last executing test programs: 6.543424829s ago: executing program 2 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240140e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4041, &(0x7f0000000300)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 5.961656369s ago: executing program 2 (id=117): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@cache={0x0, 0x8, 0x0, 0x78, 'cache\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '128', 0x20, '1 no_discard_passdown', 0x20, 'smq 0'}}]}) 5.880163137s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="480100001000010428bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x148}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 5.676939578s ago: executing program 2 (id=122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4bc}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.610874875s ago: executing program 1 (id=123): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') socket$netlink(0x10, 0x3, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 4.046021055s ago: executing program 2 (id=128): setns(0xc9, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ff0000408c105901010001020301090220000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000280)={0x7e9a, 0x29, {0x0}, {}, 0x2, 0x3}) sched_setattr(0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r4, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r4, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)="41610d85413954ac69bbba7dad57abb74484e8629d8511133e61f6bcac0d8582e5ccb71d5b5fe570bd7049b185d518dccf3fb6027fe974f1b71dc6c184d6ea5e89a93a95408d99694755803633682699b99863b2365592cace052fa3f8acf859242528e7da185b943a7b8e2ad99d1564bc16390d339bc694ba82853f4506967f78e87991fc7e66216a44b33d2acc9da106c44b68d7093abe5366c280073b6425b219e48ae5142a2ed531d29d1e43d3f62fb349bf6e1b84a2807ae5c51801001cb34d6d37d5604754e4a21c122924f0", &(0x7f0000000400)="c3c366c06249e168700dfdb7de2b78ab416dba7b71b21606ad56d8932c200f8b96c106e56fb9b560973121886c73e1926420f75ec01e14610ea3b0789a958c4bfaff974997dc10f3e7415a4b25ae27e9cf7c650757f4138133c3a02bd861d6e8727054536ced2ce1d530f8cbf4601a0bbec06db6776a6b37524fa8a33e00000000c400ee92f2bc6600e21e2491d2e3ace8a1a4b47dfd27b0646b7bd4d912950fc3", 0x6, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000180)={0x200, 0x3, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) 4.024616247s ago: executing program 1 (id=129): r0 = epoll_create1(0x0) fgetxattr(r0, &(0x7f0000000080)=@known='user.incfs.id\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000003c0), 0x0, 0x20000010, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x842cc0, 0x0) flock(r2, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) flock(r3, 0x2) flock(r3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) 3.659220305s ago: executing program 3 (id=133): write(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@cache={0x0, 0x8, 0x0, 0x78, 'cache\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '128', 0x20, '1 no_discard_passdown', 0x20, 'smq 0'}}]}) 3.623856688s ago: executing program 4 (id=134): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0xc142, 0x1a2) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x805}, @val={0x1, 0x1, 0x2, 0x4, 0xfffe, 0x30c}, @mpls}, 0xe) 3.390463542s ago: executing program 4 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000880)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000008c0)='myproc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000980), 0xfa0) openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='Mi', 0x2) symlinkat(&(0x7f0000002380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000023c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 3.383170493s ago: executing program 0 (id=136): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0xa, 0x8, 0x8000a}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.382933263s ago: executing program 3 (id=137): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000600)="723a732f70202e2f66696c65303a300c5c949de957570839be9fbb298bcf293d", 0x20) 3.180816603s ago: executing program 0 (id=138): mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x2}], {0x10, 0x4}, {0x20, 0x3}}, 0x2c, 0x0) 3.1239472s ago: executing program 3 (id=139): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4bc}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.877143305s ago: executing program 0 (id=140): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') socket$netlink(0x10, 0x3, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 2.855673997s ago: executing program 4 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) 785.714599ms ago: executing program 0 (id=142): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x4000040) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x41) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000240)={{}, "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"}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 730.056735ms ago: executing program 2 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000880)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000008c0)='myproc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000980), 0xfa0) openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000c00)='Mi', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000023c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 666.775631ms ago: executing program 4 (id=144): mount(0x0, &(0x7f0000000080)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='bf', 0x2) sendfile(r0, r0, &(0x7f00000001c0)=0x8, 0x8) 486.39341ms ago: executing program 3 (id=145): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0xc142, 0x1a2) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x805}, @val={0x1, 0x1, 0x2, 0x4, 0xfffe, 0x30c}, @mpls}, 0xe) 483.42545ms ago: executing program 1 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x20000000) 416.700847ms ago: executing program 0 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 318.008017ms ago: executing program 1 (id=148): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0xa, 0x8, 0x8000a}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 240.148375ms ago: executing program 4 (id=149): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000600)="723a732f70202e2f66696c65303a300c5c949de957570839be9fbb298bcf293d", 0x20) 239.850715ms ago: executing program 3 (id=150): mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x2}], {0x10, 0x4}, {0x20, 0x3}}, 0x2c, 0x0) 217.740337ms ago: executing program 2 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000880)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000008c0)='myproc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000980), 0xfa0) openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000c00)='Mi', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000023c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 118.164697ms ago: executing program 0 (id=152): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@cache={0x0, 0x8, 0x0, 0x78, 'cache\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '128', 0x20, '1 no_discard_passdown', 0x20, 'smq 0'}}]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000f00000/0x2000)=nil, 0x2000, 0x17) 82.855381ms ago: executing program 1 (id=153): setns(0xc9, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ff0000408c105901010001020301090220000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000280)={0x7e9a, 0x29, {0x0}, {}, 0x2, 0x3}) sched_setattr(0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r4, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r4, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)="41610d85413954ac69bbba7dad57abb74484e8629d8511133e61f6bcac0d8582e5ccb71d5b5fe570bd7049b185d518dccf3fb6027fe974f1b71dc6c184d6ea5e89a93a95408d99694755803633682699b99863b2365592cace052fa3f8acf859242528e7da185b943a7b8e2ad99d1564bc16390d339bc694ba82853f4506967f78e87991fc7e66216a44b33d2acc9da106c44b68d7093abe5366c280073b6425b219e48ae5142a2ed531d29d1e43d3f62fb349bf6e1b84a2807ae5c51801001cb34d6d37d5604754e4a21c122924f0", &(0x7f0000000400)="c3c366c06249e168700dfdb7de2b78ab416dba7b71b21606ad56d8932c200f8b96c106e56fb9b560973121886c73e1926420f75ec01e14610ea3b0789a958c4bfaff974997dc10f3e7415a4b25ae27e9cf7c650757f4138133c3a02bd861d6e8727054536ced2ce1d530f8cbf4601a0bbec06db6776a6b37524fa8a33e00000000c400ee92f2bc6600e21e2491d2e3ace8a1a4b47dfd27b0646b7bd4d912950fc3", 0x6, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000180)={0x200, 0x3, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) 77.045382ms ago: executing program 3 (id=154): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') socket$netlink(0x10, 0x3, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 0s ago: executing program 4 (id=155): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4bc}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. [ 76.428107][ T4261] cgroup: Unknown subsys name 'net' [ 76.536909][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.026221][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.194094][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.202535][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.210833][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.219059][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.226885][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.235228][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.242944][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.250575][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.257954][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.265656][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.273267][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.280612][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.284867][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.293564][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.299422][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.303071][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.312198][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.318327][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.325872][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.337098][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.339343][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.345480][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.353531][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.360615][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.369338][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.372845][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.386196][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.394055][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.421901][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.443440][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.507807][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.527258][ T4273] rdma_rxe: rxe_register_device failed with error -23 [ 80.535692][ T4274] rdma_rxe: rxe_register_device failed with error -23 [ 80.539471][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.544839][ T4274] rdma_rxe: failed to add rxe_eth0 [ 80.551006][ T4275] rdma_rxe: rxe_register_device failed with error -23 [ 80.576788][ T4278] rdma_rxe: rxe_register_device failed with error -23 [ 80.589996][ T4273] rdma_rxe: failed to add rxe_eth0 [ 80.595627][ T4275] rdma_rxe: failed to add rxe_eth0 [ 80.602834][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.609330][ T4278] rdma_rxe: failed to add rxe_eth0 [ 80.884047][ T4277] infiniband rxe0: set active [ 80.889814][ T128] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.908070][ T4277] infiniband rxe0: added rxe_eth0 [ 80.959472][ T4277] RDS/IB: rxe0: added [ 80.965322][ T4277] smc: adding ib device rxe0 with port count 1 [ 80.971780][ T4277] smc: ib device rxe0 port 1 has pnetid [ 80.980716][ T128] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.992351][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.152475][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.264495][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 81.298079][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.309580][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 81.364681][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 81.473168][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 81.538165][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.676383][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.688715][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.697638][ T4273] device bridge_slave_0 entered promiscuous mode [ 81.754205][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.762369][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.777222][ T4273] device bridge_slave_1 entered promiscuous mode [ 81.785430][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.793059][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.801512][ T4274] device bridge_slave_0 entered promiscuous mode [ 81.812380][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.819581][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.827822][ T4274] device bridge_slave_1 entered promiscuous mode [ 81.863522][ T4277] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.903583][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.915520][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.940126][ T4278] device bridge_slave_0 entered promiscuous mode [ 81.996541][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.018647][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.026908][ T4278] device bridge_slave_1 entered promiscuous mode [ 82.051306][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.081311][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.101088][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.122301][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.129854][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.137718][ T4275] device bridge_slave_0 entered promiscuous mode [ 82.163383][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.181226][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.188826][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.196970][ T4275] device bridge_slave_1 entered promiscuous mode [ 82.225752][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.257378][ T4273] team0: Port device team_slave_0 added [ 82.281973][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.302262][ T4274] team0: Port device team_slave_0 added [ 82.309613][ T4273] team0: Port device team_slave_1 added [ 82.317363][ T4274] team0: Port device team_slave_1 added [ 82.339979][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.359074][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.392273][ T4278] team0: Port device team_slave_0 added [ 82.429675][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.429704][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 82.436667][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.473788][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.487470][ T4278] team0: Port device team_slave_1 added [ 82.502219][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.509809][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 82.509869][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 82.516159][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 82.522389][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 82.542011][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.568235][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.591706][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.600738][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.631669][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.658333][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.667589][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.698693][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.716974][ T4275] team0: Port device team_slave_0 added [ 82.732767][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.742193][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.768748][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.790774][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.797789][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.841856][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.882901][ T4275] team0: Port device team_slave_1 added [ 82.950635][ T4273] device hsr_slave_0 entered promiscuous mode [ 82.957783][ T4273] device hsr_slave_1 entered promiscuous mode [ 83.000630][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.007636][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.038614][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.068373][ T4274] device hsr_slave_0 entered promiscuous mode [ 83.076263][ T4274] device hsr_slave_1 entered promiscuous mode [ 83.083184][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.091662][ T4274] Cannot create hsr debugfs directory [ 83.118424][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.126365][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.152452][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.226736][ T4278] device hsr_slave_0 entered promiscuous mode [ 83.235868][ T4278] device hsr_slave_1 entered promiscuous mode [ 83.243800][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.256185][ T4278] Cannot create hsr debugfs directory [ 83.385988][ T4275] device hsr_slave_0 entered promiscuous mode [ 83.398734][ T4275] device hsr_slave_1 entered promiscuous mode [ 83.406107][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.418284][ T4275] Cannot create hsr debugfs directory [ 83.453168][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 83.559855][ T33] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.796063][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.812167][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.824615][ T4277] device bridge_slave_0 entered promiscuous mode [ 83.845036][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.859157][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.867336][ T4277] device bridge_slave_1 entered promiscuous mode [ 83.930735][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.968829][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.979660][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.004184][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.018158][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.035042][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.092546][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.110818][ T4277] team0: Port device team_slave_0 added [ 84.144784][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.166105][ T4277] team0: Port device team_slave_1 added [ 84.185533][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.229943][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.279007][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.286025][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.314804][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.346808][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.370411][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.377425][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.404390][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.427171][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.440689][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.502830][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.513075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.520940][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 84.532969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.571052][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.581749][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.588654][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 84.588697][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 84.598861][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 84.601146][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 84.631042][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.640532][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.650538][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.657881][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.674988][ T4277] device hsr_slave_0 entered promiscuous mode [ 84.682377][ T4277] device hsr_slave_1 entered promiscuous mode [ 84.691491][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.699368][ T4277] Cannot create hsr debugfs directory [ 84.717843][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.726277][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.735351][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.746077][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.753364][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.764801][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.785164][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.795588][ T3937] infiniband rxe0: set active [ 84.811739][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.837294][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.847310][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.862526][ T3603] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.905414][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.956974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.967002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.976835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.988277][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.024030][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.036953][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.046403][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.056056][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.088200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.097350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.106848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.115422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.154101][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.193775][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.260769][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.275050][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.299541][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.306717][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.360044][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.370818][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.394631][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.406519][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.415889][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.427414][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.434633][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.444859][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.454386][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.463961][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.475171][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.497903][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.518438][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.559214][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.567593][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.582802][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.594801][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.604216][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.643655][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.655770][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.674031][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.686468][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.723789][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.760158][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.812407][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.822666][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.855475][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.865328][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.875363][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.884983][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.929746][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.947685][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.961166][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.968384][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.985449][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.995626][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.005616][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.012850][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.022413][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.031788][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.041738][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.052175][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.059352][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.068252][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.077911][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.087702][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.094906][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.120770][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.162242][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.171086][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.180420][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.197028][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.206552][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.216066][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.229470][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.239484][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.248209][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.264377][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.286302][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.311244][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.320847][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.330505][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.339307][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.347295][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.356484][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.366499][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.375732][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.386585][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.395781][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.405268][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.414508][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.423633][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.446447][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.457344][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.490597][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.520069][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.529191][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.544448][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.569359][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.577979][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.587687][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.595996][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 