last executing test programs: 12.239776138s ago: executing program 3 (id=331): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 9.023780868s ago: executing program 3 (id=344): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.618071383s ago: executing program 3 (id=354): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/45, 0x2d) getdents64(r0, 0x0, 0x18) 5.75049898s ago: executing program 3 (id=356): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x47}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x0, 0xf, 0x5f, {0x5f, 0x31, "a60a54a759e0ae564740995ec5b7427f22ee08dc3d30b1f54ff8ce16d185b7eeed6c40ae3cf54d1e34ae3630139c07009ee4f51ef4b50451147b2d5d6f41b9976e64f65288f6cc1f2f548d097c94b91cc84a45e3b8451a6a42ba1db64e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.653012254s ago: executing program 1 (id=358): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x80000003}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r2, 0x0, 0x80) clock_gettime(0x0, 0x0) mkdir(0x0, 0x0) 4.952843875s ago: executing program 2 (id=361): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}}, 0x0, 0x0, 0x0) epoll_pwait(r5, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f00000003c0)={[0x2]}, 0x8) syz_usb_connect(0x2, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) 4.859449139s ago: executing program 1 (id=363): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, 0x0, 0x0) shutdown(r0, 0x1) 4.110993112s ago: executing program 2 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x100000, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.973519857s ago: executing program 1 (id=365): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.91999165s ago: executing program 4 (id=366): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.91972013s ago: executing program 2 (id=367): socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x800) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.817726774s ago: executing program 1 (id=368): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 3.816307374s ago: executing program 4 (id=369): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c) lseek(r5, 0x101, 0x1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r8, 0x107, 0xd, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1409, 0x2, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 3.068005817s ago: executing program 2 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) tee(0xffffffffffffffff, r2, 0x9, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 2.704857663s ago: executing program 4 (id=371): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x2020000}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0xd, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) socket(0xa, 0x3, 0xff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000300)) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) exit(0x200000000fe) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="1d", 0x1}], 0x1}}], 0x1, 0x48c0) 2.610862377s ago: executing program 0 (id=372): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 2.53603707s ago: executing program 2 (id=373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000001440)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0x8, 0xfff3}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004880}, 0x20000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$netlink(r2, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000001400), 0x0, 0xc002a0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe) syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x30, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) 2.382633736s ago: executing program 0 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 2.31232727s ago: executing program 0 (id=375): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.164036966s ago: executing program 2 (id=376): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c00000001090212000100000000090400"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x7, 0x4, 0x0, 0x4, 0x0, 0x8, [{0x2, 0x1, 0x2}, {0x9, 0x3, 0x1}, {0xd, 0x4, 0x1}, {0x9, 0x2, 0x9}]}]}}, 0x0, 0x56, 0x0, 0x0, 0x7}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x65]}}]}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000140)={0x1, r4}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES64], 0x40}}, 0x4000800) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.096071559s ago: executing program 0 (id=377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1342, 0x836d9fb164f927b3) acct(&(0x7f00000000c0)='./file1\x00') inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000104) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getpgid(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.893677278s ago: executing program 3 (id=378): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.363923891s ago: executing program 4 (id=379): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) select(0x40, &(0x7f0000000080)={0x2, 0x2, 0x823, 0x1f, 0x5, 0x2, 0x8, 0x80000001}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000380)="0f01764a652e36f2f0fe040f0e0f30baf80c66b81e17898f66efbafc0cedd9fa3eff580376870f015a000f01f6", 0x2d}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 1.195339858s ago: executing program 1 (id=380): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000240)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r7, &(0x7f0000000000)="b1d7", 0x2, 0x0, 0x0, 0x2}]) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) 1.082077803s ago: executing program 0 (id=381): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) 160.079063ms ago: executing program 0 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000186"], 0x340a) 159.871703ms ago: executing program 4 (id=383): socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 159.705873ms ago: executing program 3 (id=384): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x3, r0, 0xfffffffd, 0x80000}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r4}, 0x8) 45.826748ms ago: executing program 4 (id=385): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) 0s ago: executing program 1 (id=386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 64.246884][ T4172] cgroup: Unknown subsys name 'net' [ 64.393169][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.868933][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.381755][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 67.417746][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 67.482492][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.548475][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.556196][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.564658][ T4182] device bridge_slave_0 entered promiscuous mode [ 67.583088][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.596547][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.605268][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.613417][ T4182] device bridge_slave_1 entered promiscuous mode [ 67.659538][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.669569][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.676716][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.684487][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.693355][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.700563][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.711630][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.750444][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.766176][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.808369][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.844593][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.853842][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.861339][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.869314][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.898639][ T4182] team0: Port device team_slave_0 added [ 67.913547][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.920723][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.929083][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.936262][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.943516][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.951636][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.963455][ T4182] team0: Port device team_slave_1 added [ 67.980166][ T4196] team0: Port device team_slave_0 added [ 68.000265][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.007437][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.015307][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.030576][ T4196] team0: Port device team_slave_1 added [ 68.044512][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.051656][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.077757][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.111677][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.118916][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.126779][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.134427][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.141522][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.167886][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.180940][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.206027][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.213200][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.221335][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.241841][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.260407][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.270118][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.277171][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.303148][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.331767][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.341371][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.348496][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.374498][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.396315][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.408797][ T4188] team0: Port device team_slave_0 added [ 68.416045][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.456919][ T4188] team0: Port device team_slave_1 added [ 68.473245][ T4182] device hsr_slave_0 entered promiscuous mode [ 68.480253][ T4182] device hsr_slave_1 entered promiscuous mode [ 68.523336][ T4191] team0: Port device team_slave_0 added [ 68.531336][ T4191] team0: Port device team_slave_1 added [ 68.548795][ T4183] team0: Port device team_slave_0 added [ 68.579908][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.586885][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.593482][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.601454][ T4196] Cannot create hsr debugfs directory [ 68.608072][ T4183] team0: Port device team_slave_1 added [ 