last executing test programs: 21.239299651s ago: executing program 3 (id=324): r0 = socket$caif_stream(0x25, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x88) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB="01"], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000000, 0x0, 0x4, 0x48}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x4, 0x1000, 0x0, 0xd, 0x2, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xf, 0x31, 0xffffffffffffffff, 0x34345000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="2c000000000000000000000006000900ffff0000060009000300000008000300744d", @ANYRES64=r2, @ANYBLOB="0c000600020000000000000008000300", @ANYRES8=r1, @ANYRESHEX=r5, @ANYBLOB="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", @ANYRES16, @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4814) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r9, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3ff, 0x100) 16.805431954s ago: executing program 3 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000a00)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) 13.263084013s ago: executing program 3 (id=343): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2c04c410}, 0x24008880) 10.169842708s ago: executing program 3 (id=354): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x56fa9599}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x39, 0xfd, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7}, {0xeda7, 0x1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0xd000, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.347324978s ago: executing program 1 (id=372): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) pwritev(r0, 0x0, 0x0, 0x73a, 0x20000001) 6.150708332s ago: executing program 3 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x40, r1, 0x1, 0x70bd28, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1fcb, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]]}, 0x40}}, 0x10) 6.150477292s ago: executing program 1 (id=377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.707782694s ago: executing program 2 (id=381): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) fsopen(&(0x7f0000000100)='bpf\x00', 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r9, 0x25, 0x0, @val=@tcx}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x0, 0x1, 0x0, &(0x7f00000002c0)='\\', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) 2.746509347s ago: executing program 3 (id=382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.514886149s ago: executing program 2 (id=384): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 2.484270942s ago: executing program 1 (id=385): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x8031, 0xffffffffffffffff, 0x395fa000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) 2.414035999s ago: executing program 2 (id=386): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000007"], 0x14}, 0x0) 2.359520214s ago: executing program 1 (id=387): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 2.336163936s ago: executing program 1 (id=388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r0, 0x8) 2.247184535s ago: executing program 2 (id=390): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000080)={0x0, 0x200, 0x6, 0x365, 0x2, [0x0, 0x0], [0x6, 0xffff, 0xdc9, 0x7], [0xfffffff9, 0x80000001, 0xed26, 0xffb], [0xfffffffffffffffd, 0x8000000000000000, 0x8, 0x8]}) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000003c0)="306fbc0504e9b42b171adc2af14c38e8f1adf6b1d320516d22380f381d74b648a1ca37e04672b1a3a84e645493b823e18a32227dc4292cfb3d30c7c551db04c7610cd98434294ca25069e335b79a9e8546011f11ff69ab5facbc9daae09f02c2d62c3fd7375c893d9eef3e124472172495db5558d40f89270e7f806cadc2e509a670a69450", 0x85, 0x40040, &(0x7f00000005c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xe6, @ipv4={'\x00', '\xff\xff', @private=0x9}, 0x100}}, 0x24) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000000)={r0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x644, 0x4040880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @empty, 0x200000}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) setresuid(0xee00, 0xee01, 0xee01) keyctl$invalidate(0x15, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x166a803f}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x0, @void}, 0x10) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) syz_emit_ethernet(0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="08050208fee80004520000000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) 2.132010176s ago: executing program 2 (id=392): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x9, 0xa, 0x3, 0xfffffffc, 0x4f, "0c31920a87e80cb791f19dd0261b7fcb366b00", 0x4, 0x83cb}) 1.216557814s ago: executing program 2 (id=395): openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x6aa80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109021b000107d445000904"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.006819394s ago: executing program 4 (id=396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3, 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 874.842296ms ago: executing program 4 (id=397): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x168e1180, 0x0, 0x0, 0x0, 0x0, 0x0) 789.336764ms ago: executing program 4 (id=398): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x2000000, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x8, 0x0, 0x0) 734.21703ms ago: executing program 4 (id=399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)) 599.032272ms ago: executing program 4 (id=401): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 405.028841ms ago: executing program 0 (id=402): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 367.563004ms ago: executing program 4 (id=403): syz_usb_connect(0x6, 0x1b, &(0x7f0000000200)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="b9cd14c222", 0x5}], 0x1}}], 0x1, 0x20008000) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) 299.421791ms ago: executing program 0 (id=404): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x16d, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 273.968663ms ago: executing program 1 (id=405): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) timer_create(0x4, &(0x7f0000000040)={0x0, 0x3b, 0x2, @thr={&(0x7f0000000240)="40e98f5e45a84d20a82c149c5ef915bf36d19aac28d1616d60b75165dcde78e4ba8cf3431c934964565a4983b7cc17d4caaeca319d8f399a693df794", &(0x7f00000002c0)="4391b1678af58c185c26db2b5a7f1c1d2fbe37c280ae9995e255cb21f7"}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) r3 = socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 205.35723ms ago: executing program 0 (id=406): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 94.04645ms ago: executing program 0 (id=407): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x84d9, 0x0, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 82.392222ms ago: executing program 0 (id=408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x6000, 0x1000}) 0s ago: executing program 0 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 64.705415][ T4172] cgroup: Unknown subsys name 'net' [ 64.847840][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.318563][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.913994][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.946443][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 67.975117][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.007829][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.072652][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.161882][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.169004][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.177929][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.207979][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.215233][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.224268][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.249392][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.257371][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.265934][ T4182] device bridge_slave_0 entered promiscuous mode [ 68.301555][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.308669][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.317617][ T4182] device bridge_slave_1 entered promiscuous mode [ 68.333525][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.341313][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.349444][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.357633][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.364987][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.373522][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.399116][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.408779][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.416371][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.424936][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.432364][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.439842][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.448909][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.474231][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.498615][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.505921][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.514409][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.523866][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.557353][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.565279][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.573980][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.582711][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.602217][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.613502][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.642027][ T4189] team0: Port device team_slave_0 added [ 68.649623][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.660316][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.687476][ T4189] team0: Port device team_slave_1 added [ 68.708137][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.720183][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.733330][ T4182] team0: Port device team_slave_0 added [ 68.770282][ T4182] team0: Port device team_slave_1 added [ 68.787261][ T4187] team0: Port device team_slave_0 added [ 68.795612][ T4191] team0: Port device team_slave_0 added [ 68.820703][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.828193][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.854671][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.868146][ T4187] team0: Port device team_slave_1 added [ 68.876038][ T4191] team0: Port device team_slave_1 added [ 68.884599][ T4183] team0: Port device team_slave_0 added [ 68.907590][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.914641][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.940742][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.967629][ T4183] team0: Port device team_slave_1 added [ 68.974252][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.981884][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.008379][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.046442][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.053649][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.079967][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.096747][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.107417][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.133741][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.145579][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.152665][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.178691][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.199352][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.206377][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.232339][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.246255][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.253325][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.279850][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.292263][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.299256][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.325602][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.341533][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.348620][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.375239][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.427913][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.435366][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.454013][ T4182] device hsr_slave_0 entered promiscuous mode [ 69.460798][ T4182] device hsr_slave_1 entered promiscuous mode [ 69.467877][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.476547][ T4182] Cannot create hsr debugfs directory [ 69.543919][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.550923][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.557931][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.565722][ T4191] Cannot create hsr debugfs directory [ 69.578617][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.584451][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 69.585539][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 69.593185][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 69.598227][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 69.610661][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 69.617754][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.624743][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.632689][ T4183] Cannot create hsr debugfs directory [ 69.641689][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.648416][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.655268][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.663060][ T4187] Cannot create hsr debugfs directory [ 69.993285][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.008303][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.017716][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.027823][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.089444][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.100271][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.112887][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.124210][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.219756][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.229900][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.240592][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.262391][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.295154][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.306172][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.327056][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.337836][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.348731][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.389379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.399378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.436317][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.450583][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.477993][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.491057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.500952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.511935][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.519271][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.529457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.545478][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.561895][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.572141][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.583284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.591394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.599383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.609490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.619144][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.626385][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.658354][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.668912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.678601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.688201][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.695336][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.704677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.713912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.743128][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.756117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.767986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.777627][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.784753][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.796034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.805641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.817704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.827995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.854204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.863402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.873638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.883655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.895461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.914885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.923103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.931016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.940927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.965343][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.974460][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.984442][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.008549][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.019212][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.047954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.058925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.075565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.088340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.098976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.113626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.125646][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.132889][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.144551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.154994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.165582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.173801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.187439][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.200263][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.218798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.228260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.243755][