last executing test programs: 5.661793504s ago: executing program 3 (id=4): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'comedi_parport\x00', [0x140, 0x0, 0x7, 0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x2, 0x4000004, 0x7, 0x3009, 0x8, 0x400004ce, 0x9e9b, 0x40103, 0x80000006, 0x6, 0x2, 0x7, 0x2, 0x2f, 0x81, 0xffd, 0x6, 0xab, 0x1, 0x283, 0x40, 0x400006]}) 5.572156418s ago: executing program 3 (id=6): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='127.0.0.1', 0x9) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n', 0x2) close(r4) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000480)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='2', 0x1) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r8, &(0x7f0000000580)='3\n', 0x2) close(r8) mkdir(&(0x7f00000005c0)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dlmfs\x00', &(0x7f0000000600)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./dlmfs/domain0\x00', 0x1ff) 5.32844678s ago: executing program 3 (id=7): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) setresuid(0x0, 0xee00, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x112845180, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.184520337s ago: executing program 3 (id=8): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x60840, 0x2) write$uinput_user_dev(r1, 0x0, 0x0) 4.737714198s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 4.620298813s ago: executing program 2 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20000800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='addr\x00', 0x0, 0x0) 4.107658847s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) io_setup(0x202, 0x0) 3.385982761s ago: executing program 2 (id=10): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x9, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x3, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0x4, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32c, 0x3, 0x1ff, 0x2000803, 0xfffffff8, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0], &(0x7f00000004c0)=[{}, {}], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x66, 0x2, 0x400000000000020e}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000280)={0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.97628883s ago: executing program 0 (id=12): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@nodelalloc}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@grpid}, {@resuid}, {@errors_remount}]}, 0x1, 0x5b0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x808410, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2fc, &(0x7f0000000180)="$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") syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffffff, 0x0, 0x46) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x0, 0x268, 0x138, 0x0, 0x268, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'bond_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x3, 0x74}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd69, 0x1, @broadcast, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0xffffff00, 'team0\x00', 'hsr0\x00', {}, {}, 0xff, 0x2, 0x68}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) 1.787272906s ago: executing program 2 (id=13): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="f30f09b800228ed00f20e06635080000000f22e00f236bf30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95deba4300ec", 0x47}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$mixer(0xffffffffffffff9c, 0x0, 0x101802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 1.775813536s ago: executing program 0 (id=14): userfaultfd(0x80001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket(0x2b, 0x803, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41dee000000003a49490834eb1600040000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 1.47495296s ago: executing program 2 (id=15): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.25640121s ago: executing program 4 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount$pvfs2(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0), 0x800000, 0x0) 1.148637636s ago: executing program 4 (id=18): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1.096438708s ago: executing program 4 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfe4f, &(0x7f0000000000)=ANY=[], 0x0) 1.018121811s ago: executing program 4 (id=20): syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0) 882.044398ms ago: executing program 1 (id=21): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c000180"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 780.383503ms ago: executing program 4 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 726.517935ms ago: executing program 0 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d66"], 0xc8}}, 0x0) 642.615219ms ago: executing program 3 (id=24): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@nodelalloc}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@grpid}, {@resuid}, {@errors_remount}]}, 0x1, 0x5b0, &(0x7f00000004c0)="$eJzs3U9oHPUeAPDvzGab/sl76YP34L1HD+W9B31Qukn6R6un9iZiodCD4EXDZhtKNtmSTbQJAdN7EXsQlYLUmx48Kh48iBePXr0onoVig0LTg65MdjZN092atNkkZj8f2OzvNzM7399vZr+/7AwzTAA962j2J434V0RcTCIG18zri3zm0eZyy0sL5ftLC+UkGo1LPyWRRMS9pYVya/kkfz8UEYsR8c+I+KoYcTxdXeW+VqE+Nz8xWq1WpvP60Mzk1aH63PyJK5Oj45XxytSpZ587c/b0mZGTI2ube7+xtlbcXF9vfH/zrRvfvHj75sefHFksvzOaxLkYyOet7cdWam6TYpxbN/10N4LtoGSnG8ATKeR5nqXSP2IwCnnWt9NYOzj0b0vzgC5q9Ec0Vq0pAj0gkfTQo1q/A7Lj39ZrO39/3DnfPADJ4i4vLZTfjFb8vua5idi/cmxy8OfkoSOT7Hjz8HY2lD1p8XpEDPf1Pfr9T/Lv35Mb3ooG0lVfnm/uqEf3f7o6/kSb8Wegde70KbXGv+V8/FtuE7/QYfy7uMEYv77yw/sd41/vj3+3jZ+sxk/axE8j4rU263uhzYnAWy9/frZT/MaHEceiffyW5PHnh4cuX6lWhpt/28b44tiR5zv3P+Jgh/jNc7b7Vxqytv/78jalnVa6zmdff/qfxcfE//9/H7//223/AxHx9gbj/+3eRy91mnfnenI3+xWw2f2fRDFubzD+M+eOfpcXnTUEAAAAAAAAAIAtlK5cy5akpdVympZKzXt4/x4H02qtPnP8cm12aqx5zdvhKKatK60Gm/Ukq4/k1+O26ifX1U8V8oCFAyv1UrlWHdvhvgMAAAAAAAAAAAAAAAAAAMBucWjd/f+/FFbu/1//uGpgr+r8yG9gr5P/0Lsezv82T3AE9iz//6FnNeQ/9C75D71L/kPvkv/Qu+Q/9C75D71L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHAhezXuLy2Us/pY39zsRO31E2OV+kRpcrZcKtemr5bGa7XxaqVUrk3+0fqSWu3qcEzNXhuaqdRnhupz869O1manWs8UrRS73iMAAAAAAAAAAAAAAAAAAAD48xlYeSVpKaLYrKdpqRTxl4g4nERy+Uq1MhwRf42IbwvF/qw+stONBgAAAAAAAAAAAAAAAAAAgD2mPjc/MVqtVqa7V+jLQ3UxxMYLfZtZOCIWt7YZ2Ro3/alivgF3eNPtmkIhnuLjhd3xPdz9hR0clAAAAAAAAAAAAAAAAAAAoEc9uOl3o5/4rbsNAgAAAAAAAAAAAAAAAAAAgJ6U/phERPY6Nvi/gfVz9yXLhf7sPSLeuHXp3WujMzPTI9n0u4XIp8+8l08/uSMdADaoladpRGR5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQn5ufGK1WK9NPWOjfwDLtI3+QbHdfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbj9wAAAP//RWPOXg==") openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x808410, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2fc, &(0x7f0000000180)="$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") syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffffff, 0x0, 0x46) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x0, 0x268, 0x138, 0x0, 0x268, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'bond_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x3, 0x74}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd69, 0x1, @broadcast, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0xffffff00, 'team0\x00', 'hsr0\x00', {}, {}, 0xff, 0x2, 0x68}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) 548.466604ms ago: executing program 0 (id=25): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x25c, &(0x7f0000000100)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0xfffd, r2, 0x0}, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x7, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 548.135574ms ago: executing program 4 (id=26): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="f30f09b800228ed00f20e06635080000000f22e00f236bf30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95deba4300ec", 0x47}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$mixer(0xffffffffffffff9c, 