last executing test programs: 7.454400934s ago: executing program 0 (id=143): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x3, 0x5004) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.944841876s ago: executing program 0 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYBLOB="3737967ab03216a96ee008d6097621359496940fd3117f44c830810f6dabb46c40cf49bad1e6965947beb728737ad53b444130e3b3de8b2a0a034730faa96039527a8e57820292d3c107dd8219cb19ad83795c3ceab2a511b03fecb15988125bf62c0b004df99f52e3", @ANYRES64=r4], 0x17c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x85) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 5.998030126s ago: executing program 0 (id=151): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) 4.862374114s ago: executing program 0 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) 3.796111249s ago: executing program 0 (id=171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) 3.631273166s ago: executing program 2 (id=173): r0 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) sendmmsg$inet6(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004051) 3.464355853s ago: executing program 2 (id=175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x2000)=nil, 0x5000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x9) 3.184003605s ago: executing program 2 (id=179): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xb10000, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x2000}) 2.84217725s ago: executing program 2 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) 2.642071518s ago: executing program 3 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x8040) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0xea, 0x1, 0x95, 0xb, 0x8, 0x80, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.37169363s ago: executing program 3 (id=186): openat$vga_arbiter(0xffffff9c, 0x0, 0x400, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd000000000031013300000000000802110000010802110000005050505050505f"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.370719249s ago: executing program 4 (id=187): syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0xa924, 0x2, 0x1}, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) 2.315710702s ago: executing program 4 (id=188): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 2.251665855s ago: executing program 4 (id=189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.251158975s ago: executing program 3 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.021299575s ago: executing program 3 (id=191): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x101, 0x0, 0x1, 0x1, 0x1, 0xedf, 0x2, 0x8001, 0x27, 0xfffffff7, 0xfffffff7, 0x4, 0x8, 0x5, 0xc, 0x10, {0x6, 0x32b2}, 0x7, 0x6f}}) 1.445235309s ago: executing program 2 (id=192): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x101) close_range(r0, 0xffffffffffffffff, 0x0) 1.361467683s ago: executing program 3 (id=193): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) 1.237022128s ago: executing program 1 (id=195): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x800, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x2000000000004, 0xa], 0x41000, 0x1c4213}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008"], 0xe0}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.236329298s ago: executing program 4 (id=196): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.046382826s ago: executing program 1 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000200)) 1.016675807s ago: executing program 4 (id=198): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r1) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 984.878529ms ago: executing program 1 (id=199): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 730.418629ms ago: executing program 1 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0x3, 0x4, 0x3, 0x101, 0x2, 0x8000}]}) 543.952587ms ago: executing program 1 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 543.814257ms ago: executing program 3 (id=202): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000300)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 364.728095ms ago: executing program 0 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) 337.095706ms ago: executing program 2 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYBLOB="3737967ab03216a96ee008d6097621359496940fd3117f44c830810f6dabb46c40cf49bad1e6965947beb728737ad53b444130e3b3de8b2a0a034730faa96039527a8e57820292d3c107dd8219cb19ad83795c3ceab2a511b03fecb15988125bf62c0b004df99f52e3", @ANYRES64=r3], 0x17c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x85) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 42.276909ms ago: executing program 1 (id=205): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000180)={[{@nodecompose}, {}, {@umask={'umask', 0x3d, 0x1000}}, {@uid}, {@nodecompose}, {@force}, {@nls={'nls', 0x3d, 'macgaelic'}}]}, 0x1, 0x6b9, &(0x7f0000000a00)="$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") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 0s ago: executing program 4 (id=206): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 47.787067][ T4173] cgroup: Unknown subsys name 'net' [ 47.916083][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.138910][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.342942][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 50.452853][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.469398][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 50.561401][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 50.572162][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.579389][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.587437][ T4184] device bridge_slave_0 entered promiscuous mode [ 50.607934][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.615121][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.622857][ T4184] device bridge_slave_1 entered promiscuous mode [ 50.683324][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.690572][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.698086][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.713797][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.720957][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.728767][ T4183] device bridge_slave_0 entered promiscuous mode [ 50.740203][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.749670][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.756713][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.765323][ T4188] device bridge_slave_1 entered promiscuous mode [ 50.772311][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.782157][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.789428][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.796928][ T4183] device bridge_slave_1 entered promiscuous mode [ 50.807795][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.865559][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.894484][ T4184] team0: Port device