last executing test programs: 7.606338113s ago: executing program 3 (id=34): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/425], 0x1b4, &(0x7f0000001040)='debugfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0100020009b299ea"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) 7.114238901s ago: executing program 4 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) write(r1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0]) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={r4, 0x3, 0xff, 0x190, 0x2000003, 0x7, 0x9}) chdir(&(0x7f0000000000)='./file1\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x1, 0x0, 0x17}, 0x18) 6.722920361s ago: executing program 2 (id=39): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x820080, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) creat(0x0, 0x80) chdir(&(0x7f0000000000)='./bus\x00') open$dir(0x0, 0x200, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='net/anycast6\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x0) 6.376355887s ago: executing program 4 (id=41): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x1, 0x7fff0021}]}) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0xf29db7ae9ffd573e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x8, 0x3, 0x1248, 0xb4, 0x11, 0x148, 0x0, 0x0, 0x11d8, 0x2a8, 0x2a8, 0x11d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0xff000000, 'veth1\x00', 'syzkaller1\x00', {0xff}, {}, 0x21, 0x3, 0x1f}, 0x0, 0x94, 0xb4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0xfc, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x12a4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.311333876s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='4', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000180)='6', 0x1) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) 5.016744277s ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x241) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000, 0xa15b0}, 0x700) write(r0, &(0x7f0000000000)='3', 0x4e) 4.93652773s ago: executing program 4 (id=45): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000180)=""/145, 0x91) remap_file_pages(&(0x7f000012c000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) 4.86446037s ago: executing program 3 (id=47): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000440)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000001c0)={0x3, {"3ada7c5c68c529135960daeb7925ff28", "6ed067463537f9ea0b798faf3a83a56e", "2c5a3e26b8daf9c50906bbb2f61fd172"}, 0x5ed, 0x7}) 3.559204955s ago: executing program 1 (id=48): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000", 0x1b) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r1, r1) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) 3.481045837s ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='hi', 0x2) 3.350464103s ago: executing program 2 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYBLOB, @ANYBLOB], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) socketpair(0x21, 0x2, 0x45, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0xffe3}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) 3.314300864s ago: executing program 0 (id=52): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000340301000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='127.0.0.1', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='77', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/node/node1/num\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) write(r5, &(0x7f0000000a00)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./config/cluster/ocfs2/heartbeat/region1\x00', 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200", 0x55}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r7) 3.186780549s ago: executing program 3 (id=53): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x2, {0x8000, 0x1000, 0x4, 0x873}}) 3.097670934s ago: executing program 0 (id=54): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpgid(0xffffffffffffffff) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x403, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_io_uring_setup(0x49d, &(0x7f0000000080)={0x0, 0x9c9b, 0x8, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0), &(0x7f0000000000)) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffffdfd, 0x7, 0xfffffe01, 0x7fff, 0xb1, "fee835f605be0000002300", 0x0, 0x10}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) io_setup(0x3, 0x0) io_getevents(0x0, 0xffffffff, 0x0, 0x0, 0x0) 3.064419723s ago: executing program 3 (id=55): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) gettid() flock(r0, 0x5) 3.033019122s ago: executing program 2 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x80}]}}]}, 0x3c}}, 0x0) 3.029736143s ago: executing program 4 (id=57): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x7}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000026, 0x11, r3, 0xa649000) 2.678873711s ago: executing program 2 (id=58): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r5, 0x2007ffb) close(r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) openat(r5, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 2.50410602s ago: executing program 4 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x4e22, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@mcast2, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x80000001, 0x400804, 0x9, 0x292}, {0x3}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}]}, 0x138}}, 0x44050) write(r0, &(0x7f0000000000)='3', 0x4e) 1.989050234s ago: executing program 0 (id=60): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$3(0x3) 1.86154571s ago: executing program 3 (id=61): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x501800) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x3, 0x1, 0x4, 0x80, 0x5, {0x77359400}, {0x3, 0x1, 0x0, 0x2, 0x0, 0xb, "75ff52b2"}, 0x6, 0x2, {0x0}, 0x3ff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0x40045613, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) r2 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 1.428137271s ago: executing program 1 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20) 1.336099426s ago: executing program 1 (id=63): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$rxrpc(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x404840) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001300)=""/4096) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x737}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x50}}, 0x0) socket(0x400000000010, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(0xffffffffffffffff, &(0x7f00000003c0)=""/68, 0x44) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000100), 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.221097799s ago: executing program 0 (id=64): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000500), 0x1000) 1.067091242s ago: executing program 1 (id=65): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.009676498s ago: executing program 0 (id=66): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44240, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 836.358827ms ago: executing program 4 (id=67): setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 138.570372ms ago: executing program 1 (id=68): r0 = socket$inet(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 83.564277ms ago: executing program 0 (id=69): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x8b) socket(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81) finit_module(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28031, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) getdents(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x6d2, 0x1bec, 0x9, &(0x7f0000000000)={[0x2]}, 0x8) r8 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x4b5c, 0x201) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82187201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 0s ago: executing program 1 (id=70): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000a"], 0x18}}, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 55.348710][ T4175] cgroup: Unknown subsys name 'net' [ 55.481346][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.699119][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.531707][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 58.597922][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 58.616445][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 58.685566][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 