0x0, 0x101802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 349.150633ms ago: executing program 1 (id=27): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 274.077107ms ago: executing program 0 (id=28): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1f4a, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0x5) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') 211.049µs ago: executing program 0 (id=29): syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$9p_virtio(0x0, 0x0, &(0x7f00000002c0), 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x111) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x31, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x8, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x400101bd, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8e, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x12, 0x8, 0x5, 0x40000401, 0x1, 0x405, 0x9e, 0xb69b, 0x8, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x9, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xfffbffff, 0x6, 0x4], [0x9, 0x3, 0x9, 0x9, 0x5, 0xffffffff, 0xfffffffe, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x1, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67ae, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x81, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xffd, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f5, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x7e, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x4, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x0, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac14141d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000600)=""/46, &(0x7f0000000480)=0x2e) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl(r1, 0x5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 1 (id=30): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0xa, 0x158}, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x200000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 59.411360][ T4174] cgroup: Unknown subsys name 'net' [ 59.524778][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.023091][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.023102][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 63.085487][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.145549][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.168524][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.221784][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.241820][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.248955][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.258364][ T4198] device bridge_slave_0 entered promiscuous mode [ 63.297370][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.304654][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.312615][ T4198] device bridge_slave_1 entered promiscuous mode [ 63.336339][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.343764][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.351661][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.362770][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.370103][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.378079][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.419042][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.448276][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.466608][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.482733][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.490082][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.497964][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.507071][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.535906][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.543136][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.551302][ T4194] device bridge_slave_0 entered promiscuous mode [ 63.564848][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.572194][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.580173][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.599187][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.607093][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.615076][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.624052][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.631390][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.639330][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.646612][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.653877][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.662180][ T4194] device bridge_slave_1 entered promiscuous mode [ 63.671270][ T4198] team0: Port device team_slave_0 added [ 63.685564][ T4186] team0: Port device team_slave_0 added [ 63.705623][ T4198] team0: Port device team_slave_1 added [ 63.720849][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.730999][ T4186] team0: Port device team_slave_1 added [ 63.738071][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.760185][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.776362][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.796995][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.806805][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.813947][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.839976][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.857927][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.865010][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.891222][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.916142][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.923198][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.949397][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.963102][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.972683][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.979993][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.005974][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.030092][ T4193] team0: Port device team_slave_0 added [ 64.059194][ T4189] team0: Port device team_slave_0 added [ 64.067822][ T4194] team0: Port device team_slave_0 added [ 64.076282][ T4194] team0: Port device team_slave_1 added [ 64.083669][ T4193] team0: Port device team_slave_1 added [ 64.102699][ T4189] team0: Port device team_slave_1 added [ 64.108812][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.115878][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.142544][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.160933][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.167894][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.194006][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.254335][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.261826][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.288098][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.304334][ T4198] device hsr_slave_0 entered promiscuous mode [ 64.311087][ T4198] device hsr_slave_1 entered promiscuous mode [ 64.318050][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.325362][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.351445][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.370486][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.377450][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.403373][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.421912][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.428720][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.435415][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.443189][ T4186] Cannot create hsr debugfs directory [ 64.451146][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.458104][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.484209][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.557833][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.564604][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.571945][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.579693][ T4194] Cannot create hsr debugfs directory [ 64.596267][ T4193] device hsr_slave_0 entered promiscuous mode [ 64.603695][ T4193] device hsr_slave_1 entered promiscuous mode [ 64.610333][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.618018][ T4193] Cannot create hsr debugfs directory [ 64.626889][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.633898][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.640623][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.648191][ T4189] Cannot create hsr debugfs directory [ 64.741984][ T2298] Bluetooth: hci2: command 0x0409 tx timeout [ 64.748544][ T2298] Bluetooth: hci1: command 0x0409 tx timeout [ 64.764599][ T2298] Bluetooth: hci0: command 0x0409 tx timeout [ 64.809926][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 64.815995][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 64.962542][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.975128][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.984167][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.994402][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.033439][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.060174][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.082755][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.114085][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.128742][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.139092][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.148236][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.166285][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.208542][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.230861][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.240975][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.254171][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.288048][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.328426][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.346478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.357008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.390008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.399451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.408842][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.416039][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.438914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.447540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.459279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.468054][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.475165][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.488186][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.496681][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.510992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.532565][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.543621][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.556136][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.569035][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.576345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.584528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.592808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.630505][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.642369][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.649609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.662892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.671817][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.678856][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.687026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.700030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.708336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.717941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.733376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.742032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.750368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.759265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.767862][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.774941][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.783311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.797465][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.805906][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.815619][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.824323][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.843060][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.854268][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.872019][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.883516][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.892388][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.900906][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.908556][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.916565][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.926749][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.935814][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.945322][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.954787][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.961874][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.969469][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.978801][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.993959][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.029878][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.038883][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.050618][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.059363][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.070366][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.077449][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.086151][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.095749][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.104845][ T3058] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.111964][ T3058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.120531][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.129059][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.138517][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.147360][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.157925][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.166077][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.175397][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.184765][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.203246][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.213495][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.222673][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.229842][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.239475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.248506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.265060][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.282859][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.317038][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.326840][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.335404][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.352559][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.361692][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.371752][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.380598][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.422199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.438755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.448310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