86.604028][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.613402][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.620599][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.629111][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.638121][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.648730][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.655865][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.668728][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 86.680446][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 86.680890][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 86.686588][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 86.705048][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.745477][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.767120][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.776935][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.812718][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.835509][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.910639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.937407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.963548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.972669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.986070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.019753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.046643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.094668][ T4274] device veth0_vlan entered promiscuous mode [ 87.129840][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.149996][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.164983][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.189183][ T4274] device veth1_vlan entered promiscuous mode [ 87.200163][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.209413][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.217439][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.233218][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.245510][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.261224][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.275828][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.299378][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.307659][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.330296][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.396332][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.414339][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.435589][ T4274] device veth0_macvtap entered promiscuous mode [ 87.467294][ T4273] device veth0_vlan entered promiscuous mode [ 87.494613][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.510897][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.544711][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.570921][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.606893][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.630477][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.659413][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.692105][ T4274] device veth1_macvtap entered promiscuous mode [ 87.767419][ T4273] device veth1_vlan entered promiscuous mode [ 87.806062][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.826305][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.835250][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.843856][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.851985][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.866042][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.890720][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.920434][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.932155][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.998003][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.013997][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.030406][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.043333][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.058214][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.066009][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.074059][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.083531][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.093383][ T4273] device veth0_macvtap entered promiscuous mode [ 88.127157][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.145837][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.155663][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.171032][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.185091][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.197965][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.207613][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.247417][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.256147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.273103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.282360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.319413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.335213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.343968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.359499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.367624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.384619][ T4278] device veth0_vlan entered promiscuous mode [ 88.421245][ T4273] device veth1_macvtap entered promiscuous mode [ 88.470346][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.484369][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.497640][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.516875][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.531706][ T4275] device veth0_vlan entered promiscuous mode [ 88.552716][ T4278] device veth1_vlan entered promiscuous mode [ 88.573169][ T4275] device veth1_vlan entered promiscuous mode [ 88.626001][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.650124][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.668946][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 88.681538][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.715007][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.732751][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.745474][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.752038][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 88.755720][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 88.758791][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 88.764797][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 88.781523][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.799624][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.821791][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.840866][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.852433][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.881290][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.898003][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.913598][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.922615][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.958368][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.967791][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.981783][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.991276][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.003119][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.015194][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.057862][ T4275] device veth0_macvtap entered promiscuous mode [ 89.090689][ T4278] device veth0_macvtap entered promiscuous mode [ 89.109692][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.118257][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.129673][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.139449][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.152140][ T4275] device veth1_macvtap entered promiscuous mode [ 89.167643][ T4278] device veth1_macvtap entered promiscuous mode [ 89.240447][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.248327][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.288260][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.303923][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.314665][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.336730][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.338459][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.354780][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.366497][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.378187][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.390760][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.401061][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.411850][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.424430][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.436897][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.451512][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.460035][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.469904][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.477838][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.487617][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.496806][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.505867][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.523783][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.542996][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.555516][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.566525][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.576603][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.587165][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.602117][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.620661][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.640075][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.670226][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.681392][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.693404][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.704086][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.714507][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.725189][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.737680][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.752660][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.764167][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.773416][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.782381][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.795859][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.805363][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.814544][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.825701][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.840581][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.857029][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.866375][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884529][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896911][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.933224][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.985465][ T4277] device veth0_vlan entered promiscuous mode [ 90.001828][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.020705][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.038339][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.060470][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.069955][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.102120][ T4277] device veth1_vlan entered promiscuous mode [ 90.204715][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.215443][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.224566][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.240306][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.260953][ T4277] device veth0_macvtap entered promiscuous mode [ 90.288406][ T4277] device veth1_macvtap entered promiscuous mode [ 90.366442][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.375636][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.392590][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.413441][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.423973][ T4424] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.449481][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.478949][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.499034][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.535473][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.555464][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.573611][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.588211][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.650512][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.660465][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.673211][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.681663][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.692206][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.708596][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.727559][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.737934][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.752732][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.762932][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.773918][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.784058][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.804898][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.816963][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.851311][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.872751][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.882121][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.886940][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.899787][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.910491][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.924715][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.937669][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.983754][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.001297][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.026967][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.078678][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.086580][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.095933][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.148297][ T4431] jffs2: notice: (4431) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.194830][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.230421][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.238305][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.317116][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.344010][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.368390][ T4438] random: crng reseeded on system resumption [ 91.395214][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.420688][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.440660][ T4440] FAULT_INJECTION: forcing a failure. [ 91.440660][ T4440] name failslab, interval 1, probability 0, space 0, times 1 [ 91.466562][ T4440] CPU: 1 PID: 4440 Comm: syz.0.1 Not tainted syzkaller #0 [ 91.473755][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.483862][ T4440] Call Trace: [ 91.487200][ T4440] [ 91.490147][ T4440] dump_stack_lvl+0x188/0x24e [ 91.490229][ T4440] ? show_regs_print_info+0x12/0x12 [ 91.490263][ T4440] ? load_image+0x410/0x410 [ 91.500237][ T4440] ? __might_sleep+0xd0/0xd0 [ 91.509404][ T4440] ? __lock_acquire+0x7ea0/0x7ea0 [ 91.514493][ T4440] should_fail_ex+0x390/0x4c0 [ 91.519229][ T4440] should_failslab+0x5/0x20 [ 91.523782][ T4440] slab_pre_alloc_hook+0x59/0x300 [ 91.528847][ T4440] ? security_sk_alloc+0x47/0x130 [ 91.533901][ T4440] __kmem_cache_alloc_node+0x4f/0x270 [ 91.539314][ T4440] ? security_sk_alloc+0x47/0x130 [ 91.544370][ T4440] __kmalloc+0xa3/0x240 [ 91.548559][ T4440] ? sk_prot_alloc+0xe7/0x210 [ 91.553278][ T4440] security_sk_alloc+0x47/0x130 [ 91.558163][ T4440] sk_prot_alloc+0x101/0x210 [ 91.562864][ T4440] ? sk_alloc+0x20/0x330 [ 91.567134][ T4440] sk_alloc+0x36/0x330 [ 91.571230][ T4440] __netlink_create+0x6b/0x2d0 [ 91.576028][ T4440] __netlink_kernel_create+0x144/0x7b0 [ 91.581538][ T4440] ? netlink_set_err+0x3b0/0x3b0 [ 91.586504][ T4440] ? netlink_set_err+0x3b0/0x3b0 [ 91.591474][ T4440] ? genl_pernet_init+0xa4/0x170 [ 91.596450][ T4440] genl_pernet_init+0xb6/0x170 [ 91.601245][ T4440] ? genl_get_cmd+0x8b0/0x8b0 [ 91.605956][ T4440] ? rtnetlink_net_init+0xbd/0x140 [ 91.611101][ T4440] ? genl_pernet_exit+0x60/0x60 [ 91.615984][ T4440] ? genl_rcv+0x40/0x40 [ 91.620180][ T4440] ? rtnetlink_rcv+0x20/0x20 [ 91.624835][ T4440] ops_init+0x360/0x5e0 [ 91.629026][ T4440] setup_net+0x4f2/0xbd0 [ 91.633307][ T4440] ? copy_net_ns+0x5b0/0x5b0 [ 91.637927][ T4440] ? copy_net_ns+0x324/0x5b0 [ 91.642543][ T4440] ? down_read_killable+0x1cc/0x340 [ 91.647769][ T4440] copy_net_ns+0x33e/0x5b0 [ 91.652216][ T4440] create_new_namespaces+0x3ce/0x700 [ 91.657540][ T4440] unshare_nsproxy_namespaces+0x116/0x160 [ 91.663550][ T4440] ksys_unshare+0x4f6/0x8e0 [ 91.668084][ T4440] ? sighand_ctor+0x40/0x40 [ 91.672615][ T4440] ? lock_chain_count+0x20/0x20 [ 91.677546][ T4440] ? syscall_enter_from_user_mode+0x21/0x80 [ 91.683484][ T4440] __x64_sys_unshare+0x34/0x40 [ 91.688274][ T4440] do_syscall_64+0x4c/0xa0 [ 91.692742][ T4440] ? clear_bhb_loop+0x60/0xb0 [ 91.697465][ T4440] ? clear_bhb_loop+0x60/0xb0 [ 91.702229][ T4440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.708169][ T4440] RIP: 0033:0x7f40cb19fb19 [ 91.712646][ T4440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.732312][ T4440] RSP: 002b:00007f40c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 91.740764][ T4440] RAX: ffffffffffffffda RBX: 00007f40cb425fa0 RCX: 00007f40cb19fb19 [ 91.748777][ T4440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 91.756781][ T4440] RBP: 00007f40cb237b70 R08: 0000000000000000 R09: 0000000000000000 [ 91.764780][ T4440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.772778][ T4440] R13: 00007f40cb426038 R14: 00007f40cb425fa0 R15: 00007ffff72b1908 [ 91.780823][ T4440] [ 91.806726][ T22] cfg80211: failed to load regulatory.db [ 91.898937][ T4363] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.093786][ T4363] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.124524][ T4363] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 92.167793][ T4363] usb 3-1: string descriptor 0 read error: -22 [ 92.177150][ T4448] FAULT_INJECTION: forcing a failure. [ 92.177150][ T4448] name failslab, interval 1, probability 0, space 0, times 0 [ 92.199892][ T4363] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 92.211598][ T4448] CPU: 0 PID: 4448 Comm: syz.4.5 Not tainted syzkaller #0 [ 92.218763][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.218841][ T4448] Call Trace: [ 92.218851][ T4448] [ 92.225503][ T4363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.229001][ T4448] dump_stack_lvl+0x188/0x24e [ 92.229045][ T4448] ? show_regs_print_info+0x12/0x12 [ 92.253314][ T4448] ? load_image+0x410/0x410 [ 92.257890][ T4448] ? __might_sleep+0xd0/0xd0 [ 92.262525][ T4448] ? __lock_acquire+0x7ea0/0x7ea0 [ 92.267597][ T4448] should_fail_ex+0x390/0x4c0 [ 92.272315][ T4448] should_failslab+0x5/0x20 [ 92.276847][ T4448] slab_pre_alloc_hook+0x59/0x300 [ 92.282014][ T4448] kmem_cache_alloc_node+0x5a/0x310 [ 92.287254][ T4448] ? __alloc_skb+0xf9/0x7d0 [ 92.291799][ T4448] __alloc_skb+0xf9/0x7d0 [ 92.296175][ T4448] alloc_uevent_skb+0x7d/0x230 [ 92.301073][ T4448] kobject_uevent_net_broadcast+0x17e/0x530 [ 92.307004][ T4448] kobject_uevent_env+0x555/0x890 [ 92.312098][ T4448] rpc_sysfs_client_setup+0x267/0x310 [ 92.317556][ T4448] ? __lock_acquire+0x7ea0/0x7ea0 [ 92.322651][ T4448] ? rpc_sysfs_exit+0x30/0x30 [ 92.327364][ T4448] ? rpc_net_ns+0x1a/0x230 [ 92.331813][ T4448] ? rpc_net_ns+0x1a/0x230 [ 92.336267][ T4448] rpc_new_client+0x7d2/0xe20 [ 92.341008][ T4448] rpc_create_xprt+0x29c/0x9c0 [ 92.345815][ T4448] ? rpc_create+0x7e0/0x7e0 [ 92.350379][ T4448] ? __kmem_cache_alloc_node+0x19d/0x270 [ 92.356043][ T4448] ? xprt_create_transport+0x380/0x630 [ 92.361534][ T4448] ? rcu_is_watching+0x11/0xa0 [ 92.366343][ T4448] ? kstrdup+0x52/0x70 [ 92.370454][ T4448] ? memcpy+0x3c/0x60 [ 92.374466][ T4448] ? xprt_create_transport+0x43b/0x630 [ 92.379956][ T4448] rpc_create+0x55f/0x7e0 [ 92.384322][ T4448] ? rpc_cleanup_clids+0x20/0x20 [ 92.389298][ T4448] ? __lock_acquire+0x7ea0/0x7ea0 [ 92.394374][ T4448] ? do_raw_spin_lock+0x128/0x2f0 [ 92.399444][ T4448] rpcb_create_local+0x37e/0x8f0 [ 92.404435][ T4448] ? net_generic+0x240/0x240 [ 92.409080][ T4448] ? lockdep_softirqs_off+0x430/0x430 [ 92.414490][ T4448] ? free_zapped_rcu+0x1f0/0x1f0 [ 92.419469][ T4448] ? __kmem_cache_alloc_node+0x19d/0x270 [ 92.425142][ T4448] ? __svc_create+0x8de/0x9d0 [ 92.429859][ T4448] ? i_am_nfsd+0x20/0x20 [ 92.434132][ T4448] svc_bind+0x178/0x1d0 [ 92.438322][ T4448] nfsd_create_serv+0x34e/0x700 [ 92.443414][ T4448] ? nfsd+0x2d0/0x2d0 [ 92.447432][ T4448] ? sscanf+0xdf/0x130 [ 92.451539][ T4448] ? net_generic+0x1e/0x240 [ 92.456081][ T4448] ? net_generic+0x1e/0x240 [ 92.460623][ T4448] write_ports+0x560/0xb80 [ 92.465080][ T4448] ? write_versions+0xbb0/0xbb0 [ 92.469968][ T4448] ? __lock_acquire+0x7ea0/0x7ea0 [ 92.475028][ T4448] ? __virt_addr_valid+0x188/0x540 [ 92.480184][ T4448] ? __might_fault+0xc2/0x120 [ 92.484889][ T4448] ? __might_fault+0xa6/0x120 [ 92.489594][ T4448] ? _copy_from_user+0x10b/0x170 [ 92.494570][ T4448] ? simple_transaction_get+0x119/0x140 [ 92.500146][ T4448] nfsctl_transaction_write+0x105/0x150 [ 92.505725][ T4448] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 92.511393][ T4448] vfs_write+0x2dc/0x9a0 [ 92.515669][ T4448] ? file_end_write+0x250/0x250 [ 92.520551][ T4448] ? __fget_files+0x28/0x460 [ 92.525174][ T4448] ? __fget_files+0x3fc/0x460 [ 92.529892][ T4448] ? __fdget_pos+0x2ae/0x360 [ 92.534521][ T4448] ? ksys_write+0x70/0x260 [ 92.538968][ T4448] ksys_write+0x14d/0x260 [ 92.543330][ T4448] ? __ia32_sys_read+0x80/0x80 [ 92.548127][ T4448] ? lockdep_hardirqs_on+0x94/0x140 [ 92.553356][ T4448] do_syscall_64+0x4c/0xa0 [ 92.557836][ T4448] ? clear_bhb_loop+0x60/0xb0 [ 92.562547][ T4448] ? clear_bhb_loop+0x60/0xb0 [ 92.567265][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.573212][ T4448] RIP: 0033:0x7f8226b9fb19 [ 92.577654][ T4448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.597305][ T4448] RSP: 002b:00007f82279e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.605768][ T4448] RAX: ffffffffffffffda RBX: 00007f8226e25fa0 RCX: 00007f8226b9fb19 [ 92.613769][ T4448] RDX: 0000000000000005 RSI: 0000200000000580 RDI: 0000000000000006 [ 92.621764][ T4448] RBP: 00007f8226c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 92.629764][ T4448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.637763][ T4448] R13: 00007f8226e26038 R14: 00007f8226e25fa0 R15: 00007ffdbd277508 [ 92.645779][ T4448] [ 95.843084][ T33] usb 3-1: USB disconnect, device number 2 [ 96.423346][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.431707][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.911207][ T4515] Zero length message leads to an empty skb [ 98.162453][ T4457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.261280][ T4457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.798578][ T4457] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.807580][ T4457] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.817156][ T4457] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.826296][ T4457] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.016562][ T22] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.035806][ T4493] device syzkaller0 entered promiscuous mode [ 100.162682][ T4538] syz.4.28 (4538) used greatest stack depth: 17680 bytes left [ 100.715626][ T4565] loop2: detected capacity change from 0 to 512 [ 100.797813][ T4565] ======================================================= [ 100.797813][ T4565] WARNING: The mand mount option has been deprecated and [ 100.797813][ T4565] and is ignored by this kernel. Remove the mand [ 100.797813][ T4565] option from the mount to silence this warning. [ 100.797813][ T4565] ======================================================= [ 100.922087][ T4560] kvm: pic: single mode not supported [ 100.922280][ T4560] kvm: pic: non byte read [ 100.961422][ T4560] kvm: pic: non byte read [ 100.981751][ T4560] kvm: pic: non byte read [ 100.986608][ T4560] kvm: pic: single mode not supported [ 100.986728][ T4560] kvm: pic: level sensitive irq not supported [ 101.045684][ T4560] kvm: pic: non byte read [ 101.107254][ T4560] kvm: pic: single mode not supported [ 101.107275][ T4560] kvm: pic: level sensitive irq not supported [ 101.141028][ T4560] kvm: pic: non byte read [ 101.202544][ T4560] kvm: pic: level sensitive irq not supported [ 101.202629][ T4560] kvm: pic: non byte read [ 101.238377][ T4560] kvm: pic: non byte