last executing test programs: 1m17.02853203s ago: executing program 1 (id=66): inotify_init1(0x80000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x200000003, 0x4100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0xfffffffffffffffd], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m12.02796077s ago: executing program 1 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000885}, 0x28044044) 1m11.936921632s ago: executing program 1 (id=84): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000cf57179d7a6d860933e6a354b8141bc7ea799bbca98432cfd5af89d81727b2e04b402831c7f4", @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000004,anchor=00000000000000000007,longad,utf8,unhide,undelete,iocharset=utf8,uid=forget,rootdir=00000000000000000006,gid=forget,nostrict,session=00000000000000000000,gid=forget,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) truncate(0x0, 0x8fff5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getegid() fchownat(r0, &(0x7f0000000180)='./file1\x00', 0xee01, r2, 0xa4f26ae9fbe0356f) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000280)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x1, 0x2, 0xa, 0x3, 0x80, {0x2, 0x17d, 0xfffffffffffffffd, 0x0, 0x345, 0x8, 0x8, 0x7ffffffd, 0x0, 0x1000, 0x20000004, 0x0, 0x0, 0x3ff, 0x3101}}, {0x0, 0x3}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03) 1m9.193539157s ago: executing program 1 (id=98): syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000201e04483040000102030109027e0003010080020904000000010100000a2401020028000201020924030501030303000924060301010700800c24"], 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000240)={0x18}, 0x18) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$eJzskr1OOkEUxc/sLh//f5RoYkUDBfGjUJZFjZ2W2NvZSGBF4qLCkiiEYo0xFBbG0ifgNUx8AS2MD0BNQazNmtm5OxnwEZxfsWfumTt35l4489t+CsD3dFDDASJMZPDOGCwAOSa8iSH0ifSD9FEI3ijvkPw70qzf6ycpJ49lYZxXPc/t5AF8RZ60/P1bA5Oo1Od0UOOLEwBhGIbcqwM8HQtKjgmgreRkLWAlaiKUObwRHqwBKHZbV0W/199stqoNt+FeOGZ519627R2neNr0XFt8mXIFtQKuGwBSaUj4fgLAPcX/MQtTnkb77B+O5dlkPMMMwzyGcjZWhhf5rhTi3ws4wir4s64DpriFqIqFqKUKGEwKSpbyPnFXOtrYql169SEYWHxsBEvWKI2RkIGjBuW9AIui1JBKFkgrpCPSMWlu7i9jBfz7QNF6ACRxU+12OyU+JLFi8cqRnrMUqAPjtz4bs829Gr9mq9FoNBqNRqPRaDR/jZ8AAAD//8JqdgE=") write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008841}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m4.816410632s ago: executing program 1 (id=105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@local, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 1m2.500682467s ago: executing program 1 (id=109): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8007, &(0x7f0000000280)=ANY=[], 0x3, 0x59b, &(0x7f0000001080)="$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") lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') 1m2.150612576s ago: executing program 32 (id=109): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8007, &(0x7f0000000280)=ANY=[], 0x3, 0x59b, &(0x7f0000001080)="$eJzs3c9v2+Ydx/EPXbt2NCAbtiEIAid9mmyAA7gqJTcOjJ446pHNViIFkm7tUxE0cmFE7opkAxZfulyyDdj+iF5333XYfacB+zeK9TTspoE/FMvRryaxI6d4vwT4eUR+yedLWtAXtKWHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvyG69YctYJwd89M5jfiqD26WItS0SndPtVMGVdyHOlfWlnR1WLR1Z+frL6S/bip1eLZqlayZkXHP7rykw9/trgw2H5Kwq/Fo8fHD+71et2H805kTrZtGCRR0Pa2rQmSyGxdkrTTTEwzaNlkP0lt2/ix9dIoNmv+bVPb2towtrof7YbbDa9lBwvvvld33U3zUbVjvTiJwvc/qib+TtBqBeF2HpOtzmLuZi/Ej4PUpNZrG3Nw2OtuzEoyC6p9n6D6rKC6W6/XavV6bfPO1p27rrs4ssA94ch1XY1EzP9Fi/k643dw4OUtlPVfLQUKtas9mbEPXw3FitSesL40qP+/fN9OHbes/05W//Mq39fq1ZPV15TX/xvFsxuT6v+EXKY8lrIdvfBWzz/eHuzjkR7rWA90Tz311NXDk5j1Mxnpgj+2ZRUqUKJIgdry8iWmXGK0pU1tytVn2lFTiYyaCtSSVaJ9JUpl81eUr1jL8pQqUiyjNfm6LaOa+stb2pCRVVX7irSrUNtqyMv3cqDD/LxvTMnxWVBtStCng1defUrQC9X/3PAm/6T+g/qPi6Q/qP/Pe2se2QAAAAAAgPPg5H99z67/l3RdWnLUDFrWnXdaAAAAAADgDOX/+V/NmvyTcdflcP0PAAAAAMAPjZN/x86RVNE7RW/wdanyjwD9H887RwAAAAAA8Gry///fyJpK1ntHzvPX/wAAAAAA4E33x0lz7P9D6pfTAi47f/+P4njJedLZ+4Vz5GXLvKNygsCReQLT5jXncrmTvNlcLJ/5dtUpZ798Ngnmt2VzMGuuf+cMEtCf9W4R8+79or0/WFOMUmkGLVv1o9aHNXne5YXU7qW//fLwd8oP/09h+7Lz3cFhr1v9/Ne9+3kuT7K9PDkqz9TIPIpTcvmNrhcx18cf8VL+RYxy3IqjbFx3+PgXis0XXmDMp7pZxNysFG3l9PGvZGPWqpOOvshiWdIrHflT3Spibq3dKpoxWdRnZNGtD5//lzoXJ1k4k7LYmJbF8mGvu/GKWQDAvBxMr0K5t07X3Zd4l3s91f2p1oqYtWv5G+vitTHv6O6suuKOqesrz4ZfHGTR/3pCFn8duQfSpBqbjfuXZ+PW8nG/yTb4ZmJVTVqXJH31337/6CtdefT4+L3Do3tfdL/oflmvb2y6H7junbqW8sMoG2oPAGCM2ffYmRnhfDDjqvqnxUcKvs5WfS79r9+/r/X82wb5Jw7G7rWSb/Nd/jGE9RlXrZWhO7ysz7i2PImtv0DsxviTt3LGvwwAAF6TmzPq8OT67wzu4uesz7jurgx9pHB9+Or4bY1cHQ/XcgAAcD5s/K1TSf/gxHHQ+ay2tVXz0h1r4sj/2MRBY9uaIExt7O944bY1nThKIz9qZZ1PgoZNTLLb6URxappRbDpREuzld3435a3fE9v2wjTwk07Leok1fhSmnp+aRpD4prP7q1aQ7Ng43zjpWD9oBr6XBlFokmg39m3VmMTaocCgYcM0aAZZNzSdOGh78b75JGrttq1p2MSPg04aFTscjBWEzShu57utzvtkAwBwQTx6fPzgXq/XfTjoOIvPL3nlzryPEQAAnEaVBgAAAAAAAAAAAAAAAAAAAADg4juzL/n9oDrL57HnT3UeqV6SND3m3xVpeEm//32HWLgIv4tTncGk01Ni/jZmlaTfzz/5N6sz7t1iZD5qAG+w/wcAAP//if9U+w==") lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') 17.338319126s ago: executing program 2 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44998) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000240)='functionfs', 0xa) read(r5, &(0x7f0000000100)=""/9, 0xb) mount(0x0, &(0x7f00000002c0)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 16.579827534s ago: executing program 2 (id=211): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) socket$alg(0x26, 0x5, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 15.249149516s ago: executing program 4 (id=213): r0 = socket$inet6(0xa, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8080, 0x80) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x402, &(0x7f0000000300)={[{@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@rodir}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@dos1xfloppy}, {@rodir}, {@uni_xlate}, {@fat=@quiet}]}, 0xf5, 0x2f0, &(0x7f0000000f80)="$eJzs3ctrE0EcwPFf3klrTQ8iIgpDBVGkSxPw5sEiLYgBpW0EKwhbu9WQbVKyoRAR24Pg1bOHHjyKIII3LyJee/Ev8HXrpTcLFlc2u5umyZqmlT79fg7NdOf325ndme1j2uyuXHk+W5yxtF92VJr1S1giXnlRLn5a+np2/OMx93OlRocnMlmlwiJy9/HrgQ/V3tvvjr9PyHL/vZXV7I/lMxMivyceSlgVLFWybdtWU+VyNeQkTxesoqbULdPQLUMVSpZRqSq9Xq9PmYaaMctzczWll6b7euYqhmUpvVRTRaOmqmVVrdSU/kAvlJSmaaqvR1AfLF+4rS7UKTH/as22ZdUZoMSi2LYdEL3oF2Lea+LfOouDpGX8O8a2TY7IbvYMe2HNjjbGP77F+OPoca//by+6uf5x9IzfmbwxnMuNjCmVFJl9Np+fz7uvbv2XXimIKYYsjV2aXBdnjngk5HwcvZ4bGVJ1/XJ+dsHLX5jPu98chme8/IyknZ9TmvLFz8+4+Wpzfkx6mvOzkpYTwflZP1/CTflxuXCuKV+TtHy+L2UxZVqc3I38Jxmlrt3MtbSfqscBAAAAAAAAAHAYaaphY/0+1PhTb0rTEvX/+GjUp5zNTpwb0FhfH5K0rAevzw8Fru9H5XR0Hw8cAAAAAID/iFV7VNRN06jsTiHyMtWhiZiIOAWRpwNOZzru8KTX4+5aj4tIe1WkcxObCqnLbntvxryOyW6eqB0WwiLSvMV9s4Zz8OZbPyYlQenhbU2AwXjgmU/u6SFLN8GS3NnETnQ9tVoLoXV/y6nAGDu09X5s3Yy5W/wLc6vWr27rcvhrIdl6oga/u/s1O3zR+NlY4gMAAABwiDT94gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbJjm4e5t+3f3OVeI+Ib78lW+tz4rnvPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAD6E8AAAD//+b9sCg=") sendfile(r3, r6, 0x0, 0x80001d00c0d1) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x16, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0xffc}}, {@generic={0x6558}}}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) recvmmsg(r7, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0xb393}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/7, 0x7}, {&(0x7f0000001740)=""/114, 0x72}, {&(0x7f00000017c0)=""/71, 0x47}, {&(0x7f0000001840)=""/24, 0x18}, {&(0x7f0000001880)=""/133, 0x85}, {&(0x7f0000001940)=""/95, 0x5f}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x8, &(0x7f0000002a40)=""/227, 0xe3}, 0xff}], 0x2, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000100)={@private=0xa010101, @loopback, 0x1, "66702909e7001be4dc22434139becb9379d2509c253b17df517952cfdda739bb", 0xffff, 0xb, 0x400, 0x7}, 0x3c) fallocate(r1, 0x60, 0x1, 0x1) sendmmsg$inet(r0, &(0x7f0000010840)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000001000000030000000000000000000000000000000000000002000000000000000000000000000000000000000000000002000000a500000000000000000000000000000000000000020000ed0500000000000000000000000000000000000000070000008300270a01010044008fe17f0000010000831264010101000000070000000000010001ac1e0001200000009400000089004dac14143264010102008300d80a01010044003b10000000050000000000000009fffffff900000fff00000006000000060000000600000007000000010000000000000000000000000000010000000600000000000000"], 0x27}}], 0x1, 0x24048084) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x6c8261, 0x0) 13.350196161s ago: executing program 5 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44998) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000240)='functionfs', 0xa) read(r5, &(0x7f0000000100)=""/9, 0xb) mount(0x0, &(0x7f00000002c0)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 11.131632334s ago: executing program 5 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44998) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000240)='functionfs', 0xa) read(r5, &(0x7f0000000100)=""/9, 0xb) mount(0x0, &(0x7f00000002c0)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 9.909643053s ago: executing program 2 (id=226): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="04", @ANYRES32], 0x20) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 8.546948786s ago: executing program 5 (id=228): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x6, &(0x7f00000010c0)={0x1, 0x1, 0xfffffff, 0x46}) 8.499956867s ago: executing program 4 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) unshare(0x40400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x32, &(0x7f00000014c0)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100}}}}}}}, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="0f88f5afd9e43ed021d3d40f06650f97cff30f08363ef30fbd98000266b9b201000066b87200000066ba000000002e660f166b00baf80cba6100ed66ef9cbafc56e056e028c4c4", 0x47}], 0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x1, 0x1, "000000050000000026000400"}, {0x3, 0x20, "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"}]}}}}}}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r6, 0x8924, 0x20000000000f) 7.193052368s ago: executing program 0 (id=232): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x80000007, 0x4) 6.150725713s ago: executing program 3 (id=233): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) accept4(r0, 0x0, 0x0, 0x0) 5.995899317s ago: executing program 4 (id=234): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0xc6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 5.918288939s ago: executing program 2 (id=235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=':', 0x1}], 0x1}, 0x40095) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x240088c8}, 0x4000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x7c70}, 0x1, 0x0, 0x0, 0x90}, 0x8080) 4.851366994s ago: executing program 2 (id=236): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x100084000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000100), 0xfe1d) 4.541152362s ago: executing program 5 (id=237): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0xdc, 0x8000000}, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_clone(0x10000, &(0x7f0000000440)="238da01442925143dedcbccbe8ee883cb4a4f72eb8a43dd714bae88a9012ebb9bb97a5d75a79233e351b5573bc5033ca5d57f49d34326b04b8286420d3194adb97a0aa729b80bfb8e81db8c2e71e8d90685c1136d304605e618ede7a5114e4aa47df6d866c4e84fce76cc07c9189f996bf9676726154b0af26b5fc53b9c1c87acf148b578ce7429b799952eee2d7f4e95ed669add77be2ce1670649dc433541f2c7e51c5f676ecad976e991ab770b374dd8fa680f201a9fc0be420104259ee24b35095954f40c1c6b03457f080dffbf4ff8357a7904ac858", 0xd8, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="2f9fe136766785ff3d1ba82af665aa205f57f100b19d0bb91d73ee05b9ab0d07ee75b78cecc5891b8619d63fedd7b050ca01a988760127b619822ef984f1be3eb42777fee84ecd16bd5afd35fd89c3f8f2ae5affb30158bd34c83e5cbb8050fbaf5acb0165825239ae6513f220d9d6c02d375013390e5794eccbba01f347b49d9b908c0709f993f66773157a3dc989ddcb6ea0888024a3701ca766fd96b25e35b10b95ae99bc911d2e0f12e331e10dd8d2997ef064ff273bfad231e1555a36fa4606d99041e7929005bcfd31ec8b494a851ce5027f339e4ac6a4f3b568e40940d98f91a6fb32a379b22e45437068ba5f087446") fcntl$lock(r3, 0x25, &(0x7f0000000700)={0x0, 0x3, 0x2, 0x9, r4}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = eventfd(0x8000) r6 = eventfd(0x162) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r6, 0x7, 0x2, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r5, 0x7, 0x2, r5}) close(0x5) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) r9 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000001fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1986dd6c00000000082b01000000000000a5951f33e93b75fb14bbfe8000"/52], 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r9, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x4020, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @mcast2, 0x40}, {0xa, 0x4e24, 0x200, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, r11, 0xffff}}, 0x48) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.638309033s ago: executing program 2 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44998) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000240)='functionfs', 0xa) read(r5, &(0x7f0000000100)=""/9, 0xb) mount(0x0, &(0x7f00000002c0)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.638163223s ago: executing program 0 (id=239): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.602151294s ago: executing program 3 (id=240): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) chdir(0x0) 3.520570086s ago: executing program 0 (id=241): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 3.410298628s ago: executing program 5 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44998) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000240)='functionfs', 0xa) read(r5, &(0x7f0000000100)=""/9, 0xb) mount(0x0, &(0x7f00000002c0)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.339126644s ago: executing program 0 (id=243): r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0x9]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000694000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1a000000111405012abd70"], 0x20}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r2, &(0x7f0000000040), 0xfffffffffffffe8c, 0x88a, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.310489345s ago: executing program 5 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.209805427s ago: executing program 4 (id=245): close(0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x4002bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x1e, 0x0, 0x0) 2.111711139s ago: executing program 3 (id=246): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x4583c57b, 0x4) 1.930928654s ago: executing program 3 (id=247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc3) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.714193669s ago: executing program 3 (id=248): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x100084000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000100), 0xfe1d) 560.247687ms ago: executing program 3 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r1) socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000b00)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000a80)=[0x1, 0x5, 0x6b7f, 0x6, 0x9]}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878e18374f064", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x66, 0xf31, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 505.852898ms ago: executing program 0 (id=250): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) r1 = accept4(r0, 0x0, 0x0, 0x0) listen(r1, 0xfff) 278.205033ms ago: executing program 4 (id=251): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fadvise64(r1, 0x0, 0xedc9, 0x3) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 163.262386ms ago: executing program 4 (id=252): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x6, 0x7fffffffffffffff}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=253): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x3, 0x240, &(0x7f0000000840)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 45.980982][ T4172] cgroup: Unknown subsys name 'net' [ 46.099187][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.398378][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.796485][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 48.838200][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 48.866209][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 48.882995][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 48.947449][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 48.979777][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.987031][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.995775][ T4194] device bridge_slave_0 entered promiscuous mode [ 49.028633][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.035967][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.043900][ T4194] device bridge_slave_1 entered promiscuous mode [ 49.063339][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.070488][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.078709][ T4188] device bridge_slave_0 entered promiscuous mode [ 49.092197][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.099480][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.107704][ T4188] device bridge_slave_1 entered promiscuous mode [ 49.121338][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.128569][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.137073][ T4187] device bridge_slave_0 entered promiscuous mode [ 49.165754][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.173007][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.180915][ T4187] device bridge_slave_1 entered promiscuous mode [ 49.191037][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.198259][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.206594][ T4195] device bridge_slave_0 entered promiscuous mode [ 49.220774][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.238561][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.254305][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.261440][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.269655][ T4195] device bridge_slave_1 entered promiscuous mode [ 49.278831][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.295524][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.330316][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.337590][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.346208][ T4201] device bridge_slave_0 entered promiscuous mode [ 49.354735][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.371982][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.394127][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.401226][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.409484][ T4201] device bridge_slave_1 entered promiscuous mode [ 49.420854][ T4194] team0: Port device team_slave_0 added [ 49.430049][ T4194] team0: Port device team_slave_1 added [ 49.451558][ T4188] team0: Port device team_slave_0 added [ 49.459951][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.492044][ T4187] team0: Port device team_slave_0 added [ 49.500209][ T4188] team0: Port device team_slave_1 added [ 49.509472][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.539595][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.547731][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.573938][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.587559][ T4187] team0: Port device team_slave_1 added [ 49.593944][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.600897][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.626887][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.646030][ T4195] team0: Port device team_slave_0 added [ 49.660717][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.682845][ T4195] team0: Port device team_slave_1 added [ 49.690196][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.699839][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.706904][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.733289][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.763278][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.770514][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.796618][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.813536][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.820979][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.847952][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.865382][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.872357][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.898352][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.936739][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.944007][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.970060][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.981470][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.988665][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.014778][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.028789][ T4201] team0: Port device team_slave_0 added [ 50.042928][ T4201] team0: Port device team_slave_1 added [ 50.053595][ T4194] device hsr_slave_0 entered promiscuous mode [ 50.060832][ T4194] device hsr_slave_1 entered promiscuous mode [ 50.090999][ T4188] device hsr_slave_0 entered promiscuous mode [ 50.098188][ T4188] device hsr_slave_1 entered promiscuous mode [ 50.105136][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.112941][ T4188] Cannot create hsr debugfs directory [ 50.161432][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.168726][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.195001][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.210441][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.218154][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.244689][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.270185][ T4187] device hsr_slave_0 entered promiscuous mode [ 50.277755][ T4187] device hsr_slave_1 entered promiscuous mode [ 50.285128][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.292709][ T4187] Cannot create hsr debugfs directory [ 50.314735][ T4195] device hsr_slave_0 entered promiscuous mode [ 50.321470][ T4195] device hsr_slave_1 entered promiscuous mode [ 50.328086][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.335944][ T4195] Cannot create hsr debugfs directory [ 50.392758][ T4201] device hsr_slave_0 entered promiscuous mode [ 50.399735][ T4201] device hsr_slave_1 entered promiscuous mode [ 50.406789][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.417885][ T4201] Cannot create hsr debugfs directory [ 50.484703][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 50.494278][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 50.513391][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 50.522803][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 50.531493][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 50.680778][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.693478][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.712217][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.721821][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.760074][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.770286][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.779974][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.789620][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.870921][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.880705][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.905751][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.915946][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.967603][ T4201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.983116][ T4201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.004584][ T4201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.021840][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.028996][ T4201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.053344][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.089391][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.099372][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.108296][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.118494][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.134979][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.147068][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.181223][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.191264][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.201910][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.210211][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.220187][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.230472][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.238967][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.246032][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.254632][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.262690][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.271580][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.297208][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.316437][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.326940][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.340002][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.349469][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.358530][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.367202][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.374305][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.381939][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.392411][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.401373][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.411086][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.418211][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.426673][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.435647][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.465128][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.474508][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.483403][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.492275][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.501759][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.510427][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.519113][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.528438][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.537530][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.546223][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.554416][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.566838][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.578591][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.603381][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.612868][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.626644][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.637211][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.646045][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.654752][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.663436][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.671570][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.679715][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.688522][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.699867][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.712755][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.722428][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.731925][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.739031][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.756328][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.770814][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.784268][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.793296][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.808248][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.817855][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.825388][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.849767][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.880538][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.890067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.900206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.918279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.942281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.952588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.961378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.972699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.985435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.029906][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.040013][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.056012][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.066335][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.075743][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.082806][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.091879][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.100901][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.109829][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.116965][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.125820][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.135044][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.143592][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.151535][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.159148][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.168132][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.181188][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.192610][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.218632][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.227964][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.236511][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.245599][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.254455][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.263016][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.272048][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.280622][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.290754][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.299373][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.312122][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.333667][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.345315][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.380999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.388925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.397065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.407076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.427725][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.445453][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.453213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.468282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.496017][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.510809][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.521498][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.530321][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.568028][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.577401][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 52.577568][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.583514][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 52.593464][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.606851][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 52.607657][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.612965][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 52.619965][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.623569][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.631530][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 52.636139][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.655640][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.668616][ T4195] device veth0_vlan entered promiscuous mode [ 52.687276][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.696492][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.708103][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.718101][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.727454][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.737238][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.778231][ T4195] device veth1_vlan entered promiscuous mode [ 52.799536][ T4188] device veth0_vlan entered promiscuous mode [ 52.809371][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.817303][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.825235][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.833422][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.842908][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.851966][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.862456][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.872642][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.882129][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.893008][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.901952][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.910571][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.919452][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.928880][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.937516][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.953861][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.962101][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.971825][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.980768][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.990449][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.010149][ T4188] device veth1_vlan entered promiscuous mode [ 53.025999][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.034273][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.042743][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.052090][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.081319][ T4195] device veth0_macvtap entered promiscuous mode [ 53.093115][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.103429][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.122322][ T4194] device veth0_vlan entered promiscuous mode [ 53.136429][ T4195] device veth1_macvtap entered promiscuous mode [ 53.144314][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.152584][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.161037][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.170243][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.179011][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.187036][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.226433][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.259215][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.269635][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.287652][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.302313][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.312254][ T4194] device veth1_vlan entered promiscuous mode [ 53.326787][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.335039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.344541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.353084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.381812][ T4188] device veth0_macvtap entered promiscuous mode [ 53.394166][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.403026][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.420884][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.447731][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.488130][ T4194] device veth0_macvtap entered promiscuous mode [ 53.497847][ T4188] device veth1_macvtap entered promiscuous mode [ 53.517746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.528148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.538903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.547182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.556000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.567533][ T4194] device veth1_macvtap entered promiscuous mode [ 53.592825][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.612685][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.624017][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.639674][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.647334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.655917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.665590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.674386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.682967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.690837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.698571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.707711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.717693][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.728696][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.738866][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.751632][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.762752][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.787256][ T4201] device veth0_vlan entered promiscuous mode [ 53.796396][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.807785][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.819189][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.828496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.837183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.846775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.856077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.866381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.875172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.889002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.896987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.907620][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.918655][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.930154][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.940947][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.955681][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.971991][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.991193][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.000367][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.019391][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.034683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.044690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.053408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.063345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.075207][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.087762][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.096668][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.105954][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.117881][ T4201] device veth1_vlan entered promiscuous mode [ 54.177255][ T4187] device veth0_vlan entered promiscuous mode [ 54.200902][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.204228][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.216741][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.222548][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.233300][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.241928][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.251825][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.303005][ T4187] device veth1_vlan entered promiscuous mode [ 54.327003][ T4201] device veth0_macvtap entered promiscuous mode [ 54.342096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.351106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.360645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.369537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.390767][ T4201] device veth1_macvtap entered promiscuous mode [ 54.406329][ T399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.415885][ T399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.447827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.457125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.465534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.485107][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.492957][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.492986][ T4187] device veth0_macvtap entered promiscuous mode [ 54.530069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.541855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.558985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.571669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.585460][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.593318][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.595678][ T4187] device veth1_macvtap entered promiscuous mode [ 54.622473][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.640969][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.649744][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 54.663665][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 54.671030][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 54.676233][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.688437][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 54.695200][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 54.696995][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.712581][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.726888][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.748478][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.760738][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.762356][ T4265] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 54.772233][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.803062][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.827375][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.843277][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.859384][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.870603][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.886912][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.897200][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.908943][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.922543][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.977735][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.990871][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.001091][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.017396][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.031564][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.043300][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.062525][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.074042][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.085279][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.096154][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.108489][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.140733][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.152090][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.164285][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.175563][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.188000][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.200452][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.201144][ T4189] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.217820][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.244830][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.473753][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.495124][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.511649][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.543412][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.556945][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.679044][ T4189] usb 1-1: Dual-Role OTG device on HNP port [ 55.742600][ T399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.814990][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.824014][ T4189] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 55.826777][ T399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.833654][ T4189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.834137][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.860047][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.874976][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.889107][ T4189] gspca_main: spca501-2.14.0 probing 0000:0000 [ 55.892927][ T4201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.904875][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.911029][ T4201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.913397][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.922313][ T4201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.967689][ T4201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.980176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.984003][ T4189] gspca_spca501: reg write: error -32 [ 55.989254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.993101][ T4189] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 56.043350][ T4189] spca501: probe of 1-1:1.0 failed with error -22 [ 56.283734][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 56.303749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 56.314689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 56.333751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 56.343714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.353729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.363717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.373720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.383720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 56.783735][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 57.280678][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 57.287389][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 57.293500][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 57.299892][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 57.306829][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 57.315566][ T4278] loop2: detected capacity change from 0 to 1024 [ 57.369856][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.380052][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.456408][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.467368][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.482968][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.493497][ T4283] loop0: detected capacity change from 0 to 1024 [ 57.539428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.597236][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.636287][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.639612][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.669614][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.684048][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.694708][ T4286] hfsplus: request for non-existent node 262144 in B*Tree [ 57.713977][ T4286] hfsplus: request for non-existent node 262144 in B*Tree [ 57.718426][ T4285] loop2: detected capacity change from 0 to 1024 [ 57.733636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.799416][ T4283] hfsplus: request for non-existent node 262144 in B*Tree [ 57.873630][ T4283] hfsplus: request for non-existent node 262144 in B*Tree [ 59.206830][ T4292] loop4: detected capacity change from 0 to 128 [ 59.315255][ T4292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 59.357458][ T4292] System zones: 1-3, 19-19, 35-36 [ 59.425758][ T4292] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 59.494069][ T4292] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.519983][ T4304] udc-core: couldn't find an available UDC or it's busy [ 59.614473][ T4304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 60.600364][ T4317] loop1: detected capacity change from 0 to 256 [ 60.781328][ T4323] loop4: detected capacity change from 0 to 1024 [ 60.838141][ T4319] loop2: detected capacity change from 0 to 8192 [ 60.904295][ T4319] ======================================================= [ 60.904295][ T4319] WARNING: The mand mount option has been deprecated and [ 60.904295][ T4319] and is ignored by this kernel. Remove the mand [ 60.904295][ T4319] option from the mount to silence this warning. [ 60.904295][ T4319] ======================================================= [ 61.788106][ T4325] loop0: detected capacity change from 0 to 2048 [ 61.906519][ T4319] attempt to access beyond end of device [ 61.906519][ T4319] loop2: rw=0, want=57848, limit=8192 [ 61.990589][ T4319] Buffer I/O error on dev loop2, logical block 57847, async page read [ 61.995227][ T4325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.033019][ T4319] attempt to access beyond end of device [ 62.033019][ T4319] loop2: rw=0, want=57848, limit=8192 [ 62.121083][ T4319] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.182670][ T26] audit: type=1800 audit(1786850051.876:2): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.18" name="file2" dev="loop2" ino=1048591 res=0 errno=0 [ 62.255618][ T4319] syz.2.18 (4319) used greatest stack depth: 21136 bytes left [ 63.231704][ T4343] loop0: detected capacity change from 0 to 8 [ 63.673193][ T4342] loop3: detected capacity change from 0 to 764 [ 63.815808][ T4343] squashfs: Unknown parameter '0000000000000000000000000000000000000003Ob@N½Š 9È€ÿ‚É*\‰¨Â¸XAÛ}1¹ )”‘µE]ÄÌP' [ 64.432104][ T4354] Zero length message leads to an empty skb [ 65.337463][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 65.348960][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 65.356550][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.367324][ T4198] Workqueue: hci3 hci_rx_work [ 65.373088][ T4198] Call Trace: [ 65.376375][ T4198] [ 65.379310][ T4198] dump_stack_lvl+0x188/0x250 [ 65.384086][ T4198] ? show_regs_print_info+0x20/0x20 [ 65.389298][ T4198] ? load_image+0x410/0x410 [ 65.393823][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 65.399026][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 65.403688][ T4198] ? kthread+0x42e/0x520 [ 65.407922][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 65.413112][ T4198] kobject_add_internal+0x5ba/0xcd0 [ 65.418308][ T4198] kobject_add+0x160/0x230 [ 65.423652][ T4198] ? kobject_init+0x1c0/0x1c0 [ 65.429545][ T4198] ? __raw_spin_lock_init+0x41/0x100 [ 65.434838][ T4198] ? klist_children_get+0x50/0x50 [ 65.439861][ T4198] ? get_device_parent+0x121/0x3e0 [ 65.444967][ T4198] device_add+0x470/0x1050 [ 65.449386][ T4198] ? device_initialize+0x2a5/0x4d0 [ 65.454488][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 65.459423][ T4198] le_conn_complete_evt+0xc2e/0x14d0 [ 65.464713][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 65.469819][ T4198] ? __mutex_trylock_common+0x15c/0x260 [ 65.475359][ T4198] hci_le_meta_evt+0xd36/0x3ca0 [ 65.480204][ T4198] ? hci_event_packet+0x363/0x1310 [ 65.485302][ T4198] ? __lock_acquire+0x7b50/0x7b50 [ 65.490321][ T4198] ? hci_remote_host_features_evt+0x240/0x240 [ 65.496394][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 65.502015][ T4198] ? mark_lock+0x94/0x320 [ 65.506329][ T4198] ? mutex_unlock+0x10/0x10 [ 65.510824][ T4198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 65.516796][ T4198] ? lock_chain_count+0x20/0x20 [ 65.521639][ T4198] ? __rwlock_init+0x140/0x140 [ 65.526394][ T4198] hci_event_packet+0xe0b/0x1310 [ 65.531325][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 65.536164][ T4198] ? rcu_lock_release+0x20/0x20 [ 65.541013][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 65.546218][ T4198] hci_rx_work+0x255/0xa10 [ 65.550632][ T4198] process_one_work+0x867/0xff0 [ 65.555482][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 65.561102][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 65.566376][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 65.571384][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 65.576919][ T4198] ? wq_worker_running+0x97/0x170 [ 65.581929][ T4198] worker_thread+0xad7/0x12a0 [ 65.586621][ T4198] kthread+0x42e/0x520 [ 65.590674][ T4198] ? rcu_lock_release+0x20/0x20 [ 65.595509][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 65.600086][ T4198] ret_from_fork+0x1f/0x30 [ 65.604500][ T4198] [ 65.619874][ T4198] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 65.634087][ T4198] Bluetooth: hci3: failed to register connection device [ 71.840800][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.847561][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.868254][ T1108] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 71.903821][ T1108] Bluetooth: hci1: Injecting HCI hardware error event [ 71.933173][ T4190] Bluetooth: hci1: hardware error 0x00 [ 72.371765][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 72.376311][ T4413] loop0: detected capacity change from 0 to 128 [ 72.381696][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 72.395355][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.405436][ T4198] Workqueue: hci2 hci_rx_work [ 72.410129][ T4198] Call Trace: [ 72.413419][ T4198] [ 72.416351][ T4198] dump_stack_lvl+0x188/0x250 [ 72.421055][ T4198] ? show_regs_print_info+0x20/0x20 [ 72.426269][ T4198] ? load_image+0x410/0x410 [ 72.430792][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 72.435911][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 72.440680][ T4198] ? kthread+0x42e/0x520 [ 72.444930][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 72.450142][ T4198] kobject_add_internal+0x5ba/0xcd0 [ 72.455357][ T4198] kobject_add+0x160/0x230 [ 72.459794][ T4198] ? kobject_init+0x1c0/0x1c0 [ 72.464496][ T4198] ? __raw_spin_lock_init+0x41/0x100 [ 72.469795][ T4198] ? klist_children_get+0x50/0x50 [ 72.474842][ T4198] ? get_device_parent+0x121/0x3e0 [ 72.480017][ T4198] device_add+0x470/0x1050 [ 72.484443][ T4198] ? device_initialize+0x2a5/0x4d0 [ 72.489568][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 72.494529][ T4198] le_conn_complete_evt+0xc2e/0x14d0 [ 72.499857][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 72.504998][ T4198] ? __mutex_trylock_common+0x15c/0x260 [ 72.510546][ T4198] hci_le_meta_evt+0xd36/0x3ca0 [ 72.515400][ T4198] ? hci_event_packet+0x363/0x1310 [ 72.520550][ T4198] ? __lock_acquire+0x7b50/0x7b50 [ 72.525577][ T4198] ? hci_remote_host_features_evt+0x240/0x240 [ 72.531685][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 72.538309][ T4198] ? mark_lock+0x94/0x320 [ 72.542643][ T4198] ? mutex_unlock+0x10/0x10 [ 72.547146][ T4198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 72.553118][ T4198] ? lock_chain_count+0x20/0x20 [ 72.557973][ T4198] ? __rwlock_init+0x140/0x140 [ 72.562724][ T4198] hci_event_packet+0xe0b/0x1310 [ 72.567665][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 72.572503][ T4198] ? rcu_lock_release+0x20/0x20 [ 72.577348][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 72.582540][ T4198] hci_rx_work+0x255/0xa10 [ 72.586957][ T4198] process_one_work+0x867/0xff0 [ 72.591811][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 72.597441][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 72.602840][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 72.607862][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 72.613406][ T4198] ? wq_worker_running+0x97/0x170 [ 72.618426][ T4198] worker_thread+0xad7/0x12a0 [ 72.623123][ T4198] kthread+0x42e/0x520 [ 72.627182][ T4198] ? rcu_lock_release+0x20/0x20 [ 72.632039][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 72.636623][ T4198] ret_from_fork+0x1f/0x30 [ 72.641067][ T4198] [ 72.649698][ T4198] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 72.663135][ T4198] Bluetooth: hci2: failed to register connection device [ 73.533069][ T4421] loop3: detected capacity change from 0 to 256 [ 73.569565][ T4421] dummy_hcd dummy_hcd.0: remove, state 1 [ 73.575930][ T4421] usb usb1: USB disconnect, device number 1 [ 73.582039][ T4421] usb 1-1: USB disconnect, device number 2 [ 73.606766][ T4421] dummy_hcd dummy_hcd.0: stopped [ 73.611742][ T4421] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 73.824678][ T4413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.849439][ T4413] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.901523][ T4425] loop4: detected capacity change from 0 to 1024 [ 73.966699][ T4425] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 73.984542][ T4425] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 74.013981][ T4427] loop3: detected capacity change from 0 to 1024 [ 74.034258][ T4425] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.085252][ T4425] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,noblock_validity,nomblk_io_submit,i_version,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,. Quota mode: writeback. [ 74.109929][ T4425] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.364179][ T4425] EXT4-fs (loop4): shut down requested (0) [ 76.613207][ T1111] cfg80211: failed to load regulatory.db [ 78.407578][ T4451] 9pnet: Insufficient options for proto=fd [ 79.033778][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.874724][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.035057][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.110804][ T4230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.223860][ T4230] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.276624][ T4487] loop3: detected capacity change from 0 to 128 [ 81.082633][ T4487] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.094095][ T4230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.123834][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.124149][ T4487] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.142197][ T4230] usb 5-1: Product: syz [ 81.142239][ T4230] usb 5-1: Manufacturer: syz [ 81.142252][ T4230] usb 5-1: SerialNumber: syz [ 81.902630][ T4496] file system registered [ 82.396361][ T4230] cdc_ncm 5-1:1.0: skipping garbage [ 82.403178][ T4230] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 82.443800][ T4230] cdc_ncm 5-1:1.0: bind() failure [ 82.491715][ T4230] usb 5-1: USB disconnect, device number 2 [ 82.529693][ T4503] loop0: detected capacity change from 0 to 764 [ 84.119416][ T4518] read descriptors [ 84.245366][ T4201] ffs_data_put(): freeing [ 86.497093][ T4538] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.714340][ T4543] kvm: pic: level sensitive irq not supported [ 86.714948][ T4543] kvm: pic: non byte read [ 86.738084][ T4543] kvm: pic: level sensitive irq not supported [ 86.738150][ T4543] kvm: pic: non byte read [ 86.788597][ T4543] kvm: pic: level sensitive irq not supported [ 86.788690][ T4543] kvm: pic: non byte read [ 86.877143][ T4543] kvm: pic: level sensitive irq not supported [ 86.877234][ T4543] kvm: pic: non byte read [ 86.971347][ T4543] kvm: pic: level sensitive irq not supported [ 86.971443][ T4543] kvm: pic: non byte read [ 87.053038][ T4543] kvm: pic: level sensitive irq not supported [ 87.053106][ T4543] kvm: pic: non byte read [ 87.168503][ T4543] kvm: pic: level sensitive irq not supported [ 87.168550][ T4543] kvm: pic: non byte read [ 87.413915][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.439784][ T4555] fuse: Bad value for 'fd' [ 87.516425][ T4559] loop0: detected capacity change from 0 to 512 [ 87.534150][ T4558] loop1: detected capacity change from 0 to 2048 [ 87.551525][ T4562] binder: 4561:4562 ioctl 89a0 0 returned -22 [ 87.558415][ T4562] binder: 4561:4562 ioctl c0306201 200000000240 returned -11 [ 87.631034][ T4558] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 87.634853][ T4567] loop4: detected capacity change from 0 to 16 [ 87.699812][ T4558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.720406][ T4567] erofs: (device loop4): mounted with root inode @ nid 36. [ 87.800953][ T4559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.813981][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.874813][ T4559] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.902287][ T26] audit: type=1800 audit(1786850077.596:3): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.84" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 87.933892][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.626451][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.635418][ T1108] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.971889][ T26] audit: type=1800 audit(1786850078.666:4): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.83" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 89.033923][ T1108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.043364][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.066720][ T1108] usb 4-1: Product: syz [ 89.076846][ T1108] usb 4-1: Manufacturer: syz [ 89.081697][ T1108] usb 4-1: SerialNumber: syz [ 90.233873][ T1108] usb 4-1: can't set config #1, error -71 [ 90.254114][ T1108] usb 4-1: USB disconnect, device number 2 [ 91.813886][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.965411][ T26] audit: type=1326 audit(1786850081.626:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 92.034591][ T26] audit: type=1326 audit(1786850081.666:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 92.058938][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 92.128044][ T4598] loop1: detected capacity change from 0 to 8 [ 92.137732][ T26] audit: type=1326 audit(1786850081.666:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1b98b1052c code=0x7ffc0000 [ 92.773285][ T26] audit: type=1326 audit(1786850081.666:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1b98b1058e code=0x7ffc0000 [ 92.921712][ T26] audit: type=1326 audit(1786850081.666:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b98b53d6b code=0x7ffc0000 [ 92.985660][ T26] audit: type=1326 audit(1786850081.666:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.042991][ T26] audit: type=1326 audit(1786850081.666:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.143970][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.165201][ T26] audit: type=1326 audit(1786850081.666:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.239077][ T1108] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 94.251067][ T26] audit: type=1326 audit(1786850081.696:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.256981][ T1108] usb 2-1: can't read configurations, error -71 [ 94.332749][ T26] audit: type=1326 audit(1786850081.696:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.432376][ T26] audit: type=1326 audit(1786850081.696:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.502073][ T4620] loop3: detected capacity change from 0 to 128 [ 94.520955][ T26] audit: type=1326 audit(1786850081.696:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.561832][ T4177] udevd[4177]: incorrect ext4 checksum on /dev/loop3 [ 94.569741][ T4620] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 94.614072][ T26] audit: type=1326 audit(1786850081.696:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.699950][ T26] audit: type=1326 audit(1786850081.696:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.0.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 94.730374][ T4187] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 94.874475][ T4187] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 95.577208][ T4624] loop4: detected capacity change from 0 to 128 [ 95.650064][ T4624] FAT-fs (loop4): bogus number of FAT structure [ 96.713617][ T4624] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 96.726879][ T4624] FAT-fs (loop4): Can't find a valid FAT filesystem [ 96.790619][ T4630] loop0: detected capacity change from 0 to 256 [ 96.851687][ T4630] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.900059][ T4187] syz-executor (4187) used greatest stack depth: 20944 bytes left [ 96.936588][ T4305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.978099][ T4630] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.153353][ T4305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.270108][ T4305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.381999][ T4305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.064310][ T26] kauditd_printk_skb: 219 callbacks suppressed [ 98.064324][ T26] audit: type=1326 audit(1786850087.766:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4629 comm="syz.0.107" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 98.224798][ T26] audit: type=1326 audit(1786850087.796:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4629 comm="syz.0.107" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1b98b540d9 code=0x7ffc0000 [ 99.504929][ T4661] loop0: detected capacity change from 0 to 128 [ 99.950204][ T4651] chnl_net:caif_netlink_parms(): no params data found [ 100.149855][ T4685] loop0: detected capacity change from 0 to 512 [ 100.230899][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.238305][ T4651] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.246736][ T4651] device bridge_slave_0 entered promiscuous mode [ 100.256696][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.279817][ T4685] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 100.325730][ T4685] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.339269][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.344040][ T4685] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.123: Block bitmap for bg 0 marked uninitialized [ 100.364135][ T4692] capability: warning: `syz.4.120' uses deprecated v2 capabilities in a way that may be insecure [ 100.384773][ T4651] device bridge_slave_1 entered promiscuous mode [ 100.446127][ T4651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.457641][ T4651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.459460][ T4685] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 100.490217][ T4651] team0: Port device team_slave_0 added [ 100.494121][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 100.998296][ T4699] No source specified [ 101.624870][ T4685] EXT4-fs (loop0): 1 orphan inode deleted [ 101.630646][ T4685] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.664953][ T4651] team0: Port device team_slave_1 added [ 101.677993][ T4704] loop4: detected capacity change from 0 to 512 [ 101.733275][ T4651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.760269][ T4651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.790914][ T4651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.408648][ T4704] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 102.477446][ T4704] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,min_batch_time=0x0000000000000004,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 102.538120][ T4651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.557281][ T4651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.583871][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 102.625091][ T4704] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.756227][ T4651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.888785][ T4651] device hsr_slave_0 entered promiscuous mode [ 102.950978][ T4651] device hsr_slave_1 entered promiscuous mode [ 102.964986][ T4651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.976271][ T4651] Cannot create hsr debugfs directory [ 103.599949][ T4735] No source specified [ 104.207743][ T4738] udc-core: couldn't find an available UDC or it's busy [ 104.266206][ T4738] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.360513][ T4305] device hsr_slave_0 left promiscuous mode [ 104.397526][ T4305] device hsr_slave_1 left promiscuous mode [ 104.416961][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.450370][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.487095][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.513784][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.544567][ T4305] device bridge_slave_1 left promiscuous mode [ 104.552203][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.606632][ T4305] device bridge_slave_0 left promiscuous mode [ 104.612948][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.653993][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 104.728685][ T4305] device veth1_macvtap left promiscuous mode [ 104.739593][ T4305] device veth0_macvtap left promiscuous mode [ 104.748521][ T4305] device veth1_vlan left promiscuous mode [ 104.759895][ T4305] device veth0_vlan left promiscuous mode [ 105.868355][ T4305] team0 (unregistering): Port device team_slave_1 removed [ 105.929797][ T4305] team0 (unregistering): Port device team_slave_0 removed [ 105.987394][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.040240][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.123672][ C0] sched: RT throttling activated [ 106.723781][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 106.861702][ T4305] bond0 (unregistering): Released all slaves [ 108.039695][ T4651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.519432][ T4779] "syz.0.144" (4779) uses obsolete ecb(arc4) skcipher [ 109.179152][ T4651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.235369][ T4651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.266469][ T4782] loop4: detected capacity change from 0 to 128 [ 109.297786][ T4651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.378286][ T4782] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.459102][ T4782] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.590039][ T4651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.644479][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.656995][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.709363][ T4651] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.763353][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.787431][ T4786] loop3: detected capacity change from 0 to 1756 [ 109.801192][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.846268][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.853375][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.865059][ T4786] UDF-fs: bad mount option "fsmagic=0x0000000000000007" or missing value [ 109.951666][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.420811][ T4799] No source specified [ 111.093784][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.141555][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.174473][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.181615][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.231603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.261525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.284558][ T4804] loop0: detected capacity change from 0 to 2048 [ 111.301490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.329799][ T4804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.335839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.354682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.379633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.401156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.443003][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.465480][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.499300][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.517511][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.559630][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.157070][ T4808] "syz.0.150" (4808) uses obsolete ecb(arc4) skcipher [ 112.259982][ T4808] syz.0.150 sent an empty control message without MSG_MORE. [ 112.593004][ T4818] loop3: detected capacity change from 0 to 8 [ 112.723754][ T4818] SQUASHFS error: lzo decompression failed, data probably corrupt [ 112.731693][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.732015][ T4818] SQUASHFS error: Failed to read block 0x144: -5 [ 112.755270][ T4818] SQUASHFS error: Unable to read metadata cache entry [142] [ 112.762593][ T4818] SQUASHFS error: Unable to read inode 0x11f [ 112.774033][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.804567][ T4651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.247214][ T4837] loop3: detected capacity change from 0 to 16 [ 114.720323][ T4837] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 116.225430][ T4852] No source specified [ 116.337314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.354988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.404821][ T4860] loop4: detected capacity change from 0 to 256 [ 116.444666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.474367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.484707][ T4860] exfat: Unknown parameter 'keep_last_dots' [ 116.506013][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.543288][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.619932][ T4651] device veth0_vlan entered promiscuous mode [ 116.670191][ T4651] device veth1_vlan entered promiscuous mode [ 117.765353][ T4863] loop4: detected capacity change from 0 to 128 [ 117.815349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.955226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.987553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.057859][ T4651] device veth0_macvtap entered promiscuous mode [ 118.119006][ T4651] device veth1_macvtap entered promiscuous mode [ 118.205675][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.255080][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.313702][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.343700][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.353542][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.398240][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.433715][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.463792][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.336746][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.357207][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.368187][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.393736][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.448065][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.478857][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.495140][ T4892] loop4: detected capacity change from 0 to 256 [ 119.501699][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.541082][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.554701][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.566078][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.579981][ T4651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.589410][ T4651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.598626][ T4651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.608411][ T4651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.794743][ T4892] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 120.317019][ T4892] usb usb8: usbfs: process 4892 (syz.4.166) did not claim interface 0 before use [ 120.524157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.539301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.604678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.641107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.651979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.746785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.199427][ T4909] No source specified [ 123.035448][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.043383][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.125931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.147667][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.229725][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.271852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.826621][ T1108] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 125.149180][ T4952] loop0: detected capacity change from 0 to 512 [ 125.203074][ T4952] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 125.240603][ T4952] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 125.284582][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.334971][ T4952] EXT4-fs (loop0): 1 truncate cleaned up [ 125.353478][ T4952] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 125.354115][ T1108] usb 4-1: not running at top speed; connect to a high speed hub [ 125.477701][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.957462][ T4964] No source specified [ 126.574017][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1104, setting to 64 [ 127.849107][ T1108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.931527][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.968632][ T1108] usb 4-1: Product: syz [ 128.007609][ T1108] usb 4-1: Manufacturer: syz [ 128.036789][ T1108] usb 4-1: SerialNumber: syz [ 128.085488][ T1108] usb 4-1: can't set config #1, error -71 [ 128.560548][ T4979] No source specified [ 129.203947][ T1108] usb 4-1: USB disconnect, device number 3 [ 133.066006][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.072321][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.939822][ T5020] No source specified [ 135.208607][ T26] audit: type=1326 audit(1786850124.906:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b58a50d9 code=0x7ffc0000 [ 135.300312][ T26] audit: type=1326 audit(1786850124.946:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b58a50d9 code=0x7ffc0000 [ 136.436067][ T4271] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.473191][ T26] audit: type=1326 audit(1786850124.946:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b58a50d9 code=0x7ffc0000 [ 137.083718][ T5045] No source specified [ 137.214269][ T26] audit: type=1326 audit(1786850124.946:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f68b58a50d9 code=0x7ffc0000 [ 137.219562][ T5053] syz.3.192 (5053): /proc/5051/oom_adj is deprecated, please use /proc/5051/oom_score_adj instead. [ 137.261104][ T26] audit: type=1326 audit(1786850124.946:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b58a50d9 code=0x7ffc0000 [ 137.329260][ T26] audit: type=1326 audit(1786850124.946:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f68b58a50d9 code=0x7ffc0000 [ 137.383770][ T26] audit: type=1326 audit(1786850124.946:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f68b58a50d9 code=0x7ffc0000 [ 137.454269][ T4271] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 137.474754][ T4271] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 137.685352][ T4271] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 137.724965][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.803416][ T4271] usb 6-1: Product: syz [ 137.827966][ T4271] usb 6-1: Manufacturer: syz [ 137.880530][ T4271] usb 6-1: SerialNumber: syz [ 139.425323][ T4271] usb 6-1: config 0 descriptor?? [ 139.455716][ T4271] usb 6-1: can't set config #0, error -71 [ 139.479383][ T4271] usb 6-1: USB disconnect, device number 2 [ 139.531640][ T5067] loop5: detected capacity change from 0 to 1024 [ 139.611312][ T5067] EXT4-fs (loop5): Ignoring removed orlov option [ 139.710739][ T5067] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 140.450350][ T5080] loop5: detected capacity change from 0 to 2048 [ 140.543984][ T5080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.397733][ T5090] No source specified [ 142.756288][ T5100] No source specified [ 142.796719][ T5098] loop0: detected capacity change from 0 to 2048 [ 143.965379][ T5098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.057954][ T5089] device wlan0 entered promiscuous mode [ 145.380367][ T5121] netlink: 104 bytes leftover after parsing attributes in process `syz.0.215'. [ 145.710819][ T5123] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3393688969 (54299023504 ns) > initial count (49421972784 ns). Using initial count to start timer. [ 147.666110][ T5148] No source specified [ 149.200380][ T5177] loop4: detected capacity change from 0 to 128 [ 149.319191][ T5177] FAT-fs (loop4): bogus number of reserved sectors [ 149.342062][ T5177] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 149.389733][ T5177] FAT-fs (loop4): Can't find a valid FAT filesystem [ 149.724620][ T5195] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.247426][ T5199] No source specified [ 151.578595][ T5217] No source specified [ 154.903161][ T5255] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.697986][ T5258] sctp: failed to load transform for md5: -2 [ 156.478106][ T5287] No source specified [ 157.185305][ T5290] netlink: 10 bytes leftover after parsing attributes in process `syz.0.243'. [ 159.285576][ T5316] sctp: failed to load transform for md5: -2 [ 159.470105][ T5334] ------------[ cut here ]------------ [ 159.485691][ T5337] loop0: detected capacity change from 0 to 128 [ 159.513931][ T5334] WARNING: CPU: 1 PID: 5334 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 159.556852][ T5334] Modules linked in: [ 159.630378][ T5334] CPU: 1 PID: 5334 Comm: syz.5.244 Not tainted syzkaller #0 [ 159.662965][ T5343] loop4: detected capacity change from 0 to 512 [ 159.684488][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.732776][ T5343] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 159.766907][ T5343] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 159.813957][ T5334] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 159.820439][ T5334] Code: e8 81 e8 ae 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 66 e8 ae 00 e9 e4 f7 ff ff e8 cc c5 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 159.876646][ T5343] EXT4-fs (loop4): 1 truncate cleaned up [ 159.892652][ T5343] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 159.946261][ T5334] RSP: 0018:ffffc90003247ca0 EFLAGS: 00010287 [ 159.952573][ T5334] RAX: ffffffff810f36e4 RBX: 1ffff110081ea062 RCX: 0000000000080000 [ 159.961413][ T5334] RDX: ffffc90005cca000 RSI: 0000000000000458 RDI: 0000000000000459 [ 159.969809][ T5334] RBP: 0000000000000000 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 159.983803][ T5334] R10: dffffc0000000000 R11: fffffbfff1b161be R12: ffff888040fad001 [ 159.992551][ T5334] R13: ffff888040f500f0 R14: ffff888040f50000 R15: ffff888040fad000 [ 160.002162][ T5334] FS: 00007fd55f4936c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 160.012284][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.019390][ T5334] CR2: 000055d5d1c0a950 CR3: 0000000077d11000 CR4: 00000000003526f0 [ 160.044970][ T5334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.073872][ T5334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.124123][ T5334] Call Trace: [ 160.143955][ T5334] [ 160.150674][ T5334] kvm_vcpu_ioctl+0x8f2/0xc10 [ 160.162470][ T5334] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 160.171571][ T5339] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 160.195469][ T5334] ? bpf_lsm_file_ioctl+0x5/0x10 [ 160.225313][ T5339] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 160.258878][ T5334] ? security_file_ioctl+0x7c/0xa0 [ 160.279265][ T5334] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 160.310948][ T5334] __se_sys_ioctl+0xfa/0x170 [ 160.343802][ T5334] do_syscall_64+0x4c/0xa0 [ 160.348282][ T5334] ? clear_bhb_loop+0x30/0x80 [ 160.352988][ T5334] ? clear_bhb_loop+0x30/0x80 [ 160.361670][ T5334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.378557][ T5334] RIP: 0033:0x7fd56123b0d9 [ 160.413018][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.443526][ T5334] RSP: 002b:00007fd55f493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.453121][ T5334] RAX: ffffffffffffffda RBX: 00007fd5614c2fa0 RCX: 00007fd56123b0d9 [ 160.461892][ T5334] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 160.470214][ T5334] RBP: 00007fd5612d2024 R08: 0000000000000000 R09: 0000000000000000 [ 160.478551][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.506068][ T5334] R13: 00007fd5614c3038 R14: 00007fd5614c2fa0 R15: 00007fff1e1974c8 [ 160.514486][ T5334] [ 160.517545][ T5334] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 160.524833][ T5334] CPU: 1 PID: 5334 Comm: syz.5.244 Not tainted syzkaller #0 [ 160.532131][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.542294][ T5334] Call Trace: [ 160.545583][ T5334] [ 160.548527][ T5334] dump_stack_lvl+0x188/0x250 [ 160.553227][ T5334] ? show_regs_print_info+0x20/0x20 [ 160.558447][ T5334] ? load_image+0x410/0x410 [ 160.562982][ T5334] panic+0x2f8/0x850 [ 160.566903][ T5334] ? bpf_jit_dump+0xd0/0xd0 [ 160.571439][ T5334] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 160.577331][ T5334] __warn+0x248/0x2b0 [ 160.581478][ T5334] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 160.587311][ T5334] report_bug+0x1b9/0x2e0 [ 160.591668][ T5334] handle_bug+0x3a/0x70 [ 160.595847][ T5334] exc_invalid_op+0x16/0x40 [ 160.600406][ T5334] asm_exc_invalid_op+0x16/0x20 [ 160.605279][ T5334] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 160.611722][ T5334] Code: e8 81 e8 ae 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 66 e8 ae 00 e9 e4 f7 ff ff e8 cc c5 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 160.631346][ T5334] RSP: 0018:ffffc90003247ca0 EFLAGS: 00010287 [ 160.637428][ T5334] RAX: ffffffff810f36e4 RBX: 1ffff110081ea062 RCX: 0000000000080000 [ 160.645412][ T5334] RDX: ffffc90005cca000 RSI: 0000000000000458 RDI: 0000000000000459 [ 160.653399][ T5334] RBP: 0000000000000000 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 160.661388][ T5334] R10: dffffc0000000000 R11: fffffbfff1b161be R12: ffff888040fad001 [ 160.669377][ T5334] R13: ffff888040f500f0 R14: ffff888040f50000 R15: ffff888040fad000 [ 160.677369][ T5334] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 160.683213][ T5334] kvm_vcpu_ioctl+0x8f2/0xc10 [ 160.687910][ T5334] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 160.693552][ T5334] ? bpf_lsm_file_ioctl+0x5/0x10 [ 160.698474][ T5334] ? security_file_ioctl+0x7c/0xa0 [ 160.703595][ T5334] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 160.709232][ T5334] __se_sys_ioctl+0xfa/0x170 [ 160.713811][ T5334] do_syscall_64+0x4c/0xa0 [ 160.718210][ T5334] ? clear_bhb_loop+0x30/0x80 [ 160.722872][ T5334] ? clear_bhb_loop+0x30/0x80 [ 160.727554][ T5334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.733430][ T5334] RIP: 0033:0x7fd56123b0d9 [ 160.737835][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.757464][ T5334] RSP: 002b:00007fd55f493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.765898][ T5334] RAX: ffffffffffffffda RBX: 00007fd5614c2fa0 RCX: 00007fd56123b0d9 [ 160.773890][ T5334] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 160.781879][ T5334] RBP: 00007fd5612d2024 R08: 0000000000000000 R09: 0000000000000000 [ 160.789874][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.797856][ T5334] R13: 00007fd5614c3038 R14: 00007fd5614c2fa0 R15: 00007fff1e1974c8 [ 160.805869][ T5334] [ 160.809010][ T5334] Kernel Offset: disabled [ 160.813503][ T5334] Rebooting in 86400 seconds..