68.614579][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.621730][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.647761][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.667963][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.674929][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.701227][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.728656][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.735614][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.761808][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.777488][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.784506][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.814372][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.838052][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.845017][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.871296][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.904362][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.911824][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.937954][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.986486][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.993303][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.000894][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.008597][ T4188] Cannot create hsr debugfs directory [ 69.035565][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.042743][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 69.046788][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 69.054955][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 69.055371][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.066760][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 69.073257][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.080960][ T4191] Cannot create hsr debugfs directory [ 69.117177][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 69.142866][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.149915][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.156503][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.164135][ T4183] Cannot create hsr debugfs directory [ 69.406191][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.427984][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.448319][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.463426][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.504323][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.515165][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.528351][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.543458][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.654492][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.662105][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.689474][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.703663][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.714459][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.725774][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.740509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.750478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.768761][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.794280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.803596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.812172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.821224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.830600][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.837860][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.847488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.856235][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.878549][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.888862][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.898040][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.905315][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.913383][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.922319][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.934541][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.944369][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.953380][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.967764][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.010332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.020640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.029641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.039256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.048428][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.055519][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.063300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.073329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.082442][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.089561][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.103916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.112623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.140261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.149744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.160319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.169596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.185062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.212029][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.221705][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.231252][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.241316][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.260582][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.272005][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.288005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.296392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.305480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.314373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.322967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.333027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.341378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.351677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.363855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.372951][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.386357][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.416364][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.428804][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.465271][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.495629][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.540079][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.590768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.604901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.615986][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.637253][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.645064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.653143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.661396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.670018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.683166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.690820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.700613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.709668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.719077][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.726168][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.738122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.751805][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.764437][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.775492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.785048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.794494][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.801613][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.818010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.828267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.836977][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.844047][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.873516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.883628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.899226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.908591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.917269][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.924334][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.937884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.946597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.955773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.966564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.007134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.025496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.037974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.046545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.055948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.065167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.073943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.083789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.092018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.103306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.112078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.117365][ T2304] Bluetooth: hci3: command 0x041b tx timeout [ 71.126008][ T2304] Bluetooth: hci2: command 0x041b tx timeout [ 71.132625][ T2304] Bluetooth: hci1: command 0x041b tx timeout [ 71.139299][ T2304] Bluetooth: hci0: command 0x041b tx timeout [ 71.150669][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.166070][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.175021][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.190290][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.202639][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 71.210783][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.220017][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.228421][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.236442][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.250714][ T4182] device veth0_vlan entered promiscuous mode [ 71.259278][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.272523][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.284318][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.284479][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.290909][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.312560][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.324670][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.357264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.372973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.391669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.400917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.426389][ T4182] device veth1_vlan entered promiscuous mode [ 71.449300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.461103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.472749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.498761][ T4196] device veth0_vlan entered promiscuous mode [ 