ T4267] device bridge_slave_1 entered promiscuous mode [ 67.242521][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.250767][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.258878][ T4271] device bridge_slave_0 entered promiscuous mode [ 67.275416][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.299379][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.306900][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.315497][ T4271] device bridge_slave_1 entered promiscuous mode [ 67.338416][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.359511][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.367160][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.375336][ T4269] device bridge_slave_0 entered promiscuous mode [ 67.397438][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.411194][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.438383][ T4267] team0: Port device team_slave_0 added [ 67.445079][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.452327][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.460408][ T4269] device bridge_slave_1 entered promiscuous mode [ 67.480841][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.488308][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.496896][ T4273] device bridge_slave_0 entered promiscuous mode [ 67.506233][ T4267] team0: Port device team_slave_1 added [ 67.512256][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.519476][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.528081][ T4273] device bridge_slave_1 entered promiscuous mode [ 67.556029][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.563571][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.571489][ T4266] device bridge_slave_0 entered promiscuous mode [ 67.610340][ T4271] team0: Port device team_slave_0 added [ 67.616812][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.624994][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.633224][ T4266] device bridge_slave_1 entered promiscuous mode [ 67.642585][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.653899][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.660872][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.687564][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.705624][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.716352][ T4271] team0: Port device team_slave_1 added [ 67.728757][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.738460][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.745696][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.771943][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.784653][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.857012][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.880425][ T4273] team0: Port device team_slave_0 added [ 67.891600][ T4267] device hsr_slave_0 entered promiscuous mode [ 67.898980][ T4267] device hsr_slave_1 entered promiscuous mode [ 67.906568][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.917572][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.944483][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.966881][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.977929][ T4273] team0: Port device team_slave_1 added [ 67.993220][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.000238][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.026993][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.040852][ T4269] team0: Port device team_slave_0 added [ 68.080577][ T4269] team0: Port device team_slave_1 added [ 68.095571][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.102640][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.129122][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.142610][ T4266] team0: Port device team_slave_0 added [ 68.159423][ T4266] team0: Port device team_slave_1 added [ 68.183176][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.190139][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.216522][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.246801][ T4271] device hsr_slave_0 entered promiscuous mode [ 68.254435][ T4271] device hsr_slave_1 entered promiscuous mode [ 68.261513][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.269611][ T4271] Cannot create hsr debugfs directory [ 68.282330][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.289683][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.315955][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.331794][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.338888][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.365370][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.385017][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.392029][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.419563][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.459534][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.466786][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.493405][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.513692][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 68.513706][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 68.513890][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 68.520035][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 68.531617][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 68.607699][ T4273] device hsr_slave_0 entered promiscuous mode [ 68.618302][ T4273] device hsr_slave_1 entered promiscuous mode [ 68.625266][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.633332][ T4273] Cannot create hsr debugfs directory [ 68.647264][ T4269] device hsr_slave_0 entered promiscuous mode [ 68.654139][ T4269] device hsr_slave_1 entered promiscuous mode [ 68.660897][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.668757][ T4269] Cannot create hsr debugfs directory [ 68.777900][ T4266] device hsr_slave_0 entered promiscuous mode [ 68.789618][ T4266] device hsr_slave_1 entered promiscuous mode [ 68.796433][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.804182][ T4266] Cannot create hsr debugfs directory [ 