58.720136][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.729598][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.738466][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.769267][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.776786][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.784420][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.792234][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 58.818937][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.826399][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.834241][ T4195] device bridge_slave_0 entered promiscuous mode [ 58.858351][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.875424][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.883475][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.891305][ T4195] device bridge_slave_1 entered promiscuous mode [ 58.910502][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.920193][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.927349][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.934961][ T4197] device bridge_slave_0 entered promiscuous mode [ 58.968285][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.975352][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.983586][ T4197] device bridge_slave_1 entered promiscuous mode [ 59.003254][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.023921][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.031082][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.039340][ T4189] device bridge_slave_0 entered promiscuous mode [ 59.053018][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.060338][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.068524][ T4189] device bridge_slave_1 entered promiscuous mode [ 59.076686][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.092529][ T4188] team0: Port device team_slave_0 added [ 59.100892][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.134417][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.144486][ T4188] team0: Port device team_slave_1 added [ 59.151977][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.165967][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.173518][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.181411][ T4187] device bridge_slave_0 entered promiscuous mode [ 59.190436][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.218855][ T4195] team0: Port device team_slave_0 added [ 59.224843][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.231994][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.240020][ T4187] device bridge_slave_1 entered promiscuous mode [ 59.266383][ T4189] team0: Port device team_slave_0 added [ 59.273878][ T4195] team0: Port device team_slave_1 added [ 59.286724][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.293673][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.319829][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.333847][ T4197] team0: Port device team_slave_0 added [ 59.341996][ T4189] team0: Port device team_slave_1 added [ 59.359455][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.369096][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.376557][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.402653][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.414850][ T4197] team0: Port device team_slave_1 added [ 59.440699][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.460541][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.467819][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.493779][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.505619][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.512826][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.539289][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.569933][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.577136][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.603120][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.625100][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.632360][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.658354][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.671304][ T4187] team0: Port device team_slave_0 added [ 59.678074][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.685051][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.711150][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.730857][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.737934][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.764015][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.777039][ T4187] team0: Port device team_slave_1 added [ 59.824884][ T4188] device hsr_slave_0 entered promiscuous mode [ 59.831842][ T4188] device hsr_slave_1 entered promiscuous mode [ 59.863016][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.870298][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.896323][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.911781][ T4195] device hsr_slave_0 entered promiscuous mode [ 59.918871][ T4195] device hsr_slave_1 entered promiscuous mode [ 59.925299][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.933190][ T4195] Cannot create hsr debugfs directory [ 59.947482][ T4197] device hsr_slave_0 entered promiscuous mode [ 59.954489][ T4197] device hsr_slave_1 entered promiscuous mode [ 59.961386][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.969347][ T4197] Cannot create hsr debugfs directory [ 59.978111][ T4189] device hsr_slave_0 entered promiscuous mode [ 59.984944][ T4189] device hsr_slave_1 entered promiscuous mode [ 59.991958][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.999697][ T4189] Cannot create hsr debugfs directory [ 60.005664][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.012678][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.039121][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.127463][ T4187] device hsr_slave_0 entered promiscuous mode [ 60.134077][ T4187] device hsr_slave_1 entered promiscuous mode [ 60.141171][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.149079][ T4187] Cannot create hsr debugfs directory [ 60.256926][ T2305] Bluetooth: hci4: command 0x0409 tx timeout [ 60.256926][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 60.336163][ T1346] Bluetooth: hci2: command 0x0409 tx timeout [ 60.336710][ T2305] Bluetooth: hci3: command 0x0409 tx timeout [ 60.348445][ T1346] Bluetooth: hci1: command 0x0409 tx timeout [ 60.407375][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.419960][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.428963][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.440346][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.494663][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.506290][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.515567][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.541879][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.580078][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.589946][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.611190][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.638721][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.645575][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.690434][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.702818][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.711990][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.741515][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.757532][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.764381][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.773881][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.785428][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.806722][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.817032][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.825924][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.833194][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.842089][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.851709][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.860247][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.867330][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.874920][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.883493][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.894891][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.906496][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.915371][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.927779][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