read [ 101.259117][ T4560] kvm: pic: non byte read [ 101.264126][ T4560] kvm: pic: non byte read [ 101.296624][ T4560] kvm: pic: non byte read [ 101.306978][ T4560] kvm: pic: single mode not supported [ 101.306996][ T4560] kvm: pic: level sensitive irq not supported [ 101.335512][ T4560] kvm: pic: single mode not supported [ 101.347645][ T4560] kvm: pic: level sensitive irq not supported [ 101.376978][ T4560] kvm: pic: level sensitive irq not supported [ 101.420709][ T4560] kvm: pic: level sensitive irq not supported [ 101.448376][ T4560] kvm: pic: single mode not supported [ 101.454814][ T4560] kvm: pic: level sensitive irq not supported [ 101.489531][ T4560] kvm: pic: single mode not supported [ 101.528740][ T4560] kvm: pic: level sensitive irq not supported [ 101.534768][ T4560] kvm: pic: single mode not supported [ 102.321772][ T4600] kvm: pic: non byte write [ 102.808510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 102.818527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 102.878512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 102.898513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 102.928515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 102.948514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 102.968510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 102.988513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 103.008513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 103.028514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 103.208934][ T4611] null_blk: disk nullb1 created [ 104.224604][ T4641] device syzkaller0 entered promiscuous mode [ 104.848604][ T4658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.901515][ T4660] FAULT_INJECTION: forcing a failure. [ 104.901515][ T4660] name failslab, interval 1, probability 0, space 0, times 0 [ 104.938645][ T4660] CPU: 1 PID: 4660 Comm: syz.3.56 Not tainted syzkaller #0 [ 104.945940][ T4660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.956073][ T4660] Call Trace: [ 104.959394][ T4660] [ 104.962366][ T4660] dump_stack_lvl+0x188/0x24e [ 104.967117][ T4660] ? show_regs_print_info+0x12/0x12 [ 104.972395][ T4660] ? load_image+0x410/0x410 [ 104.976958][ T4660] ? __might_sleep+0xd0/0xd0 [ 104.981590][ T4660] ? __lock_acquire+0x7ea0/0x7ea0 [ 104.986662][ T4660] should_fail_ex+0x390/0x4c0 [ 104.991440][ T4660] should_failslab+0x5/0x20 [ 104.995973][ T4660] slab_pre_alloc_hook+0x59/0x300 [ 105.001033][ T4660] ? _raw_spin_unlock_irq+0x2a/0x40 [ 105.006265][ T4660] ? copy_ipcs+0x12e/0x500 [ 105.010721][ T4660] __kmem_cache_alloc_node+0x4f/0x270 [ 105.016158][ T4660] ? copy_ipcs+0x12e/0x500 [ 105.020614][ T4660] kmalloc_trace+0x26/0xe0 [ 105.025082][ T4660] copy_ipcs+0x12e/0x500 [ 105.029380][ T4660] create_new_namespaces+0x212/0x700 [ 105.034729][ T4660] unshare_nsproxy_namespaces+0x116/0x160 [ 105.040491][ T4660] ksys_unshare+0x4f6/0x8e0 [ 105.045032][ T4660] ? sighand_ctor+0x40/0x40 [ 105.049565][ T4660] ? lock_chain_count+0x20/0x20 [ 105.054455][ T4660] ? syscall_enter_from_user_mode+0x21/0x80 [ 105.060384][ T4660] __x64_sys_unshare+0x34/0x40 [ 105.065204][ T4660] do_syscall_64+0x4c/0xa0 [ 105.069663][ T4660] ? clear_bhb_loop+0x60/0xb0 [ 105.074383][ T4660] ? clear_bhb_loop+0x60/0xb0 [ 105.079099][ T4660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.085026][ T4660] RIP: 0033:0x7fce87f9fb19 [ 105.089473][ T4660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.109139][ T4660] RSP: 002b:00007fce88e0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 105.117934][ T4660] RAX: ffffffffffffffda RBX: 00007fce88225fa0 RCX: 00007fce87f9fb19 [ 105.125937][ T4660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 105.133970][ T4660] RBP: 00007fce88037b70 R08: 0000000000000000 R09: 0000000000000000 [ 105.141993][ T4660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.149999][ T4660] R13: 00007fce88226038 R14: 00007fce88225fa0 R15: 00007ffc473794e8 [ 105.158037][ T4660] [ 105.548623][ T4366] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.750600][ T4366] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.766369][ T4366] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 105.796981][ T4366] usb 2-1: string descriptor 0 read error: -22 [ 105.826529][ T4366] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 105.857197][ T4366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.061564][ T4684] device syzkaller0 entered promiscuous mode [ 106.148920][ T4411] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.386159][ T4411] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.474823][ T4411] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 106.608219][ T4411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.474286][ T4411] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 107.802319][ T4411] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 108.033729][ T4411] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0001/input/input5 [ 108.398581][ T4411] usb 1-1: USB disconnect, device number 2 [ 108.477530][ T14] usb 2-1: USB disconnect, device number 2 [ 108.701102][ T4694] fido_id[4694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 109.555333][ T4724] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 109.594771][ T4724] overlayfs: overlapping lowerdir path [ 109.639304][ T4726] device syzkaller0 entered promiscuous mode [ 109.665441][ T4724] device lo entered promiscuous mode [ 109.749281][ T4724] device tunl0 entered promiscuous mode [ 109.804621][ T4724] device gre0 entered promiscuous mode [ 109.975290][ T4724] device gretap0 entered promiscuous mode [ 109.995937][ T4724] device erspan0 entered promiscuous mode [ 110.053072][ T4724] device ip_vti0 entered promiscuous mode [ 110.116482][ T4724] device ip6_vti0 entered promiscuous mode [ 110.177594][ T4724] device sit0 entered promiscuous mode [ 110.258662][ T4411] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.282306][ T4724] device ip6tnl0 entered promiscuous mode [ 110.358750][ T4724] device ip6gre0 entered promiscuous mode [ 110.431679][ T4724] device syz_tun entered promiscuous mode [ 110.470603][ T4411] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.485718][ T4724] device ip6gretap0 entered promiscuous mode [ 110.489020][ T4411] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 110.517464][ T4411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.569587][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.577123][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.587460][ T4724] device bridge0 entered promiscuous mode [ 110.637805][ T4724] device vcan0 entered promiscuous mode [ 110.658933][ T4724] device bond0 entered promiscuous mode [ 110.664566][ T4724] device bond_slave_0 entered promiscuous mode [ 110.671414][ T4724] device bond_slave_1 entered promiscuous mode [ 110.710190][ T4724] device team0 entered promiscuous mode [ 110.715820][ T4724] device team_slave_0 entered promiscuous mode [ 110.723355][ T4724] device team_slave_1 entered promiscuous mode [ 110.760816][ T4724] device dummy0 entered promiscuous mode [ 110.802440][ T4724] device nlmon0 entered promiscuous mode [ 110.820288][ T4724] device caif0 entered promiscuous mode [ 110.834700][ T4724] device batadv0 entered promiscuous mode [ 110.876480][ T4724] device vxcan0 entered promiscuous mode [ 110.884689][ T4724] device vxcan1 entered promiscuous mode [ 110.931871][ T4724] device veth0 entered promiscuous mode [ 110.955614][ T4411] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 110.977415][ T4724] device veth1 entered promiscuous mode [ 110.997981][ T4411] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 111.021501][ T4411] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0002/input/input8 [ 111.036668][ T4724] device wg0 entered promiscuous mode [ 111.065424][ T4724] device wg1 entered promiscuous mode [ 111.093714][ T4724] device wg2 entered promiscuous mode [ 111.128691][ T4724] device veth0_to_bridge entered promiscuous mode [ 111.299639][ T4724] device veth1_to_bridge entered promiscuous mode [ 111.412696][ T4411] usb 1-1: USB disconnect, device number 3 [ 111.441853][ T4724] device veth0_to_bond entered promiscuous mode [ 111.529071][ T4724] device veth1_to_bond entered promiscuous mode [ 111.589345][ T4724] device veth0_to_team entered promiscuous mode [ 111.647254][ T4724] device veth1_to_team entered promiscuous mode [ 111.726996][ T4724] device veth0_to_batadv entered promiscuous mode [ 111.747477][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.780623][ T4724] device batadv_slave_0 entered promiscuous mode [ 111.820364][ T4724] device veth1_to_batadv entered promiscuous mode [ 111.848872][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.869928][ T4724] device batadv_slave_1 entered promiscuous mode [ 111.913410][ T4724] device