team_slave_0 added [ 50.902002][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.913304][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.924412][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.933745][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.941257][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.948794][ T4196] device bridge_slave_0 entered promiscuous mode [ 50.960122][ T4184] team0: Port device team_slave_1 added [ 50.981681][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.988722][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.996926][ T4196] device bridge_slave_1 entered promiscuous mode [ 51.045306][ T4188] team0: Port device team_slave_0 added [ 51.052969][ T4183] team0: Port device team_slave_0 added [ 51.060129][ T4188] team0: Port device team_slave_1 added [ 51.071687][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.078628][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.104709][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.124383][ T4183] team0: Port device team_slave_1 added [ 51.138258][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.147881][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.155120][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.181033][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.192447][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.199866][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.207394][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.227869][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.247139][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.254301][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.262012][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.275827][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.282834][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.308978][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.328112][ T4196] team0: Port device team_slave_0 added [ 51.342072][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.349025][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.375126][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.386431][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.393527][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.419850][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.439080][ T4196] team0: Port device team_slave_1 added [ 51.459884][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.466836][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.492790][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.523569][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.539610][ T4184] device hsr_slave_0 entered promiscuous mode [ 51.546178][ T4184] device hsr_slave_1 entered promiscuous mode [ 51.561001][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.598868][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.605915][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.632019][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.650204][ T4191] team0: Port device team_slave_0 added [ 51.665745][ T4183] device hsr_slave_0 entered promiscuous mode [ 51.672308][ T4183] device hsr_slave_1 entered promiscuous mode [ 51.678741][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.686826][ T4183] Cannot create hsr debugfs directory [ 51.699852][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.706796][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.733020][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.744971][ T4191] team0: Port device team_slave_1 added [ 51.759874][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.766467][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.772996][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.783298][ T4188] Cannot create hsr debugfs directory [ 51.827623][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.834633][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.863371][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.897361][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.904316][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.930410][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.970575][ T4196] device hsr_slave_0 entered promiscuous mode [ 51.977305][ T4196] device hsr_slave_1 entered promiscuous mode [ 51.983945][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.991657][ T4196] Cannot create hsr debugfs directory [ 52.072239][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.078820][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.085553][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 52.089415][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 52.097685][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 52.097783][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.111521][ T4191] Cannot create hsr debugfs directory [ 52.159876][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 52.165909][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 52.294476][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.308266][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.317470][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.326611][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.358572][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.367050][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.378865][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.396394][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.450055][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.458916][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.486506][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.495647][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.546000][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.554907][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.567157][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.586136][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.608057][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.636369][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.646502][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.660205][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.671032][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.706788][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.715712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.726052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.736967][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.746849][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.755651][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.764534][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.771696][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.780878][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.788957][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.797410][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