.943418][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.952128][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.964256][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.975644][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.002300][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.012165][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.021381][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.028495][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.037325][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.046006][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.054720][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.062796][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.074298][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.083799][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.092697][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.099794][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.125212][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.150462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.161686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.171730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.205736][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.214992][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.224011][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.233327][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.242013][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.250988][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.263897][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.271858][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.280587][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.306699][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.314988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.324161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.335203][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.344345][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.359995][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.374083][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.391631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.402277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.420189][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.429963][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.445573][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.489531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.498815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.507911][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.515259][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.524009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.534969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.545782][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.552918][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.562173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.570215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.578219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.587849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.599315][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.623248][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.632675][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.641496][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.650447][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.662544][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.676500][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.692795][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.708250][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.719207][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.728720][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.738545][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.745645][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.753412][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.762568][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.773220][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.781617][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.789780][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.798417][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.806951][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.815516][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.824144][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.831256][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.839343][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.854643][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.867911][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.891684][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.901314][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.909920][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.917027][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.925810][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.934874][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.944208][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.952940][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.961329][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.968506][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.976340][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.984861][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.031205][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.040212][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.049044][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.058785][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.068688][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.077966][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.086875][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.095364][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.105524][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.114586][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.123688][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.132255][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.141496][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.150182][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.160378][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.168891][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.177421][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.186683][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.202909][ T4195] device veth0_vlan entered promiscuous mode [ 62.218728][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.229634][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.250672][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.261189][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.292739][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.302585][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.311686][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.325837][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.335123][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.341307][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 62.346491][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.349449][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 62.358821][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.371552][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.379487][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.393646][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.405179][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.416668][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 62.428070][ T4195] device veth1_vlan entered promiscuous mode [ 62.440484][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.450070][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 62.457184][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.465369][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 62.469896][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.533788][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.544903][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.553954][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.563584][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.572485][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.589360][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.601426][ T4188] device veth0_vlan entered promiscuous mode [ 62.621724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.642239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.653125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.668982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.682166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.690319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.699051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.708365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.721921][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.730491][ T4195] device veth0_macvtap entered promiscuous mode [ 62.752800][ T4188] device veth1_vlan entered promiscuous mode [ 62.762043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.770642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.793364][ T4195] device veth1_macvtap entered promiscuous mode [ 62.815656][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.827270][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.852503][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.863764][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.875266][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.885173][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.895624][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.911824][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.924371][ T4188] device veth0_macvtap entered promiscuous mode [ 62.945532][ T4187] device veth0_vlan entered promiscuous mode [ 62.956661][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.968662][ T4188] device veth1_macvtap entered promiscuous mode [ 62.977226][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.985238][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.993606][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.003566][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.012068][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.021105][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.030814][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.039305][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.050336][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.060462][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.069415][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.078222][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.103006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.111880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.142741][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.153640][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.167802][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.179216][ T4187] device veth1_vlan entered promiscuous mode [ 63.187038][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.197552][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.209128][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.221112][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.230566][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.239447][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.248287][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.260305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.269292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.278356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.287747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.296557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.305594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.315504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.330862][ T4197] device veth0_vlan entered promiscuous mode [ 63.367353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.375128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.383453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.395227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.415414][ T4197] device veth1_vlan entered promiscuous mode [ 63.467613][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.475588][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.495577][ T4189] device veth0_vlan entered promiscuous mode [ 63.515777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.524216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.533439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.542137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.550413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.558806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.570608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.578826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.612569][ T4189] device veth1_vlan entered promiscuous mode [ 63.624554][ T4187] device veth0_macvtap entered promiscuous mode [ 63.635559][ T4187] device veth1_macvtap entered promiscuous mode [ 63.654198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.668912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.677892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.687038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.695521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.707953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.715988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.726955][ T4197] device veth0_macvtap entered promiscuous mode [ 63.746514][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.754441][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.762572][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.782780][ T4197] device veth1_macvtap entered promiscuous mode [ 63.802482][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.811409][ T4189] device veth0_macvtap entered promiscuous mode [ 63.821537][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.835044][ T4189] device veth1_macvtap entered promiscuous mode [ 63.851913][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.872623][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.886088][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.897277][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.908291][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.917076][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.925418][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.935196][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.944791][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.953935][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.962566][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.971801][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.991242][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.994410][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.009884][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.010389][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.029261][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.040015][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.051018][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.064733][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.077173][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.087901][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.099211][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.109383][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.120823][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.133415][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.146961][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.163365][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.174035][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.185526][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.195606][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.207073][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.218451][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.225912][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.235849][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.244620][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.254092][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.263282][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.272367][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.282309][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.298406][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.307446][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.317021][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.325831][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.351562][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.361408][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.372179][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.384619][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.423293][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 