last executing test programs: 4.939425048s ago: executing program 1 (id=129): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0xc080) 4.86736703s ago: executing program 1 (id=131): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e020002000705010200020007"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) write$binfmt_register(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500ffffffff0000000006000000080003000e73ae5e93500c2bb36ab48eefff20b15b9163fe8c7ff4006dee98f7e800449e0e7b2d74fa03194f119abe850799a543f602c7bd0d40e93f1894a722abe9bb4299148997bcb1edd33ddfbc0b82b304025de7778f781bbc186d976961059b6e8a7e0100008000000000980300b96324ed5367d452249a0df10c8bc4e9042cf382471c9c2cba6ba16e77bc70a8e07a267137e7fa5d7bb837ed04833aadf703751ba4ff0000aacf5969", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002bbd7000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000000000000000000006400010018009100381198d0dcc9f6baef1bde206bf3a46609b2e91904007f0004002a00080026006c09000008000c006400000008000d00080000005cec1ce5a4"], 0x7c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="9a379674dc188bca64025e80646c30dde42161f9d54e4440b54de78a01d3e335aa73460a8c81ca3206f8e541132555f3e9ea64128371", 0x0, 0x440ca, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r7 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000b00)=""/237) syz_emit_ethernet(0x5eb, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x5b5, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) shmat(r7, &(0x7f0000ffb000/0x3000)=nil, 0x7000) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000000)={0x6, 'veth1_vlan\x00', {}, 0xdd3c}) 3.427317245s ago: executing program 0 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef) 3.427105205s ago: executing program 3 (id=137): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) 3.384947807s ago: executing program 3 (id=138): pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') memfd_create(0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.22888474s ago: executing program 3 (id=140): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.189811351s ago: executing program 0 (id=141): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.118907663s ago: executing program 0 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000") ioctl(r1, 0x400c0930, 0x0) 2.896107949s ago: executing program 3 (id=143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.656231105s ago: executing program 1 (id=144): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1.63394817s ago: executing program 2 (id=146): r0 = syz_io_uring_setup(0x408c, &(0x7f0000000040)={0x0, 0xf84, 0x10081, 0x1, 0x2e1}, &(0x7f0000000300), &(0x7f0000000200), &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140), 0x1) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) 1.528045102s ago: executing program 2 (id=147): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000180)) 1.527790352s ago: executing program 1 (id=148): syz_open_dev$vim2m(0x0, 0x7fff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 1.506883202s ago: executing program 4 (id=149): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5c, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18a, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x20005, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xf, 0xe, 0x312, 0x9, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x5, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x80004, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9e, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x25, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0x2, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0xfe, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x7fff, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 1.503153733s ago: executing program 0 (id=150): pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.402226536s ago: executing program 2 (id=151): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0xa, 0x2, 0x1001, 0x2}) 1.401992996s ago: executing program 4 (id=152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.400624116s ago: executing program 0 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="c3040500000000001800128008000100677470000c00028008", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/37) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 1.339507987s ago: executing program 1 (id=154): r0 = socket$unix(0x1, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x283, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000002140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELSETELEM={0x1060, 0xe, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x104c, 0x3, 0x0, 0x1, [{0x1048, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x1020, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "7dab079093"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0xb4, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x8c, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124c}, 0x1, 0x0, 0x0, 0x48800}, 0x1) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x94) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) unshare(0x60600) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) ioctl$TCSBRKP(r4, 0x5425, 0x30580000000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x20000010) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x89, 0x2, 0x0, 0x7f, 0xa9, 0x4d, 0x6, 0x61, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x9, 0x20002, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe660, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x1, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x10d, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x4000003, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x0, 0x8, 0x5, 0x7, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x10, 0x3, 0x4000009, 0x6, 0x4000000, 0xfffffff8, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x1, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac8, 0xbf, 0x2000002, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x0, 0x3, 0x2, 0x40, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0x1000, 0x3, 0x7e, 0x100, 0x7ffe, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 1.306539967s ago: executing program 4 (id=155): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x10, 0x80, 0x1f, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x68, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x17}}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 795.26517ms ago: executing program 2 (id=156): socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), &(0x7f0000000600)=@udp=r1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f00000013c0)=ANY=[], 0x0) 700.024393ms ago: executing program 3 (id=157): mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a) 676.653403ms ago: executing program 1 (id=158): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b000100000300090400"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003"]}]}) socket(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={r1, 0x2, 0x20000, 0x20000003}) close_range(r4, r2, 0x0) 522.114927ms ago: executing program 4 (id=159): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="0000000000000000130000000057", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 427.856329ms ago: executing program 4 (id=160): setregid(0x0, 0xee00) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x32a13, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004040) setresgid(0x0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100]}, 0x8) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000180)={@mcast2, 0x0}, &(0x7f00000001c0)=0x14) socket(0x18, 0x5, 0x12d) r5 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x40101) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() write$binfmt_aout(r7, 0x0, 0xffffffdb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000040)) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="08001efbb0", 0x5}, {&(0x7f0000000180)='\x00\x00\x00', 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltfilter={0x80, 0x2d, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff1}, {0xffff, 0xd}, {0xf, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0xffffff00, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x8050) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) 427.454489ms ago: executing program 0 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000700)=0x1) 427.239819ms ago: executing program 3 (id=162): r0 = syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000240), 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1f}, 0x20) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x4000000) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r7, &(0x7f0000000a80)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a", 0xae}, {&(0x7f00000004c0)="7c2cbe025ee9322704f45bcead62e3a1a53117e0", 0x14}], 0x2, 0x4739, 0x1) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) pidfd_getfd(r9, r0, 0x0) 397.03736ms ago: executing program 2 