.807066][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.832421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.841372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.852216][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.859333][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.872399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.881834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.890341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.898547][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.905600][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.913934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.932663][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.952572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.961981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.971310][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.978341][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.985857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.016343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.025701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.034433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.044378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.053388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.072589][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.083300][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.093838][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.106115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.114119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.124836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.133501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.143662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.169096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.177944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.187065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.195609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.205709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.215706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.224352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.244287][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.261442][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.276007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.285768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.294828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.307250][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.318337][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.330495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.338153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.381313][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.400803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.410479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.418866][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.425956][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.433605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.442435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.450959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.460734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.468970][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.476023][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.484219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.496634][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.510229][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.531220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.546670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.556142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.570468][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.577530][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.586003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.594664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.608960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.617973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.626603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.634074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.643524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.652322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.661194][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.668235][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.683111][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.691896][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.705090][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.719135][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.727961][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.735942][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.744814][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.753635][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.760701][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.769009][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.781420][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.798926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.807995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.816422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.824862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.835176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.843594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.852389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.860921][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.867937][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.882211][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.900602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.911061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.918463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.926076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.935738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.944314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.955046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.963606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.972778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.981362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.998991][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.010815][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.029335][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.037029][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.045942][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.054399][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.065905][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.074304][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.083176][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.091479][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.100392][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.108590][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.117375][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.144513][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.159778][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 