69.026281][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.042618][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.054401][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.068038][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.110401][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.119819][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.137897][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.156880][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.228219][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.249537][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.280704][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.293546][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.346059][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.359549][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.372647][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.390113][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.406206][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.425112][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.438217][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.447332][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.491749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.504359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.515689][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.523178][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.531592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.541782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.551409][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.558640][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.566640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.575852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.584983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.594280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.615180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.624555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.637280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.647186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.682624][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.698955][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.712835][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.721216][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.738752][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.751811][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.762452][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.783790][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.797235][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.809048][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.818063][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.826477][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.843530][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.860636][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.917706][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.933719][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.944983][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.952223][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.961443][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.986033][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.031134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.060738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.075869][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.083156][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.120775][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.153067][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.160187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.174234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.182244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.190582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.209002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.219176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.249885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.259540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.270493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.279847][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.287002][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.295853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.303978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.311817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.320968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.330699][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.337858][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.352589][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.384895][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.396757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.405613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.415326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.425023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.434407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.442053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.454960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.464779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.473601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.486432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.495919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.505612][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.512831][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.544484][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.560110][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.576325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.584880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.593487][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 70.593526][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 70.593553][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 70.593578][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 70.593622][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 70.627001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.636174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.644999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.654636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.663314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.671522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.681530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.690335][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.697457][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.706290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.718753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.729103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.738180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.771739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.807774][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.827352][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.845073][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.863840][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.872637][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.883825][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.892565][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.902666][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.912693][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.954774][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.961773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.971602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.980920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.989380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.998157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.008486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.017305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.026299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.039460][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.052609][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.071381][ T4267] device veth0_vlan entered promiscuous mode [ 71.090720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.106020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.151441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.173515][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.194998][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.213342][ T4267] device veth1_vlan entered promiscuous mode [ 71.274698][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.293617][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.313671][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.333263][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.353499][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.360651][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.383642][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.397183][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.398298][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.404051][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.424545][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.431813][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.476312][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.489137][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.502367][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.516835][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.530760][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.543833][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.560660][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.570964][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.585529][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.595357][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.622500][ T4267] device veth0_macvtap entered promiscuous mode [ 71.640605][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.652272][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.669238][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.682639][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.697285][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.718851][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.733229][ T4267] device veth1_macvtap entered promiscuous mode [ 71.748988][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.759274][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.768358][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.779938][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.814743][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.822370][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.834178][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.869644][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.880119][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.892494][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.927956][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.941272][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.952686][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.993492][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.003782][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.013950][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.026992][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.037191][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.056403][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.074197][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.087504][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.096695][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.120417][ T4266] device veth0_vlan entered promiscuous mode [ 72.158239][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.174176][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.234207][ T4266] device veth1_vlan entered promiscuous mode [ 72.242429][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.263827][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.274955][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.294338][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.314370][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.402158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.434704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.444442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.463759][ T4266] device veth0_macvtap entered promiscuous mode [ 72.474578][ T4269] device veth0_vlan entered promiscuous mode [ 72.490572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.506952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.519258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.534165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.555995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.577012][ T4266] device veth1_macvtap entered promiscuous mode [ 72.619513][ T4269] device veth1_vlan entered promiscuous mode [ 72.641807][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.657795][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.664710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.673598][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 72.674446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.679874][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 72.688439][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 72.694358][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 72.700438][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 