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0x0, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x90) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r8, &(0x7f0000000340)='3', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='1', 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000600)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200e2f90000000101000001ef0101010a000001"], 0x0) 49.607009ms ago: executing program 4 (id=164): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r1, 0x2) 0s ago: executing program 2 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0xffff1000, 0xeeee0000, 0xe, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x6000, 0xd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7, 0x7}, {0x1000, 0x3000, 0xa, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x94, 0xff, 0x0, 0x8, 0x8, 0x6, 0xfc}, {0x80a0000, 0xffff1000, 0x9, 0x55, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0x60000, 0x3000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x9000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, [0x8, 0x0, 0x1, 0x40]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 60.467333][ T4167] cgroup: Unknown subsys name 'net' [ 60.575578][ T4167] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.044227][ T4167] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.062155][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 64.087341][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.184188][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 64.204011][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.211375][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.220911][ T4194] device bridge_slave_0 entered promiscuous mode [ 64.233017][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.240337][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.248218][ T4194] device bridge_slave_1 entered promiscuous mode [ 64.268266][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 64.365859][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.402323][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.419193][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.426325][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.435061][ T4184] device bridge_slave_0 entered promiscuous mode [ 64.442869][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 64.453035][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.460399][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.468816][ T4184] device bridge_slave_1 entered promiscuous mode [ 64.476090][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.483595][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.491781][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.506343][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.513751][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.522211][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.567526][ T4194] team0: Port device team_slave_0 added [ 64.575396][ T4194] team0: Port device team_slave_1 added [ 64.583663][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.605820][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.613072][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.621069][ T4185] device bridge_slave_0 entered promiscuous mode [ 64.636900][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.644250][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.652859][ T4185] device bridge_slave_1 entered promiscuous mode [ 64.661859][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.683883][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.703095][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.737822][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.745024][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.771554][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.798104][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.811308][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.831527][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.838781][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.865495][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.891868][ T4193] team0: Port device team_slave_0 added [ 64.921427][ T4184] team0: Port device team_slave_0 added [ 64.927468][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.934932][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.943305][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.952510][ T4193] team0: Port device team_slave_1 added [ 64.958625][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.965699][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.974036][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.996978][ T4185] team0: Port device team_slave_0 added [ 65.004911][ T4185] team0: Port device team_slave_1 added [ 65.012675][ T4184] team0: Port device team_slave_1 added [ 65.046492][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.086771][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.100981][ T4194] device hsr_slave_0 entered promiscuous mode [ 65.108277][ T4194] device hsr_slave_1 entered promiscuous mode [ 65.122854][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.130191][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.156882][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.169286][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.176267][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.202344][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.215947][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.223107][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.249268][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.269787][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.276777][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.302993][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.314964][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.322795][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.348757][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.379976][ T4186] team0: Port device team_slave_0 added [ 65.386369][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.393511][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.419659][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.442543][ T4186] team0: Port device team_slave_1 added [ 65.505155][ T4185] device hsr_slave_0 entered promiscuous mode [ 65.512183][ T4185] device hsr_slave_1 entered promiscuous mode [ 65.519339][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.527184][ T4185] Cannot create hsr debugfs directory [ 65.569472][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.576459][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.602825][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.618067][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.625228][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.632401][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.640351][ T4193] Cannot create hsr debugfs directory [ 65.649769][ T4184] device hsr_slave_0 entered promiscuous mode [ 65.656639][ T4184] device hsr_slave_1 entered promiscuous mode [ 65.663443][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.671175][ T4184] Cannot create hsr debugfs directory [ 65.684642][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.691930][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.717976][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.779362][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 65.779362][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 65.789247][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 65.797704][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 65.821173][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 65.848691][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.855368][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.862957][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.870775][ T4186] Cannot create hsr debugfs directory [ 