64.432737][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 64.486304][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.504955][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 64.512508][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 64.525818][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.540236][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.550470][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.561259][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.562927][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 64.571200][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.571216][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.571226][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.571237][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.572651][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.698053][ T4268] Invalid ELF header magic: != ELF [ 65.236609][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.245422][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.291054][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.308901][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.322432][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.339771][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.352638][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 65.357732][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.369666][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.380447][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.391393][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.402650][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.415327][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.424718][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.433722][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.448633][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.471445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.486511][ T4234] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 65.497741][ T4234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 65.510584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.524340][ T4234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 65.537647][ T4234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 65.549511][ T4234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 65.560622][ T4234] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.574224][ T4234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.583802][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.704386][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.733946][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.782221][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.804316][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.812545][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.820636][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.832305][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.836622][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.845122][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.866308][ T4234] usb 3-1: GET_CAPABILITIES returned 0 [ 65.872135][ T4234] usbtmc 3-1:16.0: can't read capabilities [ 65.890817][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.901336][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.940226][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.981822][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.993803][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.004367][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.034176][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.041774][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.051802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.097675][ T4277] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.185958][ T21] usb 3-1: USB disconnect, device number 2 [ 66.309189][ T4286] FAULT_INJECTION: forcing a failure. [ 66.309189][ T4286] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 66.334397][ T4286] CPU: 1 PID: 4286 Comm: syz.1.2 Not tainted syzkaller #0 [ 66.341568][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.351644][ T4286] Call Trace: [ 66.354936][ T4286] [ 66.357857][ T4286] dump_stack_lvl+0x188/0x250 [ 66.362537][ T4286] ? show_regs_print_info+0x20/0x20 [ 66.367717][ T4286] ? load_image+0x410/0x410 [ 66.372206][ T4286] ? __lock_acquire+0x7b50/0x7b50 [ 66.377215][ T4286] ? __vmalloc_node_range+0x2dd/0x8b0 [ 66.382610][ T4286] ? htab_map_alloc+0xbf3/0x1670 [ 66.387539][ T4286] ? map_create+0x481/0x2330 [ 66.392116][ T4286] ? __sys_bpf+0x30a/0x6f0 [ 66.396524][ T4286] should_fail+0x383/0x4b0 [ 66.400953][ T4286] prepare_alloc_pages+0x1e3/0x5b0 [ 66.406068][ T4286] __alloc_pages+0x11b/0x480 [ 66.410666][ T4286] ? zone_statistics+0x170/0x170 [ 66.415644][ T4286] ? alloc_pages+0x452/0x560 [ 66.420308][ T4286] __vmalloc_node_range+0x4b1/0x8b0 [ 66.425507][ T4286] bpf_map_area_alloc+0xd4/0xe0 [ 66.430343][ T4286] ? htab_map_alloc+0xbf3/0x1670 [ 66.435352][ T4286] htab_map_alloc+0xbf3/0x1670 [ 66.440106][ T4286] map_create+0x481/0x2330 [ 66.444531][ T4286] ? bpf_lsm_bpf+0x5/0x10 [ 66.448856][ T4286] __sys_bpf+0x30a/0x6f0 [ 66.453090][ T4286] ? bpf_link_show_fdinfo+0x380/0x380 [ 66.458462][ T4286] __x64_sys_bpf+0x78/0x90 [ 66.462867][ T4286] do_syscall_64+0x4c/0xa0 [ 66.467269][ T4286] ? clear_bhb_loop+0x30/0x80 [ 66.471928][ T4286] ? clear_bhb_loop+0x30/0x80 [ 66.476587][ T4286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.482470][ T4286] RIP: 0033:0x7f3e73e75159 [ 66.486872][ T4286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.497424][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 66.507343][ T4286] RSP: 002b:00007f3e720cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.507367][ T4286] RAX: ffffffffffffffda RBX: 00007f3e740fcfa0 RCX: 00007f3e73e75159 [ 66.507379][ T4286] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 66.507391][ T4286] RBP: 00007f3e73f0c06b R08: 0000000000000000 R09: 0000000000000000 [ 66.507401][ T4286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.507411][ T4286] R13: 00007f3e740fd038 R14: 00007f3e740fcfa0 R15: 00007ffe36a44108 [ 66.507435][ T4286] [ 66.566142][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 66.578239][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 66.586427][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 66.656862][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 66.839302][ T4290] user requested TSC rate below hardware speed [ 67.177234][ T4308] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 67.184047][ T4308] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.204077][ T4308] vhci_hcd vhci_hcd.0: Device attached [ 67.215988][ T4315] binder: 4307:4315 ioctl 84009422 200000000500 returned -22 [ 67.267972][ T4308] binder: 4307:4308 ioctl 50009403 200000000900 returned -22 [ 67.306492][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.318327][ T4315] binder: 4307:4315 ioctl 4018620d 0 returned -22 [ 67.426340][ T4273] vhci_hcd: vhci_device speed not set [ 67.496230][ T4273] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 67.504224][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 67.566308][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 67.714100][ T13] usb 3-1: config 0 has no interfaces? [ 67.726687][ T4310] vhci_hcd: connection reset by peer [ 67.734843][ T154] vhci_hcd: stop threads [ 67.752171][ T154] vhci_hcd: release socket [ 67.780774][ T154] vhci_hcd: disconnect device [ 67.846221][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 67.876341][ T13] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 67.891970][ T13] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 67.922589][ T13] usb 3-1: Product: syz [ 67.932624][ T13] usb 3-1: Manufacturer: syz [ 67.937638][ T7] usb 1-1: config 10 has an invalid interface number: 232 but max is 0 [ 67.952674][ T7] usb 1-1: config 10 has no interface number 0 [ 67.960185][ T13] usb 3-1: SerialNumber: syz [ 68.899841][ T7] usb 1-1: config 10 interface 232 altsetting 126 endpoint 0xF has invalid wMaxPacketSize 