54.160290][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.165796][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 54.173782][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 54.188194][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.197138][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.205631][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.214865][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.234627][ T4184] device veth0_vlan entered promiscuous mode [ 54.241559][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 54.247633][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 54.261168][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.272191][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.281349][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.289013][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.301945][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.323328][ T4184] device veth1_vlan entered promiscuous mode [ 54.336499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.345104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.359560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.379619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.388280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.403575][ T4183] device veth0_vlan entered promiscuous mode [ 54.434481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.442962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.460067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.482959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.495329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.506219][ T4183] device veth1_vlan entered promiscuous mode [ 54.526689][ T4184] device veth0_macvtap entered promiscuous mode [ 54.538093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.552849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.561184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.573537][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.582787][ T4184] device veth1_macvtap entered promiscuous mode [ 54.617620][ T4183] device veth0_macvtap entered promiscuous mode [ 54.628844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.636551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.644739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.654103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.661617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.670231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.678494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.688854][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.699469][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.709469][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.716816][ T4183] device veth1_macvtap entered promiscuous mode [ 54.730508][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.739733][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.748258][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.766978][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.776954][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.786015][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.795295][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.804912][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.819767][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.828228][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.861780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.871946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.926829][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.942541][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.960519][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.972298][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.987710][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.998771][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.010488][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.021588][ T4188] device veth0_vlan entered promiscuous mode [ 55.036391][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.045857][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.054333][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.065069][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.073972][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.082459][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.096168][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.104963][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.113640][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.124450][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.135954][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.144234][ T4196] device veth0_vlan entered promiscuous mode [ 55.169980][ T4188] device veth1_vlan entered promiscuous mode [ 55.176591][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.185625][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.194662][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.203729][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.212501][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.224474][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.233608][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.242930][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.252481][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.268382][ T4196] device veth1_vlan entered promiscuous mode [ 55.291825][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.301041][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.332832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.341039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.348859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.357101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.365830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.374697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.405797][ T4188] device veth0_macvtap entered promiscuous mode [ 55.417646][ T4188] device veth1_macvtap entered promiscuous mode [ 55.424905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.433158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.443716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.452757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.461035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.469366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.478215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.486183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.502686][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.506212][ T4191] device veth0_vlan entered promiscuous mode [ 55.516704][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.534057][ T4196] device veth0_macvtap entered promiscuous mode [ 55.549689][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.564144][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.575019][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.585044][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.596175][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.608360][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.638429][ T4196] device veth1_macvtap entered promiscuous mode [ 55.654306][ T4191] device veth1_vlan entered promiscuous mode [ 55.665197][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.674143][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.701263][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.735534][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.753645][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.764606][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.766271][ T4293] loop3: detected capacity change from 0 to 2048 [ 55.775874][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.827145][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.841643][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.856352][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.868036][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.879083][ T4294] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.895442][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.909821][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.924950][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.934086][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.942264][ T25] audit: type=1800 audit(1764204849.589:2): pid=4293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="loop3" ino=2097152 res=0 errno=0 [ 55.979148][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.990266][ T3156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.990632][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.998291][ T3156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.013745][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.032673][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.043131][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.053706][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.065077][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.075532][ T4191] device veth0_macvtap entered promiscuous mode [ 56.097728][ T4191] device veth1_macvtap entered promiscuous mode [ 56.110950][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.118964][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.127482][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.135948][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.150717][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.162289][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.173211][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.183465][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.199290][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.211838][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.222506][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.233889][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.244452][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 56.251026][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 56.257099][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 56.286787][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.300579][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.312461][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.328155][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.329659][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 56.343157][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.348613][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 56.358976][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.371195][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.382017][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.394533][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.403750][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.428810][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.444153][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.455140][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.468252][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.477711][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.488061][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.497540][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.524633][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.535882][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.546236][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.556881][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.568525][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.579154][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.591129][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.601768][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.613688][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.626421][ T422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.635440][ T4307] netlink: 'syz.3.8': attribute type 39 has an invalid length. [ 56.637228][ T422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.678326][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.687099][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.696110][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.708538][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.717797][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.734817][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.743761][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.861396][ T422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.883961][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.902770][ T422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.917728][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.934988][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.939158][ T4312] overlayfs: unrecognized mount option "/" or missing value [ 56.944583][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.964022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.978660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.987897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.027292][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.036203][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.049301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.083262][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.101109][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.114088][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.127094][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.146364][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.168734][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.328960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.339127][ T4320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 57.399022][ T4322] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 57.462429][ T4324] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 57.521228][ T4327] netlink: 'syz.4.11': attribute type 13 has an invalid length. [ 57.541033][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.555724][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.564381][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.640786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 57.803253][ T4333] program syz.4.