66.120862][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.133450][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.142712][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.155736][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.194423][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.205195][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.217905][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.240273][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.293905][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.305648][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.317893][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.328626][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.419920][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.445382][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.455422][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.466059][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.480295][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.537038][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.546084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.556565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.567191][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.577548][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.595778][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.609850][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.625905][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.643175][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.652869][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.663130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.672552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.681713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.691391][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.698789][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.707835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.719186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.727686][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.734818][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.745466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.756914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.765952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.775383][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.782539][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.792512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.802751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.837411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.846536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.855311][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.862443][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.872150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.883770][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.892410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.929171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.937956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.948757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.974435][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.991626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.003465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.013445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.022458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.031682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.040968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.052338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.061541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.070741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.079641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.088205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.096745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.124508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.134631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.143381][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.150520][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.161711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.170976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.184677][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.207272][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.220292][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.234890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.248904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.257563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.273626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.284712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.293674][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.300827][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.319721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.331156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.339952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.349145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.366664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.383990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.418050][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.440033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.457523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.477217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.486239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.502802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.514771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.528201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.551611][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.586133][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.595801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.605628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.630705][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.648626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.656186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.666855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.677790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.687326][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.694504][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.711712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.723797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.740545][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.762841][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.775864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.784940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.795377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.806384][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.813639][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.823712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.832938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.840626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.848098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.857583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.866684][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 67.868995][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 67.881099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.888908][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 67.890829][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.902260][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.902275][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 67.918684][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 67.924655][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.958760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.972151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.998265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.007312][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.014467][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.086748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.095743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.106265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.115037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.124104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.133571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.142162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.151525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.160443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.169677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.179631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.200870][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.241149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.250718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.260555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.270103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.280336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.289850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.299530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.309193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.326134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.335430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.354217][ T4194] device veth0_vlan entered promiscuous mode [ 68.371708][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.390605][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.409074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.417113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.436381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.448363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.457522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.485989][ T4194] device veth1_vlan entered promiscuous mode [ 