71.540035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.557684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.568909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.582789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.592349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.611558][ T4196] device veth1_vlan entered promiscuous mode [ 71.627682][ T4182] device veth0_macvtap entered promiscuous mode [ 71.645130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.653984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.661848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.687526][ T4182] device veth1_macvtap entered promiscuous mode [ 71.700601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.709746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.722204][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.735228][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.752295][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.770435][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.782007][ T4196] device veth0_macvtap entered promiscuous mode [ 71.800060][ T4196] device veth1_macvtap entered promiscuous mode [ 71.808997][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.817276][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.824961][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.834868][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.844012][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.853155][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.875230][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.894652][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.903959][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.913079][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.920202][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.928257][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.937017][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.945419][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.952511][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.960537][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.970300][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.979285][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.987983][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.996582][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.022399][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.034094][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.045622][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.054941][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.067851][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.079334][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.088624][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.097756][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.106304][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.134484][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.145254][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.157804][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.167085][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.176243][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.187328][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.196045][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.208159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.217120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.225839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.234413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.245455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.254136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.262548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.271141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.279690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.288063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.296671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.321418][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.332854][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.343489][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.352986][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.361975][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.391229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.400272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.410515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.419596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.428308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.443159][ T4191] device veth0_vlan entered promiscuous mode [ 72.467749][ T4188] device veth0_vlan entered promiscuous mode [ 72.490544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.500302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.514534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.523426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.533805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.542034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.585148][ T4191] device veth1_vlan entered promiscuous mode [ 72.600752][ T4188] device veth1_vlan entered promiscuous mode [ 72.677543][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.691253][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.747449][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.753966][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.755473][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.787767][ T4191] device veth0_macvtap entered promiscuous mode [ 72.795251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.803842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.815435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.823255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.840155][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.849821][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.861812][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.872168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.882875][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.887913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.901402][ T4191] device veth1_macvtap entered promiscuous mode [ 72.926985][ T4188] device veth0_macvtap entered promiscuous mode [ 72.940658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.949947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.959600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.982774][ T4188] device veth1_macvtap entered promiscuous mode [ 72.993061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.004215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.012778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.024243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.033360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.044181][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.047522][ T4183] device veth0_vlan entered promiscuous mode [ 73.058913][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.069365][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.080151][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.090147][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.101155][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.117695][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.129339][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.140528][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.151004][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.161554][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.172502][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.188457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.197638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.208012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.208122][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 73.217806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.229025][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 73.231639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.236147][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 73.251512][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 73.261796][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.272023][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.281984][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 73.289119][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.298163][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.313088][ T4183] device veth1_vlan entered promiscuous mode [ 73.343925][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.361974][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.378738][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.389813][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.399784][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.410524][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.422642][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.432618][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.446580][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.459142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.472631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.486060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.504646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.518683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.528851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.534914][ T4296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.537741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.565179][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.576566][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.587059][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.608664][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.627420][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.644975][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.657478][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.668304][ T4183] device veth0_macvtap entered promiscuous mode [ 73.700160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.724362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.733451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.746718][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.755540][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.765572][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.779894][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.817416][ T4183] device veth1_macvtap entered promiscuous mode [ 73.911395][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.957048][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.975450][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.987641][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.998477][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.016838][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.043195][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.074180][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.123817][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.293498][ T4307] batman_adv: batadv0: Adding interface: gretap1 [ 74.300149][ T4307] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.326061][ T4307] batman_adv: batadv0: Interface activated: gretap1 [ 74.339720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.370713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.489819][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.541827][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.608357][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.670646][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.750643][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.825382][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.871450][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.884134][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.896147][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.907732][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.916554][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.923224][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.925317][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.942116][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.954008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.972759][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.000180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.040856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.146329][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.187188][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.204718][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.234205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.236791][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.249624][ T4311] device syzkaller0 entered promiscuous mode [ 75.294178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.294362][ T4310] Bluetooth: hci3: command 0x0419 tx timeout [ 75.315250][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.324190][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.338526][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 75.345983][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 75.358323][ T4310] Bluetooth: hci0: command 0x0419 tx timeout [ 75.367194][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.369555][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 75.375230][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.394562][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.416206][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.455920][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.494326][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.714072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.028582][ T4326] No such timeout policy "syz1" [ 76.317067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.380611][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.892618][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.549831][ T4344] loop0: detected capacity change from 0 to 8192 [ 77.944552][ T4344] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.978218][ T4344] REISERFS (device loop0): using ordered data mode [ 78.036756][ T4344] reiserfs: using flush barriers [ 78.119193][ T4344] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.178892][ T4344] REISERFS (device loop0): checking transaction log (loop0) [ 78.241699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 78.252826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 78.261880][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 78.270988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 78.633292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.727577][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.736893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 80.138407][ T4344] REISERFS (device loop0): Using tea hash to sort names [ 80.233134][ T4344] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 80.347356][ T4360] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15'. [ 80.799880][ T4375] ax25_connect(): syz.4.19 uses autobind, please contact jreuter@yaina.de [ 82.487554][ T4377] tipc: Started in network mode [ 82.506955][ T4377] tipc: Node identity 2a91459f05a9, cluster identity 4711 [ 82.577390][ T4377] tipc: Enabled bearer , priority 0 [ 83.420987][ T4377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 83.457343][ T4386] netlink: 'syz.3.22': attribute type 12 has an invalid length. [ 83.603219][ T4377] tipc: Resetting bearer [ 84.448845][ T4228] tipc: Node number set to 792216991 [ 84.624672][ T4376] tipc: Disabling bearer [ 84.994732][ T4398] loop4: detected capacity change from 0 to 8192 [ 86.647294][ T1346] cfg80211: failed to load regulatory.db [ 87.496324][ T4398] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 87.506825][ T4398] REISERFS (device loop4): using ordered data mode [ 87.514404][ T4398] reiserfs: using flush barriers [ 87.669637][ T4398] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.689656][ T4398] REISERFS (device loop4): checking transaction log (loop4) [ 88.531132][ T4398] REISERFS (device loop4): Using tea hash to sort names [ 88.540606][ T4398] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 89.819191][ T4402] loop2: detected capacity change from 0 to 128 [ 89.861350][ T4406] Zero length message leads to an empty skb [ 89.967670][ T4402] FAT-fs (loop2): Unrecognized mount option "dos1xfloppy=win95" or missing value [ 90.566837][ T1324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.806772][ T1324] usb 1-1: Using ep0 maxpacket: 16 [ 90.876564][ T4413] loop1: detected capacity change from 0 to 128 [ 90.903985][ T4413] FAT-fs (loop1): Unrecognized mount option "dos1xfloppy=win95" or missing value [ 90.927028][ T1324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.953303][ T1324] usb 1-1: config 0 has no interfaces? [ 91.240237][ T1324] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 91.479926][ T4417] loop2: detected capacity change from 0 to 8192 [ 92.515296][ T4417] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 92.525344][ T4417] REISERFS (device loop2): using ordered data mode [ 92.531975][ T4417] reiserfs: using flush barriers [ 94.116038][ T4417] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.133576][ T4417] REISERFS (device loop2): checking transaction log (loop2) [ 94.985936][ T4417] REISERFS (device loop2): Using tea hash to sort names [ 94.995159][ T4417] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 95.755256][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.768471][ T1324] usb 1-1: Product: syz [ 95.772680][ T1324] usb 1-1: Manufacturer: syz [ 95.777694][ T1324] usb 1-1: SerialNumber: syz [ 95.815840][ T1324] usb 1-1: config 0 descriptor?? [ 95.877058][ T1324] usb 1-1: can't set config #0, error -71 [ 95.905310][ T1324] usb 1-1: USB disconnect, device number 2 [ 98.426804][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.738217][ T13] usb 3-1: no configurations [ 98.743462][ T13] usb 3-1: can't read configurations, error -22 [ 99.022103][ T4467] batman_adv: batadv0: Adding interface: gretap1 [ 99.028723][ T4467] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.054412][ T4467] batman_adv: batadv0: Interface activated: gretap1 [ 99.136905][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.457371][ T13] usb 3-1: no configurations [ 99.462042][ T13] usb 3-1: can't read configurations, error -22 [ 99.521535][ T4470] loop4: detected capacity change from 0 to 8192 [ 99.566015][ T4470] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 99.575287][ T4470] REISERFS (device loop4): using ordered data mode [ 99.581868][ T4470] reiserfs: using flush barriers [ 99.588305][ T4470] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.604930][ T4470] REISERFS (device loop4): checking transaction log (loop4) [ 99.673033][ T13] usb usb3-port1: attempt power cycle [ 99.687641][ T4470] REISERFS (device loop4): Using tea hash to sort names [ 99.695048][ T4470] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 101.016979][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.027957][ T4485] tipc: Started in network mode [ 101.033743][ T4485] tipc: Node identity 92904dfba826, cluster identity 4711 [ 101.041708][ T4485] tipc: Enabled bearer , priority 0 [ 101.049444][ T4485] device syzkaller0 entered promiscuous mode [ 102.671448][ T4242] tipc: Node number set to 985026043 [ 102.717124][ T13] usb 3-1: device descriptor read/8, error -71 [ 103.841665][ T4494] tipc: Resetting bearer [ 103.877343][ T4494] tipc: Disabling bearer [ 104.597143][ T4530] loop2: detected capacity change from 0 to 1024 [ 104.831893][ T4530] ======================================================= [ 104.831893][ T4530] WARNING: The mand mount option has been deprecated and [ 104.831893][ T4530] and is ignored by this kernel. Remove the mand [ 104.831893][ T4530] option from the mount to silence this warning. [ 104.831893][ T4530] ======================================================= [ 104.850473][ T4530] EXT4-fs (loop2): Ignoring removed bh option [ 104.850848][ T4530] EXT4-fs (loop2): inline encryption not supported [ 105.966619][ C1] sched: RT throttling activated [ 105.972029][ T4530] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 105.975036][ T4530] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.994517][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.54: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.995183][ T4530] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 105.995220][ T4530] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.54: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.995418][ T4530] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 105.995502][ T4530] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.54: Failed to acquire dquot type 0 [ 105.996219][ T4530] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 105.998437][ T4530] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.54: mark_inode_dirty error [ 105.998678][ T4530] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 105.999323][ T4530] EXT4-fs (loop2): 1 orphan inode deleted [ 106.311005][ T4335] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.950460][ T4335] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 106.950560][ T4335] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:7: Failed to release dquot type 0 [ 106.953329][ T4530] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 107.005812][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.501216][ T4277] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.633938][ T4537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.713283][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 107.754147][ T4536] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 107.754328][ T4536] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 108.485310][ T4563] netlink: 'syz.1.66': attribute type 39 has an invalid length. [ 108.767405][ T4339] Bluetooth: (null): Invalid header checksum [ 108.793076][ T4339] Bluetooth: (null): Invalid header checksum [ 108.923472][ T4339] Bluetooth: (null): Invalid header checksum [ 108.923528][ T4339] Bluetooth: (null): Invalid header checksum [ 108.999159][ T144] Bluetooth: (null): Invalid header checksum [ 112.086725][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.116188][ T4609] binder: 4608:4609 ioctl c0306201 0 returned -14 [ 112.124868][ T4609] binder: BINDER_SET_CONTEXT_MGR already set [ 112.133373][ T4609] binder: 4608:4609 ioctl 4018620d 2000000001c0 returned -16 [ 112.136888][ T4277] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.142491][ T4609] binder: 4608:4609 ioctl c0306201 0 returned -14 [ 112.275591][ T4194] Bluetooth: Wrong link type (-71) [ 112.426856][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 112.478257][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.810086][ T1107] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.826748][ T4277] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 112.867460][ T4277] usb 3-1: config 0 has no interface number 0 [ 112.907041][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.957437][ T1107] usb 5-1: config 0 descriptor?? [ 113.026999][ T4277] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.036296][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.828704][ T4277] usb 3-1: Product: syz [ 113.833143][ T4277] usb 3-1: Manufacturer: syz [ 113.839198][ T4277] usb 3-1: SerialNumber: syz [ 113.867747][ T4277] usb 3-1: config 0 descriptor?? [ 113.891459][ T1107] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 113.907735][ T4277] smsc95xx v2.0.0 [ 113.953646][ T1107] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input6 [ 114.103492][ T4627] overlayfs: workdir and upperdir must be separate subtrees [ 114.279592][ T1107] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 114.371939][ T4631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 115.066942][ T4277] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 115.128477][ T4277] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.141654][ T1107] usb 5-1: USB disconnect, device number 2 [ 115.490493][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 115.816834][ T4277] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 115.851311][ T4636] fido_id[4636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 116.033546][ T4277] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 116.059337][ T4277] usb 3-1: USB disconnect, device number 6 [ 116.366742][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.807101][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.823462][ T23] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 116.834592][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.852613][ T23] usb 5-1: config 0 descriptor?? [ 116.930551][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 117.026858][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.902703][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 118.923339][ T4689] netlink: 'syz.0.107': attribute type 12 has an invalid length. [ 118.946917][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.957277][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 118.971094][ T21] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.981589][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.991814][ T21] usb 3-1: config 0 descriptor?? [ 119.018419][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 119.096786][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 119.147665][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 119.411972][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 120.160734][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 120.187316][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 120.527144][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 120.533849][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 120.558740][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 120.592450][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 120.606880][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.917036][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 122.015920][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 122.234857][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 122.367756][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 122.507135][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 122.627070][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.320458][ T21] pwc: recv_control_msg error -71 req 04 val 1300 [ 123.356166][ T21] pwc: recv_control_msg error -71 req 04 val 1400 [ 123.934009][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.963989][ T23] pwc: Registered as video103. [ 123.970658][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 123.990256][ T21] pwc: recv_control_msg error -71 req 02 val 2000 [ 124.134858][ T21] pwc: recv_control_msg error -71 req 02 val 2100 [ 124.278852][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 124.323063][ T21] pwc: recv_control_msg error -71 req 04 val 1500 [ 124.383254][ T21] pwc: recv_control_msg error -71 req 02 val 2500 [ 125.742805][ T21] pwc: recv_control_msg error -71 req 02 val 2400 [ 125.752889][ T23] usb 5-1: USB disconnect, device number 3 [ 125.790746][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 125.809294][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 125.826957][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 125.837934][ T4724] loop3: detected capacity change from 0 to 256 [ 125.846802][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 125.866745][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 125.868093][ T21] pwc: Registered as video103. [ 125.869421][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 125.878306][ T21] usb 3-1: USB disconnect, device number 7 [ 125.898610][ T4724] exfat: Unknown parameter 'keep_last_dots' [ 126.002659][ T4721] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.702280][ T4721] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.876000][ T4721] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.029009][ T4734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.120'. [ 127.044796][ T4746] mmap: syz.2.124 (4746) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 127.275218][ T4734] device hsr_slave_1 left promiscuous mode [ 127.352766][ T4721] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.556328][ T4755] loop0: detected capacity change from 0 to 128 [ 128.125451][ T4721] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.206305][ T4721] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.290943][ T4721] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.344876][ T4721] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.513180][ T4764] loop0: detected capacity change from 0 to 1024 [ 129.636757][ T4242] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.776729][ T4242] usb 3-1: Using ep0 maxpacket: 16 [ 131.006770][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 131.501031][ T4791] block device autoloading is deprecated and will be removed. [ 132.154182][ T4792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 132.163525][ T4425] hfsplus: b-tree write err: -5, ino 8 [ 132.356803][ T4242] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.366063][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.649097][ T4277] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 132.721423][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.729613][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.750423][ T4277] Bluetooth: hci1: Injecting HCI hardware error event [ 132.923800][ T4189] Bluetooth: hci1: hardware error 0x00 [ 133.064495][ T4242] usb 3-1: Product: syz [ 133.070939][ T4242] usb 3-1: Manufacturer: syz [ 133.075549][ T4242] usb 3-1: SerialNumber: syz [ 133.084042][ T4242] usb 3-1: config 0 descriptor?? [ 133.106923][ T4242] usb 3-1: can't set config #0, error -71 [ 133.117427][ T4242] usb 3-1: USB disconnect, device number 8 [ 133.134991][ T4802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.140'. [ 133.171812][ T4804] loop2: detected capacity change from 0 to 512 [ 133.194718][ T4808] 9pnet: Insufficient options for proto=fd [ 133.265556][ T4804] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.328735][ T4814] netlink: 256 bytes leftover after parsing attributes in process `syz.0.147'. [ 133.345114][ T4812] loop3: detected capacity change from 0 to 256 [ 133.352971][ T4814] unsupported nlmsg_type 40 [ 133.401253][ T4804] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 133.433634][ T4804] EXT4-fs (loop2): orphan cleanup on readonly fs [ 133.453380][ T4812] FAT-fs (loop3): bogus number of FAT sectors [ 133.483470][ T4812] FAT-fs (loop3): Can't find a valid FAT filesystem [ 133.526921][ T4312] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.599581][ T4804] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.143: corrupted inode contents [ 133.620705][ T4804] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #16: comm syz.2.143: mark_inode_dirty error [ 133.642674][ T4804] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.143: corrupted inode contents [ 133.662353][ T4804] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.143: mark_inode_dirty error [ 133.675638][ T4804] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.143: corrupted inode contents [ 133.696494][ T4804] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 133.741769][ T4804] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.143: corrupted inode contents [ 133.784599][ T4804] EXT4-fs error (device loop2): ext4_truncate:4279: inode #16: comm syz.2.143: mark_inode_dirty error [ 133.897684][ T4804] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 133.947173][ T4312] usb 5-1: Using ep0 maxpacket: 32 [ 134.077387][ T4242] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 134.132989][ T4804] EXT4-fs (loop2): 1 truncate cleaned up [ 134.177789][ T4312] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 134.659526][ T4804] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 134.861575][ T4312] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 134.892317][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 134.922206][ T4312] usb 5-1: Product: syz [ 134.928410][ T4312] usb 5-1: Manufacturer: syz [ 134.933779][ T4312] usb 5-1: SerialNumber: syz [ 135.007143][ T4242] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 135.500948][ T4312] usb 5-1: config 0 descriptor?? [ 135.512756][ T4242] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.547157][ T4810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 136.354810][ T4312] hub 5-1:0.0: bad descriptor, ignoring hub [ 136.361074][ T4312] hub: probe of 5-1:0.0 failed with error -5 [ 136.437706][ T4242] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 136.449870][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 136.463221][ T4242] usb 4-1: Product: syz [ 136.468132][ T4242] usb 4-1: Manufacturer: syz [ 136.472850][ T4242] usb 4-1: SerialNumber: syz [ 136.486929][ T4242] usb 4-1: config 0 descriptor?? [ 136.507684][ T4312] usb 5-1: USB disconnect, device number 4 [ 136.542272][ T4242] usb 4-1: selecting invalid altsetting 0 [ 137.198320][ T4863] usb 4-1: selecting invalid altsetting 