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.282760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.292845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.302691][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.309789][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.339131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.355560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.390714][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.403939][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.413049][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.420945][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.429205][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.444746][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.455599][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.468119][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.476690][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.486648][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.505112][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.511778][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.540978][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.580862][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.604214][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.619297][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.630643][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.639729][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.646891][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.658109][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.665154][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 71.669393][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 71.678428][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 71.685983][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.694677][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 71.700360][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.703288][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 71.717035][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.726115][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.735433][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.745024][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.754207][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.763504][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.773576][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.782856][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.790104][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.798511][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.806920][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.848660][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.861507][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.869077][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.902031][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.921610][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.928730][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.942839][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.959217][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.970427][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.980729][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.994115][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.003031][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.011072][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.020910][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.030051][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.037517][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.055874][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.081711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.097506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.142074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.187368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.202024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.210577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.229634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.238998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.248295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.258246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.267631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.276847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.285752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.309669][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.339298][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.350241][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.366100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.376157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.386234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.395799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.405066][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.414483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.424007][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.432787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.465167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.482552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.490200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.512170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.526465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.551760][ T4191] device veth0_vlan entered promiscuous mode [ 72.561022][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.581622][ T4182] device veth0_vlan entered promiscuous mode [ 72.592308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.600889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.610061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.619683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.634341][ T4191] device veth1_vlan entered promiscuous mode [ 72.657874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.667271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.680817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.693152][ T4182] device veth1_vlan entered promiscuous mode [ 72.750101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.762057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.782675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.795789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.825483][ T4189] device veth0_vlan entered promiscuous mode [ 72.835792][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.844845][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.854651][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.869634][ T4182] device veth0_macvtap entered promiscuous mode [ 72.896755][ T4189] device veth1_vlan entered promiscuous mode [ 72.908204][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.916936][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.925065][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.934742][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.944319][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.953581][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.961044][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.968646][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.981603][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.005808][ T4182] device veth1_macvtap entered promiscuous mode [ 73.018255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.031546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.039910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.048732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.056895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.066047][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.079315][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.099623][ T4189] device veth0_macvtap entered promiscuous mode [ 73.110268][ T4191] device veth0_macvtap entered promiscuous mode [ 73.128909][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.142512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.152560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.162353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.172330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.182970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.196338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.209645][ T4189] device veth1_macvtap entered promiscuous mode [ 73.224973][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.239680][ T4191] device veth1_macvtap entered promiscuous mode [ 73.253823][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.265221][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.277595][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.287938][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.297820][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.310904][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.320272][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.329704][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.338569][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.376942][ T4187] device veth0_vlan entered promiscuous mode [ 