xfrm0 entered promiscuous mode [ 111.963279][ T4724] device veth0_to_hsr entered promiscuous mode [ 112.047374][ T4724] device veth1_to_hsr entered promiscuous mode [ 112.108272][ T4724] device hsr0 entered promiscuous mode [ 112.169498][ T4724] device veth1_virt_wifi entered promiscuous mode [ 112.210110][ T4724] device veth0_virt_wifi entered promiscuous mode [ 112.232632][ T4724] device virt_wifi0 entered promiscuous mode [ 112.336468][ T4724] device vlan0 entered promiscuous mode [ 112.350754][ T4724] device vlan1 entered promiscuous mode [ 112.405338][ T4724] device macvlan0 entered promiscuous mode [ 112.454604][ T4724] device macvlan1 entered promiscuous mode [ 112.480988][ T4724] device ipvlan0 entered promiscuous mode [ 112.503400][ T4724] device ipvlan1 entered promiscuous mode [ 112.633459][ T4724] device macvtap0 entered promiscuous mode [ 112.717054][ T4724] device macsec0 entered promiscuous mode [ 112.794508][ T4724] device geneve0 entered promiscuous mode [ 112.873704][ T4724] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.883030][ T4724] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.892336][ T4724] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.901641][ T4724] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.924684][ T4724] device geneve1 entered promiscuous mode [ 112.977297][ T4724] device netdevsim0 entered promiscuous mode [ 113.003631][ T4724] device netdevsim1 entered promiscuous mode [ 113.029925][ T4724] device netdevsim2 entered promiscuous mode [ 113.064670][ T4724] device netdevsim3 entered promiscuous mode [ 113.083800][ T4724] device wlan0 entered promiscuous mode [ 113.111167][ T4724] device wlan1 entered promiscuous mode [ 113.368449][ T4781] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.084057][ T4827] device syzkaller0 entered promiscuous mode [ 117.734662][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 117.838604][ T4368] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.040131][ T4368] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.078582][ T4368] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 118.121613][ T4368] usb 3-1: string descriptor 0 read error: -22 [ 118.127950][ T4368] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 118.170872][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.686095][ T14] usb 3-1: USB disconnect, device number 3 [ 122.028643][ T4368] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.403389][ T4966] ================================================================== [ 122.411565][ T4966] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xab/0x480 [ 122.419717][ T4966] Read of size 4 at addr 0000000000000174 by task syz.0.152/4966 [ 122.427505][ T4966] [ 122.429881][ T4966] CPU: 1 PID: 4966 Comm: syz.0.152 Not tainted syzkaller #0 [ 122.437212][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.447322][ T4966] Call Trace: [ 122.450636][ T4966] [ 122.453598][ T4966] dump_stack_lvl+0x188/0x24e [ 122.458370][ T4966] ? show_regs_print_info+0x12/0x12 [ 122.463629][ T4966] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 122.469145][ T4966] ? dm_kcopyd_client_destroy+0xab/0x480 [ 122.474833][ T4966] kasan_report+0x10b/0x140 [ 122.479397][ T4966] ? __might_sleep+0xd0/0xd0 [ 122.484040][ T4966] ? dm_kcopyd_client_destroy+0xab/0x480 [ 122.489825][ T4966] kasan_check_range+0x235/0x290 [ 122.494829][ T4966] dm_kcopyd_client_destroy+0xab/0x480 [ 122.500386][ T4966] ? do_work+0x2b0/0x2b0 [ 122.504077][ T4368] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.504677][ T4966] ? slab_free_freelist_hook+0x133/0x1b0 [ 122.520439][ T4966] ? __destroy+0x139/0x2f0 [ 122.524903][ T4966] ? __kmem_cache_free+0xb6/0x200 [ 122.530013][ T4966] __destroy+0x172/0x2f0 [ 122.534303][ T4966] cache_ctr+0x1713/0x2ca0 [ 122.538870][ T4966] ? verity_prefetch_io+0x670/0x670 [ 122.544124][ T4966] ? dm_split_args+0xf9/0x560 [ 122.544150][ T4368] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 122.548831][ T4966] ? skip_spaces+0x86/0xa0 [ 122.548859][ T4966] dm_table_add_target+0x571/0xbc0 [ 122.548887][ T4966] table_load+0x2ce/0x760 [ 122.548916][ T4966] ? dev_wait+0x330/0x330 [ 122.576209][ T4966] ? __might_fault+0xc2/0x120 [ 122.580936][ T4966] ? __might_fault+0xa6/0x120 [ 122.585697][ T4966] dm_ctl_ioctl+0xa9c/0xec0 [ 122.590258][ T4966] ? dev_wait+0x330/0x330 [ 122.594645][ T4966] ? dm_poll+0x120/0x120 [ 122.597011][ T4368] usb 2-1: string descriptor 0 read error: -22 [ 122.598943][ T4966] ? bpf_lsm_file_ioctl+0x5/0x10 [ 122.598979][ T4966] ? security_file_ioctl+0x7c/0xa0 [ 122.599011][ T4966] ? dm_poll+0x120/0x120 [ 122.599035][ T4966] __se_sys_ioctl+0xfa/0x170 [ 122.599075][ T4966] do_syscall_64+0x4c/0xa0 [ 122.599106][ T4966] ? clear_bhb_loop+0x60/0xb0 [ 122.599136][ T4966] ? clear_bhb_loop+0x60/0xb0 [ 122.599168][ T4966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.599197][ T4966] RIP: 0033:0x7f40cb19fb19 [ 122.599229][ T4966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.599247][ T4966] RSP: 002b:00007f40c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.599271][ T4966] RAX: ffffffffffffffda RBX: 00007f40cb425fa0 RCX: 00007f40cb19fb19 [ 122.599287][ T4966] RDX: 0000200000000540 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 122.599302][ T4966] RBP: 00007f40cb237b70 R08: 0000000000000000 R09: 0000000000000000 [ 122.599316][ T4966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.599329][ T4966] R13: 00007f40cb426038 R14: 00007f40cb425fa0 R15: 00007ffff72b1908 [ 122.599353][ T4966] [ 122.599360][ T4966] ================================================================== [ 122.755912][ T4966] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.763278][ T4966] CPU: 1 PID: 4966 Comm: syz.0.152 Not tainted syzkaller #0 [ 122.770615][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.780889][ T4966] Call Trace: [ 122.784669][ T4966] [ 122.787647][ T4966] dump_stack_lvl+0x188/0x24e [ 122.792388][ T4966] ? memcpy+0x3c/0x60 [ 122.796446][ T4966] ? show_regs_print_info+0x12/0x12 [ 122.801831][ T4966] ? load_image+0x410/0x410 [ 122.806395][ T4966] panic+0x2d3/0x710 [ 122.810402][ T4966] ? bpf_jit_dump+0xd0/0xd0 [ 122.814972][ T4966] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 122.821015][ T4966] ? _raw_spin_unlock+0x40/0x40 [ 122.825920][ T4966] check_panic_on_warn+0x80/0xa0 [ 122.830906][ T4966] ? dm_kcopyd_client_destroy+0xab/0x480 [ 122.836592][ T4966] end_report+0x66/0x110 [ 122.840894][ T4966] kasan_report+0x118/0x140 [ 122.845465][ T4966] ? __might_sleep+0xd0/0xd0 [ 122.850105][ T4966] ? dm_kcopyd_client_destroy+0xab/0x480 [ 122.855833][ T4966] kasan_check_range+0x235/0x290 [ 122.860835][ T4966] dm_kcopyd_client_destroy+0xab/0x480 [ 122.866346][ T4966] ? do_work+0x2b0/0x2b0 [ 122.870751][ T4966] ? slab_free_freelist_hook+0x133/0x1b0 [ 122.876446][ T4966] ? __destroy+0x139/0x2f0 [ 122.880905][ T4966] ? __kmem_cache_free+0xb6/0x200 [ 122.885981][ T4966] __destroy+0x172/0x2f0 [ 122.890275][ T4966] cache_ctr+0x1713/0x2ca0 [ 122.894741][ T4966] ? verity_prefetch_io+0x670/0x670 [ 122.899102][ T4368] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 122.899176][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.916997][ T4966] ? dm_split_args+0xf9/0x560 [ 122.921714][ T4966] ? skip_spaces+0x86/0xa0 [ 122.926159][ T4966] dm_table_add_target+0x571/0xbc0 [ 122.931302][ T4966] table_load+0x2ce/0x760 [ 122.935664][ T4966] ? dev_wait+0x330/0x330 [ 122.940135][ T4966] ? __might_fault+0xc2/0x120 [ 122.944938][ T4966] ? __might_fault+0xa6/0x120 [ 122.949657][ T4966] dm_ctl_ioctl+0xa9c/0xec0 [ 122.954224][ T4966] ? dev_wait+0x330/0x330 [ 122.958590][ T4966] ? dm_poll+0x120/0x120 [ 122.962874][ T4966] ? bpf_lsm_file_ioctl+0x5/0x10 [ 122.967854][ T4966] ? security_file_ioctl+0x7c/0xa0 [ 122.973019][ T4966] ? dm_poll+0x120/0x120 [ 122.977299][ T4966] __se_sys_ioctl+0xfa/0x170 [ 122.981936][ T4966] do_syscall_64+0x4c/0xa0 [ 122.986572][ T4966] ? clear_bhb_loop+0x60/0xb0 [ 122.991292][ T4966] ? clear_bhb_loop+0x60/0xb0 [ 122.996016][ T4966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.001944][ T4966] RIP: 0033:0x7f40cb19fb19 [ 123.006385][ T4966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.026023][ T4966] RSP: 002b:00007f40c93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.034467][ T4966] RAX: ffffffffffffffda RBX: 00007f40cb425fa0 RCX: 00007f40cb19fb19 [ 123.042461][ T4966] RDX: 0000200000000540 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 123.050461][ T4966] RBP: 00007f40cb237b70 R08: 0000000000000000 R09: 0000000000000000 [ 123.058478][ T4966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.066481][ T4966] R13: 00007f40cb426038 R14: 00007f40cb425fa0 R15: 00007ffff72b1908 [ 123.074488][ T4966] [ 123.078134][ T4966] Kernel Offset: disabled [ 123.082472][ T4966] Rebooting in 86400 seconds..