0 [ 137.204658][ T4863] usb 4-1: 0:0: usb_set_interface failed (-22) [ 137.211777][ T4863] usb 4-1: selecting invalid altsetting 0 [ 137.217878][ T4863] usb 4-1: 0:0: usb_set_interface failed (-22) [ 137.225639][ T4863] usb 4-1: selecting invalid altsetting 0 [ 137.231857][ T4863] usb 4-1: 0:0: usb_set_interface failed (-22) [ 139.043018][ T4699] usb 4-1: USB disconnect, device number 2 [ 139.168617][ T4883] loop3: detected capacity change from 0 to 512 [ 139.329262][ T4883] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.498855][ T4883] EXT4-fs (loop3): 1 truncate cleaned up [ 140.504623][ T4883] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.971807][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.032092][ T4899] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 141.225443][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 147.983587][ T4932] Set syz0 is full, maxelem 0 reached [ 148.099221][ T4941] loop4: detected capacity change from 0 to 128 [ 148.286566][ T26] audit: type=1804 audit(1763800069.232:2): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.185" name="/newroot/41/file0/bus" dev="loop4" ino=1048591 res=1 errno=0 [ 148.346912][ T4699] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.586820][ T4699] usb 2-1: Using ep0 maxpacket: 16 [ 148.592529][ T4950] loop2: detected capacity change from 0 to 16 [ 148.636705][ T4310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.685092][ T4950] erofs: (device loop2): mounted with root inode @ nid 36. [ 148.746878][ T4699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.792332][ T4950] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 148.819473][ T4950] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 148.846868][ T4699] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 148.869118][ T4699] usb 2-1: config 13 has no interface number 0 [ 148.895847][ T4950] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 148.916192][ T4699] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 148.926800][ T4310] usb 1-1: Using ep0 maxpacket: 32 [ 148.935043][ T4950] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 148.954771][ T4699] usb 2-1: config 13 interface 50 has no altsetting 0 [ 148.961984][ T4950] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 148.994178][ T4950] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 149.016361][ T4950] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 149.048126][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 149.071379][ T4950] attempt to access beyond end of device [ 149.071379][ T4950] loop2: rw=524288, want=32, limit=16 [ 149.082987][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.100627][ T4310] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 149.124592][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.176995][ T4699] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 149.197389][ T4310] usb 1-1: config 0 descriptor?? [ 149.199016][ T4699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.271934][ T4699] usb 2-1: Product: syz [ 149.277934][ T4699] usb 2-1: Manufacturer: syz [ 149.282585][ T4699] usb 2-1: SerialNumber: syz [ 149.327191][ T4932] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.408759][ T4964] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.481397][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.489831][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.262514][ T4964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.461997][ T4310] wacom 0003:056A:0315.0002: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 150.514535][ T4310] wacom 0003:056A:0315.0002: hidraw0: USB HID v0.07 Device [HID 056a:0315] on usb-dummy_hcd.0-1/input0 [ 150.537957][ T4310] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0315.0002/input/input10 [ 150.637356][ T4277] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 150.697836][ T4310] usb 1-1: USB disconnect, device number 5 [ 150.762742][ T4699] usb 2-1: MIDIStreaming interface descriptor not found [ 150.833944][ T4975] fido_id[4975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 150.886103][ T4699] usb 2-1: USB disconnect, device number 2 [ 151.102568][ T4277] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 151.143429][ T4277] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 151.153088][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.173364][ T4277] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.204637][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.104650][ T4977] udevd[4977]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.306908][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 152.427282][ T2304] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.435448][ T4277] usb 4-1: string descriptor 0 read error: -71 [ 152.447238][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.484139][ T4277] usb 4-1: USB disconnect, device number 3 [ 152.496270][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.582036][ T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 152.603205][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.628107][ T21] usb 5-1: config 0 descriptor?? [ 152.686848][ T2304] usb 2-1: Using ep0 maxpacket: 8 [ 152.826964][ T2304] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.837537][ T2304] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 152.865287][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.899080][ T2304] usb 2-1: config 0 descriptor?? [ 152.938888][ T2304] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 153.305323][ T21] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 153.466453][ T5000] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.562144][ T4997] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 153.576891][ T4997] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 153.727140][ T21] usb 5-1: USB disconnect, device number 5 [ 154.444927][ T5017] loop2: detected capacity change from 0 to 2048 [ 154.497764][ T2304] gspca_vc032x: reg_r err -110 [ 154.528380][ T2304] vc032x: probe of 2-1:0.0 failed with error -110 [ 154.593411][ T5017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.982558][ T5023] loop4: detected capacity change from 0 to 128 [ 156.156755][ T4252] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 156.165693][ T4252] Bluetooth: hci0: Injecting HCI hardware error event [ 156.181223][ T4194] Bluetooth: hci0: hardware error 0x00 [ 156.445494][ T4252] usb 2-1: USB disconnect, device number 3 [ 156.539285][ T5033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 157.150021][ T5023] attempt to access beyond end of device [ 157.150021][ T5023] loop4: rw=2049, want=425, limit=128 [ 157.406161][ T4336] attempt to access beyond end of device [ 157.406161][ T4336] loop4: rw=1, want=185, limit=128 [ 157.438126][ T4336] attempt to access beyond end of device [ 157.438126][ T4336] loop4: rw=1, want=433, limit=128 [ 158.111299][ T5066] loop1: detected capacity change from 0 to 128 [ 158.746015][ T5076] loop4: detected capacity change from 0 to 512 [ 159.072442][ T5076] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.156768][ T5076] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.257935][ T5076] EXT4-fs (loop4): 1 truncate cleaned up [ 159.263833][ T5076] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,noquota,quota,,errors=continue. Quota mode: writeback. [ 159.518073][ T5090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.231'. [ 160.414600][ T5080] loop3: detected capacity change from 0 to 32768 [ 160.491213][ T5080] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.228 (5080) [ 161.269119][ T5080] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 161.310437][ T5080] BTRFS info (device loop3): setting nodatasum [ 161.327709][ T5080] BTRFS info (device loop3): force zlib compression, level 3 [ 161.383178][ T5080] BTRFS info (device loop3): metadata ratio 4 [ 161.430232][ T5080] BTRFS info (device loop3): enabling ssd optimizations [ 161.521249][ T5080] BTRFS info (device loop3): allowing degraded mounts [ 161.599492][ T5080] BTRFS info (device loop3): using free space tree [ 161.631894][ T5080] BTRFS info (device loop3): has skinny extents [ 162.172313][ T5133] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 163.032253][ T5080] BTRFS error (device loop3): open_ctree failed: -12 [ 163.556799][ T5155] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.845269][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 165.236978][ T5155] usb 4-1: Using ep0 maxpacket: 32 [ 165.386754][ T5155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.547510][ T5155] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 165.608815][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.741367][ T5155] usb 4-1: Product: syz [ 165.819190][ T5155] usb 4-1: Manufacturer: syz [ 165.900731][ T5155] usb 4-1: SerialNumber: syz [ 166.095904][ T5155] usb 4-1: config 0 descriptor?? [ 166.346504][ T5154] usb 4-1: USB disconnect, device number 4 [ 166.382082][ T5225] process 'syz.2.268' launched './file0' with NULL argv: empty string added [ 166.471923][ T5232] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 166.479968][ T5232] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 166.647008][ T4252] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 167.176928][ T4252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.235411][ T4252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.254441][ T4252] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 167.444111][ T4252] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 167.537064][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.204537][ T4252] usb 1-1: config 0 descriptor?? [ 168.447726][ T5259] fuse: Bad value for 'fd' [ 168.453510][ T5259] overlayfs: failed to clone upperpath [ 168.566967][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.750991][ T4252] aureal 0003:0755:2626.0004: unexpected long global item [ 168.806144][ T4252] aureal: probe of 0003:0755:2626.0004 failed with error -22 [ 168.836887][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 168.966880][ T21] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 169.008983][ T4252] usb 1-1: USB disconnect, device number 6 [ 169.022040][ T21] usb 4-1: config 0 has no interface number 0 [ 169.244062][ T5264] overlayfs: failed to clone upperpath [ 169.316980][ T21] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 169.329559][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.344170][ T21] usb 4-1: Product: syz [ 169.350123][ T21] usb 4-1: Manufacturer: syz [ 169.355521][ T21] usb 4-1: SerialNumber: syz [ 169.379098][ T21] usb 4-1: config 0 descriptor?? [ 169.585433][ T21] smsc95xx v2.0.0 [ 169.641470][ T5281] overlayfs: failed to clone upperpath [ 170.322411][ T5291] loop3: detected capacity change from 0 to 512 [ 170.529776][ T5291] EXT4-fs (loop3): Ignoring removed bh option [ 170.575727][ T5291] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 170.596761][ T5291] EXT4-fs (loop3): 1 truncate cleaned up [ 170.602454][ T5291] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000400000,bh,noquota,auto_da_alloc=0x0000000000000002,grpquota,max_dir_size_kb=0x0000000000000803,,errors=continue. Quota