72.717158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.725671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.733463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.743865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.769575][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.781179][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.792993][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.804514][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.840192][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.850744][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.860988][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.869940][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.881363][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.892678][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.904830][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.932543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.945901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.956926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.966692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.979933][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.989238][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.998771][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.007883][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.028487][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.041342][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.050581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.076756][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.090428][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.110202][ T4271] device veth0_vlan entered promiscuous mode [ 73.129748][ T4271] device veth1_vlan entered promiscuous mode [ 73.141093][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.159655][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.178193][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.188921][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.198599][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.211634][ T4273] device veth0_vlan entered promiscuous mode [ 73.224978][ T4269] device veth0_macvtap entered promiscuous mode [ 73.254154][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.276269][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.288224][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.297399][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.305854][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.354865][ T4269] device veth1_macvtap entered promiscuous mode [ 73.372643][ T4273] device veth1_vlan entered promiscuous mode [ 73.390513][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.407059][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.420571][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.452364][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.506854][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.802836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 74.554566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.595374][ T4271] device veth0_macvtap entered promiscuous mode [ 74.611933][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.624191][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.660549][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.668362][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.695334][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.707916][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.727726][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.736342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.751269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.753309][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 74.759613][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 74.765204][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 74.771260][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 74.778044][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 74.793609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.810051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.820450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.836252][ T4271] device veth1_macvtap entered promiscuous mode [ 74.857540][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.868740][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.879171][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.890092][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.914776][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.927945][ T4273] device veth0_macvtap entered promiscuous mode [ 74.973788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.989406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.998868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.012285][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.026824][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.036107][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.049584][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.066607][ T4273] device veth1_macvtap entered promiscuous mode [ 75.087452][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.095685][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.130935][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.160186][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.170546][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.181586][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.192392][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.203659][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.221999][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.234016][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.242114][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.264853][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.284441][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.312463][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.327504][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.339060][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.349949][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.359799][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.370474][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.380368][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.391010][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.411296][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.422585][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.435881][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.445852][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.456645][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.467068][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.479959][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.505581][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.518937][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.542420][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.552405][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.563182][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.574446][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.596991][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.608565][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.626461][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.655829][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.673474][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.688736][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.710148][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.724220][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.745156][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.760481][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.860694][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.237640][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.653287][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.729390][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.382738][ C0] sched: RT throttling activated [ 77.408393][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.473220][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.555007][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.616522][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.716403][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.742798][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.814772][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.989959][ T4419] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 77.996727][ T4419] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.036896][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.072588][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.089929][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.139738][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.181122][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.210036][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.262606][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.311561][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.364934][ T4419] vhci_hcd vhci_hcd.0: Device attached [ 78.443553][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.464070][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.471938][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.523294][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.531178][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.549876][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.570314][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.593606][ T4383] vhci_hcd: vhci_device speed not set [ 78.692914][ T4383] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 79.092519][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.153023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.221641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.323327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.426950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.553050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.005602][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.057705][ T4439] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.355957][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.369721][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.672212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.724458][ T4451] autofs4:pid:4451:autofs_fill_super: called with bogus options [ 80.743396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.884121][ T4441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.923174][ T4441] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.959427][ T4441] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 80.969047][ T4441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.115142][ T4441] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.125866][ T4441] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 81.155065][ T4441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.161463][ T4441] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.884008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.893022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.389527][ T126] cfg80211: failed to load regulatory.db [ 82.412089][ T4419] fuse: Bad value for 'fd' [ 82.512828][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.993017][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.232818][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.267032][ T4441] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 84.303005][ T4441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.309149][ T4441] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.414872][ T4441] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 84.422179][ T4441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 84.433500][ T4441] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 84.479740][ T4441] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 84.592918][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 84.697405][ T4467] Zero length message leads to an empty skb [ 84.738800][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 84.771747][ T4467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.779356][ T4467] IPv6: NLM_F_CREATE should be set when creating new route [ 85.072813][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 85.312912][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 86.352800][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.379364][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 86.432883][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.132262][ T4481] autofs4:pid:4481:autofs_fill_super: called with bogus options [ 87.140222][ T41] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 87.349826][ T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.384087][ T41] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.432539][ T41] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.497353][ T41] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 87.551896][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.669337][ T41] hub 5-1:1.0: bad descriptor, ignoring hub [ 87.696196][ T41] hub: probe of 5-1:1.0 failed with error -5 [ 87.714007][ T4420] vhci_hcd: connection reset by peer [ 87.730557][ T4436] vhci_hcd: stop threads [ 87.751464][ T41] cdc_wdm 5-1:1.0: skipping garbage [ 87.774337][ T4436] vhci_hcd: release socket [ 87.780046][ T41] cdc_wdm 5-1:1.0: skipping garbage [ 87.792821][ T41] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 87.799381][ T4436] vhci_hcd: disconnect device [ 87.852890][ T4383] vhci_hcd: vhci_device speed not set [ 88.083044][ T41] usb 5-1: USB disconnect, device number 2 [ 88.490378][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 