68.522640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.541519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.559057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.584723][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.623539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.632194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.662853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.730321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.737807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.755602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.765457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.781426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.794694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.806074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.815315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.825255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.834070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.844127][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.857490][ T4194] device veth0_macvtap entered promiscuous mode [ 68.874112][ T4194] device veth1_macvtap entered promiscuous mode [ 68.889211][ T4185] device veth0_vlan entered promiscuous mode [ 68.903397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.912591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.921492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.929374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.947703][ T4193] device veth0_vlan entered promiscuous mode [ 68.961807][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.970542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.982436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.991465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.000007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.014929][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.026800][ T4185] device veth1_vlan entered promiscuous mode [ 69.037963][ T4193] device veth1_vlan entered promiscuous mode [ 69.048658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.057332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.066044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.075276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.089645][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.130806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.141175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.152314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.161672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.170792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.180190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.194375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.203300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.220455][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.230785][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.239939][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.249008][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.267492][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.277920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.292692][ T4184] device veth0_vlan entered promiscuous mode [ 69.307850][ T4193] device veth0_macvtap entered promiscuous mode [ 69.327730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.337939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.346878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.356641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.365734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.384209][ T4186] device veth0_vlan entered promiscuous mode [ 69.401602][ T4193] device veth1_macvtap entered promiscuous mode [ 69.417301][ T4185] device veth0_macvtap entered promiscuous mode [ 69.425925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.436412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.446293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.454968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.465346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.476940][ T4184] device veth1_vlan entered promiscuous mode [ 69.496997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.506436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.515466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.524105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.555626][ T4185] device veth1_macvtap entered promiscuous mode [ 69.567694][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.579984][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.592217][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.624424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.640299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.651940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.662979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.671946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.681060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.692461][ T4186] device veth1_vlan entered promiscuous mode [ 69.704291][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.715296][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.727601][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.750914][ T4184] device veth0_macvtap entered promiscuous mode [ 69.780619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.792154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.801672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.811763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.821109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.833045][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.843234][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.853036][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.863482][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.877053][ T4184] device veth1_macvtap entered promiscuous mode [ 69.890932][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.906803][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.934054][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.940154][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 69.951473][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 69.953689][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.967434][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 69.970427][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.974643][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 69.985029][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.001938][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 70.006893][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.026586][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.038843][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.049253][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.060630][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.070892][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.081426][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.093029][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.102405][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.113767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.122418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.131917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.141377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.150745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.159536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.168502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.197331][ T4186] device veth0_macvtap entered promiscuous mode [ 70.208114][ T4186] device veth1_macvtap entered promiscuous mode [ 70.242715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.255149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.265585][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.276951][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.286971][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.297600][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.310039][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.319100][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.330835][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.342558][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.353373][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.363520][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.374557][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.386031][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.396056][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.405215][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.415892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.431302][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.441921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.455495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.464629][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.476786][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.486453][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.496606][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.507296][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.527462][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