mode: writeback. [ 171.886785][ T5293] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 171.956788][ T21] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 172.017189][ T21] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 172.079846][ T21] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 172.125400][ T21] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 172.187701][ T21] usb 4-1: USB disconnect, device number 5 [ 172.406790][ T2304] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 172.658720][ T5320] netlink: 180 bytes leftover after parsing attributes in process `syz.3.299'. [ 172.725126][ T5323] device syzkaller0 entered promiscuous mode [ 172.759752][ T5324] netlink: 180 bytes leftover after parsing attributes in process `syz.3.299'. [ 172.786840][ T2304] usb 2-1: config index 0 descriptor too short (expected 68, got 34) [ 172.819293][ T2304] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.894696][ T2304] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.925489][ T5320] netlink: 180 bytes leftover after parsing attributes in process `syz.3.299'. [ 173.062286][ T5328] netlink: 96 bytes leftover after parsing attributes in process `syz.3.301'. [ 173.082190][ T2304] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 173.101858][ T2304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.136428][ T2304] usb 2-1: Product: syz [ 173.141824][ T2304] usb 2-1: Manufacturer: syz [ 173.146455][ T2304] usb 2-1: SerialNumber: syz [ 173.161012][ T5331] capability: warning: `syz.0.303' uses 32-bit capabilities (legacy support in use) [ 173.167652][ T2304] usb 2-1: config 0 descriptor?? [ 173.334085][ T5336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 173.448437][ T2304] imon_raw 2-1:0.0: IR endpoint missing [ 173.466461][ T2304] usb 2-1: USB disconnect, device number 4 [ 174.399802][ T5353] No source specified [ 175.467914][ T5366] vivid-001: disconnect [ 176.185219][ T5363] vivid-001: reconnect [ 176.989525][ T4252] libceph: connect (1)[c::]:6789 error -101 [ 176.997198][ T4252] libceph: mon0 (1)[c::]:6789 connect error [ 178.007954][ T5373] ceph: No mds server is up or the cluster is laggy [ 178.020789][ T4252] libceph: connect (1)[c::]:6789 error -101 [ 178.054339][ T4252] libceph: mon0 (1)[c::]:6789 connect error [ 178.407098][ T2304] libceph: connect (1)[c::]:6789 error -101 [ 178.454155][ T2304] libceph: mon0 (1)[c::]:6789 connect error [ 178.590492][ T5339] ODEBUG: Out of memory. ODEBUG disabled [ 180.480889][ T5420] loop2: detected capacity change from 0 to 1024 [ 180.656632][ T2304] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.723765][ T154] hfsplus: b-tree write err: -5, ino 4 [ 181.146637][ T5436] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 181.154388][ T5436] netlink: 'syz.2.334': attribute type 2 has an invalid length. [ 181.807948][ T5440] netlink: 'syz.4.337': attribute type 10 has an invalid length. [ 181.927741][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.073686][ T5440] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.096997][ T2304] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 182.106838][ T2304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.117194][ T2304] usb 2-1: Product: syz [ 182.122806][ T2304] usb 2-1: Manufacturer: syz [ 182.131073][ T2304] usb 2-1: SerialNumber: syz [ 182.211604][ T5339] Set syz1 is full, maxelem 65536 reached [ 182.254455][ T5442] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.298409][ T5444] orangefs_mount: mount request failed with -4 [ 182.646805][ T5440] syz.4.337 (5440) used greatest stack depth: 20832 bytes left [ 182.666852][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 182.694245][ T5442] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 182.776805][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 183.196715][ T5452] orangefs_mount: mount request failed with -4 [ 185.756975][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 185.842482][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 185.887127][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 185.936723][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 186.009569][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 186.064696][ T5490] loop3: detected capacity change from 0 to 128 [ 186.087305][ T5489] tipc: Enabled bearer , priority 0 [ 186.096751][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 186.097477][ T5489] device syzkaller0 entered promiscuous mode [ 186.117673][ T26] audit: type=1326 audit(1763800107.062:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.1.353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1c9e88749 code=0x0 [ 186.154440][ T5490] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.156884][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 186.179543][ T5489] tipc: Resetting bearer [ 186.226245][ T5490] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.256745][ T4699] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 186.275508][ T5488] tipc: Resetting bearer [ 186.287209][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 186.308865][ T2304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 186.321050][ T2304] lan78xx: probe of 2-1:1.0 failed with error -71 [ 186.368324][ T2304] usb 2-1: USB disconnect, device number 5 [ 186.508583][ T5488] tipc: Disabling bearer [ 186.866816][ T4699] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 186.924742][ T4699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.947843][ T4699] usb 1-1: Product: syz [ 186.952062][ T4699] usb 1-1: Manufacturer: syz [ 186.961307][ T4699] usb 1-1: SerialNumber: syz [ 187.144714][ T5504] device bridge0 entered promiscuous mode [ 187.151177][ T5504] device vlan2 entered promiscuous mode [ 187.237023][ T4699] net_ratelimit: 3 callbacks suppressed [ 187.237119][ T4699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 187.297997][ T5506] overlayfs: workdir and upperdir must be separate subtrees [ 187.337576][ T4699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 187.773359][ T5513] loop2: detected capacity change from 0 to 1024 [ 188.049585][ T5519] No source specified [ 188.377212][ T5155] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.532245][ T4285] hfsplus: b-tree write err: -5, ino 4 [ 188.746837][ T4699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 188.766780][ T5155] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.771006][ T4699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 188.790551][ T5155] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.799166][ T4699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 188.836774][ T4699] lan78xx: probe of 1-1:1.0 failed with error -71 [ 188.861201][ T5155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 188.870302][ T5155] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 188.880320][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.993714][ T5155] usb 4-1: config 0 descriptor?? [ 189.238659][ T4699] usb 1-1: USB disconnect, device number 7 [ 189.850843][ T5154] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.948448][ T5155] a4tech 0003:09DA:000A.0005: item fetching failed at offset 0/3 [ 190.008459][ T5155] a4tech 0003:09DA:000A.0005: parse failed [ 190.014343][ T5155] a4tech: probe of 0003:09DA:000A.0005 failed with error -22 [ 190.213600][ T5151] usb 4-1: USB disconnect, device number 6 [ 190.387364][ T5154] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.405744][ T5154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.518392][ T5154] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.528202][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.536222][ T5154] usb 2-1: SerialNumber: syz [ 190.726726][ T4252] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 191.217897][ T4252] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 191.255419][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.422532][ T4252] usb 3-1: config 0 descriptor?? [ 191.497580][ T5556] Process accounting resumed [ 191.519939][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.528522][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.561765][ T4242] Bluetooth: hci3: command 0x0406 tx timeout [ 191.568049][ T4242] Bluetooth: hci2: command 0x0406 tx timeout [ 191.590634][ T5154] usb 2-1: 0:2 : does not exist [ 191.622101][ T5560] device bridge_slave_1 left promiscuous mode [ 191.645579][ T5154] usb 2-1: USB disconnect, device number 6 [ 191.653200][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.711499][ T5560] device bridge_slave_0 left promiscuous mode [ 191.737853][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.902123][ T4648] udevd[4648]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.489592][ T5572] syz.0.382 uses obsolete (PF_INET,SOCK_PACKET) [ 192.650640][ T5581] ================================================================== [ 192.659187][ T5581] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 192.668438][ T5581] Read of size 1 at addr ffff88807eabf608 by task syz.1.386/5581 [ 192.676187][ T5581] [ 192.678537][ T5581] CPU: 1 PID: 5581 Comm: syz.1.386 Not tainted syzkaller #0 [ 192.685846][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.695942][ T5581] Call Trace: [ 192.699250][ T5581] [ 192.702208][ T5581] dump_stack_lvl+0x168/0x230 [ 192.706927][ T5581] ? show_regs_print_info+0x20/0x20 [ 192.712166][ T5581] ? load_image+0x3b0/0x3b0 [ 192.716703][ T5581] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 192.722115][ T5581] ? xfrm_pol_bin_obj+0x140/0x140 [ 192.727182][ T5581] print_address_description+0x60/0x2d0 [ 192.732762][ T5581] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 192.739272][ T5581] kasan_report+0xdf/0x130 [ 192.743732][ T5581] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 192.750274][ T5581] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 192.756628][ T5581] ? xfrm_policy_addr_delta+0x212/0x340 [ 192.762195][ T5581] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 192.768353][ T5581] ? __kasan_kmalloc+0xb5/0xf0 [ 192.773117][ T5581] ? xfrm_policy_alloc+0x75/0x2b0 [ 192.778152][ T5581] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 192.784310][ T5581] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 192.790211][ T5581] xfrm_policy_inexact_insert+0xe0/0x1460 [ 192.795942][ T5581] ? __get_hash_thresh+0x105/0x410 [ 192.801061][ T5581] ? policy_hash_bysel+0x10a/0x570 [ 192.806181][ T5581] xfrm_policy_insert+0x112/0x930 [ 192.811215][ T5581] xfrm_add_policy+0x4d6/0x860 [ 192.815988][ T5581] ? xfrm_dump_sa_done+0xc0/0xc0 [ 192.820926][ T5581] ? apparmor_capable+0x12c/0x190 [ 192.825951][ T5581] ? __nla_parse+0x3c/0x50 [ 192.830369][ T5581] xfrm_user_rcv_msg+0x58d/0x860 [ 192.835314][ T5581] ? xfrm_netlink_rcv+0x90/0x90 [ 192.840186][ T5581] ? xfrm_netlink_rcv+0x66/0x90 [ 192.845040][ T5581] ? xfrm_netlink_rcv+0x66/0x90 [ 192.849910][ T5581] ? xfrm_netlink_rcv+0x66/0x90 [ 192.854776][ T5581] ? __mutex_lock_common+0x431/0x2390 [ 192.860147][ T5581] ? __copy_skb_header+0x417/0x5a0 [ 192.865261][ T5581] ? __skb_clone+0x480/0x790 [ 192.869855][ T5581] netlink_rcv_skb+0x1e0/0x430 [ 192.874618][ T5581] ? xfrm_netlink_rcv+0x90/0x90 [ 192.879474][ T5581] ? netlink_ack+0xb60/0xb60 [ 192.884061][ T5581] ? __lock_acquire+0x7c60/0x7c60 [ 192.889095][ T5581] xfrm_netlink_rcv+0x75/0x90 [ 192.893779][ T5581] netlink_unicast+0x774/0x920 [ 192.898560][ T5581] netlink_sendmsg+0x8ab/0xbc0 [ 192.903331][ T5581] ? netlink_getsockopt+0x560/0x560 [ 192.908526][ T5581] ? aa_sock_msg_perm+0x94/0x150 [ 192.913463][ T5581] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 192.918751][ T5581] ? security_socket_sendmsg+0x7c/0xa0 [ 192.924206][ T5581] ? netlink_getsockopt+0x560/0x560 [ 192.929402][ T5581] ____sys_sendmsg+0x5a2/0x8c0 [ 192.934175][ T5581] ? memset+0x1e/0x40 [ 192.938164][ T5581] ? __sys_sendmsg_sock+0x30/0x30 [ 192.943197][ T5581] ? import_iovec+0x6f/0xa0 [ 192.947703][ T5581] ___sys_sendmsg+0x1f0/0x260 [ 192.952401][ T5581] ? __sys_sendmsg+0x250/0x250 [ 192.957174][ T5581] ? percpu_counter_add_batch+0x13b/0x160 [ 192.962910][ T5581] ? __fdget+0x18b/0x210 [ 192.967151][ T5581] __se_sys_sendmsg+0x190/0x250 [ 192.972004][ T5581] ? __x64_sys_sendmsg+0x80/0x80 [ 192.976943][ T5581] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 192.982953][ T5581] ? lockdep_hardirqs_on+0x94/0x140 [ 192.988175][ T5581] do_syscall_64+0x4c/0xa0 [ 192.992595][ T5581] ? clear_bhb_loop+0x30/0x80 [ 192.997278][ T5581] ? clear_bhb_loop+0x30/0x80 [ 193.001963][ T5581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.007867][ T5581] RIP: 0033:0x7ff1c9e88749 [ 193.012284][ T5581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.031911][ T5581] RSP: 002b:00007ff1c80ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.040330][ T5581] RAX: ffffffffffffffda RBX: 00007ff1ca0defa0 RCX: 00007ff1c9e88749 [ 193.048309][ T5581] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 193.056279][ T5581] RBP: 00007ff1c9f0cf91 R08: 0000000000000000 R09: 0000000000000000 [ 193.064252][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.072231][ T5581] R13: 00007ff1ca0df038 R14: 00007ff1ca0defa0 R15: 00007ffd14aa61a8 [ 193.080217][ T5581] [ 193.083236][ T5581] [ 193.085557][ T5581] Allocated by task 5581: [ 193.089876][ T5581] __kasan_kmalloc+0xb5/0xf0 [ 193.094466][ T5581] sk_prot_alloc+0xe7/0x210 [ 193.098973][ T5581] sk_alloc+0x2f/0x310 [ 193.103036][ T5581] pfkey_create+0xd8/0x560 [ 193.107452][ T5581] __sock_create+0x47b/0x900 [ 193.112045][ T5581] __sys_socket+0xe2/0x170 [ 193.116465][ T5581] __x64_sys_socket+0x76/0x80 [ 193.121157][ T5581] do_syscall_64+0x4c/0xa0 [ 193.125574][ T5581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.131469][ T5581] [ 193.133787][ T5581] Last potentially related work creation: [ 193.139504][ T5581] kasan_save_stack+0x35/0x60 [ 193.144178][ T5581] kasan_record_aux_stack+0xb8/0x100 [ 193.149549][ T5581] call_rcu+0x182/0x930 [ 193.153699][ T5581] netlink_release+0x134f/0x1790 [ 193.158635][ T5581] sock_close+0xd5/0x240 [ 193.162875][ T5581] __fput+0x234/0x930 [ 193.166851][ T5581] task_work_run+0x125/0x1a0 [ 193.171437][ T5581] exit_to_user_mode_loop+0x10f/0x130 [ 193.176805][ T5581] exit_to_user_mode_prepare+0xee/0x180 [ 193.182346][ T5581] syscall_exit_to_user_mode+0x16/0x40 [ 193.187798][ T5581] do_syscall_64+0x58/0xa0 [ 193.192226][ T5581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.198117][ T5581] [ 193.200436][ T5581] The buggy address belongs to the object at ffff88807eabf000 [ 193.200436][ T5581] which belongs to the cache kmalloc-2k of size 2048 [ 193.214484][ T5581] The buggy address is located 1544 bytes inside of [ 193.214484][ T5581] 2048-byte region [ffff88807eabf000, ffff88807eabf800) [ 193.227939][ T5581] The buggy address belongs to the page: [ 193.233576][ T5581] page:ffffea0001faae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7eab8 [ 193.243721][ T5581] head:ffffea0001faae00 order:3 compound_mapcount:0 compound_pincount:0 [ 193.252040][ T5581] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 193.260054][ T5581] raw: 00fff00000010200 ffffea0001d29600 0000000200000002 ffff888016842000 [ 193.268633][ T5581] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 193.277205][ T5581] page dumped because: kasan: bad access detected [ 193.283618][ T5581] page_owner tracks the page as allocated [ 193.289324][ T5581] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4188, ts 75746573612, free_ts 75607814602 [ 193.309808][ T5581] get_page_from_freelist+0x1b77/0x1c60 [ 193.315363][ T5581] __alloc_pages+0x1e1/0x470 [ 193.319974][ T5581] new_slab+0xc0/0x4b0 [ 193.324039][ T5581] ___slab_alloc+0x81e/0xdf0 [ 193.328649][ T5581] __kmalloc+0x1cd/0x330 [ 193.332900][ T5581] arpt_alloc_initial_table+0x67/0xce0 [ 193.338357][ T5581] arptable_filter_table_init+0x17/0x60 [ 193.343895][ T5581] xt_find_table_lock+0x220/0x360 [ 193.348942][ T5581] xt_request_find_table_lock+0x22/0x100 [ 193.354573][ T5581] do_arpt_get_ctl+0x66d/0xf40 [ 193.359329][ T5581] nf_getsockopt+0x25e/0x280 [ 193.363917][ T5581] ip_getsockopt+0x115a/0x1590 [ 193.369111][ T5581] tcp_getsockopt+0x1e3/0x2390 [ 193.373869][ T5581] __sys_getsockopt+0x1b0/0x230 [ 193.378721][ T5581] __x64_sys_getsockopt+0xb1/0xc0 [ 193.383770][ T5581] do_syscall_64+0x4c/0xa0 [ 193.388287][ T5581] page last free stack trace: [ 193.393042][ T5581] free_unref_page_prepare+0x637/0x6c0 [ 193.398526][ T5581] free_unref_page+0x94/0x280 [ 193.403337][ T5581] __unfreeze_partials+0x1a5/0x200 [ 193.408509][ T5581] put_cpu_partial+0x12d/0x190 [ 193.413278][ T5581] qlist_free_all+0x35/0x90 [ 193.417784][ T5581] kasan_quarantine_reduce+0x150/0x160 [ 193.423241][ T5581] __kasan_slab_alloc+0x2f/0xd0 [ 193.428113][ T5581] slab_post_alloc_hook+0x4c/0x380 [ 193.433229][ T5581] kmem_cache_alloc+0x100/0x290 [ 193.438074][ T5581] getname_flags+0xb5/0x500 [ 193.442572][ T5581] user_path_at_empty+0x2a/0x190 [ 193.447508][ T5581] __se_sys_chroot+0x90/0x3b0 [ 193.452180][ T5581] do_syscall_64+0x4c/0xa0 [ 193.456681][ T5581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.462574][ T5581] [ 193.464895][ T5581] Memory state around the buggy address: [ 193.470523][ T5581] ffff88807eabf500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 193.478578][ T5581] ffff88807eabf580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 193.486653][ T5581] >ffff88807eabf600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 193.494720][ T5581] ^ [ 193.499041][ T5581] ffff88807eabf680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 193.507098][ T5581] ffff88807eabf700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 193.515148][ T5581] ================================================================== [ 193.523195][ T5581] Disabling lock debugging due to kernel taint [ 193.529434][ T5581] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.536645][ T5581] CPU: 1 PID: 5581 Comm: syz.1.386 Tainted: G B syzkaller #0 [ 193.545336][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.555383][ T5581] Call Trace: [ 193.558659][ T5581] [ 193.561585][ T5581] dump_stack_lvl+0x168/0x230 [ 193.566274][ T5581] ? show_regs_print_info+0x20/0x20 [ 193.571477][ T5581] ? load_image+0x3b0/0x3b0 [ 193.576005][ T5581] panic+0x2c9/0x7f0 [ 193.579897][ T5581] ? bpf_jit_dump+0xd0/0xd0 [ 193.584404][ T5581] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 193.590302][ T5581] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 193.596197][ T5581] ? _raw_spin_unlock+0x40/0x40 [ 193.601142][ T5581] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 193.608084][ T5581] check_panic_on_warn+0x80/0xa0 [ 193.613026][ T5581] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 193.619523][ T5581] end_report+0x6d/0xf0 [ 193.623678][ T5581] kasan_report+0x102/0x130 [ 193.628188][ T5581] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 193.634703][ T5581] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 193.641044][ T5581] ? xfrm_policy_addr_delta+0x212/0x340 [ 193.646597][ T5581] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 193.652770][ T5581] ? __kasan_kmalloc+0xb5/0xf0 [ 193.657532][ T5581] ? xfrm_policy_alloc+0x75/0x2b0 [ 193.662557][ T5581] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 193.668708][ T5581] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 193.674604][ T5581] xfrm_policy_inexact_insert+0xe0/0x1460 [ 193.680326][ T5581] ? __get_hash_thresh+0x105/0x410 [ 193.685433][ T5581] ? policy_hash_bysel+0x10a/0x570 [ 193.690544][ T5581] xfrm_policy_insert+0x112/0x930 [ 193.695567][ T5581] xfrm_add_policy+0x4d6/0x860 [ 193.700329][ T5581] ? xfrm_dump_sa_done+0xc0/0xc0 [ 193.705264][ T5581] ? apparmor_capable+0x12c/0x190 [ 193.710283][ T5581] ? __nla_parse+0x3c/0x50 [ 193.714696][ T5581] xfrm_user_rcv_msg+0x58d/0x860 [ 193.719639][ T5581] ? xfrm_netlink_rcv+0x90/0x90 [ 193.724495][ T5581] ? xfrm_netlink_rcv+0x66/0x90 [ 193.729338][ T5581] ? xfrm_netlink_rcv+0x66/0x90 [ 193.734187][ T5581] ? xfrm_netlink_rcv+0x66/0x90 [ 193.739063][ T5581] ? __mutex_lock_common+0x431/0x2390 [ 193.744440][ T5581] ? __copy_skb_header+0x417/0x5a0 [ 193.749565][ T5581] ? __skb_clone+0x480/0x790 [ 193.754167][ T5581] netlink_rcv_skb+0x1e0/0x430 [ 193.758940][ T5581] ? xfrm_netlink_rcv+0x90/0x90 [ 193.763797][ T5581] ? netlink_ack+0xb60/0xb60 [ 193.768387][ T5581] ? __lock_acquire+0x7c60/0x7c60 [ 193.773419][ T5581] xfrm_netlink_rcv+0x75/0x90 [ 193.778097][ T5581] netlink_unicast+0x774/0x920 [ 193.783384][ T5581] netlink_sendmsg+0x8ab/0xbc0 [ 193.788155][ T5581] ? netlink_getsockopt+0x560/0x560 [ 193.793347][ T5581] ? aa_sock_msg_perm+0x94/0x150 [ 193.798283][ T5581] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 193.803598][ T5581] ? security_socket_sendmsg+0x7c/0xa0 [ 193.809052][ T5581] ? netlink_getsockopt+0x560/0x560 [ 193.814246][ T5581] ____sys_sendmsg+0x5a2/0x8c0 [ 193.819007][ T5581] ? memset+0x1e/0x40 [ 193.823021][ T5581] ? __sys_sendmsg_sock+0x30/0x30 [ 193.828044][ T5581] ? import_iovec+0x6f/0xa0 [ 193.832543][ T5581] ___sys_sendmsg+0x1f0/0x260 [ 193.837234][ T5581] ? __sys_sendmsg+0x250/0x250 [ 193.841998][ T5581] ? percpu_counter_add_batch+0x13b/0x160 [ 193.847719][ T5581] ? __fdget+0x18b/0x210 [ 193.851993][ T5581] __se_sys_sendmsg+0x190/0x250 [ 193.856842][ T5581] ? __x64_sys_sendmsg+0x80/0x80 [ 193.861776][ T5581] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 193.867762][ T5581] ? lockdep_hardirqs_on+0x94/0x140 [ 193.873266][ T5581] do_syscall_64+0x4c/0xa0 [ 193.877686][ T5581] ? clear_bhb_loop+0x30/0x80 [ 193.882445][ T5581] ? clear_bhb_loop+0x30/0x80 [ 193.887119][ T5581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.893023][ T5581] RIP: 0033:0x7ff1c9e88749 [ 193.897449][ T5581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.919138][ T5581] RSP: 002b:00007ff1c80ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.927547][ T5581] RAX: ffffffffffffffda RBX: 00007ff1ca0defa0 RCX: 00007ff1c9e88749 [ 193.935547][ T5581] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 193.943544][ T5581] RBP: 00007ff1c9f0cf91 R08: 0000000000000000 R09: 0000000000000000 [ 193.951523][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.959609][ T5581] R13: 00007ff1ca0df038 R14: 00007ff1ca0defa0 R15: 00007ffd14aa61a8 [ 193.967601][ T5581] [ 193.970923][ T5581] Kernel Offset: disabled [ 193.976683][ T5581] Rebooting in 86400 seconds..