73.385188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.394933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.408602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.416804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.440089][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.455615][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.474210][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.486836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.503418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.520920][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.532031][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.543845][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.554624][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.566719][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.585243][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.597104][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.608898][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.624182][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.633059][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.642749][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.651991][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.660687][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.670184][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.693141][ T4187] device veth1_vlan entered promiscuous mode [ 73.700246][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.713334][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.724184][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.735476][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.746206][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 73.752600][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 73.759111][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 73.759814][ T1347] Bluetooth: hci3: command 0x040f tx timeout [ 73.769825][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.784622][ T1347] Bluetooth: hci4: command 0x040f tx timeout [ 73.800180][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.818448][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.828670][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.844491][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.861489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.869614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.878526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.888032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.896627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.905932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.914578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.924456][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.933561][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.942933][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.951910][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.993268][ T4183] device veth0_vlan entered promiscuous mode [ 74.031847][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.039979][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.064366][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.079514][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.089531][ T4183] device veth1_vlan entered promiscuous mode [ 74.129157][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.138752][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.184099][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.192661][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.208298][ T4187] device veth0_macvtap entered promiscuous mode [ 74.232077][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.240442][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.248746][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.257732][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.270638][ T4183] device veth0_macvtap entered promiscuous mode [ 74.290228][ T4183] device veth1_macvtap entered promiscuous mode [ 74.300566][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.307546][ T4187] device veth1_macvtap entered promiscuous mode [ 74.335590][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.387967][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.398803][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.414868][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.426254][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.456817][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.466699][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.478272][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.489307][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.497238][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.505145][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.520465][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.531588][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.542759][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.554631][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.567357][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.575555][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.606783][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.617432][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.631102][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.647712][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.659423][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.669869][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.681757][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.731188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.741167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.750837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.759845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.768918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.777916][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.786975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.795963][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.804957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.813948][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 76.395126][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 76.402063][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 76.407071][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.414599][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 76.484429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.494097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.501916][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 76.508177][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 76.513636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.540896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.552374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.567311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.579102][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.590557][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.606708][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.617251][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.633922][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.647027][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.662184][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.672350][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.683861][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.694094][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.704662][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.714983][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.725836][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.736990][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.747884][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.760588][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.772069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.787816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.808307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.817682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.832314][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.841040][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.851732][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.860464][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.882056][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.890803][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.900634][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.909426][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.940819][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.978868][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.029404][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.644486][ T4304] sched: RT throttling activated [ 81.833913][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.868927][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.481222][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.641315][ T2287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.691086][ T4325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.788353][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.796859][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.825850][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.873601][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.907821][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.915918][ T2287] usb 5-1: Using ep0 maxpacket: 16 [ 82.953689][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.012079][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.068347][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.120239][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.991262][ T2287] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 84.022329][ T2287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.538823][ T2287] usb 5-1: config 0 has no interface number 0 [ 84.545161][ T2287] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 84.556215][ T2287] usb 5-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.841617][ T4353] netlink: 'syz.0.13': attribute type 2 has an invalid length. [ 84.849331][ T4353] netlink: 'syz.0.13': attribute type 8 has an invalid length. [ 84.857272][ T4353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13'. [ 86.013064][ T4363] vivid-008: disconnect [ 86.041526][ T2287] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 86.231004][ T2287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.851760][ T4363] vivid-008: reconnect [ 86.865956][ T1110] cfg80211: failed to load regulatory.db [ 89.535579][ T2287] usb 5-1: config 0 descriptor?? [ 89.576252][ T2287] usb 5-1: can't set config #0, error -71 [ 89.770971][ T2287] usb 5-1: USB disconnect, device number 2 [ 96.984622][ T4477] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.954754][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.021600][ T23] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 101.031618][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.039845][ T23] usb 5-1: Product: syz [ 101.045127][ T23] usb 5-1: Manufacturer: syz [ 101.049921][ T23] usb 5-1: SerialNumber: syz [ 101.060386][ T23] usb 5-1: config 0 descriptor?? [ 101.113368][ T23] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 101.151359][ T4246] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 101.652599][ T23] gspca_sunplus: reg_r err -110 [ 101.658458][ T23] sunplus: probe of 5-1:0.0 failed with error -110 [ 102.153725][ T4532] device gretap0 entered promiscuous mode [ 102.359762][ T4544] kvm: emulating exchange as write [ 102.421467][ T4246] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 102.436835][ T4246] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 102.447459][ T4246] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 102.456697][ T4246] usb 2-1: config 150 has no interface number 0 [ 102.463374][ T4246] usb 2-1: config 150 interface 204 has no altsetting 0 [ 102.646264][ T4246] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 102.670637][ T4246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.685575][ T4246] usb 2-1: Product: syz [ 102.689796][ T4246] usb 2-1: Manufacturer: syz [ 102.696544][ T4246] usb 2-1: SerialNumber: syz [ 102.702320][ T1110] usb 5-1: USB disconnect, device number 3 [ 103.427994][ T4553] udc-core: couldn't find an available UDC or it's busy [ 103.466820][ T4553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.692578][ T4561] Zero length message leads to an empty skb [ 104.208065][ T4577] loop8: detected capacity change from 0 to 8 [ 104.326400][ T4577] Dev loop8: unable to read RDB block 8 [ 104.337790][ T4577] loop8: unable to read partition table [ 104.379086][ T4577] loop8: partition table beyond EOD, truncated [ 104.387444][ T4577] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 104.597682][ T4227] usb 2-1: USB disconnect, device number 2 [ 105.859806][ T4607] netlink: 4376 bytes leftover after parsing attributes in process `syz.4.95'. [ 108.520193][ T4661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 109.981248][ T4246] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.751444][ T4246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.763677][ T4246] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 111.845161][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.971748][ T4246] usb 5-1: config 0 descriptor?? [ 112.114174][ T4246] pwc: Askey VC010 type 2 USB webcam detected. [ 112.432095][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.751677][ T4246] pwc: recv_control_msg error -71 req 02 val 2700 [ 112.771686][ T4246] pwc: recv_control_msg error -71 req 02 val 2c00 [ 112.801579][ T4246] pwc: recv_control_msg error -71 req 04 val 1000 [ 112.834978][ T4246] pwc: recv_control_msg error -71 req 04 val 1300 [ 112.871508][ T4246] pwc: recv_control_msg error -71 req 04 val 1400 [ 112.924856][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 112.935928][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 112.943528][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.953608][ T4199] Workqueue: hci2 hci_rx_work [ 112.958351][ T4199] Call Trace: [ 112.961648][ T4199] [ 112.964606][ T4199] dump_stack_lvl+0x168/0x230 [ 112.969344][ T4199] ? show_regs_print_info+0x20/0x20 [ 112.974576][ T4199] ? load_image+0x3b0/0x3b0 [ 112.979121][ T4199] sysfs_create_dir_ns+0x252/0x280 [ 112.984294][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 112.989349][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 112.994055][ T4199] ? le_conn_complete_evt+0xcbc/0x1590 [ 112.999579][ T4199] ? hci_event_packet+0xe05/0x12f0 [ 113.004724][ T4199] ? process_one_work+0x863/0x1000 [ 113.009867][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 113.015091][ T4199] kobject_add_internal+0x662/0xd00 [ 113.020298][ T4199] kobject_add+0x152/0x210 [ 113.024714][ T4199] ? kobject_init+0x1d0/0x1d0 [ 113.029396][ T4199] ? klist_children_get+0x50/0x50 [ 113.034542][ T4199] ? get_device_parent+0x121/0x3f0 [ 113.039667][ T4199] device_add+0x483/0xfb0 [ 113.044022][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 113.049006][ T4199] le_conn_complete_evt+0xcbc/0x1590 [ 113.054343][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 113.059584][ T4199] ? __mutex_trylock_common+0x14f/0x250 [ 113.065146][ T4199] hci_le_meta_evt+0x289/0x3b80 [ 113.070007][ T4199] ? hci_event_packet+0x36d/0x12f0 [ 113.075140][ T4199] ? hci_event_packet+0x2e2/0x12f0 [ 113.080267][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 113.085339][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 113.091418][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 113.097093][ T4199] ? mark_lock+0x94/0x320 [ 113.101459][ T4199] ? mutex_unlock+0x10/0x10 [ 113.105994][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 113.111998][ T4199] ? lock_chain_count+0x20/0x20 [ 113.116863][ T4199] ? __rwlock_init+0x140/0x140 [ 113.121631][ T4199] hci_event_packet+0xe05/0x12f0 [ 113.126585][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 113.131801][ T4199] ? rcu_lock_release+0x20/0x20 [ 113.136659][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 113.141866][ T4199] hci_rx_work+0x255/0xa10 [ 113.146334][ T4199] process_one_work+0x863/0x1000 [ 113.151325][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 113.156979][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 113.162302][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 113.167355][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 113.172854][ T4199] ? wq_worker_running+0x97/0x170 [ 113.177908][ T4199] worker_thread+0xaa8/0x12a0 [ 113.182614][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 113.188535][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 113.193752][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 113.198993][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 113.204926][ T4199] kthread+0x436/0x520 [ 113.209024][ T4199] ? rcu_lock_release+0x20/0x20 [ 113.213873][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 113.218459][ T4199] ret_from_fork+0x1f/0x30 [ 113.222890][ T4199] [ 113.230556][ T4199] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.261235][ T4199] Bluetooth: hci2: failed to register connection device [ 113.278748][ T4246] pwc: recv_control_msg error -71 req 02 val 2000 [ 113.291552][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.301057][ T23] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.301709][ T4246] pwc: recv_control_msg error -71 req 02 val 2100 [ 113.313017][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.367457][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 113.871323][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 114.055369][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.072598][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.121249][ T23] usb 1-1: Product: syz [ 114.151597][ T4246] pwc: recv_control_msg error -71 req 04 val 1500 [ 114.168455][ T23] usb 1-1: Manufacturer: syz [ 114.171878][ T4246] pwc: recv_control_msg error -71 req 02 val 2500 [ 114.191237][ T4246] pwc: recv_control_msg error -71 req 02 val 2400 [ 114.211784][ T4246] pwc: recv_control_msg error -71 req 02 val 2600 [ 114.231435][ T4246] pwc: recv_control_msg error -71 req 02 val 2900 [ 114.253712][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 114.256785][ T4246] pwc: recv_control_msg error -71 req 02 val 2800 [ 114.259048][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 114.301451][ T4246] pwc: recv_control_msg error -71 req 04 val 1100 [ 114.356053][ T4246] pwc: recv_control_msg error -71 req 04 val 1200 [ 114.420653][ T4246] pwc: Registered as video103. [ 114.488164][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 114.799375][ T4246] usb 5-1: USB disconnect, device number 4 [ 115.088429][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 