.540361][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.551911][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.564595][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.574500][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.585591][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.595718][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.606572][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.618348][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.630047][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.642028][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.652366][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.664380][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.675167][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.685899][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.695853][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.706488][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.718125][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.741210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.751763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.761160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.770520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.782868][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.794147][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.803354][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.812544][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.840709][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.849747][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.861712][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.872589][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.899682][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.907556][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.950026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.018298][ T4266] loop2: detected capacity change from 0 to 512 [ 71.064981][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.068766][ T4266] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.089381][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.113169][ T4266] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 71.129692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.135834][ T4266] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.167683][ T4266] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.3: Allocating blocks 41-42 which overlap fs metadata [ 71.196757][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.219356][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.229610][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.236565][ T4266] Quota error (device loop2): write_blk: dquota write failed [ 71.250329][ T4266] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 71.262058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.276561][ T4266] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.3: Failed to acquire dquot type 0 [ 71.296718][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.308951][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315515][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.325921][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.334377][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.343325][ T4266] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 71.348761][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.381710][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.396052][ T4266] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.3: corrupted inode contents [ 71.408042][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.419057][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.429449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.441316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.442201][ T4266] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #12: comm syz.2.3: mark_inode_dirty error [ 71.485744][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.492782][ T4266] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.3: corrupted inode contents [ 71.511373][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.518090][ T4266] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.3: mark_inode_dirty error [ 71.526587][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.541305][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.549295][ T4266] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.3: corrupted inode contents [ 71.565416][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.571113][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.575780][ T4266] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 71.588851][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.595483][ T4266] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.3: corrupted inode contents [ 71.630802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.649950][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.656517][ T4266] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.3: mark_inode_dirty error [ 71.699574][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.706162][ T4266] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 71.706327][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.733779][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.742292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.767135][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.780503][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.787312][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.812992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.819535][ T4266] EXT4-fs (loop2): 1 truncate cleaned up [ 71.826427][ T4266] EXT4-fs (loop2): pa ffff8880740f5380: logic 1, phys. 41, len 23 [ 71.834651][ T4266] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 71.923532][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.930531][ T4276] FAULT_INJECTION: forcing a failure. [ 71.930531][ T4276] name failslab, interval 1, probability 0, space 0, times 1 [ 71.949144][ T4266] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,nodiscard,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 71.975509][ T4276] CPU: 1 PID: 4276 Comm: syz.4.5 Not tainted syzkaller #0 [ 71.982679][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.992789][ T4276] Call Trace: [ 71.996122][ T4276] [ 71.999090][ T4276] dump_stack_lvl+0x188/0x250 [ 72.003835][ T4276] ? show_regs_print_info+0x20/0x20 [ 72.009078][ T4276] ? load_image+0x410/0x410 [ 72.013628][ T4276] ? __might_sleep+0xf0/0xf0 [ 72.018266][ T4276] ? __lock_acquire+0x7d40/0x7d40 [ 72.023337][ T4276] should_fail+0x383/0x4b0 [ 72.027798][ T4276] should_failslab+0x5/0x20 [ 72.032336][ T4276] slab_pre_alloc_hook+0x51/0xc0 [ 72.037309][ T4276] __kmalloc_node+0x6d/0x3a0 [ 72.041956][ T4276] ? crypto_create_tfm_node+0x72/0x340 [ 72.047467][ T4276] crypto_create_tfm_node+0x72/0x340 [ 72.052794][ T4276] ? crypto_alg_mod_lookup+0x47f/0x6d0 [ 72.058342][ T4276] crypto_alloc_tfm_node+0x177/0x360 [ 72.063688][ T4276] init_skcipher_req+0x23/0x1b0 [ 72.068604][ T4276] encrypted_read+0x37f/0xf60 [ 72.073330][ T4276] ? encrypted_destroy+0x40/0x40 [ 72.078415][ T4276] ? __might_sleep+0xf0/0xf0 [ 72.083078][ T4276] ? read_lock_is_recursive+0x10/0x10 [ 72.088505][ T4276] ? rcu_is_watching+0x11/0xa0 [ 72.093360][ T4276] ? trace_kmalloc_node+0x1f/0xa0 [ 72.098428][ T4276] ? __kmalloc_node+0x261/0x3a0 [ 72.103331][ T4276] ? down_read+0x1aa/0x2e0 [ 72.107794][ T4276] keyctl_read_key+0x292/0x460 [ 72.112609][ T4276] __se_sys_keyctl+0x17f/0xa20 [ 72.117420][ T4276] ? __x64_sys_keyctl+0xc0/0xc0 [ 72.122315][ T4276] ? __context_tracking_exit+0x4c/0x80 [ 72.127813][ T4276] ? __lock_acquire+0x7d40/0x7d40 [ 72.132883][ T4276] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 72.138905][ T4276] ? lock_chain_count+0x20/0x20 [ 72.143808][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 72.149052][ T4276] ? __x64_sys_keyctl+0x1c/0xc0 [ 72.153943][ T4276] do_syscall_64+0x4c/0xa0 [ 72.158398][ T4276] ? clear_bhb_loop+0x30/0x80 [ 72.163107][ T4276] ? clear_bhb_loop+0x30/0x80 [ 72.167822][ T4276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.173765][ T4276] RIP: 0033:0x7ffa070e6159 [ 72.178227][ T4276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.197872][ T4276] RSP: 002b:00007ffa0533e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 72.206336][ T4276] RAX: ffffffffffffffda RBX: 00007ffa0736dfa0 RCX: 00007ffa070e6159 [ 72.214352][ T4276] RDX: 0000200000000240 RSI: 000000002bc6143b RDI: 000000000000000b [ 72.222365][ T4276] RBP: 00007ffa0717d06b R08: 0000000000000000 R09: 0000000000000000 [ 72.230369][ T4276] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 72.238371][ T4276] R13: 00007ffa0736e038 R14: 00007ffa0736dfa0 R15: 00007fffa6944bb8 [ 72.246395][ T4276] [ 72.254935][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 72.267021][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 72.280411][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 