.462443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.473890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.482668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.491997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.502717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.517605][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.535641][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.551255][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.567417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.581005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.590702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.599002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.608179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.618163][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.678885][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.688937][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.706593][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.730408][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.746710][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.758822][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.777123][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.789440][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.803976][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.812067][ T4227] Bluetooth: hci0: command 0x041b tx timeout [ 66.813187][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 66.844066][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 66.856998][ T4198] device veth0_vlan entered promiscuous mode [ 66.868497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.878454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.888090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.896396][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 66.903871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.912054][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 66.916048][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.925169][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.948274][ T4198] device veth1_vlan entered promiscuous mode [ 66.955603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.964331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.973525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.985962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.993963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.003138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.011678][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.018710][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.026515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.035408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.047354][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.057241][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.065008][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.103905][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.116572][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.129126][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.146408][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.154617][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.167591][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.177638][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.193937][ T4186] device veth0_vlan entered promiscuous mode [ 67.204514][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.219464][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.227673][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.240231][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.248984][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.265649][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.274753][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.283462][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.295718][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.304870][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.316849][ T4186] device veth1_vlan entered promiscuous mode [ 67.329284][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.341816][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.355816][ T4198] device veth0_macvtap entered promiscuous mode [ 67.373664][ T4198] device veth1_macvtap entered promiscuous mode [ 67.397825][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.406502][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.415534][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.424388][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.433660][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.442361][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.455241][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.477791][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.501780][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.515906][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.527579][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.544466][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.553313][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.569131][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.590927][ T4193] device veth0_vlan entered promiscuous mode [ 67.597939][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.607027][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.624334][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.637805][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.654193][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.662681][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.674460][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.682666][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.692292][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.702996][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.712009][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.720996][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.732727][ T4186] device veth0_macvtap entered promiscuous mode [ 67.746142][ T4193] device veth1_vlan entered promiscuous mode [ 67.765401][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.774078][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.783128][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.792337][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.816415][ T4194] device veth0_vlan entered promiscuous mode [ 67.831047][ T4186] device veth1_macvtap entered promiscuous mode [ 67.838016][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.846915][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.859812][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.867979][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.876813][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.884907][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.904670][ T4194] device veth1_vlan entered promiscuous mode [ 67.947741][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.958595][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.972265][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.982353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.991813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.000386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.008732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.017855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.025651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.036391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.045071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.077701][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.093109][ T4193] device veth0_macvtap entered promiscuous mode [ 