115.094577][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 115.243317][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 115.440404][ T4737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.517375][ T4740] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 115.541296][ T4246] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.896611][ T4246] usb 5-1: Using ep0 maxpacket: 32 [ 115.953820][ T23] usb 1-1: USB disconnect, device number 2 [ 116.054781][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 116.098459][ T4758] tmpfs: Unknown parameter 'usrquota' [ 116.254945][ T4246] usb 5-1: config 0 has an invalid interface number: 91 but max is 0 [ 116.288180][ T4246] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 117.681309][ T4246] usb 5-1: config 0 has no interface number 0 [ 117.710702][ T4246] usb 5-1: config 0 interface 91 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 118.704575][ T4246] usb 5-1: config 0 interface 91 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 32 [ 119.520048][ T4246] usb 5-1: config 0 interface 91 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 119.593444][ T4246] usb 5-1: config 0 interface 91 altsetting 1 has an invalid endpoint with address 0xDF, skipping [ 119.611202][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.624329][ T4246] usb 5-1: config 0 interface 91 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 119.646024][ T4246] usb 5-1: config 0 interface 91 has no altsetting 0 [ 119.647428][ T4787] process 'syz.1.160' launched '/dev/fd/3' with NULL argv: empty string added [ 119.671582][ T4310] Bluetooth: hci2: command 0x0406 tx timeout [ 119.708063][ T4246] usb 5-1: string descriptor 0 read error: -71 [ 119.719236][ T4246] usb 5-1: New USB device found, idVendor=0b05, idProduct=9f12, bcdDevice=27.01 [ 119.738318][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.751891][ T4246] usb 5-1: config 0 descriptor?? [ 119.781698][ T4246] usb 5-1: can't set config #0, error -71 [ 119.819535][ T4246] usb 5-1: USB disconnect, device number 5 [ 120.161209][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 120.951317][ T1110] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.041369][ T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.059065][ T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 121.171295][ T4257] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.201264][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 121.221355][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.237843][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.263170][ T23] usb 3-1: Product: syz [ 121.278591][ T23] usb 3-1: Manufacturer: syz [ 121.283462][ T23] usb 3-1: SerialNumber: syz [ 121.411442][ T4257] usb 1-1: Using ep0 maxpacket: 8 [ 121.491586][ T1110] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 121.505416][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.525380][ T1110] usb 2-1: Product: syz [ 121.530514][ T1110] usb 2-1: Manufacturer: syz [ 121.535537][ T4257] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 121.555848][ T1110] usb 2-1: SerialNumber: syz [ 121.566367][ T4257] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.584752][ T4257] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 121.596943][ T1110] usb 2-1: config 0 descriptor?? [ 121.643077][ T23] cdc_ncm 3-1:1.0: bind() failure [ 121.654968][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 121.662101][ T23] cdc_ncm 3-1:1.1: bind() failure [ 121.679738][ T23] usb 3-1: USB disconnect, device number 2 [ 121.686368][ T4257] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 121.696448][ T4257] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.719122][ T4257] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 121.811660][ T4257] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 121.819127][ T4257] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.830693][ T4257] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 122.021646][ T4257] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 122.031600][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.039683][ T4257] usb 1-1: Product: syz [ 122.044459][ T4257] usb 1-1: Manufacturer: syz [ 122.049095][ T4257] usb 1-1: SerialNumber: syz [ 122.081519][ T1110] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 122.122142][ T1110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.161737][ T1110] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 122.170796][ T1110] usb 2-1: media controller created [ 122.202653][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.368291][ T4257] adutux 1-1:168.0: interrupt endpoints not found [ 122.387368][ T4257] usb 1-1: USB disconnect, device number 3 [ 122.422711][ T4374] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 122.791499][ T4374] usb 3-1: not running at top speed; connect to a high speed hub [ 122.793620][ T1110] zl10353_read_register: readreg error (reg=127, ret==0) [ 122.807667][ T4792] dtv5100: wlen = 0, aborting. [ 122.816370][ T1110] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 122.824752][ T1110] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 122.837745][ T1110] usb 2-1: USB disconnect, device number 3 [ 122.873593][ T4374] usb 3-1: config 1 interface 0 has no altsetting 0 [ 122.888465][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 122.938183][ T1110] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 123.121499][ T4374] usb 3-1: string descriptor 0 read error: -22 [ 123.127938][ T4374] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 123.137685][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.185604][ T4374] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 123.902015][ T1110] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.201527][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 124.366417][ T1110] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 124.472349][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 124.483656][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 124.621620][ T1110] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.634911][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.651417][ T1110] usb 5-1: Product: syz [ 124.659999][ T1110] usb 5-1: Manufacturer: syz [ 124.669154][ T1110] usb 5-1: SerialNumber: syz [ 124.683919][ T1110] usb 5-1: config 0 descriptor?? [ 124.711715][ T4848] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.951424][ T1347] usb 5-1: USB disconnect, device number 6 [ 125.180389][ T4866] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 125.469881][ T3546] bcm5974 3-1:1.0: could not read from device [ 125.518003][ T4374] usb 3-1: USB disconnect, device number 3 [ 125.527894][ T3546] bcm5974 3-1:1.0: could not read from device [ 125.660837][ T150] block nbd4: Attempted send on invalid socket [ 125.668109][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 125.711463][ T4870] SQUASHFS error: Failed to read block 0x0: -5 [ 125.727435][ T4870] unable to read squashfs_super_block [ 126.972329][ T26] audit: type=1326 audit(1766593445.747:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.2.190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdf9a90749 code=0x0 [ 129.279129][ T4885] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 129.637929][ T4895] loop6: detected capacity change from 0 to 7 [ 129.680110][ T4895] Dev loop6: unable to read RDB block 7 [ 129.696606][ T4895] loop6: AHDI p3 p4 [ 129.725013][ T4895] loop6: partition table partially beyond EOD, truncated [ 129.739024][ T4895] loop6: p3 start 1886353253 is beyond EOD, truncated [ 129.887183][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 131.909713][ T4929] syz.2.207 uses obsolete (PF_INET,SOCK_PACKET) [ 132.859608][ T4931] orangefs_mount: mount request failed with -4 [ 133.071567][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.077921][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.457290][ T4946] netlink: 'syz.0.212': attribute type 12 has an invalid length. [ 134.683292][ T4949] autofs4:pid:4949:autofs_fill_super: called with bogus options [ 135.530408][ T4967] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.043867][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.054177][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.063025][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.056154][ T5018] "syz.1.236" (5018) uses obsolete ecb(arc4) skcipher [ 141.208392][ T5020] syz.2.226 (5020): /proc/4990/oom_adj is deprecated, please use /proc/4990/oom_score_adj instead. [ 141.292974][ T5020] trusted_key: encrypted_key: insufficient parameters specified [ 142.361192][ T4853] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.462668][ T4374] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 142.486492][ T4374] Bluetooth: hci3: Injecting HCI hardware error event [ 142.537477][ T4194] Bluetooth: hci3: hardware error 0x00 [ 142.651262][ T4853] usb 2-1: Using ep0 maxpacket: 8 [ 142.791423][ T4853] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 142.819259][ T4853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.859821][ T4853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.918106][ T4853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.970298][ T4853] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.019043][ T4853] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.073606][ T4853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.432127][ T4853] usb 2-1: usb_control_msg returned -32 [ 143.437807][ T4853] usbtmc 2-1:16.0: can't read capabilities [ 143.902717][ T5049] ======================================================= [ 143.902717][ T5049] WARNING: The mand mount option has been deprecated and [ 143.902717][ T5049] and is ignored by this kernel. Remove the mand [ 143.902717][ T5049] option from the mount to silence this warning. [ 143.902717][ T5049] ======================================================= [ 144.032062][ T5049] 9pnet_virtio: no channels available for device syz [ 144.247317][ T4246] usb 2-1: USB disconnect, device number 4 [ 146.100194][ T5069] netlink: 830 bytes leftover after parsing attributes in process `syz.1.252'. [ 147.458287][ T2287] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 148.091791][ T2287] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.526890][ T2287] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.594020][ T2287] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.635228][ T2287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.705311][ T5093] 0xfffffffffffffffd-0x000000020000 : "" [ 148.811334][ T5093] mtd: partition "" is out of reach -- disabled [ 148.981637][ T2287] usb 3-1: GET_CAPABILITIES returned 0 [ 148.987182][ T2287] usbtmc 3-1:16.0: can't read capabilities [ 149.878026][ T5093] ftl_cs: FTL header not found. [ 149.981498][ T1347] usb 3-1: USB disconnect, device number 4 [ 150.144881][ T5103] device syzkaller0 entered promiscuous mode [ 150.308810][ T5110] 9pnet_virtio: no channels available for device syz [ 150.351705][ T5107] device wireguard0 entered promiscuous mode [ 150.353752][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 150.557405][ T5108] mkiss: ax0: crc mode is auto. [ 151.193802][ T4257] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.661367][ T4257] usb 5-1: Using ep0 maxpacket: 32 [ 154.061404][ T4257] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.148412][ T4257] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 154.284892][ T4257] usb 5-1: can't read configurations, error -71 ELF@@8c##V9-ׯ:`\ [Tt?#b%TOGFj [ 157.984496][ T5208] comedi comedi2: fl512: I/O port conflict (0x2,16) [ 159.462660][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 159.492980][ T5223] netlink: 120 bytes leftover after parsing attributes in process `syz.2.293'. [ 161.482483][ T4853] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 161.851443][ T4853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.891504][ T4853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 161.921255][ T4853] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.961264][ T4853] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.833615][ T4853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.865963][ T4853] usb 1-1: can't set config #16, error -71 [ 164.886420][ T4853] usb 1-1: USB disconnect, device number 4 [ 164.992053][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.000377][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.800508][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.917747][ T5235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.649354][ T5235] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.659396][ T5235] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.668780][ T5235] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.677939][ T5235] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.796329][ T5235] syz.1.298 (5235) used greatest stack depth: 20960 bytes left [ 169.821953][ T4257] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 169.870899][ T21] libceph: connect (1)[c::]:6789 error -101 [ 169.888339][ T5321] ceph: No mds server is up or the cluster is laggy [ 169.898624][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 170.131227][ T4257] usb 2-1: Using ep0 maxpacket: 32 [ 170.310263][ T2287] Bluetooth: hci4: command 0x0405 tx timeout [ 172.193464][ T4257] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.341280][ T4257] usb 2-1: string descriptor 0 read error: -71 [ 172.352096][ T4257] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 172.382748][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.440113][ T5337] Process accounting resumed [ 172.510467][ T4257] usb 2-1: config 0 descriptor?? [ 172.595471][ T5344] binder: 5329:5344 ioctl 0 200000000040 returned -22 [ 172.612262][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 173.014730][ T4257] usb 2-1: can't set config #0, error -71 [ 174.697548][ T4257] usb 2-1: USB disconnect, device number 5 [ 175.872725][ T21] hid-generic 0005:0002:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 176.475873][ T5365] fido_id[5365]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 179.540937][ T4343] Bluetooth: hci2: command 0x2016 tx timeout [ 179.954776][ T5413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.261204][ T4257] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 181.976666][ T4257] Bluetooth: hci2: Injecting HCI hardware error event [ 181.997111][ T4199] Bluetooth: hci2: hardware error 0x00 [ 182.428916][ T5430] capability: warning: `syz.1.360' uses deprecated v2 capabilities in a way that may be insecure [ 182.804045][ T5437] netlink: 'syz.4.363': attribute type 2 has an invalid length. [ 182.870321][ T5440] 9pnet_virtio: no channels available for device syz [ 185.251436][ T26] audit: type=1326 audit(1766593504.027:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d69b34749 code=0x7ffc0000 [ 185.274938][ T26] audit: type=1326 audit(1766593504.047:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f7d69b34749 code=0x7ffc0000 [ 185.275085][ T26] audit: type=1326 audit(1766593504.047:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d69b34749 code=0x7ffc0000 [ 185.275369][ T26] audit: type=1326 audit(1766593504.047:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d69b34749 code=0x7ffc0000 [ 186.271229][ T4227] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 186.581221][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 186.792107][ T4227] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.800494][ T4227] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 187.282231][ T4227] usb 2-1: config 179 has no interface number 0 [ 187.289194][ T4227] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 187.372709][ T4227] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 188.247582][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'. [ 188.757909][ T4227] usb 2-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 188.772103][ T4227] usb 2-1: config 179 interface 65 has no altsetting 0 [ 188.778992][ T4227] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 188.791756][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.821401][ T4227] usb 2-1: can't set config #179, error -71 [ 188.839259][ T4227] usb 2-1: USB disconnect, device number 6 [ 189.602722][ T5511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(18) [ 189.609747][ T5511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.637648][ T5511] vhci_hcd vhci_hcd.0: Device attached [ 189.660359][ T5515] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(21) [ 189.667025][ T5515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.692014][ T5515] vhci_hcd vhci_hcd.0: Device attached [ 189.720106][ T5511] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 189.726767][ T5511] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.745290][ T5511] vhci_hcd vhci_hcd.0: Device attached [ 189.762659][ T5511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.793726][ T5511] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(26) [ 189.800413][ T5511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.829059][ T5511] vhci_hcd vhci_hcd.0: Device attached [ 189.852181][ T5515] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(29) [ 189.858845][ T5515] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 189.897094][ T5511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.905691][ T4374] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 189.917897][ T5515] vhci_hcd vhci_hcd.0: Device attached [ 189.954617][ T5511] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(31) [ 189.961280][ T5511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 190.000064][ T5511] vhci_hcd vhci_hcd.0: Device attached [ 190.001490][ T5515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.034592][ T5522] vhci_hcd: connection closed [ 190.037167][ T4269] vhci_hcd: stop threads [ 190.038493][ T5516] vhci_hcd: connection closed [ 190.041978][ T5520] vhci_hcd: connection closed [ 190.042261][ T5518] vhci_hcd: connection closed [ 190.059428][ T4269] vhci_hcd: release socket [ 190.062669][ T5512] vhci_hcd: connection reset by peer [ 190.073460][ T4269] vhci_hcd: disconnect device [ 190.090129][ T4269] vhci_hcd: stop threads [ 190.102478][ T4269] vhci_hcd: release socket [ 190.119504][ T4269] vhci_hcd: disconnect device [ 190.130308][ T4269] vhci_hcd: stop threads [ 190.145049][ T4269] vhci_hcd: release socket [ 190.160404][ T4269] vhci_hcd: disconnect device [ 190.180449][ T4269] vhci_hcd: stop threads [ 190.191235][ T4269] vhci_hcd: release socket [ 190.200255][ T4269] vhci_hcd: disconnect device [ 190.226017][ T4269] vhci_hcd: stop threads [ 190.230316][ T4269] vhci_hcd: release socket [ 190.241170][ T4269] vhci_hcd: disconnect device [ 190.614773][ T5524] vhci_hcd: connection closed [ 190.615099][ T144] vhci_hcd: stop threads [ 190.653231][ T144] vhci_hcd: release socket [ 190.657778][ T144] vhci_hcd: disconnect device [ 190.731178][ T4227] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 190.777205][ T5534] 9pnet_virtio: no channels available for device syz [ 191.147370][ T4227] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 191.341240][ T4255] Bluetooth: hci0: command 0x0406 tx timeout [ 191.350138][ T4255] Bluetooth: hci1: command 0x0406 tx timeout [ 191.361309][ T4227] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 191.377570][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.386268][ T4227] usb 3-1: Product: syz [ 191.390582][ T4227] usb 3-1: Manufacturer: syz [ 191.401621][ T4227] usb 3-1: SerialNumber: syz [ 191.656151][ T5564] 9pnet_virtio: no channels available for device syz [ 191.658670][ T4197] Bluetooth: hci1: Unknown advertising packet type: 0x619e [ 191.663124][ T4197] Bluetooth: hci1: Unknown advertising packet type: 0x6b73 [ 191.670969][ T4197] ================================================================== [ 191.686610][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 191.694477][ T4197] Read of size 1 at addr ffff888077555407 by task kworker/u5:6/4197 [ 191.702539][ T4197] [ 191.704884][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 191.712449][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.722528][ T4197] Workqueue: hci1 hci_rx_work [ 191.727241][ T4197] Call Trace: [ 191.730570][ T4197] [ 191.733537][ T4197] dump_stack_lvl+0x168/0x230 [ 191.738338][ T4197] ? show_regs_print_info+0x20/0x20 [ 191.743580][ T4197] ? load_image+0x3b0/0x3b0 [ 191.748115][ T4197] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 191.753612][ T4197] print_address_description+0x60/0x2d0 [ 191.759200][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 191.764469][ T4197] kasan_report+0xdf/0x130 [ 191.768921][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 191.774065][ T4197] hci_le_meta_evt+0x12db/0x3b80 [ 191.779036][ T4197] ? hci_event_packet+0x2b0/0x12f0 [ 191.784184][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 191.790282][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 191.795950][ T4197] ? mark_lock+0x94/0x320 [ 191.800304][ T4197] ? mutex_unlock+0x10/0x10 [ 191.804846][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 191.810865][ T4197] ? lock_chain_count+0x20/0x20 [ 191.815750][ T4197] ? __rwlock_init+0x140/0x140 [ 191.820571][ T4197] hci_event_packet+0xe05/0x12f0 [ 191.825548][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 191.830790][ T4197] ? rcu_lock_release+0x20/0x20 [ 191.835675][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 191.840944][ T4197] hci_rx_work+0x255/0xa10 [ 191.845413][ T4197] process_one_work+0x863/0x1000 [ 191.850410][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 191.856079][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 191.861406][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 191.866493][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 191.871905][ T4197] ? wq_worker_running+0x97/0x170 [ 191.876962][ T4197] worker_thread+0xaa8/0x12a0 [ 191.881699][ T4197] kthread+0x436/0x520 [ 191.885811][ T4197] ? rcu_lock_release+0x20/0x20 [ 191.890690][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 191.895401][ T4197] ret_from_fork+0x1f/0x30 [ 191.899865][ T4197] [ 191.902907][ T4197] [ 191.905254][ T4197] Allocated by task 5529: [ 191.909605][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 191.914228][ T4197] __alloc_skb+0x22c/0x750 [ 191.918679][ T4197] vhci_write+0xbc/0x450 [ 191.922963][ T4197] vfs_write+0x712/0xd00 [ 191.927230][ T4197] ksys_write+0x14d/0x250 [ 191.931592][ T4197] do_syscall_64+0x4c/0xa0 [ 191.936037][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.941966][ T4197] [ 191.944314][ T4197] The buggy address belongs to the object at ffff888077555000 [ 191.944314][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 191.958392][ T4197] The buggy address is located 7 bytes to the right of [ 191.958392][ T4197] 1024-byte region [ffff888077555000, ffff888077555400) [ 191.972148][ T4197] The buggy address belongs to the page: [ 191.977824][ T4197] page:ffffea0001dd5400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77550 [ 191.988022][ T4197] head:ffffea0001dd5400 order:3 compound_mapcount:0 compound_pincount:0 [ 191.996377][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 192.004417][ T4197] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841dc0 [ 192.013036][ T4197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 192.021638][ T4197] page dumped because: kasan: bad access detected [ 192.028081][ T4197] page_owner tracks the page as allocated [ 192.033866][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3947, ts 42519763305, free_ts 42482106246 [ 192.053000][ T4197] get_page_from_freelist+0x1b77/0x1c60 [ 192.058584][ T4197] __alloc_pages+0x1e1/0x470 [ 192.063207][ T4197] new_slab+0xc0/0x4b0 [ 192.067307][ T4197] ___slab_alloc+0x81e/0xdf0 [ 192.072014][ T4197] __kmalloc+0x1cd/0x330 [ 192.076283][ T4197] load_elf_binary+0x279/0x2890 [ 192.081165][ T4197] bprm_execve+0xa92/0x17d0 [ 192.085691][ T4197] do_execveat_common+0x51e/0x6d0 [ 192.090768][ T4197] __x64_sys_execve+0x8e/0xa0 [ 192.095472][ T4197] do_syscall_64+0x4c/0xa0 [ 192.099919][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.105847][ T4197] page last free stack trace: [ 192.110547][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 192.116038][ T4197] free_unref_page+0x94/0x280 [ 192.120757][ T4197] __unfreeze_partials+0x1a5/0x200 [ 192.125896][ T4197] put_cpu_partial+0x12d/0x190 [ 192.130717][ T4197] qlist_free_all+0x35/0x90 [ 192.135257][ T4197] kasan_quarantine_reduce+0x150/0x160 [ 192.140764][ T4197] __kasan_slab_alloc+0x2f/0xd0 [ 192.145643][ T4197] slab_post_alloc_hook+0x4c/0x380 [ 192.150782][ T4197] kmem_cache_alloc+0x100/0x290 [ 192.155677][ T4197] getname_flags+0xb5/0x500 [ 192.160211][ T4197] user_path_at_empty+0x2a/0x190 [ 192.165176][ T4197] vfs_statx+0x102/0x4d0 [ 192.169445][ T4197] __x64_sys_newfstatat+0x12c/0x1b0 [ 192.174670][ T4197] do_syscall_64+0x4c/0xa0 [ 192.179123][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.185046][ T4197] [ 192.187397][ T4197] Memory state around the buggy address: [ 192.193042][ T4197] ffff888077555300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 192.201123][ T4197] ffff888077555380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 192.209220][ T4197] >ffff888077555400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.217589][ T4197] ^ [ 192.221700][ T4197] ffff888077555480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.229891][ T4197] ffff888077555500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.237967][ T4197] ================================================================== [ 192.246033][ T4197] Disabling lock debugging due to kernel taint [ 192.266495][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.273749][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 192.282713][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.292800][ T4197] Workqueue: hci1 hci_rx_work [ 192.297562][ T4197] Call Trace: [ 192.300887][ T4197] [ 192.303840][ T4197] dump_stack_lvl+0x168/0x230 [ 192.308543][ T4197] ? show_regs_print_info+0x20/0x20 [ 192.313768][ T4197] ? load_image+0x3b0/0x3b0 [ 192.318351][ T4197] panic+0x2c9/0x7f0 [ 192.322268][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 192.326799][ T4197] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 192.332808][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 192.337715][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 192.342901][ T4197] check_panic_on_warn+0x80/0xa0 [ 192.347908][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 192.353056][ T4197] end_report+0x6d/0xf0 [ 192.357238][ T4197] kasan_report+0x102/0x130 [ 192.361792][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 192.366938][ T4197] hci_le_meta_evt+0x12db/0x3b80 [ 192.371905][ T4197] ? hci_event_packet+0x2b0/0x12f0 [ 192.372014][ T4227] as10x_usb: device has been detected [ 192.377048][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 192.388494][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 192.394156][ T4197] ? mark_lock+0x94/0x320 [ 192.398517][ T4197] ? mutex_unlock+0x10/0x10 [ 192.403047][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 192.409061][ T4197] ? lock_chain_count+0x20/0x20 [ 192.413940][ T4197] ? __rwlock_init+0x140/0x140 [ 192.418733][ T4197] hci_event_packet+0xe05/0x12f0 [ 192.423705][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 192.428796][ T4227] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 192.428930][ T4197] ? rcu_lock_release+0x20/0x20 [ 192.441566][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 192.446795][ T4197] hci_rx_work+0x255/0xa10 [ 192.451263][ T4197] process_one_work+0x863/0x1000 [ 192.456265][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 192.461926][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 192.467245][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 192.472293][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 192.477694][ T4197] ? wq_worker_running+0x97/0x170 [ 192.482757][ T4197] worker_thread+0xaa8/0x12a0 [ 192.487474][ T4197] kthread+0x436/0x520 [ 192.491660][ T4197] ? rcu_lock_release+0x20/0x20 [ 192.496563][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 192.501176][ T4197] ret_from_fork+0x1f/0x30 [ 192.505667][ T4197] [ 192.509003][ T4197] Kernel Offset: disabled [ 192.513345][ T4197] Rebooting in 86400 seconds..