72.287054][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 72.293501][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 72.319488][ T4276] trusted_key: encrypted_key: failed to load cbc(aes) transform (-12) [ 72.346374][ T26] audit: type=1800 audit(1791187388.873:2): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="nexus" dev="configfs" ino=32413 res=0 errno=0 [ 72.428465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.448447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.458452][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.468446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.478461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.488469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.498446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.508447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.518453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.528444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.313583][ T4288] loop1: detected capacity change from 0 to 1024 [ 74.320074][ T4290] WARNING! power/level is deprecated; use power/control instead [ 74.441998][ T4292] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 75.374826][ T4305] FAULT_INJECTION: forcing a failure. [ 75.374826][ T4305] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.468881][ T4305] CPU: 0 PID: 4305 Comm: syz.3.14 Not tainted syzkaller #0 [ 75.476155][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.486821][ T4305] Call Trace: [ 75.490414][ T4305] [ 75.493468][ T4305] dump_stack_lvl+0x188/0x250 [ 75.498494][ T4305] ? show_regs_print_info+0x20/0x20 [ 75.503893][ T4305] ? load_image+0x410/0x410 [ 75.508489][ T4305] ? __lock_acquire+0x7d40/0x7d40 [ 75.513834][ T4305] should_fail+0x383/0x4b0 [ 75.518418][ T4305] _copy_from_user+0x2e/0x170 [ 75.523153][ T4305] kstrtouint_from_user+0xd3/0x220 [ 75.528329][ T4305] ? kstrtol_from_user+0x2a0/0x2a0 [ 75.533511][ T4305] proc_fail_nth_write+0x8b/0x200 [ 75.538579][ T4305] ? proc_fail_nth_read+0x220/0x220 [ 75.543857][ T4305] ? common_file_perm+0x171/0x1c0 [ 75.548931][ T4305] ? proc_fail_nth_read+0x220/0x220 [ 75.554861][ T4305] vfs_write+0x304/0xd70 [ 75.559318][ T4305] ? file_end_write+0x250/0x250 [ 75.564711][ T4305] ? mutex_lock_nested+0x17/0x20 [ 75.569798][ T4305] ? __fdget_pos+0x2bf/0x370 [ 75.574754][ T4305] ? ksys_write+0x70/0x260 [ 75.579229][ T4305] ksys_write+0x153/0x260 [ 75.583606][ T4305] ? __ia32_sys_read+0x80/0x80 [ 75.588427][ T4305] ? lockdep_hardirqs_on+0x94/0x140 [ 75.593768][ T4305] do_syscall_64+0x4c/0xa0 [ 75.598220][ T4305] ? clear_bhb_loop+0x30/0x80 [ 75.602931][ T4305] ? clear_bhb_loop+0x30/0x80 [ 75.607646][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.613824][ T4305] RIP: 0033:0x7f1f0d4c0159 [ 75.618277][ T4305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.637924][ T4305] RSP: 002b:00007f1f0b718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.646559][ T4305] RAX: ffffffffffffffda RBX: 00007f1f0d747fa0 RCX: 00007f1f0d4c0159 [ 75.654681][ T4305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 75.662717][ T4305] RBP: 00007f1f0d55706b R08: 0000000000000000 R09: 0000000000000000 [ 75.670737][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.678749][ T4305] R13: 00007f1f0d748038 R14: 00007f1f0d747fa0 R15: 00007ffec030fd88 [ 75.686787][ T4305] [ 75.711663][ T4298] loop4: detected capacity change from 0 to 131072 [ 75.826673][ T4298] F2FS-fs (loop4): invalid crc_offset: 266236 [ 75.900349][ T4298] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.955745][ T4298] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 75.978770][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.000347][ T4298] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 76.218663][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 76.508940][ T4232] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 76.528534][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.537070][ T4232] usb 2-1: Product: syz [ 76.572862][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 76.587963][ T4232] usb 2-1: Manufacturer: syz [ 76.598628][ T4232] usb 2-1: SerialNumber: syz [ 76.623464][ T4232] usb 2-1: config 0 descriptor?? [ 76.891252][ T4232] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 78.008718][ T4232] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 78.406381][ T4232] usb 2-1: USB disconnect, device number 2 [ 79.706774][ T4367] loop3: detected capacity change from 0 to 2048 [ 79.721106][ T4368] device syzkaller0 entered promiscuous mode [ 79.819692][ T4367] UDF-fs: bad mount option "gid=00000000000000060928" or missing value [ 80.353083][ T4396] input: syz0 as /devices/virtual/input/input5 [ 81.264553][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.311113][ T4404] loop4: detected capacity change from 0 to 64 [ 81.451090][ T4407] loop3: detected capacity change from 0 to 256 [ 81.524954][ T4185] hfs: node 4:3 still has 1 user(s)! [ 81.689730][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 81.718543][ T23] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 81.727659][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.759514][ T23] usb 2-1: config 0 descriptor?? [ 81.903131][ T4425] loop4: detected capacity change from 0 to 512 [ 81.974884][ T4425] ======================================================= [ 81.974884][ T4425] WARNING: The mand mount option has been deprecated and [ 81.974884][ T4425] and is ignored by this kernel. Remove the mand [ 81.974884][ T4425] option from the mount to silence this warning. [ 81.974884][ T4425] ======================================================= [ 82.038885][ T23] ath6kl: Failed to submit usb control message: -71 [ 82.052472][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 82.077450][ T4425] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.088776][ T4425] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.49: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 82.091925][ T23] ath6kl: Unable to send get target info: -71 [ 82.133736][ T4425] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.49: Bad quota inode: 4, type: 1 [ 82.177496][ T4425] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.202460][ T4425] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 82.209426][ T4425] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.305160][ T4437] FAULT_INJECTION: forcing a failure. [ 83.305160][ T4437] name failslab, interval 1, probability 0, space 0, times 0 [ 83.408794][ T4437] CPU: 0 PID: 4437 Comm: syz.1.53 Not tainted syzkaller #0 [ 83.416060][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.426159][ T4437] Call Trace: [ 83.429472][ T4437] [ 83.432434][ T4437] dump_stack_lvl+0x188/0x250 [ 83.437157][ T4437] ? show_regs_print_info+0x20/0x20 [ 83.442386][ T4437] ? load_image+0x410/0x410 [ 83.446961][ T4437] should_fail+0x383/0x4b0 [ 83.451426][ T4437] should_failslab+0x5/0x20 [ 83.455971][ T4437] slab_pre_alloc_hook+0x51/0xc0 [ 83.460947][ T4437] kmem_cache_alloc_trace+0x47/0x290 [ 83.466273][ T4437] ? sctp_add_bind_addr+0x89/0x350 [ 83.471451][ T4437] sctp_add_bind_addr+0x89/0x350 [ 83.476569][ T4437] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 83.482272][ T4437] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 83.488385][ T4437] ? sctp_v6_is_any+0x60/0x70 [ 83.493104][ T4437] ? sctp_copy_one_addr+0x93/0x660 [ 83.498343][ T4437] sctp_bind_addr_copy+0xaf/0x3c0 [ 83.503605][ T4437] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 83.510065][ T4437] sctp_connect_new_asoc+0x2f5/0x6a0 [ 83.515398][ T4437] ? __sctp_connect+0xd80/0xd80 [ 83.520293][ T4437] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.525730][ T4437] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 83.531350][ T4437] ? security_sctp_bind_connect+0x85/0xb0 [ 83.537124][ T4437] sctp_sendmsg+0x15e1/0x2940 [ 83.541861][ T4437] ? sctp_getsockopt+0x8a0/0x8a0 [ 83.546835][ T4437] ? aa_af_perm+0x340/0x340 [ 83.551414][ T4437] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 83.558000][ T4437] ? aa_sock_msg_perm+0x94/0x150 [ 83.562981][ T4437] ? sock_rps_record_flow+0x17/0x3b0 [ 83.568316][ T4437] ? inet_sendmsg+0xca/0x2a0 [ 83.572947][ T4437] __sys_sendto+0x46d/0x620 [ 83.577507][ T4437] ? __ia32_sys_getpeername+0x80/0x80 [ 83.582959][ T4437] ? lock_chain_count+0x20/0x20 [ 83.587863][ T4437] __x64_sys_sendto+0xda/0xf0 [ 83.592583][ T4437] do_syscall_64+0x4c/0xa0 [ 83.597039][ T4437] ? clear_bhb_loop+0x30/0x80 [ 83.602325][ T4437] ? clear_bhb_loop+0x30/0x80 [ 83.608017][ T4437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.614210][ T4437] RIP: 0033:0x7f7f0c92e159 [ 83.618764][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.638492][ T4437] RSP: 002b:00007f7f0ab86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.646957][ T4437] RAX: ffffffffffffffda RBX: 00007f7f0cbb5fa0 RCX: 00007f7f0c92e159 [ 83.654965][ T4437] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 83.663202][ T4437] RBP: 00007f7f0c9c506b R08: 000020000005ffe4 R09: 000000000000001c [ 83.671213][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.679439][ T4437] R13: 00007f7f0cbb6038 R14: 00007f7f0cbb5fa0 R15: 00007fffd9adcb48 [ 83.687471][ T4437] [ 83.891811][ T4443] block device autoloading is deprecated and will be removed. [ 85.609030][ T4229] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 85.617441][ T4460] netlink: 'syz.4.63': attribute type 29 has an invalid length. [ 85.638822][ T4460] netlink: 'syz.4.63': attribute type 29 has an invalid length. [ 85.673089][ T4461] netlink: 'syz.4.63': attribute type 29 has an invalid length. [ 85.879353][ T4467] netlink: 72 bytes leftover after parsing attributes in process `syz.4.66'. [ 85.968707][ T4229] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 85.988557][ T4229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 86.012024][ T4229] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 86.123078][ T4229] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 86.159663][ T4229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 86.189681][ T4478] loop2: detected capacity change from 0 to 64 [ 86.329485][ T4229] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 86.589702][ T4229] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 86.662941][ T1324] cfg80211: failed to load regulatory.db [ 86.732893][ T4229] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 86.894548][ T4229] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.059114][ T23] ath6kl: Failed to init ath6kl core: -71 [ 87.105995][ T23] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 87.132021][ T23] usb 2-1: USB disconnect, device number 3 [ 87.318576][ T4229] usb 4-1: string descriptor 0 read error: -22 [ 87.374259][ T4491] loop1: detected capacity change from 0 to 64 [ 88.946376][ T4229] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 89.010069][ T4485] md/raid:md0: device ram0 operational as raid disk 0 [ 89.070978][ T26] audit: type=1800 audit(1791187405.603:3): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.59" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 89.098727][ T4491] db_root: cannot be changed: target drivers registered [ 89.241140][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.338651][ T4229] usb 4-1: can't set config #168, error -71 [ 89.346441][ T4229] usb 4-1: USB disconnect, device number 2 [ 89.432450][ T4485] md/raid:md0: not enough operational devices (2/3 failed) [ 89.689660][ T4485] md/raid:md0: failed to run raid set. [ 89.843000][ T4485] md: pers->run() failed ... [ 90.236341][ T4522] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 90.288157][ T4527] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.443575][ T4529] netlink: 'syz.2.87': attribute type 32 has an invalid length. [ 90.511389][ T4534] binder: 4526:4534 ioctl 80047c05 200000000180 returned -22 [ 90.683503][ T4535] mmap: syz.1.88 (4535) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 90.780708][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ff72c00: rx timeout, send abort [ 91.281420][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ff71000: rx timeout, send abort [ 91.290361][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ff72c00: abort rx timeout. Force session deactivation [ 91.379152][ T4550] md: array md0 already has disks! [ 91.401542][ T4550] md: could not open device unknown-block(1,0). [ 91.427693][ T4550] md: error, md_import_device() returned -16 [ 91.640199][ T4550] md/raid:md0: device ram0 operational as raid disk 0 [ 91.752375][ T4550] md/raid:md0: not enough operational devices (2/3 failed) [ 91.789733][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ff71000: abort rx timeout. Force session deactivation [ 91.927524][ T4550] md/raid:md0: failed to run raid set. [ 92.027482][ T4550] md: pers->run() failed ... [ 92.379867][ T4271] nvmet: connect request for invalid subsystem testsubsys! [ 92.414381][ T4563] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 92.848374][ T4575] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 92.855369][ T4575] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.955932][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 92.995695][ T4575] vhci_hcd vhci_hcd.0: Device attached [ 93.006602][ T4582] Zero length message leads to an empty skb [ 93.030889][ T4577] vhci_hcd: connection closed [ 93.034432][ T155] vhci_hcd: stop threads [ 93.069967][ T155] vhci_hcd: release socket [ 93.106848][ T155] vhci_hcd: disconnect device [ 93.378651][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.650701][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 93.818749][ T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 93.827590][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.878500][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.914478][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.965887][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.038985][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.048093][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.428734][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 94.434410][ T23] usbtmc 5-1:16.0: can't read capabilities [ 94.686121][ T4232] usb 5-1: USB disconnect, device number 2 [ 95.836007][ T4663] Need at least one configuration in g1. [ 95.863316][ T4663] udc usbip-vudc.0: failed to start g1: -22 [ 96.274091][ T4673] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.505982][ T4271] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.688880][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.949361][ T4271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.967538][ T4271] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 96.988166][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 97.179158][ T4231] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 97.187851][ T4271] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 97.208299][ T4231] usb 5-1: can't read configurations, error -61 [ 97.215371][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.229095][ T4271] usb 2-1: Product: syz [ 97.233374][ T4271] usb 2-1: Manufacturer: syz [ 97.248353][ T4271] usb 2-1: SerialNumber: syz [ 97.313045][ T4271] sisusb 2-1:1.0: Invalid USB2VGA device [ 97.329125][ T4271] sisusb: probe of 2-1:1.0 failed with error -22 [ 97.397448][ T4231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.447336][ T4531] Set syz1 is full, maxelem 65536 reached [ 97.454326][ T4658] Set syz1 is full, maxelem 2 reached [ 97.519310][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 97.570679][ T4671] netlink: 'syz.1.131': attribute type 30 has an invalid length. [ 97.680956][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 97.710598][ T4271] usb 2-1: USB disconnect, device number 4 [ 97.714757][ T4690] xt_nfacct: accounting object `syz0' does not exist [ 97.803951][ T26] audit: type=1326 audit(1791187414.333:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0d4c0159 code=0x7ffc0000 [ 97.849058][ T26] audit: type=1326 audit(1791187414.363:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 97.863241][ T4698] md: array md0 already has disks! [ 97.883105][ T26] audit: type=1326 audit(1791187414.363:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 97.908353][ T4698] md: could not open device unknown-block(1,0). [ 97.914746][ T4698] md: error, md_import_device() returned -16 [ 97.915754][ T4231] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 97.926110][ T26] audit: type=1326 audit(1791187414.363:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 97.952383][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.960344][ T4231] usb 5-1: can't read configurations, error -61 [ 97.966818][ T4231] usb usb5-port1: attempt power cycle [ 98.023877][ T26] audit: type=1326 audit(1791187414.363:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 98.026446][ T4698] md/raid:md0: device ram0 operational as raid disk 0 [ 98.050429][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.060843][ T4701] device vlan2 entered promiscuous mode [ 98.069684][ T26] audit: type=1326 audit(1791187414.363:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 98.095214][ T26] audit: type=1326 audit(1791187414.363:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 98.120538][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.161520][ T26] audit: type=1326 audit(1791187414.