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.849349][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 58.059318][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.189555][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 58.309422][ T1107] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 58.317880][ T1107] usb 2-1: config 0 has no interface number 0 [ 58.330048][ T4248] Bluetooth: hci1: command 0x0419 tx timeout [ 58.336501][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 58.342837][ T4248] Bluetooth: hci2: command 0x0419 tx timeout [ 58.400035][ T4248] Bluetooth: hci3: command 0x0419 tx timeout [ 58.406103][ T4248] Bluetooth: hci4: command 0x0419 tx timeout [ 58.459457][ T13] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.468223][ T13] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 58.478502][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.481019][ T1107] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 58.488005][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 58.503324][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.507753][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 58.515925][ T1107] usb 2-1: Product: syz [ 58.534009][ T1107] usb 2-1: Manufacturer: syz [ 58.538624][ T1107] usb 2-1: SerialNumber: syz [ 58.547770][ T1107] usb 2-1: config 0 descriptor?? [ 58.592542][ T1107] hub 2-1:0.132: bad descriptor, ignoring hub [ 58.599026][ T1107] hub: probe of 2-1:0.132 failed with error -5 [ 58.608436][ T1107] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input5 [ 58.641229][ T13] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.658056][ T13] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.676328][ T13] usb 3-1: Product: syz [ 58.681026][ T4343] netlink: 316 bytes leftover after parsing attributes in process `syz.3.16'. [ 58.694927][ T13] usb 3-1: Manufacturer: syz [ 58.790413][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 58.795648][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 58.837051][ T13] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 58.848106][ T13] cdc_wdm 3-1:1.0: Unknown control protocol [ 59.041710][ C0] Unknown status report in ack skb [ 59.114353][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.195879][ T4363] loop0: detected capacity change from 0 to 128 [ 59.234235][ T4363] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.254928][ T4363] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.403460][ T4328] usb 3-1: USB disconnect, device number 2 [ 59.419258][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 59.849996][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.929794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.148600][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.279729][ T4377] syz.1.29 (4377): /proc/4370/oom_adj is deprecated, please use /proc/4370/oom_score_adj instead. [ 60.328918][ T4376] netlink: 316 bytes leftover after parsing attributes in process `syz.0.27'. [ 60.704326][ T4398] loop0: detected capacity change from 0 to 128 [ 60.744717][ T4398] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.818604][ T4398] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.039375][ T4405] loop4: detected capacity change from 0 to 4096 [ 61.490023][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 62.583431][ T4445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 62.613239][ T4445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.57'. [ 62.637800][ T4445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.57'. [ 63.691793][ T4469] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.805645][ T4478] loop2: detected capacity change from 0 to 16 [ 63.878053][ T4484] loop4: detected capacity change from 0 to 128 [ 63.917631][ T4486] device syzkaller0 entered promiscuous mode [ 63.924631][ T4478] erofs: Unknown parameter '–É.S–Ä0 Ã0 Ã0 Ã0 Ã0 Ó€ú[PóC•šBxYÏþ' [ 63.941246][ T4484] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.963190][ T4486] netlink: 44 bytes leftover after parsing attributes in process `syz.1.73'. [ 63.981274][ T4484] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.238093][ T4478] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.415427][ T4478] loop2: detected capacity change from 0 to 2048 [ 64.566024][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop2 [ 64.624745][ T4498] kvm: pic: non byte read [ 64.635520][ T4498] kvm: pic: non byte read [ 64.642130][ T4498] kvm: pic: non byte read [ 64.646529][ T4498] kvm: pic: non byte read [ 64.672634][ T4498] kvm: pic: non byte read [ 64.711126][ T4498] kvm: pic: non byte read [ 64.733477][ T1107] usb 2-1: USB disconnect, device number 2 [ 64.758767][ T4498] kvm: pic: non byte read [ 64.765609][ T4498] kvm: pic: non byte read [ 64.778932][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.798131][ T4498] kvm: pic: non byte read [ 64.823136][ T4498] kvm: pic: non byte read [ 64.829014][ T21] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.086897][ T4528] fuse: Bad value for 'fd' [ 65.492637][ C0] Unknown status report in ack skb [ 65.554677][ T4541] syz.0.92 uses obsolete (PF_INET,SOCK_PACKET) [ 65.888731][ T4563] netlink: 44 bytes leftover after parsing attributes in process `syz.3.102'. [ 65.931264][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 65.956982][ C0] Unknown status report in ack skb [ 66.109467][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.198441][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 66.293228][ T1107] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 66.319560][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 66.489527][ T21] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 66.499564][ T1107] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 66.513993][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.522414][ T21] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.540822][ T1107] usb 3-1: Product: syz [ 66.545785][ T1107] usb 3-1: Manufacturer: syz [ 66.551008][ T1107] usb 3-1: SerialNumber: syz [ 66.570556][ T1107] usb 3-1: config 0 descriptor?? [ 66.590620][ T4547] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.604196][ T4547] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.630059][ T1107] usb 3-1: ucan: probing device on interface #0 [ 66.649103][ T1107] usb 3-1: ucan: invalid EP count (1) [ 66.667388][ T1107] usb 3-1: ucan: probe failed; try to update the device firmware [ 66.711659][ T21] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 67.362470][ T4328] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.373023][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.382921][ T21] usb 2-1: Product: syz [ 67.387088][ T21] usb 2-1: Manufacturer: syz [ 67.391967][ T21] usb 2-1: SerialNumber: syz [ 67.421803][ T4559] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.456166][ T21] usblp0: Disabling reads from problematic bidirectional printer [ 67.619353][ T4328] usb 5-1: Using ep0 maxpacket: 8 [ 67.676197][ T21] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 67.739471][ T4328] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 67.757020][ T4608] loop0: detected capacity change from 0 to 128 [ 67.762450][ T4328] usb 5-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 67.820736][ T4608] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.847575][ T4608] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.873984][ T4337] usb 2-1: USB disconnect, device number 3 [ 67.893869][ T4337] usblp0: removed [ 67.930087][ T4328] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 67.945921][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.962309][ T4328] usb 5-1: Product: syz [ 67.974738][ T4328] usb 5-1: Manufacturer: syz [ 67.989233][ T4328] usb 5-1: SerialNumber: syz [ 68.532684][ T4623] binder: 4622:4623 ioctl c0306201 0 returned -14 [ 68.600452][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.620071][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.681166][ T1107] usb 3-1: USB disconnect, device number 3 [ 68.899272][ T4328] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 69.010187][ T4631] tipc: Enabling of bearer rejected, failed to enable media [ 69.067184][ C0] Unknown status report in ack skb [ 69.145122][ T4644] loop0: detected capacity change from 0 to 128 [ 69.269461][ T4328] usb 2-1: config 0 has no interfaces? [ 69.349410][ T4328] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.358550][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.366596][ T4328] usb 2-1: SerialNumber: syz [ 69.372778][ T4328] usb 2-1: config 0 descriptor?? [ 69.569346][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.820231][ T4658] loop2: detected capacity change from 0 to 128 [ 69.860543][ T4658] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.883382][ T4658] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.910420][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 69.977687][ T4337] usb 5-1: USB disconnect, device number 2 [ 70.049540][ T21] usb 1-1: config 0 has an invalid interface number: 131 but max is 0 [ 70.060919][ T21] usb 1-1: config 0 has no interface number 0 [ 70.068410][ T21] usb 1-1: config 0 interface 131 has no altsetting 0 [ 70.152663][ T4666] tipc: Enabling of bearer rejected, failed to enable media [ 70.260255][ T21] usb 1-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=b2.13 [ 70.275116][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.283779][ T4337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.299440][ T21] usb 1-1: Product: syz [ 70.306477][ T4337] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 70.312058][ T21] usb 1-1: Manufacturer: syz [ 70.339384][ T21] usb 1-1: SerialNumber: syz [ 70.366622][ T21] usb 1-1: config 0 descriptor?? [ 70.431364][ T21] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 70.457800][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 70.476479][ T21] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 70.520516][ T21] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 70.567140][ T21] usb 1-1: media controller created [ 70.594881][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.597947][ C0] Unknown status report in ack skb [ 70.658861][ T21] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 70.698198][ T21] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 70.879815][ T21] rc_core: IR keymap rc-dtt200u not found [ 70.885552][ T21] Registered IR keymap rc-empty [ 70.900564][ T21] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 70.929906][ T21] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 70.960952][ T21] dvb-usb: schedule remote query interval to 300 msecs. [ 70.967891][ T21] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 71.001276][ T21] usb 1-1: USB disconnect, device number 2 [ 71.070781][ T21] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 71.123685][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.130218][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.481965][ T4692] netlink: 'syz.4.145': attribute type 9 has an invalid length. [ 71.524267][ T7] usb 2-1: USB disconnect, device number 4 [ 71.545371][ T4692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.145'. [ 71.612122][ T4692] Zero length message leads to an empty skb [ 71.791964][ T4697] device syzkaller0 entered promiscuous mode [ 72.416829][ T4703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.147'. [ 72.473079][ T4709] loop2: detected capacity change from 0 to 512 [ 72.498209][ T4709] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.525060][ T4709] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.552518][ T4709] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.566211][ T7] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 72.574485][ T4709] EXT4-fs (loop2): 1 truncate cleaned up [ 72.580761][ T4709] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 72.602816][ C1] Unknown status report in ack skb [ 72.751394][ T4713] loop0: detected capacity change from 0 to 128 [ 72.774797][ T4713] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.787376][ T4709] EXT4-fs error (device loop2): ext4_xattr_block_find:1867: inode #15: comm syz.2.150: corrupted xattr block 33 [ 72.820623][ T4713] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.830817][ T4709] EXT4-fs (loop2): Remounting filesystem read-only [ 73.093060][ T4720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 73.105671][ T7] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 73.121771][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.130037][ T7] usb 2-1: Product: syz [ 73.131593][ T4720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.134295][ T7] usb 2-1: Manufacturer: syz [ 73.145875][ T7] usb 2-1: SerialNumber: syz [ 73.152661][ T7] usb 2-1: config 0 descriptor?? [ 73.195822][ T7] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 73.321049][ T4728] loop2: detected capacity change from 0 to 128 [ 73.353928][ T4728] FAT-fs (loop2): Directory bread(block 414) failed [ 73.363229][ T4728] FAT-fs (loop2): Directory bread(block 415) failed [ 73.373891][ T4728] FAT-fs (loop2): Directory bread(block 416) failed [ 73.393103][ T4728] FAT-fs (loop2): Directory bread(block 