0 [ 68.918327][ T13] usb 3-1: config 0 descriptor?? [ 68.944202][ T7] usb 1-1: config 10 interface 232 has no altsetting 0 [ 69.156426][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=8a.f5 [ 69.175789][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.207683][ T4334] binder: Bad value for 'max' [ 69.214006][ T7] usb 1-1: Product: syz [ 69.222814][ T2305] usb 3-1: USB disconnect, device number 3 [ 69.236105][ T7] usb 1-1: Manufacturer: syz [ 69.246383][ T7] usb 1-1: SerialNumber: syz [ 69.260387][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 71.185874][ T4346] loop0: detected capacity change from 0 to 32768 [ 71.198822][ T7] usb 1-1: USB disconnect, device number 2 [ 71.299517][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.306341][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.672591][ T4273] vhci_hcd: vhci_device speed not set [ 73.111020][ T4358] FAULT_INJECTION: forcing a failure. [ 73.111020][ T4358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 73.127926][ T4358] CPU: 1 PID: 4358 Comm: syz.2.28 Not tainted syzkaller #0 [ 73.135164][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.145229][ T4358] Call Trace: [ 73.148522][ T4358] [ 73.151462][ T4358] dump_stack_lvl+0x188/0x250 [ 73.156159][ T4358] ? show_regs_print_info+0x20/0x20 [ 73.161369][ T4358] ? load_image+0x410/0x410 [ 73.165887][ T4358] ? __lock_acquire+0x7b50/0x7b50 [ 73.170922][ T4358] ? mark_lock+0x94/0x320 [ 73.175266][ T4358] should_fail+0x383/0x4b0 [ 73.179700][ T4358] prepare_alloc_pages+0x1e3/0x5b0 [ 73.184839][ T4358] __alloc_pages+0x11b/0x480 [ 73.189445][ T4358] ? zone_statistics+0x170/0x170 [ 73.194399][ T4358] ? mark_lock+0x94/0x320 [ 73.198753][ T4358] alloc_pages_vma+0x2bc/0x790 [ 73.203529][ T4358] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 73.209359][ T4358] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 73.215019][ T4358] ? shmem_swapin_page+0x22f0/0x22f0 [ 73.220334][ T4358] ? __lock_acquire+0x7b50/0x7b50 [ 73.225375][ T4358] ? xas_descend+0x210/0x3b0 [ 73.229987][ T4358] ? xas_load+0x127/0x140 [ 73.234343][ T4358] ? pagecache_get_page+0xc32/0xf20 [ 73.239557][ T4358] ? page_cache_prev_miss+0x380/0x380 [ 73.244946][ T4358] ? verify_lock_unused+0x140/0x140 [ 73.250158][ T4358] ? mark_lock+0x94/0x320 [ 73.254500][ T4358] shmem_getpage_gfp+0x14be/0x2c10 [ 73.259650][ T4358] shmem_fault+0x1ac/0x550 [ 73.264088][ T4358] ? shmem_fallocate+0xec0/0xec0 [ 73.269042][ T4358] ? filemap_read_page+0x4b0/0x4b0 [ 73.274165][ T4358] ? count_memcg_event_mm+0x324/0x370 [ 73.279559][ T4358] __do_fault+0x141/0x330 [ 73.283905][ T4358] handle_mm_fault+0x2982/0x4440 [ 73.288871][ T4358] ? get_page+0xe0/0xe0 [ 73.293039][ T4358] ? follow_page_mask+0xa51/0x12b0 [ 73.298548][ T4358] __get_user_pages+0x952/0x11e0 [ 73.303513][ T4358] ? populate_vma_page_range+0x290/0x290 [ 73.309193][ T4358] ? read_lock_is_recursive+0x10/0x10 [ 73.314587][ T4358] populate_vma_page_range+0x213/0x290 [ 73.324226][ T4358] __mm_populate+0x275/0x3b0 [ 73.328838][ T4358] ? check_vma_flags+0x470/0x470 [ 73.331078][ T4346] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 73.333791][ T4358] ? up_write+0x1b6/0x410 [ 73.333884][ T4358] vm_mmap_pgoff+0x212/0x2d0 [ 73.353107][ T4358] ? account_locked_vm+0xe0/0xe0 [ 73.358059][ T4358] ? __context_tracking_exit+0x4c/0x80 [ 73.363529][ T4358] ? __lock_acquire+0x7b50/0x7b50 [ 73.368572][ T4358] ksys_mmap_pgoff+0x140/0x790 [ 73.373356][ T4358] ? mmap_region+0x1730/0x1730 [ 73.378132][ T4358] ? lockdep_hardirqs_on+0x94/0x140 [ 73.383351][ T4358] do_syscall_64+0x4c/0xa0 [ 73.387766][ T4358] ? clear_bhb_loop+0x30/0x80 [ 73.392444][ T4358] ? clear_bhb_loop+0x30/0x80 [ 73.397125][ T4358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.403023][ T4358] RIP: 0033:0x7fdf70124159 [ 73.407449][ T4358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.427087][ T4358] RSP: 002b:00007fdf6e37c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 73.435690][ T4358] RAX: ffffffffffffffda RBX: 00007fdf703abfa0 RCX: 00007fdf70124159 [ 73.443679][ T4358] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 73.451670][ T4358] RBP: 00007fdf701bb06b R08: ffffffffffffffff R09: 0000000000000000 [ 73.459655][ T4358] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 73.467646][ T4358] R13: 00007fdf703ac038 R14: 00007fdf703abfa0 R15: 00007fff5c6f6ef8 [ 73.475651][ T4358] [ 74.742368][ T4403] Invalid ELF header type: 3 != 1 [ 74.772214][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.348072][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.444355][ T4417] ======================================================= [ 76.444355][ T4417] WARNING: The mand mount option has been deprecated and [ 76.444355][ T4417] and is ignored by this kernel. Remove the mand [ 76.444355][ T4417] option from the mount to silence this warning. [ 76.444355][ T4417] ======================================================= [ 76.479254][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.505916][ T4417] overlayfs: failed to resolve './bus': -2 [ 76.802118][ T4422] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.998061][ T4434] mmap: syz.4.45 (4434) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.046645][ T4422] FAULT_INJECTION: forcing a failure. [ 77.046645][ T4422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.085186][ T4422] CPU: 0 PID: 4422 Comm: syz.2.43 Not tainted syzkaller #0 [ 77.092423][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.102490][ T4422] Call Trace: [ 77.105773][ T4422] [ 77.108706][ T4422] dump_stack_lvl+0x188/0x250 [ 77.113397][ T4422] ? show_regs_print_info+0x20/0x20 [ 77.118607][ T4422] ? load_image+0x410/0x410 [ 77.123131][ T4422] ? __lock_acquire+0x7b50/0x7b50 [ 77.128166][ T4422] ? mark_lock+0x94/0x320 [ 77.132504][ T4422] should_fail+0x383/0x4b0 [ 77.136936][ T4422] prepare_alloc_pages+0x1e3/0x5b0 [ 77.142072][ T4422] __alloc_pages+0x11b/0x480 [ 77.146674][ T4422] ? zone_statistics+0x170/0x170 [ 77.151638][ T4422] alloc_pages_vma+0x2bc/0x790 [ 77.156417][ T4422] wp_page_copy+0x225/0x2090 [ 77.161020][ T4422] ? __lock_acquire+0x7b50/0x7b50 [ 77.166063][ T4422] ? insert_page_into_pte_locked+0x470/0x470 [ 77.172054][ T4422] ? _raw_spin_unlock+0x24/0x40 [ 77.176916][ T4422] ? do_wp_page+0x965/0xb30 [ 77.181438][ T4422] handle_mm_fault+0x1fbd/0x4440 [ 77.186399][ T4422] ? get_page+0xe0/0xe0 [ 77.190558][ T4422] ? mark_lock+0x94/0x320 [ 77.194904][ T4422] ? vmacache_find+0x238/0x590 [ 77.199681][ T4422] ? find_vma+0xd2/0x230 [ 77.203986][ T4422] do_user_addr_fault+0x494/0xc90 [ 77.209045][ T4422] exc_page_fault+0x60/0x100 [ 77.213669][ T4422] asm_exc_page_fault+0x22/0x30 [ 77.218526][ T4422] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 77.225123][ T4422] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 77.244825][ T4422] RSP: 0018:ffffc9000325f3f8 EFLAGS: 00050206 [ 77.250910][ T4422] RAX: ffffffff83e6b201 RBX: 0000000000008000 RCX: 0000000000006740 [ 77.258904][ T4422] RDX: 0000000000008000 RSI: ffff8880789e98c0 RDI: 000020000000a000 [ 77.266887][ T4422] RBP: ffffc9000325f560 R08: ffff8880789effff R09: 1ffff1100f13dfff [ 77.274874][ T4422] R10: dffffc0000000000 R11: ffffed100f13e000 R12: ffff8880789e8000 [ 77.282856][ T4422] R13: 00000000000080ff R14: 0000200000008740 R15: 0000000000008000 [ 77.290848][ T4422] ? _copy_to_iter+0x2b1/0x1170 [ 77.295722][ T4422] _copy_to_iter+0x322/0x1170 [ 77.300430][ T4422] ? iov_iter_init+0x170/0x170 [ 77.305214][ T4422] ? __virt_addr_valid+0x3c6/0x470 [ 77.310350][ T4422] ? __phys_addr_symbol+0x2b/0x70 [ 77.315387][ T4422] ? __check_object_size+0x30c/0x410 [ 77.320721][ T4422] __skb_datagram_iter+0x2e1/0x740 [ 77.325857][ T4422] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 77.331438][ T4422] skb_copy_datagram_iter+0xad/0x1f0 [ 77.336756][ T4422] tcp_recvmsg_locked+0xf64/0x2690 [ 77.341913][ T4422] ? tcp_recvmsg+0x760/0x760 [ 77.346513][ T4422] ? __local_bh_enable_ip+0x136/0x1c0 [ 77.351908][ T4422] tcp_recvmsg+0x22a/0x760 [ 77.356353][ T4422] ? tcp_recv_timestamp+0x720/0x720 [ 77.361560][ T4422] ? aa_sk_perm+0x7dc/0x910 [ 77.366077][ T4422] inet_recvmsg+0x146/0x200 [ 77.370591][ T4422] ? __might_fault+0xb7/0x110 [ 77.375294][ T4422] ? inet_sendpage+0x2e0/0x2e0 [ 77.380069][ T4422] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 77.385364][ T4422] ? security_socket_recvmsg+0x85/0xb0 [ 77.390838][ T4422] ? inet_sendpage+0x2e0/0x2e0 [ 77.395618][ T4422] ____sys_recvmsg+0x2ca/0x5b0 [ 77.400400][ T4422] ? __might_fault+0xb3/0x110 [ 77.405096][ T4422] ? __sys_recvmsg_sock+0x40/0x40 [ 77.410145][ T4422] ? import_iovec+0x6f/0xa0 [ 