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 98.165244][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 98.186286][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.211086][ T26] audit: type=1326 audit(1791187414.363:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 98.235943][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.242714][ T4698] md/raid:md0: not enough operational devices (2/3 failed) [ 98.252176][ T4702] device hsr_slave_0 left promiscuous mode [ 98.313865][ T26] audit: type=1326 audit(1791187414.363:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.3.140" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0d4bfdeb code=0x7ffc0000 [ 98.339041][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.508176][ T4231] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.536179][ T4698] md/raid:md0: failed to run raid set. [ 98.988967][ T4231] usb 5-1: device descriptor read/8, error -71 [ 99.395262][ T4698] md: pers->run() failed ... [ 100.614151][ T4751] bridge0: port 3(syz_tun) entered blocking state [ 100.652957][ T4751] bridge0: port 3(syz_tun) entered disabled state [ 100.685547][ T4751] device syz_tun entered promiscuous mode [ 100.693290][ T4751] bridge0: port 3(syz_tun) entered blocking state [ 100.700203][ T4751] bridge0: port 3(syz_tun) entered forwarding state [ 100.792030][ T4231] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.800204][ T4271] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.978093][ T4756] [ 100.980501][ T4756] ====================================================== [ 100.987545][ T4756] WARNING: possible circular locking dependency detected [ 100.994596][ T4756] syzkaller #0 Not tainted [ 100.999030][ T4756] ------------------------------------------------------ [ 101.006060][ T4756] syz.4.164/4756 is trying to acquire lock: [ 101.011974][ T4756] ffff888073a91f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 101.023397][ T4756] [ 101.023397][ T4756] but task is already holding lock: [ 101.030778][ T4756] ffff888073a90120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 101.039789][ T4756] [ 101.039789][ T4756] which lock already depends on the new lock. [ 101.039789][ T4756] [ 101.050204][ T4756] [ 101.050204][ T4756] the existing dependency chain (in reverse order) is: [ 101.059234][ T4756] [ 101.059234][ T4756] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 101.067005][ T4756] lock_sock_nested+0x44/0x100 [ 101.072355][ T4756] smc_listen_out+0xd4/0x3c0 [ 101.077484][ T4756] smc_listen_work+0x52a/0xd10 [ 101.082783][ T4756] process_one_work+0x867/0xff0 [ 101.088170][ T4756] worker_thread+0xad7/0x12a0 [ 101.093384][ T4756] kthread+0x42e/0x520 [ 101.097987][ T4756] ret_from_fork+0x1f/0x30 [ 101.102942][ T4756] [ 101.102942][ T4756] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 101.113118][ T4756] __lock_acquire+0x38f7/0x7d40 [ 101.118509][ T4756] lock_acquire+0x19f/0x400 [ 101.123550][ T4756] __flush_work+0x116/0x210 [ 101.128583][ T4756] __cancel_work_timer+0x3f4/0x560 [ 101.134229][ T4756] smc_clcsock_release+0x5c/0xe0 [ 101.139703][ T4756] __smc_release+0x644/0x7b0 [ 101.144856][ T4756] smc_close_non_accepted+0xd1/0x1f0 [ 101.150679][ T4756] smc_close_active+0xae2/0xea0 [ 101.156061][ T4756] __smc_release+0x9c/0x7b0 [ 101.161105][ T4756] smc_release+0x2c1/0x520 [ 101.166052][ T4756] sock_close+0xbf/0x210 [ 101.170832][ T4756] __fput+0x212/0x8c0 [ 101.175351][ T4756] task_work_run+0x125/0x1a0 [ 101.180479][ T4756] exit_to_user_mode_loop+0x10f/0x130 [ 101.186388][ T4756] exit_to_user_mode_prepare+0xee/0x180 [ 101.192468][ T4756] syscall_exit_to_user_mode+0x16/0x40 [ 101.198465][ T4756] do_syscall_64+0x58/0xa0 [ 101.203431][ T4756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.209867][ T4756] [ 101.209867][ T4756] other info that might help us debug this: [ 101.209867][ T4756] [ 101.220109][ T4756] Possible unsafe locking scenario: [ 101.220109][ T4756] [ 101.227573][ T4756] CPU0 CPU1 [ 101.232943][ T4756] ---- ---- [ 101.238312][ T4756] lock(sk_lock-AF_SMC/1); [ 101.242831][ T4756] lock((work_completion)(&new_smc->smc_listen_work)); [ 101.252338][ T4756] lock(sk_lock-AF_SMC/1); [ 101.259377][ T4756] lock((work_completion)(&new_smc->smc_listen_work)); [ 101.266349][ T4756] [ 101.266349][ T4756] *** DEADLOCK *** [ 101.266349][ T4756] [ 101.274504][ T4756] 2 locks held by syz.4.164/4756: [ 101.279532][ T4756] #0: ffff888074247a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 101.289736][ T4756] #1: ffff888073a90120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 101.299155][ T4756] [ 101.299155][ T4756] stack backtrace: [ 101.305230][ T4756] CPU: 0 PID: 4756 Comm: syz.4.164 Not tainted syzkaller #0 [ 101.312540][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.322612][ T4756] Call Trace: [ 101.325906][ T4756] [ 101.328853][ T4756] dump_stack_lvl+0x188/0x250 [ 101.333552][ T4756] ? load_image+0x410/0x410 [ 101.338108][ T4756] ? show_regs_print_info+0x20/0x20 [ 101.343328][ T4756] ? print_circular_bug+0x12b/0x1a0 [ 101.348544][ T4756] check_noncircular+0x2f8/0x400 [ 101.353502][ T4756] ? deref_stack_reg+0xd0/0x120 [ 101.358378][ T4756] ? look_up_lock_class+0x71/0x110 [ 101.363507][ T4756] ? print_deadlock_bug+0x5d0/0x5d0 [ 101.368728][ T4756] ? lockdep_lock+0xf1/0x1f0 [ 101.373343][ T4756] ? lock_release+0xb5/0x8a0 [ 101.377950][ T4756] ? mark_lock+0x94/0x320 [ 101.382294][ T4756] ? _find_first_zero_bit+0xd1/0xf0 [ 101.387508][ T4756] __lock_acquire+0x38f7/0x7d40 [ 101.392390][ T4756] ? deref_stack_reg+0xd0/0x120 [ 101.397265][ T4756] ? verify_lock_unused+0x140/0x140 [ 101.402510][ T4756] ? mark_lock+0x94/0x320 [ 101.406857][ T4756] ? __lock_acquire+0x13b3/0x7d40 [ 101.411905][ T4756] ? lockdep_lock+0xf1/0x1f0 [ 101.416547][ T4756] lock_acquire+0x19f/0x400 [ 101.421074][ T4756] ? __flush_work+0xfa/0x210 [ 101.426037][ T4756] ? read_lock_is_recursive+0x10/0x10 [ 101.431433][ T4756] __flush_work+0x116/0x210 [ 101.435948][ T4756] ? __flush_work+0xfa/0x210 [ 101.440553][ T4756] ? flush_work+0x20/0x20 [ 101.444895][ T4756] ? try_to_grab_pending+0xfb/0x820 [ 101.450111][ T4756] ? mark_lock+0x94/0x320 [ 101.454458][ T4756] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.460457][ T4756] ? lock_chain_count+0x20/0x20 [ 101.465322][ T4756] ? mark_lock+0x94/0x320 [ 101.469668][ T4756] ? __cancel_work_timer+0x36a/0x560 [ 101.474968][ T4756] __cancel_work_timer+0x3f4/0x560 [ 101.480101][ T4756] ? cancel_work_sync+0x20/0x20 [ 101.484973][ T4756] ? __local_bh_enable_ip+0x136/0x1c0 [ 101.490361][ T4756] ? lockdep_hardirqs_on+0x94/0x140 [ 101.495575][ T4756] ? __local_bh_enable_ip+0x136/0x1c0 [ 101.500963][ T4756] ? _local_bh_enable+0xa0/0xa0 [ 101.505834][ T4756] smc_clcsock_release+0x5c/0xe0 [ 101.510799][ T4756] __smc_release+0x644/0x7b0 [ 101.515492][ T4756] smc_close_non_accepted+0xd1/0x1f0 [ 101.520793][ T4756] smc_close_active+0xae2/0xea0 [ 101.525748][ T4756] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 101.531400][ T4756] __smc_release+0x9c/0x7b0 [ 101.535923][ T4756] smc_release+0x2c1/0x520 [ 101.540358][ T4756] sock_close+0xbf/0x210 [ 101.544618][ T4756] ? sock_mmap+0x90/0x90 [ 101.548877][ T4756] __fput+0x212/0x8c0 [ 101.552872][ T4756] task_work_run+0x125/0x1a0 [ 101.557475][ T4756] exit_to_user_mode_loop+0x10f/0x130 [ 101.562855][ T4756] exit_to_user_mode_prepare+0xee/0x180 [ 101.568420][ T4756] syscall_exit_to_user_mode+0x16/0x40 [ 101.573901][ T4756] do_syscall_64+0x58/0xa0 [ 101.578337][ T4756] ? clear_bhb_loop+0x30/0x80 [ 101.583036][ T4756] ? clear_bhb_loop+0x30/0x80 [ 101.587755][ T4756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.593669][ T4756] RIP: 0033:0x7ffa070e6159 [ 101.598101][ T4756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.617744][ T4756] RSP: 002b:00007fffa6944d18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 101.626171][ T4756] RAX: 0000000000000000 RBX: 00007fffa6944e00 RCX: 00007ffa070e6159 [ 101.634160][ T4756] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 101.642167][ T4756] RBP: 0000000000018a12 R08: 0000000000000001 R09: 0000000000000000 [ 101.650160][ T4756] R10: 0000001b31720000 R11: 0000000000000246 R12: 00007fffa6944e40 [ 101.658152][ T4756] R13: 00007ffa0736dfac R14: 0000000000018a67 R15: 00007ffa0736dfa0 [ 101.666148][ T4756] [ 101.669271][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.728754][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 101.888634][ T4271] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.901680][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.088614][ T4231] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.097740][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.106053][ T4271] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 102.115430][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 102.123632][ T4231] usb 2-1: Product: syz [ 102.127826][ T4231] usb 2-1: Manufacturer: syz [ 102.132533][ T4271] usb 4-1: Product: syz [ 102.136713][ T4271] usb 4-1: Manufacturer: syz [ 102.141407][ T4231] usb 2-1: SerialNumber: syz [ 102.146477][ T4271] usb 4-1: SerialNumber: syz [ 102.153687][ T4231] usb 2-1: config 0 descriptor?? [ 102.210604][ T4231] hub 2-1:0.0: bad descriptor, ignoring hub [ 102.216690][ T4231] hub: probe of 2-1:0.0 failed with error -5 [ 102.419647][ T4271] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 102.529301][ T7] usb 2-1: USB disconnect, device number 5 [ 102.879084][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.118551][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 103.238601][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.488551][ T7] usb 2-1: string descriptor 0 read error: -22 [ 103.494971][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 103.504105][ T7] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 103.513658][ T7] usb 2-1: config 0 descriptor?? [ 103.559002][ T7] hub 2-1:0.0: bad descriptor, ignoring hub [ 103.564982][ T7] hub: probe of 2-1:0.0 failed with error -5 [ 103.748686][ T7] usb 2-1: USB disconnect, device number 6 [ 103.763811][ T4271] usb 4-1: USB disconnect, device number 3 [ 103.773411][ T4271] usblp0: removed