68.102222][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.114190][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.125229][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.163255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.172359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.182672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.192076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.201407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.212998][ T4194] device veth0_macvtap entered promiscuous mode [ 68.223362][ T4193] device veth1_macvtap entered promiscuous mode [ 68.234818][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.244541][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.250407][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.261957][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.271378][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.280527][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.291941][ T4194] device veth1_macvtap entered promiscuous mode [ 68.307898][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.317561][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.338689][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.347692][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.376428][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.387915][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.398896][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.415241][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.427487][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.447996][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.460481][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.470444][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.480911][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.492569][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.505830][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.516528][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.526693][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.537922][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.547987][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.558722][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.570107][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.578490][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.587665][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.596775][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.605720][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.614840][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.623993][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.639043][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.648036][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.661326][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.670124][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.687519][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.698727][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.701979][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.708842][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.720843][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.735692][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.746118][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.756624][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.767487][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.775432][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.783618][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.793068][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.802062][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.812069][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.822098][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.830147][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.840301][ T4189] device veth0_vlan entered promiscuous mode [ 68.873644][ T4189] device veth1_vlan entered promiscuous mode [ 68.888067][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.897777][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.900820][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 68.907428][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.922266][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.929840][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 68.937215][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 68.980573][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 68.986953][ T4225] Bluetooth: hci3: command 0x040f tx timeout [ 69.010759][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.026413][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.044772][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.054916][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.087203][ T4189] device veth0_macvtap entered promiscuous mode [ 69.127639][ T4189] device veth1_macvtap entered promiscuous mode [ 69.163970][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.183475][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.196459][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.207011][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.209402][ T4264] o2cb: This node has not been configured. [ 69.217846][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.229844][ T4264] o2cb: Cluster check failed. Fix errors before retrying. [ 69.231029][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.237099][ T4264] (syz.3.6,4264,0):user_dlm_register:675 ERROR: status = -22 [ 69.248824][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.260957][ T4264] (syz.3.6,4264,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 69.265880][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.285934][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.298349][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.314897][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.325493][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.338829][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.350685][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.366812][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.380261][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.402670][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.417662][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.427972][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.447051][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.469708][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.492715][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.511389][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.521955][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.533793][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.544268][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.561556][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.573311][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.584689][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.593585][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.604504][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.614240][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.623330][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.633560][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.669200][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.680774][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.720234][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.742578][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.765155][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.779750][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.791916][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.800088][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.808021][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.829897][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.871365][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.879232][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.905043][ T3058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.916449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.935827][ T3058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.984729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.023209][ T4272] FAULT_INJECTION: forcing a failure. [ 70.023209][ T4272] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 70.027639][ T3058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.079071][ T4272] CPU: 1 PID: 4272 Comm: syz.0.1 Not tainted syzkaller #0 [ 70.086244][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.096329][ T4272] Call Trace: [ 70.099638][ T4272] [ 70.102594][ T4272] dump_stack_lvl+0x188/0x250 [ 70.107307][ T4272] ? show_regs_print_info+0x20/0x20 [ 70.109467][ T3058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.112529][ T4272] ? load_image+0x410/0x410 [ 70.112576][ T4272] ? __lock_acquire+0x7b50/0x7b50 [ 70.112608][ T4272] should_fail+0x383/0x4b0 [ 70.112635][ T4272] prepare_alloc_pages+0x1e3/0x5b0 [ 70.112665][ T4272] __alloc_pages+0x11b/0x480 [ 70.112691][ T4272] ? zone_statistics+0x170/0x170 [ 70.112713][ T4272] ? __rwlock_init+0x140/0x140 [ 70.127393][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.129527][ T4272] ? alloc_pages+0x452/0x560 [ 70.129561][ T4272] __get_free_pages+0x8/0x30 [ 70.129581][ T4272] kasan_populate_vmalloc_pte+0x21/0xc0 [ 70.129602][ T4272] __apply_to_page_range+0x987/0xd10 [ 70.129631][ T4272] ? kasan_populate_vmalloc+0x70/0x70 [ 70.151192][ T4276] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.153453][ T4272] alloc_vmap_area+0x19e8/0x1b30 [ 70.207855][ T4272] ? vm_map_ram+0xba0/0xba0 [ 70.212384][ T4272] __get_vm_area_node+0x14f/0x2d0 [ 70.217414][ T4272] __vmalloc_node_range+0xef/0x8b0 [ 70.222524][ T4272] ? vb2_vmalloc_alloc+0xec/0x330 [ 70.227558][ T4272] vmalloc_user+0x70/0x80 [ 70.231887][ T4272] ? vb2_vmalloc_alloc+0xec/0x330 [ 70.236909][ T4272] vb2_vmalloc_alloc+0xec/0x330 [ 70.241762][ T4272] ? vb2_common_vm_close+0x140/0x140 [ 70.247050][ T4272] __vb2_queue_alloc+0x737/0x1390 [ 70.252089][ T4272] vb2_core_reqbufs+0x8e4/0xf30 [ 70.256947][ T4272] ? vb2_verify_memory_type+0x570/0x570 [ 70.262503][ T4272] __vb2_init_fileio+0x2c2/0xc50 [ 70.267438][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 70.273333][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 70.278188][ T4272] vb2_core_poll+0x5cf/0x7a0 [ 70.282780][ T4272] vb2_fop_poll+0x14b/0x310 [ 70.287285][ T4272] ? vb2_fop_read+0x340/0x340 [ 70.291964][ T4272] v4l2_poll+0x13d/0x2b0 [ 70.296208][ T4272] ? v4l2_write+0x2b0/0x2b0 [ 70.300713][ T4272] do_sys_poll+0x944/0x11a0 [ 70.305228][ T4272] ? poll_select_finish+0x5d0/0x5d0 [ 70.310422][ T4272] ? __lock_acquire+0x13dc/0x7b50 [ 70.315454][ T4272] ? poll_initwait+0x150/0x150 [ 70.320219][ T4272] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 70.326496][ T4272] ? lock_chain_count+0x20/0x20 [ 70.331352][ T4272] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 70.337615][ T4272] ? nsecs_to_jiffies+0x30/0x30 [ 70.342464][ T4272] ? __lock_acquire+0x7b50/0x7b50 [ 70.347495][ T4272] __se_sys_poll+0x12d/0x330 [ 70.352084][ T4272] ? __x64_sys_poll+0x80/0x80 [ 70.356765][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 70.361967][ T4272] do_syscall_64+0x4c/0xa0 [ 70.366380][ T4272] ? clear_bhb_loop+0x30/0x80 [ 70.371054][ T4272] ? clear_bhb_loop+0x30/0x80 [ 70.375735][ T4272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.381627][ T4272] RIP: 0033:0x7f5e221c3159 [ 70.386043][ T4272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.405647][ T4272] RSP: 002b:00007f5e2041b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 70.414061][ T4272] RAX: ffffffffffffffda RBX: 00007f5e2244afa0 RCX: 00007f5e221c3159 [ 70.422036][ T4272] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 00002000000005c0 [ 70.430006][ T4272] RBP: 00007f5e2225a06b R08: 0000000000000000 R09: 0000000000000000 [ 70.437974][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.445946][ T4272] R13: 00007f5e2244b038 R14: 00007f5e2244afa0 R15: 00007ffcbc7c82c8 [ 70.453928][ T4272] [ 70.469318][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 70.568445][ T4272] syz.0.1: vmalloc error: size 831488, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 70.610045][ T4272] CPU: 0 PID: 4272 Comm: syz.0.1 Not tainted syzkaller #0 [ 70.617222][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.627301][ T4272] Call Trace: [ 70.630617][ T4272] [ 70.633566][ T4272] dump_stack_lvl+0x188/0x250 [ 70.638259][ T4272] ? rcu_lock_release+0x5/0x20 [ 70.643031][ T4272] ? show_regs_print_info+0x20/0x20 [ 70.648241][ T4272] ? load_image+0x410/0x410 [ 70.652758][ T4272] warn_alloc+0x245/0x320 [ 70.657097][ T4272] ? slab_free_freelist_hook+0xec/0x170 [ 70.662648][ T4272] ? zone_watermark_ok_safe+0x250/0x250 [ 70.668198][ T4272] ? kfree+0xef/0x2a0 [ 70.672186][ T4272] ? __get_vm_area_node+0x164/0x2d0 [ 70.677389][ T4272] __vmalloc_node_range+0x2b1/0x8b0 [ 70.682600][ T4272] vmalloc_user+0x70/0x80 [ 70.686933][ T4272] ? vb2_vmalloc_alloc+0xec/0x330 [ 70.691961][ T4272] vb2_vmalloc_alloc+0xec/0x330 [ 70.696811][ T4272] ? vb2_common_vm_close+0x140/0x140 [ 70.702102][ T4272] __vb2_queue_alloc+0x737/0x1390 [ 70.707144][ T4272] vb2_core_reqbufs+0x8e4/0xf30 [ 70.712005][ T4272] ? vb2_verify_memory_type+0x570/0x570 [ 70.717560][ T4272] __vb2_init_fileio+0x2c2/0xc50 [ 70.722506][ T4272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 70.728689][ T4272] ? _raw_spin_unlock+0x40/0x40 [ 70.733564][ T4272] vb2_core_poll+0x5cf/0x7a0 [ 70.738167][ T4272] vb2_fop_poll+0x14b/0x310 [ 70.742677][ T4272] ? vb2_fop_read+0x340/0x340 [ 70.747356][ T4272] v4l2_poll+0x13d/0x2b0 [ 70.751597][ T4272] ? v4l2_write+0x2b0/0x2b0 [ 70.756102][ T4272] do_sys_poll+0x944/0x11a0 [ 70.760629][ T4272] ? poll_select_finish+0x5d0/0x5d0 [ 70.765824][ T4272] ? __lock_acquire+0x13dc/0x7b50 [ 70.770868][ T4272] ? poll_initwait+0x150/0x150 [ 70.775635][ T4272] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 70.781909][ T4272] ? lock_chain_count+0x20/0x20 [ 70.786765][ T4272] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 70.793023][ T4272] ? nsecs_to_jiffies+0x30/0x30 [ 70.797874][ T4272] ? __lock_acquire+0x7b50/0x7b50 [ 70.802907][ T4272] __se_sys_poll+0x12d/0x330 [ 70.807500][ T4272] ? __x64_sys_poll+0x80/0x80 [ 70.812180][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 70.817382][ T4272] do_syscall_64+0x4c/0xa0 [ 70.821803][ T4272] ? clear_bhb_loop+0x30/0x80 [ 70.826481][ T4272] ? clear_bhb_loop+0x30/0x80 [ 70.831164][ T4272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.837057][ T4272] RIP: 0033:0x7f5e221c3159 [ 70.841492][ T4272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.861255][ T4272] RSP: 002b:00007f5e2041b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 70.869691][ T4272] RAX: ffffffffffffffda RBX: 00007f5e2244afa0 RCX: 00007f5e221c3159 [ 70.877675][ T4272] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 00002000000005c0 [ 70.885648][ T4272] RBP: 00007f5e2225a06b R08: 0000000000000000 R09: 0000000000000000 [ 70.893624][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.901595][ T4272] R13: 00007f5e2244b038 R14: 00007f5e2244afa0 R15: 00007ffcbc7c82c8 [ 70.909582][ T4272] [ 70.940279][ T4230] usb 4-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 70.964471][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.979621][ T4230] usb 4-1: config 1 has no interface number 0 [ 70.985754][ T4230] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 71.004130][ T4272] Mem-Info: [ 71.007300][ T4272] active_anon:274 inactive_anon:5872 isolated_anon:0 [ 71.007300][ T4272] active_file:4131 inactive_file:36854 isolated_file:0 [ 71.007300][ T4272] unevictable:768 dirty:1727 writeback:0 [ 71.007300][ T4272] slab_reclaimable:20314 slab_unreclaimable:90933 [ 71.007300][ T4272] mapped:29291 shmem:1632 pagetables:641 bounce:0 [ 71.007300][ T4272] kernel_misc_reclaimable:0 [ 71.007300][ T4272] free:1401215 free_pcp:4652 free_cma:0 [ 71.052003][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 71.058185][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 71.070512][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 71.073045][ T4272] Node 0 active_anon:1064kB inactive_anon:22976kB active_file:16324kB inactive_file:147416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117164kB dirty:6904kB writeback:0kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10284kB pagetables:2564kB all_unreclaimable? no [ 71.078288][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 71.115829][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 71.135522][ T4272] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 71.167310][ T4272] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 71.196938][ T4272] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 71.199679][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.203964][ T4272] Node 0 DMA32 free:1670424kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:22876kB active_file:16324kB inactive_file:147416kB unevictable:1536kB writepending:6904kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:5424kB local_pcp:4032kB free_cma:0kB [ 71.212946][ T4226] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.246538][ T4272] lowmem_reserve[]: 0 0 0 0 0 [ 71.253603][ T4272] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 71.287821][ T4272] lowmem_reserve[]: 0 0 0 0 0 [ 71.293749][ T4272] Node 1 Normal free:3910512kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13132kB local_pcp:8388kB free_cma:0kB [ 71.323857][ T4272] lowmem_reserve[]: 0 0 0 0 0 [ 71.328614][ T4272] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 71.342009][ T4272] Node 0 DMA32: 0*4kB 1*8kB (E) 1*16kB (M) 1*32kB (U) 3*64kB (UME) 3*128kB (UME) 2*256kB (UE) 0*512kB 0*1024kB 3*2048kB (UME) 406*4096kB (M) = 1670264kB [ 71.355002][ T4230] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 71.366887][ T4272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 71.375913][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.383025][ T4272] Node 1 Normal: 64*4kB (UME) 20*8kB (UME) 15*16kB (UME) 49*32kB (UME) 27*64kB (UME) 16*128kB (UME) 6*256kB (U) 3*512kB (UE) 0*1024kB 1*2048kB (M) 952*4096kB (M) = 3910512kB [ 71.387832][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.407003][ T4272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 71.418974][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.420465][ T4272] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 71.430456][ T4230] usb 4-1: Product: syz [ 71.440395][ T4230] usb 4-1: Manufacturer: syz [ 71.445017][ T4230] usb 4-1: SerialNumber: syz [ 71.445937][ T4272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 71.460752][ T4272] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 71.477894][ T4272] 42617 total pagecache pages [ 71.488930][ T4272] 0 pages in swap cache [ 71.489670][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 71.494246][ T4272] Swap cache stats: add 0, delete 0, find 0/0 [ 71.498467][ T4226] usb 2-1: Using ep0 maxpacket: 8 [ 71.505190][ T4272] Free swap = 124996kB [ 71.522689][ T4272] Total swap = 124996kB [ 71.526887][ T4272] 2097051 pages RAM [ 71.537092][ T4272] 0 pages HighMem/MovableOnly [ 71.542191][ T4272] 411501 pages reserved [ 71.546667][ T4272] 0 pages cma reserved [ 71.630044][ T4231] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 71.638573][ T4226] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 71.655899][ T4226] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.666360][ T4231] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.686699][ T4226] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.700072][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.713176][ T4226] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.723670][ T4231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.734187][ T4226] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.744880][ T4297] loop0: detected capacity change from 0 to 1024 [ 71.747689][ T4231] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.767644][ T4226] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.777867][ T4231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.787302][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.795971][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.796562][ T4230] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 71.824154][ T4297] ======================================================= [ 71.824154][ T4297] WARNING: The mand mount option has been deprecated and [ 71.824154][ T4297] and is ignored by this kernel. Remove the mand [ 71.824154][ T4297] option from the mount to silence this warning. [ 71.824154][ T4297] ======================================================= [ 71.924208][ T4297] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,bsddf,journal_ioprio=0x0000000000000001,barrier,block_validity,nodioread_nolock,grpid,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 71.951425][ T4297] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.988533][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.079839][ T4231] usb 5-1: usb_control_msg returned -32 [ 72.085610][ T4226] usb 2-1: usb_control_msg returned -32 [ 72.091844][ T4231] usbtmc 5-1:16.0: can't read capabilities [ 72.097790][ T4226] usbtmc 2-1:16.0: can't read capabilities [ 72.429088][ T4304] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.619836][ T4303] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 72.813802][ T4229] usb 5-1: USB disconnect, device number 2 [ 73.439335][ T4320] ERROR: device name not specified. [ 73.764901][ T4231] usb 2-1: USB disconnect, device number 2 [ 73.995157][ T2298] usb 4-1: USB disconnect, device number 2 [ 74.109444][ T4338] loop3: detected capacity change from 0 to 1024 [ 74.279969][ T4338] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,bsddf,journal_ioprio=0x0000000000000001,barrier,block_validity,nodioread_nolock,grpid,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 74.323339][ T4338] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.562890][ T4347] overlayfs: failed to verify upper (/file0, ino=11, err=-116) [ 74.697345][ T4195] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 74.697487][ T4195] ================================================================== [ 74.712837][ T4195] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12cf/0x3ca0 [ 74.720682][ T4195] Read of size 1 at addr ffff8880197fb40a by task kworker/u5:4/4195 [ 74.728684][ T4195] [ 74.731035][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 74.738604][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.748685][ T4195] Workqueue: hci1 hci_rx_work [ 74.753402][ T4195] Call Trace: [ 74.756704][ T4195] [ 74.759661][ T4195] dump_stack_lvl+0x188/0x250 [ 74.764369][ T4195] ? show_regs_print_info+0x20/0x20 [ 74.769588][ T4195] ? load_image+0x410/0x410 [ 74.774110][ T4195] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 74.779595][ T4195] print_address_description+0x60/0x2d0 [ 74.785165][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 74.790293][ T4195] kasan_report+0xdf/0x130 [ 74.794731][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 74.799856][ T4195] hci_le_meta_evt+0x12cf/0x3ca0 [ 74.804805][ T4195] ? hci_event_packet+0x363/0x1310 [ 74.809923][ T4195] ? __lock_acquire+0x7b50/0x7b50 [ 74.814959][ T4195] ? hci_remote_host_features_evt+0x240/0x240 [ 74.821028][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 74.826691][ T4195] ? mark_lock+0x94/0x320 [ 74.831021][ T4195] ? mutex_unlock+0x10/0x10 [ 74.835526][ T4195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.841512][ T4195] ? lock_chain_count+0x20/0x20 [ 74.846363][ T4195] ? __rwlock_init+0x140/0x140 [ 74.851127][ T4195] hci_event_packet+0xe0b/0x1310 [ 74.856069][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 74.860928][ T4195] ? rcu_lock_release+0x20/0x20 [ 74.865783][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 74.870983][ T4195] hci_rx_work+0x255/0xa10 [ 74.875413][ T4195] process_one_work+0x867/0xff0 [ 74.880286][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 74.885919][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 74.891209][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 74.896232][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 74.901783][ T4195] ? wq_worker_running+0x97/0x170 [ 74.906808][ T4195] worker_thread+0xad7/0x12a0 [ 74.911516][ T4195] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 74.917420][ T4195] kthread+0x42e/0x520 [ 74.921490][ T4195] ? rcu_lock_release+0x20/0x20 [ 74.926342][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 74.930929][ T4195] ret_from_fork+0x1f/0x30 [ 74.935358][ T4195] [ 74.938384][ T4195] [ 74.940704][ T4195] Allocated by task 4354: [ 74.945024][ T4195] __kasan_kmalloc+0xaf/0xe0 [ 74.949615][ T4195] __alloc_skb+0x22c/0x750 [ 74.954028][ T4195] vhci_write+0xbd/0x440 [ 74.958270][ T4195] vfs_write+0x748/0xd70 [ 74.962515][ T4195] ksys_write+0x153/0x260 [ 74.966838][ T4195] do_syscall_64+0x4c/0xa0 [ 74.971257][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.977160][ T4195] [ 74.979483][ T4195] The buggy address belongs to the object at ffff8880197fb000 [ 74.979483][ T4195] which belongs to the cache kmalloc-1k of size 1024 [ 74.993539][ T4195] The buggy address is located 10 bytes to the right of [ 74.993539][ T4195] 1024-byte region [ffff8880197fb000, ffff8880197fb400) [ 75.007329][ T4195] The buggy address belongs to the page: [ 75.012958][ T4195] page:ffffea000065fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x197f8 [ 75.023108][ T4195] head:ffffea000065fe00 order:3 compound_mapcount:0 compound_pincount:0 [ 75.031428][ T4195] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 75.039414][ T4195] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 75.047996][ T4195] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 75.056570][ T4195] page dumped because: kasan: bad access detected [ 75.062979][ T4195] page_owner tracks the page as allocated [ 75.068686][ T4195] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4194, ts 62982789893, free_ts 62968100064 [ 75.087779][ T4195] get_page_from_freelist+0x24f6/0x2670 [ 75.093325][ T4195] __alloc_pages+0x1ee/0x480 [ 75.097912][ T4195] new_slab+0xc0/0x4b0 [ 75.101976][ T4195] ___slab_alloc+0x807/0xdd0 [ 75.106565][ T4195] __kmalloc_node_track_caller+0x13d/0x3a0 [ 75.112385][ T4195] __alloc_skb+0x22c/0x750 [ 75.116796][ T4195] rtmsg_fib+0xd7/0x440 [ 75.120948][ T4195] fib_table_insert+0xd24/0x1b80 [ 75.125882][ T4195] fib_magic+0x2ca/0x3b0 [ 75.130119][ T4195] fib_add_ifaddr+0x135/0x5c0 [ 75.134794][ T4195] fib_inetaddr_event+0x13c/0x1c0 [ 75.139814][ T4195] blocking_notifier_call_chain+0x103/0x1b0 [ 75.145705][ T4195] __inet_insert_ifa+0x9ea/0xbd0 [ 75.150639][ T4195] inet_rtm_newaddr+0x9cc/0x18c0 [ 75.155574][ T4195] rtnetlink_rcv_msg+0x7f1/0xf10 [ 75.160508][ T4195] netlink_rcv_skb+0x1e9/0x430 [ 75.165271][ T4195] page last free stack trace: [ 75.169940][ T4195] free_unref_page_prepare+0x637/0x6c0 [ 75.175397][ T4195] free_unref_page+0x8f/0x2a0 [ 75.180070][ T4195] qlist_free_all+0x35/0x90 [ 75.184568][ T4195] kasan_quarantine_reduce+0x150/0x160 [ 75.190022][ T4195] __kasan_slab_alloc+0x2f/0xc0 [ 75.194874][ T4195] slab_post_alloc_hook+0x4c/0x380 [ 75.199982][ T4195] kmem_cache_alloc+0x15d/0x280 [ 75.204830][ T4195] __kernfs_new_node+0xe3/0x6b0 [ 75.209681][ T4195] kernfs_new_node+0x148/0x250 [ 75.214442][ T4195] __kernfs_create_file+0x47/0x2e0 [ 75.219556][ T4195] sysfs_add_file_mode_ns+0x2d2/0x390 [ 75.224925][ T4195] internal_create_group+0x492/0xd00 [ 75.230208][ T4195] sysfs_create_groups+0x55/0x120 [ 75.235228][ T4195] kobject_add_internal+0x6fb/0xcd0 [ 75.240423][ T4195] kobject_init_and_add+0x128/0x190 [ 75.245619][ T4195] netdev_queue_update_kobjects+0x19c/0x3e0 [ 75.251509][ T4195] [ 75.253828][ T4195] Memory state around the buggy address: [ 75.259449][ T4195] ffff8880197fb300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.267506][ T4195] ffff8880197fb380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.275563][ T4195] >ffff8880197fb400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.283616][ T4195] ^ [ 75.287937][ T4195] ffff8880197fb480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.295993][ T4195] ffff8880197fb500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.304045][ T4195] ================================================================== [ 75.312098][ T4195] Disabling lock debugging due to kernel taint [ 75.326795][ T4195] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.334034][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 75.334057][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.334067][ T4195] Workqueue: hci1 hci_rx_work [ 75.334091][ T4195] Call Trace: [ 75.334097][ T4195] [ 75.334104][ T4195] dump_stack_lvl+0x188/0x250 [ 75.334125][ T4195] ? show_regs_print_info+0x20/0x20 [ 75.334142][ T4195] ? load_image+0x410/0x410 [ Sep 19 04:20:04 75.334syzkaller kern.a1lert kernel: [ 61][ T4195 75.062979][ T41] panic+0x2f8/0x850 95] page_owner tracks the page as allocated[ 75.391582][ T4195] ? bpf_jit_dump+0xd0/0xd0 [ 75.393436][ T4347] overlayfs: failed to verify index dir 'upper' xattr [ 75.396120][ T4195] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 75.396147][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 75.396163][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 75.396181][ T4195] check_panic_on_warn+0x80/0xa0 [ 75.396200][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 75.396216][ T4195] end_report+0x6d/0xf0 [ 75.396234][ T4195] kasan_report+0x102/0x130 [ 75.396254][ T4195] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 75.396272][ T4195] hci_le_meta_evt+0x12cf/0x3ca0 [ 75.396296][ T4195] ? hci_event_packet+0x363/0x1310 [ 75.396314][ T4195] ? __lock_acquire+0x7b50/0x7b50 [ 75.396337][ T4195] ? hci_remote_host_features_evt+0x240/0x240 [ 75.396355][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 75.396372][ T4195] ? mark_lock+0x94/0x320 [ 75.396387][ T4195] ? mutex_unlock+0x10/0x10 [ 75.396402][ T4195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.396423][ T4195] ? lock_chain_count+0x20/0x20 [ 75.396442][ T4195] ? __rwlock_init+0x140/0x140 [ 75.396460][ T4195] hci_event_packet+0xe0b/0x1310 [ 75.396479][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 75.396496][ T4195] ? rcu_lock_release+0x20/0x20 [ 75.396514][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 75.396534][ T4195] hci_rx_work+0x255/0xa10 [ 75.396558][ T4195] process_one_work+0x867/0xff0 [ 75.396582][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 75.396599][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 75.396620][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.396636][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 75.396655][ T4195] ? wq_worker_running+0x97/0x170 [ 75.452541][ T4347] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 75.453195][ T4195] worker_thread+0xad7/0x12a0 [ 75.564800][ T4195] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 75.570750][ T4195] kthread+0x42e/0x520 [ 75.574828][ T4195] ? rcu_lock_release+0x20/0x20 [ 75.579695][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 75.584308][ T4195] ret_from_fork+0x1f/0x30 [ 75.588747][ T4195] [ 75.591874][ T4195] Kernel Offset: disabled [ 75.596218][ T4195] Rebooting in 86400 seconds..