77.414669][ T4422] ___sys_recvmsg+0x213/0x5c0 [ 77.419366][ T4422] ? __sys_recvmsg+0x280/0x280 [ 77.424155][ T4422] ? __fget_files+0x402/0x470 [ 77.428848][ T4422] __x64_sys_recvmsg+0x201/0x2d0 [ 77.433804][ T4422] ? ___sys_recvmsg+0x5c0/0x5c0 [ 77.438699][ T4422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.444703][ T4422] ? lockdep_hardirqs_on+0x94/0x140 [ 77.449917][ T4422] do_syscall_64+0x4c/0xa0 [ 77.454370][ T4422] ? clear_bhb_loop+0x30/0x80 [ 77.459056][ T4422] ? clear_bhb_loop+0x30/0x80 [ 77.463739][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.469637][ T4422] RIP: 0033:0x7fdf70124159 [ 77.474057][ T4422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.493668][ T4422] RSP: 002b:00007fdf6e37c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 77.502096][ T4422] RAX: ffffffffffffffda RBX: 00007fdf703abfa0 RCX: 00007fdf70124159 [ 77.510165][ T4422] RDX: 0000000000000700 RSI: 0000200000000580 RDI: 0000000000000004 [ 77.518147][ T4422] RBP: 00007fdf701bb06b R08: 0000000000000000 R09: 0000000000000000 [ 77.526123][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.534199][ T4422] R13: 00007fdf703ac038 R14: 00007fdf703abfa0 R15: 00007fff5c6f6ef8 [ 77.542193][ T4422] [ 77.545354][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.628519][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 77.636205][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 77.656976][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 77.664994][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 77.673589][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 77.681662][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 77.690435][ T4441] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 77.828176][ T4441] netlink: 64 bytes leftover after parsing attributes in process `syz.1.46'. [ 77.837256][ T4441] netlink: 64 bytes leftover after parsing attributes in process `syz.1.46'. [ 77.846092][ T4441] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 78.516769][ T26] audit: type=1800 audit(1790775460.397:2): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.52" name="ipv4_address" dev="configfs" ino=32561 res=0 errno=0 [ 78.567029][ T26] audit: type=1800 audit(1790775460.447:3): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.52" name="ipv4_port" dev="configfs" ino=32562 res=0 errno=0 [ 78.620854][ T26] audit: type=1800 audit(1790775460.447:4): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.52" name="num" dev="configfs" ino=32563 res=0 errno=0 [ 78.723449][ T26] audit: type=1800 audit(1790775460.447:5): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.52" name="local" dev="configfs" ino=32564 res=0 errno=0 [ 79.876786][ T4476] FAULT_INJECTION: forcing a failure. [ 79.876786][ T4476] name failslab, interval 1, probability 0, space 0, times 1 [ 79.896297][ T4476] CPU: 0 PID: 4476 Comm: syz.4.59 Not tainted syzkaller #0 [ 79.903540][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.913610][ T4476] Call Trace: [ 79.916897][ T4476] [ 79.919837][ T4476] dump_stack_lvl+0x188/0x250 [ 79.924531][ T4476] ? show_regs_print_info+0x20/0x20 [ 79.929741][ T4476] ? load_image+0x410/0x410 [ 79.934260][ T4476] ? __might_sleep+0xf0/0xf0 [ 79.938864][ T4476] ? __lock_acquire+0x7b50/0x7b50 [ 79.943904][ T4476] should_fail+0x383/0x4b0 [ 79.948334][ T4476] should_failslab+0x5/0x20 [ 79.952847][ T4476] slab_pre_alloc_hook+0x51/0xc0 [ 79.957812][ T4476] kmem_cache_alloc_trace+0x47/0x290 [ 79.963106][ T4476] ? call_usermodehelper_setup+0x8a/0x260 [ 79.968924][ T4476] call_usermodehelper_setup+0x8a/0x260 [ 79.974504][ T4476] ? __request_module+0x980/0x980 [ 79.979726][ T4476] __request_module+0x3ea/0x980 [ 79.984685][ T4476] ? umd_cleanup+0x110/0x110 [ 79.989342][ T4476] ? crypto_alg_lookup+0x186/0x1d0 [ 79.994649][ T4476] ? __up_read+0x2b4/0x6b0 [ 79.999088][ T4476] ? up_read+0x20/0x20 [ 80.003171][ T4476] ? __crypto_alg_lookup+0x48a/0x4c0 [ 80.008484][ T4476] crypto_alg_mod_lookup+0xe6/0x6d0 [ 80.013958][ T4476] crypto_alloc_tfm_node+0x14e/0x360 [ 80.019275][ T4476] esp6_init_state+0x4f4/0xf50 [ 80.024053][ T4476] ? __kasan_kmalloc+0xaf/0xe0 [ 80.028817][ T4476] ? kmemdup+0x22/0x50 [ 80.032913][ T4476] ? netlink_rcv_skb+0x1e9/0x430 [ 80.037873][ T4476] ? netlink_unicast+0x78f/0x940 [ 80.042818][ T4476] ? netlink_sendmsg+0x8ba/0xbe0 [ 80.047761][ T4476] ? esp6_err+0x330/0x330 [ 80.052096][ T4476] ? do_syscall_64+0x4c/0xa0 [ 80.056703][ T4476] ? rcu_lock_release+0x5/0x20 [ 80.061483][ T4476] ? __lock_acquire+0x7b50/0x7b50 [ 80.066529][ T4476] __xfrm_init_state+0xb0a/0xdf0 [ 80.071481][ T4476] xfrm_add_sa+0x1efa/0x2fa0 [ 80.076090][ T4476] ? xfrm_user_rcv_msg+0x980/0x980 [ 80.081203][ T4476] ? apparmor_capable+0x12c/0x190 [ 80.086297][ T4476] ? __nla_parse+0x3c/0x50 [ 80.090722][ T4476] xfrm_user_rcv_msg+0x694/0x980 [ 80.095679][ T4476] ? xfrm_netlink_rcv+0x90/0x90 [ 80.100572][ T4476] ? __mutex_lock_common+0x435/0x2400 [ 80.105971][ T4476] netlink_rcv_skb+0x1e9/0x430 [ 80.110748][ T4476] ? xfrm_netlink_rcv+0x66/0x90 [ 80.115604][ T4476] ? xfrm_netlink_rcv+0x90/0x90 [ 80.120467][ T4476] ? netlink_ack+0xb10/0xb10 [ 80.125070][ T4476] ? __lock_acquire+0x7b50/0x7b50 [ 80.130116][ T4476] xfrm_netlink_rcv+0x75/0x90 [ 80.134806][ T4476] netlink_unicast+0x78f/0x940 [ 80.139694][ T4476] netlink_sendmsg+0x8ba/0xbe0 [ 80.144481][ T4476] ? netlink_getsockopt+0x570/0x570 [ 80.149697][ T4476] ? aa_sock_msg_perm+0x94/0x150 [ 80.154668][ T4476] ? apparmor_socket_sendmsg+0x88/0x230 [ 80.155131][ T4484] jffs2: notice: (4484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.160231][ T4476] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 80.160278][ T4476] ? security_socket_sendmsg+0x7c/0xa0 [ 80.160296][ T4476] ? netlink_getsockopt+0x570/0x570 [ 80.160315][ T4476] ____sys_sendmsg+0x5be/0x8f0 [ 80.160341][ T4476] ? __sys_sendmsg_sock+0x30/0x30 [ 80.160366][ T4476] ? import_iovec+0x6f/0xa0 [ 80.160389][ T4476] ___sys_sendmsg+0x236/0x2e0 [ 80.192896][ T2305] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.197602][ T4476] ? __sys_sendmsg+0x290/0x290 [ 80.197658][ T4476] __se_sys_sendmsg+0x1b7/0x2a0 [ 80.197677][ T4476] ? __x64_sys_sendmsg+0x80/0x80 [ 80.197692][ T4476] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.197726][ T4476] ? lockdep_hardirqs_on+0x94/0x140 [ 80.197751][ T4476] do_syscall_64+0x4c/0xa0 [ 80.197766][ T4476] ? clear_bhb_loop+0x30/0x80 [ 80.197784][ T4476] ? clear_bhb_loop+0x30/0x80 [ 80.197803][ T4476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.265135][ T4476] RIP: 0033:0x7fa7cf6b7159 [ 80.269570][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.289184][ T4476] RSP: 002b:00007fa7cd90f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.297613][ T4476] RAX: ffffffffffffffda RBX: 00007fa7cf93efa0 RCX: 00007fa7cf6b7159 [ 80.305598][ T4476] RDX: 0000000000044050 RSI: 0000200000000140 RDI: 0000000000000004 [ 80.313582][ T4476] RBP: 00007fa7cf74e06b R08: 0000000000000000 R09: 0000000000000000 [ 80.321657][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.329764][ T4476] R13: 00007fa7cf93f038 R14: 00007fa7cf93efa0 R15: 00007ffdf46d8888 [ 80.337767][ T4476] [ 80.340826][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.446141][ T2305] usb 4-1: Using ep0 maxpacket: 8 [ 80.562796][ T4495] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 80.566434][ T2305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.583939][ T2305] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.593193][ T2305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 80.605969][ T2305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 80.694536][ T2305] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.719562][ T2305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.777311][ T2305] hub 4-1:1.0: bad descriptor, ignoring hub [ 80.783303][ T2305] hub: probe of 4-1:1.0 failed with error -5 [ 80.821154][ T2305] cdc_wdm 4-1:1.0: skipping garbage [ 80.833957][ T2305] cdc_wdm 4-1:1.0: skipping garbage [ 80.851072][ T2305] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 80.852699][ T4476] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 80.857644][ T2305] cdc_wdm 4-1:1.0: Unknown control protocol [ 80.888258][ T4507] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 81.021165][ T4507] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 81.037468][ T4507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.65'. [ 81.151199][ T4507] device dummy0 entered promiscuous mode [ 81.733522][ T26] audit: type=1326 audit(1790775463.617:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fea738159 code=0x7ffc0000 [ 