88.512804][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 89.153706][ T4282] Bluetooth: hci0: command 0x0401 tx timeout [ 90.868199][ T4519] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 91.572870][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.750603][ T4534] Bluetooth: MGMT ver 1.22 [ 91.804992][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.826469][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.869639][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.888758][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.960381][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.977994][ T4539] capability: warning: `syz.3.40' uses deprecated v2 capabilities in a way that may be insecure [ 92.004058][ T7] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 92.223805][ T26] audit: type=1326 audit(1771201290.937:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.4.37" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22f139bf79 code=0x0 [ 92.285906][ T7] usb 1-1: Manufacturer: syz [ 93.793167][ T4285] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 94.164450][ T4282] Bluetooth: hci2: command 0x0401 tx timeout [ 94.450382][ T7] usb 1-1: config 0 descriptor?? [ 95.103141][ T7] usb 1-1: can't set config #0, error -71 [ 95.112665][ T7] usb 1-1: USB disconnect, device number 2 [ 95.924766][ T4565] ======================================================= [ 95.924766][ T4565] WARNING: The mand mount option has been deprecated and [ 95.924766][ T4565] and is ignored by this kernel. Remove the mand [ 95.924766][ T4565] option from the mount to silence this warning. [ 95.924766][ T4565] ======================================================= [ 97.385425][ T4565] 9pnet_virtio: no channels available for device syz [ 98.833074][ T4380] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.032798][ T4380] usb 4-1: Using ep0 maxpacket: 8 [ 99.040856][ T4380] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.099409][ T4380] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 99.138939][ T4386] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.151573][ T4380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.175277][ T4602] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.187140][ T4380] usb 4-1: Product: syz [ 99.207203][ T4380] usb 4-1: Manufacturer: syz [ 99.219065][ T4380] usb 4-1: SerialNumber: syz [ 99.254507][ T4380] usb 4-1: config 0 descriptor?? [ 99.295526][ T4380] cdc_acm 4-1:0.0: Zero length descriptor references [ 99.309760][ T4380] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 99.383152][ T4606] batman_adv: batadv0: Adding interface: dummy0 [ 99.392993][ T4606] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.436208][ T4606] batman_adv: batadv0: Interface activated: dummy0 [ 99.508884][ T4608] batadv0: mtu less than device minimum [ 99.518811][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.530745][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.542506][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.554325][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.566231][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.578017][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.589862][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.602658][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.614470][ T4608] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 100.411817][ T41] usb 4-1: USB disconnect, device number 2 [ 101.836836][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.773248][ T4631] 9pnet_virtio: no channels available for device syz [ 104.467738][ T4648] netlink: 'syz.4.68': attribute type 10 has an invalid length. [ 104.774988][ T4648] team0: Port device netdevsim0 added [ 104.784012][ T4650] netlink: 'syz.4.68': attribute type 10 has an invalid length. [ 105.104010][ T4648] syz.4.68 (4648) used greatest stack depth: 20656 bytes left [ 105.186531][ T4650] team0: Port device netdevsim0 removed [ 105.238211][ T4650] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 106.467166][ T4658] batman_adv: batadv0: Adding interface: gretap1 [ 106.473599][ T4658] batman_adv: batadv0: Interface activated: gretap1 [ 109.186694][ T4383] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 109.384306][ T4383] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.404883][ T4383] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.470515][ T4383] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.512085][ T4383] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.569814][ T4383] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 109.585800][ T4383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.637023][ T4383] hub 1-1:1.0: bad descriptor, ignoring hub [ 109.658731][ T4383] hub: probe of 1-1:1.0 failed with error -5 [ 109.683553][ T4383] cdc_wdm 1-1:1.0: skipping garbage [ 109.703041][ T4383] cdc_wdm 1-1:1.0: skipping garbage [ 109.760543][ T4383] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 109.790447][ T4383] cdc_wdm 1-1:1.0: Unknown control protocol [ 110.209728][ T126] usb 1-1: USB disconnect, device number 3 [ 113.008211][ T4715] ceph: No mds server is up or the cluster is laggy [ 113.017971][ T126] libceph: connect (1)[c::]:6789 error -101 [ 113.024888][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 113.317841][ T4272] libceph: connect (1)[c::]:6789 error -101 [ 113.340631][ T4272] libceph: mon0 (1)[c::]:6789 connect error [ 114.733243][ T4735] process 'syz.0.90' launched '/dev/nullb0' with NULL argv: empty string added [ 116.685265][ T4753] netlink: 64 bytes leftover after parsing attributes in process `syz.1.97'. [ 117.641334][ T4765] device syzkaller0 entered promiscuous mode [ 117.696235][ T4765] net_ratelimit: 10 callbacks suppressed [ 117.696246][ T4765] TC_ACT_REPEAT abuse ? [ 117.766756][ T26] audit: type=1326 audit(1771201316.477:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4766 comm="syz.0.102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f670099bf79 code=0x0 [ 117.788249][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.303298][ T4778] 9pnet_virtio: no channels available for device syz [ 120.801615][ T4792] batman_adv: batadv0: Interface deactivated: dummy0 [ 120.842013][ T4792] batman_adv: batadv0: Removing interface: dummy0 [ 120.963112][ T4383] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.155166][ T4383] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.175265][ T4383] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.222826][ T4383] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.249177][ T4383] usb 4-1: Product: syz [ 121.267298][ T4383] usb 4-1: Manufacturer: syz [ 121.295780][ T4383] usb 4-1: SerialNumber: syz [ 121.327783][ T4383] usb 4-1: config 0 descriptor?? [ 121.384745][ T4797] tmpfs: Unknown parameter 'grpquota' [ 121.390064][ T4383] usb 4-1: selecting invalid altsetting 0 [ 121.558468][ T4789] ================================================================== [ 121.566754][ T4789] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x21f/0x410 [ 121.574146][ T4789] Write of size 264 at addr ffff88807711a000 by task syz.3.111/4789 [ 121.582689][ T4789] [ 121.585046][ T4789] CPU: 0 PID: 4789 Comm: syz.3.111 Not tainted syzkaller #0 [ 121.592368][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.602554][ T4789] Call Trace: [ 121.605587][ T4799] device syzkaller0 entered promiscuous mode [ 121.605844][ T4789] [ 121.605855][ T4789] dump_stack_lvl+0x188/0x24e [ 121.619600][ T4789] ? read_lock_is_recursive+0x10/0x10 [ 121.625025][ T4789] ? show_regs_print_info+0x12/0x12 [ 121.630259][ T4789] ? load_image+0x400/0x400 [ 121.634965][ T4789] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 121.640450][ T4789] ? __virt_addr_valid+0x188/0x540 [ 121.645601][ T4789] ? __virt_addr_valid+0x465/0x540 [ 121.650741][ T4789] ? copy_to_urb+0x21f/0x410 [ 121.655363][ T4789] print_report+0xa8/0x210 [ 121.659830][ T4789] kasan_report+0x10b/0x140 [ 121.664398][ T4789] ? copy_to_urb+0x21f/0x410 [ 121.669023][ T4789] kasan_check_range+0x235/0x290 [ 121.674016][ T4789] ? copy_to_urb+0x21f/0x410 [ 121.678637][ T4789] memcpy+0x3c/0x60 [ 121.682473][ T4789] copy_to_urb+0x21f/0x410 [ 121.687012][ T4789] prepare_playback_urb+0x910/0x1440 [ 121.692362][ T4789] snd_usb_endpoint_start+0x4a6/0x12e0 [ 121.697871][ T4789] ? snd_usb_endpoint_get_clock_rate+0x100/0x100 [ 121.704243][ T4789] ? __rwlock_init+0x140/0x140 [ 121.709122][ T4789] start_endpoints+0xa1/0x270 [ 121.713834][ T4789] ? snd_usb_substream_playback_trigger+0x3d9/0x7d0 [ 121.720549][ T4789] snd_usb_substream_playback_trigger+0x3eb/0x7d0 [ 121.727177][ T4789] snd_pcm_action+0xda/0x230 [ 121.731803][ T4789] __snd_pcm_lib_xfer+0x17ba/0x1c90 [ 121.737045][ T4789] ? fill_silence+0x240/0x240 [ 121.741750][ T4789] ? __snd_pcm_lib_xfer+0x1c90/0x1c90 [ 121.747166][ T4789] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 121.752831][ T4789] ? resample_expand+0x7e2/0x860 [ 121.758056][ T4789] ? pcm_lib_apply_appl_ptr+0x540/0x540 [ 121.763638][ T4789] snd_pcm_oss_write3+0x1b8/0x310 [ 121.768693][ T4789] snd_pcm_plug_write_transfer+0x2ba/0x4b0 [ 121.774530][ T4789] ? snd_pcm_plug_client_channels_buf+0x600/0x600 [ 121.781002][ T4789] ? snd_pcm_plug_client_channels_buf+0x466/0x600 [ 121.787536][ T4789] snd_pcm_oss_write2+0x1a5/0x410 [ 121.792680][ T4789] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.798598][ T4789] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 121.804085][ T4789] snd_pcm_oss_sync1+0x185/0x4f0 [ 121.809059][ T4789] ? snd_pcm_oss_get_odelay+0x300/0x300 [ 121.814631][ T4789] ? do_task_dead+0xd0/0xd0 [ 121.819162][ T4789] ? memset+0x1e/0x40 [ 121.823171][ T4789] ? snd_pcm_format_set_silence+0x144/0x1240 [ 121.829183][ T4789] snd_pcm_oss_sync+0x7ac/0xc00 [ 121.834062][ T4789] snd_pcm_oss_release+0xfe/0x240 [ 121.839111][ T4789] ? snd_pcm_oss_open+0x1e70/0x1e70 [ 121.844333][ T4789] __fput+0x22c/0x920 [ 121.848366][ T4789] task_work_run+0x1d0/0x260 [ 121.853016][ T4789] ? task_work_cancel+0x220/0x220 [ 121.858076][ T4789] ? exit_to_user_mode_loop+0x3b/0x110 [ 121.863752][ T4789] exit_to_user_mode_loop+0xe6/0x110 [ 121.869070][ T4789] exit_to_user_mode_prepare+0xee/0x180 [ 121.874659][ T4789] syscall_exit_to_user_mode+0x16/0x40 [ 121.880190][ T4789] do_syscall_64+0x58/0xa0 [ 121.884655][ T4789] ? clear_bhb_loop+0x60/0xb0 [ 121.889374][ T4789] ? clear_bhb_loop+0x60/0xb0 [ 121.894191][ T4789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.900128][ T4789] RIP: 0033:0x7f2dcf79bf79 [ 121.904665][ T4789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.924319][ T4789] RSP: 002b:00007ffccde28608 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 121.932765][ T4789] RAX: 0000000000000000 RBX: 00007ffccde286f0 RCX: 00007f2dcf79bf79 [ 121.940762][ T4789] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 121.948931][ T4789] RBP: 000000000001d739 R08: 0000000000000001 R09: 0000000000000000 [ 121.957028][ T4789] R10: 0000001b2e820000 R11: 0000000000000246 R12: 00007ffccde28730 [ 121.965039][ T4789] R13: 00007f2dcfa15fac R14: 000000000001dacf R15: 00007f2dcfa15fa0 [ 121.973133][ T4789] [ 121.976179][ T4789] [ 121.978528][ T4789] Allocated by task 4790: [ 121.982875][ T4789] kasan_set_track+0x4b/0x70 [ 121.987582][ T4789] __kasan_kmalloc+0x8e/0xa0 [ 121.992206][ T4789] __kmalloc+0xb0/0x240 [ 121.996402][ T4789] snd_usb_endpoint_set_params+0x17f5/0x2f00 [ 122.002415][ T4789] snd_usb_hw_params+0x1239/0x19d0 [ 122.007722][ T4789] snd_pcm_hw_params+0x8a2/0x1ce0 [ 122.013207][ T4789] snd_pcm_oss_change_params_locked+0x2062/0x3c60 [ 122.019660][ T4789] snd_pcm_oss_write+0x277/0xaf0 [ 122.024623][ T4789] vfs_write+0x2e6/0xa30 [ 122.028897][ T4789] ksys_write+0x14c/0x250 [ 122.033263][ T4789] do_syscall_64+0x4c/0xa0 [ 122.037792][ T4789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.043797][ T4789] [ 122.046193][ T4789] Last potentially related work creation: [ 122.051921][ T4789] kasan_save_stack+0x3a/0x60 [ 122.056626][ T4789] __kasan_record_aux_stack+0xb2/0xc0 [ 122.062022][ T4789] call_rcu+0x14f/0x990 [ 122.066212][ T4789] fib_create_info+0x1871/0x2490 [ 122.071181][ T4789] fib_table_insert+0xc2/0x1b20 [ 122.076146][ T4789] fib_magic+0x2e1/0x3c0 [ 122.080408][ T4789] fib_add_ifaddr+0x140/0x5e0 [ 122.085211][ T4789] fib_netdev_event+0x361/0x470 [ 122.090103][ T4789] raw_notifier_call_chain+0xcb/0x160 [ 122.095508][ T4789] __dev_notify_flags+0x194/0x300 [ 122.100580][ T4789] dev_change_flags+0xe3/0x1a0 [ 122.105390][ T4789] do_setlink+0xba1/0x3e60 [ 122.109835][ T4789] rtnl_newlink+0x177c/0x2080 [ 122.114541][ T4789] rtnetlink_rcv_msg+0x87c/0xfc0 [ 122.119515][ T4789] netlink_rcv_skb+0x1fb/0x450 [ 122.124331][ T4789] netlink_unicast+0x74d/0x8d0 [ 122.129140][ T4789] netlink_sendmsg+0x8ad/0xbd0 [ 122.134035][ T4789] __sys_sendto+0x497/0x650 [ 122.138563][ T4789] __x64_sys_sendto+0xda/0xf0 [ 122.143365][ T4789] do_syscall_64+0x4c/0xa0 [ 122.147894][ T4789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.153811][ T4789] [ 122.156148][ T4789] The buggy address belongs to the object at ffff88807711a000 [ 122.156148][ T4789] which belongs to the cache kmalloc-256 of size 256 [ 122.170310][ T4789] The buggy address is located 0 bytes inside of [ 122.170310][ T4789] 256-byte region [ffff88807711a000, ffff88807711a100) [ 122.183434][ T4789] [ 122.185771][ T4789] The buggy address belongs to the physical page: [ 122.192284][ T4789] page:ffffea0001dc4680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7711a [ 122.202490][ T4789] head:ffffea0001dc4680 order:1 compound_mapcount:0 compound_pincount:0 [ 122.210846][ T4789] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 122.218880][ T4789] raw: 00fff00000010200 ffffea0000ac6480 dead000000000003 ffff888017441b40 [ 122.227492][ T4789] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 122.236105][ T4789] page dumped because: kasan: bad access detected [ 122.242628][ T4789] page_owner tracks the page as allocated [ 122.248364][ T4789] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4266, tgid 4266 (syz-executor), ts 71979789168, free_ts 71920445297 [ 122.269858][ T4789] post_alloc_hook+0x173/0x1a0 [ 122.274656][ T4789] get_page_from_freelist+0x1a1e/0x1ab0 [ 122.280232][ T4789] __alloc_pages+0x1ec/0x4f0 [ 122.284857][ T4789] alloc_slab_page+0x5d/0x160 [ 122.289577][ T4789] new_slab+0x87/0x2c0 [ 122.293718][ T4789] ___slab_alloc+0xbc6/0x1240 [ 122.298509][ T4789] __kmem_cache_alloc_node+0x1a0/0x260 [ 122.304091][ T4789] __kmalloc+0xa0/0x240 [ 122.308297][ T4789] fib_create_info+0xa53/0x2490 [ 122.313177][ T4789] fib_table_insert+0xc2/0x1b20 [ 122.318164][ T4789] fib_magic+0x2e1/0x3c0 [ 122.322432][ T4789] fib_add_ifaddr+0x140/0x5e0 [ 122.327139][ T4789] fib_netdev_event+0x361/0x470 [ 122.332018][ T4789] raw_notifier_call_chain+0xcb/0x160 [ 122.337423][ T4789] __dev_notify_flags+0x194/0x300 [ 122.342488][ T4789] dev_change_flags+0xe3/0x1a0 [ 122.347457][ T4789] page last free stack trace: [ 122.352144][ T4789] free_unref_page_prepare+0x8b4/0x9a0 [ 122.357807][ T4789] free_unref_page+0x2e/0x3f0 [ 122.362514][ T4789] __unfreeze_partials+0x1a5/0x200 [ 122.367648][ T4789] put_cpu_partial+0x17c/0x250 [ 122.372426][ T4789] qlist_free_all+0x76/0xe0 [ 122.376953][ T4789] kasan_quarantine_reduce+0x144/0x160 [ 122.382431][ T4789] __kasan_slab_alloc+0x1e/0x80 [ 122.387397][ T4789] slab_post_alloc_hook+0x4b/0x480 [ 122.392527][ T4789] kmem_cache_alloc_node+0x14d/0x320 [ 122.397837][ T4789] __alloc_skb+0xfc/0x7e0 [ 122.402192][ T4789] netlink_sendmsg+0x654/0xbd0 [ 122.406998][ T4789] __sys_sendto+0x497/0x650 [ 122.411538][ T4789] __x64_sys_sendto+0xda/0xf0 [ 122.416251][ T4789] do_syscall_64+0x4c/0xa0 [ 122.420702][ T4789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.428929][ T4789] [ 122.436536][ T4789] Memory state around the buggy address: [ 122.444146][ T4789] ffff888077119f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 122.452507][ T4789] ffff88807711a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 122.460686][ T4789] >ffff88807711a080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 122.468970][ T4789] ^ [ 122.476815][ T4789] ffff88807711a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.484912][ T4789] ffff88807711a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.492994][ T4789] ================================================================== [ 122.501084][ T4789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.508297][ T4789] CPU: 0 PID: 4789 Comm: syz.3.111 Not tainted syzkaller #0 [ 122.515614][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.525884][ T4789] Call Trace: [ 122.529190][ T4789] [ 122.532143][ T4789] dump_stack_lvl+0x188/0x24e [ 122.537047][ T4789] ? memcpy+0x3c/0x60 [ 122.541071][ T4789] ? show_regs_print_info+0x12/0x12 [ 122.546301][ T4789] ? load_image+0x400/0x400 [ 122.550833][ T4789] panic+0x2e5/0x730 [ 122.554759][ T4789] ? bpf_jit_dump+0xd0/0xd0 [ 122.559374][ T4789] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 122.565295][ T4789] ? _raw_spin_unlock+0x40/0x40 [ 122.570174][ T4789] check_panic_on_warn+0x80/0xa0 [ 122.575138][ T4789] ? copy_to_urb+0x21f/0x410 [ 122.579755][ T4789] end_report+0x66/0x110 [ 122.584117][ T4789] kasan_report+0x118/0x140 [ 122.588673][ T4789] ? copy_to_urb+0x21f/0x410 [ 122.593383][ T4789] kasan_check_range+0x235/0x290 [ 122.598349][ T4789] ? copy_to_urb+0x21f/0x410 [ 122.602966][ T4789] memcpy+0x3c/0x60 [ 122.606794][ T4789] copy_to_urb+0x21f/0x410 [ 122.611239][ T4789] prepare_playback_urb+0x910/0x1440 [ 122.616562][ T4789] snd_usb_endpoint_start+0x4a6/0x12e0 [ 122.622060][ T4789] ? snd_usb_endpoint_get_clock_rate+0x100/0x100 [ 122.628507][ T4789] ? __rwlock_init+0x140/0x140 [ 122.633481][ T4789] start_endpoints+0xa1/0x270 [ 122.638180][ T4789] ? snd_usb_substream_playback_trigger+0x3d9/0x7d0 [ 122.644799][ T4789] snd_usb_substream_playback_trigger+0x3eb/0x7d0 [ 122.651244][ T4789] snd_pcm_action+0xda/0x230 [ 122.655864][ T4789] __snd_pcm_lib_xfer+0x17ba/0x1c90 [ 122.661107][ T4789] ? fill_silence+0x240/0x240 [ 122.665807][ T4789] ? __snd_pcm_lib_xfer+0x1c90/0x1c90 [ 122.671307][ T4789] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 122.677197][ T4789] ? resample_expand+0x7e2/0x860 [ 122.682184][ T4789] ? pcm_lib_apply_appl_ptr+0x540/0x540 [ 122.687777][ T4789] snd_pcm_oss_write3+0x1b8/0x310 [ 122.693066][ T4789] snd_pcm_plug_write_transfer+0x2ba/0x4b0 [ 122.698935][ T4789] ? snd_pcm_plug_client_channels_buf+0x600/0x600 [ 122.705388][ T4789] ? snd_pcm_plug_client_channels_buf+0x466/0x600 [ 122.711936][ T4789] snd_pcm_oss_write2+0x1a5/0x410 [ 122.716998][ T4789] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 122.722923][ T4789] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 122.728334][ T4789] snd_pcm_oss_sync1+0x185/0x4f0 [ 122.733299][ T4789] ? snd_pcm_oss_get_odelay+0x300/0x300 [ 122.738875][ T4789] ? do_task_dead+0xd0/0xd0 [ 122.743418][ T4789] ? memset+0x1e/0x40 [ 122.747432][ T4789] ? snd_pcm_format_set_silence+0x144/0x1240 [ 122.753454][ T4789] snd_pcm_oss_sync+0x7ac/0xc00 [ 122.758344][ T4789] snd_pcm_oss_release+0xfe/0x240 [ 122.763394][ T4789] ? snd_pcm_oss_open+0x1e70/0x1e70 [ 122.768624][ T4789] __fput+0x22c/0x920 [ 122.772639][ T4789] task_work_run+0x1d0/0x260 [ 122.777266][ T4789] ? task_work_cancel+0x220/0x220 [ 122.782325][ T4789] ? exit_to_user_mode_loop+0x3b/0x110 [ 122.787817][ T4789] exit_to_user_mode_loop+0xe6/0x110 [ 122.793139][ T4789] exit_to_user_mode_prepare+0xee/0x180 [ 122.798812][ T4789] syscall_exit_to_user_mode+0x16/0x40 [ 122.804393][ T4789] do_syscall_64+0x58/0xa0 [ 122.808849][ T4789] ? clear_bhb_loop+0x60/0xb0 [ 122.813551][ T4789] ? clear_bhb_loop+0x60/0xb0 [ 122.818252][ T4789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.824176][ T4789] RIP: 0033:0x7f2dcf79bf79 [ 122.828615][ T4789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.848359][ T4789] RSP: 002b:00007ffccde28608 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 122.856822][ T4789] RAX: 0000000000000000 RBX: 00007ffccde286f0 RCX: 00007f2dcf79bf79 [ 122.864811][ T4789] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 122.872975][ T4789] RBP: 000000000001d739 R08: 0000000000000001 R09: 0000000000000000 [ 122.881062][ T4789] R10: 0000001b2e820000 R11: 0000000000000246 R12: 00007ffccde28730 [ 122.889233][ T4789] R13: 00007f2dcfa15fac R14: 000000000001dacf R15: 00007f2dcfa15fa0 [ 122.897240][ T4789] [ 122.900420][ T4789] Kernel Offset: disabled [ 122.904755][ T4789] Rebooting in 86400 seconds..