81.804518][ T26] audit: type=1326 audit(1790775463.647:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fea738159 code=0x7ffc0000 [ 82.045012][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 82.073401][ T4482] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 82.108578][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 82.140885][ T26] audit: type=1326 audit(1790775463.647:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2fea738159 code=0x7ffc0000 [ 82.174550][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 82.191559][ T4526] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 82.234913][ T26] audit: type=1326 audit(1790775463.647:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.69" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fea738159 code=0x7ffc0000 [ 83.037051][ T4528] ================================================================== [ 83.037091][ T4528] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 83.037109][ T4528] Write of size 4 at addr ffffc90004941fc0 by task syz.0.69/4528 [ 83.037119][ T4528] [ 83.037123][ T4528] CPU: 1 PID: 4528 Comm: syz.0.69 Not tainted syzkaller #0 [ 83.037133][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.037139][ T4528] Call Trace: [ 83.037143][ T4528] [ 83.037148][ T4528] dump_stack_lvl+0x188/0x250 [ 83.037161][ T4528] ? show_regs_print_info+0x20/0x20 [ 83.037173][ T4528] ? load_image+0x410/0x410 [ 83.037182][ T4528] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 83.037195][ T4528] ? drm_fb_helper_setcmap+0x2974/0x2b30 [ 83.037208][ T4528] print_address_description+0x60/0x2d0 [ 83.037218][ T4528] ? sys_imageblit+0x1ba8/0x25d0 [ 83.037228][ T4528] kasan_report+0xdf/0x130 [ 83.037239][ T4528] ? sys_imageblit+0x1ba8/0x25d0 [ 83.037251][ T4528] sys_imageblit+0x1ba8/0x25d0 [ 83.037267][ T4528] ? sys_copyarea+0x2530/0x2530 [ 83.037281][ T4528] ? __lock_acquire+0x7b50/0x7b50 [ 83.037293][ T4528] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 83.037302][ T4528] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 83.037314][ T4528] cw_putcs+0x15ef/0x18a0 [ 83.037323][ T4528] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 83.037347][ T4528] ? cw_clear+0x250/0x250 [ 83.037360][ T4528] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 83.037374][ T4528] fbcon_putcs+0x2c8/0x450 [ 83.037384][ T4528] ? cw_clear+0x250/0x250 [ 83.037394][ T4528] do_update_region+0x4e5/0x640 [ 83.037409][ T4528] ? hide_cursor+0x320/0x320 [ 83.037420][ T4528] ? fbcon_set_palette+0x54a/0x660 [ 83.037431][ T4528] redraw_screen+0xa2c/0x1000 [ 83.037440][ T4528] ? _raw_spin_unlock+0x40/0x40 [ 83.037452][ T4528] ? clear_buffer_attributes+0x320/0x320 [ 83.037465][ T4528] ? tty_do_resize+0xeb/0x160 [ 83.037476][ T4528] vc_do_resize+0x122c/0x17b0 [ 83.037497][ T4528] ? read_lock_is_recursive+0x10/0x10 [ 83.037508][ T4528] ? vc_resize+0x50/0x50 [ 83.037516][ T4528] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 83.037526][ T4528] ? _raw_spin_unlock+0x40/0x40 [ 83.037540][ T4528] vt_resizex+0x3ec/0x5a0 [ 83.037551][ T4528] ? vt_disallocate+0x90/0x90 [ 83.037559][ T4528] ? security_capable+0x85/0xb0 [ 83.037572][ T4528] vt_ioctl+0xfd8/0x1ca0 [ 83.037585][ T4528] ? __vt_event_wait+0x260/0x260 [ 83.037603][ T4528] ? tty_jobctrl_ioctl+0x164/0xae0 [ 83.037615][ T4528] tty_ioctl+0x848/0xc30 [ 83.037624][ T4528] ? security_file_ioctl+0x7c/0xa0 [ 83.037634][ T4528] ? tty_get_icount+0xa0/0xa0 [ 83.037644][ T4528] __se_sys_ioctl+0xfa/0x170 [ 83.037655][ T4528] do_syscall_64+0x4c/0xa0 [ 83.037664][ T4528] ? clear_bhb_loop+0x30/0x80 [ 83.037674][ T4528] ? clear_bhb_loop+0x30/0x80 [ 83.037684][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.037694][ T4528] RIP: 0033:0x7f2fea738159 [ 83.037705][ T4528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.037713][ T4528] RSP: 002b:00007f2fe894e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.037725][ T4528] RAX: ffffffffffffffda RBX: 00007f2fea9c0180 RCX: 00007f2fea738159 [ 83.037732][ T4528] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 000000000000000a [ 83.037739][ T4528] RBP: 00007f2fea7cf06b R08: 0000000000000000 R09: 0000000000000000 [ 83.037745][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.037751][ T4528] R13: 00007f2fea9c0218 R14: 00007f2fea9c0180 R15: 00007ffd9cb25a48 [ 83.037764][ T4528] [ 83.037767][ T4528] [ 83.037770][ T4528] [ 83.037772][ T4528] Memory state around the buggy address: [ 83.037777][ T4528] ffffc90004941e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 83.037783][ T4528] ffffc90004941f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 83.037789][ T4528] >ffffc90004941f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 83.037794][ T4528] ^ [ 83.037799][ T4528] ffffc90004942000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 83.037805][ T4528] ffffc90004942080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 83.037810][ T4528] ================================================================== [ 83.037823][ T4528] Disabling lock debugging due to kernel taint [ 83.037838][ T4528] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.037843][ T4528] CPU: 1 PID: 4528 Comm: syz.0.69 Tainted: G B syzkaller #0 [ 83.037852][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.037857][ T4528] Call Trace: [ 83.037860][ T4528] [ 83.037863][ T4528] dump_stack_lvl+0x188/0x250 [ 83.037872][ T4528] ? show_regs_print_info+0x20/0x20 [ 83.037881][ T4528] ? load_image+0x410/0x410 [ 83.037891][ T4528] panic+0x2f8/0x850 [ 83.037904][ T4528] ? bpf_jit_dump+0xd0/0xd0 [ 83.037914][ T4528] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 83.037922][ T4528] ? _raw_spin_unlock+0x40/0x40 [ 83.037931][ T4528] ? sys_imageblit+0x1ba8/0x25d0 [ 83.037940][ T4528] check_panic_on_warn+0x80/0xa0 [ 83.037950][ T4528] ? sys_imageblit+0x1ba8/0x25d0 [ 83.037959][ T4528] end_report+0x6d/0xf0 [ 83.037968][ T4528] kasan_report+0x102/0x130 [ 83.037977][ T4528] ? sys_imageblit+0x1ba8/0x25d0 [ 83.037987][ T4528] sys_imageblit+0x1ba8/0x25d0 [ 83.037998][ T4528] ? sys_copyarea+0x2530/0x2530 [ 83.038007][ T4528] ? __lock_acquire+0x7b50/0x7b50 [ 83.038017][ T4528] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 83.038026][ T4528] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 83.038036][ T4528] cw_putcs+0x15ef/0x18a0 [ 83.038045][ T4528] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 83.038059][ T4528] ? cw_clear+0x250/0x250 [ 83.038069][ T4528] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 83.038079][ T4528] fbcon_putcs+0x2c8/0x450 [ 83.038088][ T4528] ? cw_clear+0x250/0x250 [ 83.038096][ T4528] do_update_region+0x4e5/0x640 [ 83.038107][ T4528] ? hide_cursor+0x320/0x320 [ 83.038116][ T4528] ? fbcon_set_palette+0x54a/0x660 [ 83.038125][ T4528] redraw_screen+0xa2c/0x1000 [ 83.038133][ T4528] ? _raw_spin_unlock+0x40/0x40 [ 83.038143][ T4528] ? clear_buffer_attributes+0x320/0x320 [ 83.038152][ T4528] ? tty_do_resize+0xeb/0x160 [ 83.038162][ T4528] vc_do_resize+0x122c/0x17b0 [ 83.038174][ T4528] ? read_lock_is_recursive+0x10/0x10 [ 83.038184][ T4528] ? vc_resize+0x50/0x50 [ 83.038192][ T4528] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 83.038200][ T4528] ? _raw_spin_unlock+0x40/0x40 [ 83.038210][ T4528] vt_resizex+0x3ec/0x5a0 [ 83.038218][ T4528] ? vt_disallocate+0x90/0x90 [ 83.038226][ T4528] ? security_capable+0x85/0xb0 [ 83.038235][ T4528] vt_ioctl+0xfd8/0x1ca0 [ 83.038246][ T4528] ? __vt_event_wait+0x260/0x260 [ 83.038258][ T4528] ? tty_jobctrl_ioctl+0x164/0xae0 [ 83.038267][ T4528] tty_ioctl+0x848/0xc30 [ 83.038276][ T4528] ? security_file_ioctl+0x7c/0xa0 [ 83.038284][ T4528] ? tty_get_icount+0xa0/0xa0 [ 83.038293][ T4528] __se_sys_ioctl+0xfa/0x170 [ 83.038302][ T4528] do_syscall_64+0x4c/0xa0 [ 83.038310][ T4528] ? clear_bhb_loop+0x30/0x80 [ 83.038319][ T4528] ? clear_bhb_loop+0x30/0x80 [ 83.038328][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.038337][ T4528] RIP: 0033:0x7f2fea738159 [ 83.038344][ T4528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.038351][ T4528] RSP: 002b:00007f2fe894e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.038360][ T4528] RAX: ffffffffffffffda RBX: 00007f2fea9c0180 RCX: 00007f2fea738159 [ 83.038367][ T4528] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 000000000000000a [ 83.038372][ T4528] RBP: 00007f2fea7cf06b R08: 0000000000000000 R09: 0000000000000000 [ 83.038378][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.038383][ T4528] R13: 00007f2fea9c0218 R14: 00007f2fea9c0180 R15: 00007ffd9cb25a48 [ 83.038391][ T4528] [ 83.038511][ T4528] Kernel Offset: disabled [ 83.812452][ T4528] Rebooting in 86400 seconds..