417) failed [ 73.418948][ T4728] FAT-fs (loop2): Directory bread(block 418) failed [ 73.438272][ T4728] FAT-fs (loop2): Directory bread(block 419) failed [ 73.458801][ T4728] FAT-fs (loop2): Directory bread(block 420) failed [ 73.481995][ T4728] FAT-fs (loop2): Directory bread(block 421) failed [ 73.572286][ T4728] attempt to access beyond end of device [ 73.572286][ T4728] loop2: rw=3, want=464, limit=128 [ 73.605293][ T4728] attempt to access beyond end of device [ 73.605293][ T4728] loop2: rw=2051, want=470, limit=128 [ 73.987080][ C0] Unknown status report in ack skb [ 74.120385][ T7] gspca_stk1135: reg_w 0x5 err -71 [ 74.126980][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 74.146403][ T7] gspca_stk1135: Sensor write failed [ 74.158303][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 74.172267][ T7] gspca_stk1135: Sensor write failed [ 74.183968][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 74.196729][ T7] gspca_stk1135: Sensor read failed [ 74.219317][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 74.249558][ T7] gspca_stk1135: Sensor read failed [ 74.558134][ T4756] loop4: detected capacity change from 0 to 4096 [ 74.586796][ T4756] ntfs3: Unknown parameter 'windows_names' [ 74.649510][ T7] gspca_stk1135: Detected sensor type unknown (0x0) [ 74.656224][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 74.662724][ T7] gspca_stk1135: Sensor read failed [ 74.668001][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 74.675034][ T7] gspca_stk1135: Sensor read failed [ 74.688785][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 74.700495][ T7] gspca_stk1135: Sensor write failed [ 74.710092][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 74.722805][ T7] gspca_stk1135: Sensor write failed [ 74.732552][ T7] stk1135: probe of 2-1:0.0 failed with error -71 [ 74.767973][ T7] usb 2-1: USB disconnect, device number 5 [ 74.925920][ T4764] 9pnet: Insufficient options for proto=fd [ 75.013920][ T4766] loop0: detected capacity change from 0 to 128 [ 75.083692][ C1] Unknown status report in ack skb [ 75.115982][ T4766] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.185921][ T4766] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.585119][ T4787] loop2: detected capacity change from 0 to 256 [ 75.645920][ T4787] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.316746][ T1346] cfg80211: failed to load regulatory.db [ 76.529157][ T4818] netlink: 44 bytes leftover after parsing attributes in process `syz.3.190'. [ 77.314877][ T21] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 77.355892][ T21] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.511420][ T4832] loop4: detected capacity change from 0 to 16 [ 77.536299][ T4832] erofs: (device loop4): mounted with root inode @ nid 36. [ 78.264564][ T4851] device syzkaller0 entered promiscuous mode [ 78.304137][ T4851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.201'. [ 78.620533][ T4859] loop1: detected capacity change from 0 to 1024 [ 78.717338][ T4859] hfsplus: invalid length 256 has been corrected to 255 [ 78.724902][ T4859] ================================================================== [ 78.733170][ T4859] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x5b9/0x1240 [ 78.740911][ T4859] Read of size 2 at addr ffff888074c91218 by task syz.1.205/4859 [ 78.748602][ T4859] [ 78.750917][ T4859] CPU: 1 PID: 4859 Comm: syz.1.205 Not tainted syzkaller #0 [ 78.758201][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.768287][ T4859] Call Trace: [ 78.771553][ T4859] [ 78.774488][ T4859] dump_stack_lvl+0x168/0x230 [ 78.779196][ T4859] ? show_regs_print_info+0x20/0x20 [ 78.784400][ T4859] ? _printk+0xcc/0x110 [ 78.788558][ T4859] ? hfsplus_uni2asc+0x5b9/0x1240 [ 78.793594][ T4859] ? load_image+0x3b0/0x3b0 [ 78.798128][ T4859] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 78.803526][ T4859] print_address_description+0x60/0x2d0 [ 78.809076][ T4859] ? hfsplus_uni2asc+0x5b9/0x1240 [ 78.814103][ T4859] kasan_report+0xdf/0x130 [ 78.818524][ T4859] ? hfsplus_uni2asc+0x5b9/0x1240 [ 78.823551][ T4859] ? hfsplus_bnode_read+0x265/0x6c0 [ 78.828770][ T4859] hfsplus_uni2asc+0x5b9/0x1240 [ 78.833661][ T4859] ? hfsplus_bnode_read_u16+0x84/0xd0 [ 78.839052][ T4859] hfsplus_listxattr+0x58b/0xb80 [ 78.844006][ T4859] ? hfsplus_getxattr+0xd0/0xd0 [ 78.848855][ T4859] ? user_path_at_empty+0x13e/0x190 [ 78.854090][ T4859] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 78.860103][ T4859] ? rcu_is_watching+0x11/0xa0 [ 78.864873][ T4859] ? kmem_cache_free+0x14c/0x210 [ 78.869814][ T4859] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 78.875192][ T4859] listxattr+0x283/0x2e0 [ 78.879446][ T4859] ? hfsplus_getxattr+0xd0/0xd0 [ 78.884311][ T4859] path_listxattr+0xd9/0x1b0 [ 78.888906][ T4859] ? getxattr+0x370/0x370 [ 78.893243][ T4859] ? lockdep_hardirqs_on+0x94/0x140 [ 78.898448][ T4859] do_syscall_64+0x4c/0xa0 [ 78.902873][ T4859] ? clear_bhb_loop+0x30/0x80 [ 78.907551][ T4859] ? clear_bhb_loop+0x30/0x80 [ 78.912234][ T4859] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.918138][ T4859] RIP: 0033:0x7f7e036ea749 [ 78.922558][ T4859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.942164][ T4859] RSP: 002b:00007f7e01951038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 78.950580][ T4859] RAX: ffffffffffffffda RBX: 00007f7e03940fa0 RCX: 00007f7e036ea749 [ 78.958553][ T4859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 78.966526][ T4859] RBP: 00007f7e0376ef91 R08: 0000000000000000 R09: 0000000000000000 [ 78.974499][ T4859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.982468][ T4859] R13: 00007f7e03941038 R14: 00007f7e03940fa0 R15: 00007ffedf42c278 [ 78.990456][ T4859] [ 78.993480][ T4859] [ 78.995798][ T4859] Allocated by task 4859: [ 79.000114][ T4859] __kasan_kmalloc+0xb5/0xf0 [ 79.004683][ T4859] hfsplus_find_init+0x85/0x1c0 [ 79.009520][ T4859] hfsplus_listxattr+0x38c/0xb80 [ 79.014455][ T4859] listxattr+0x283/0x2e0 [ 79.018676][ T4859] path_listxattr+0xd9/0x1b0 [ 79.023247][ T4859] do_syscall_64+0x4c/0xa0 [ 79.027645][ T4859] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.033521][ T4859] [ 79.035835][ T4859] The buggy address belongs to the object at ffff888074c91000 [ 79.035835][ T4859] which belongs to the cache kmalloc-1k of size 1024 [ 79.049869][ T4859] The buggy address is located 536 bytes inside of [ 79.049869][ T4859] 1024-byte region [ffff888074c91000, ffff888074c91400) [ 79.063226][ T4859] The buggy address belongs to the page: [ 79.068862][ T4859] page:ffffea0001d32400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74c90 [ 79.079008][ T4859] head:ffffea0001d32400 order:3 compound_mapcount:0 compound_pincount:0 [ 79.087325][ T4859] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 79.095312][ T4859] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841dc0 [ 79.103902][ T4859] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 79.112480][ T4859] page dumped because: kasan: bad access detected [ 79.118891][ T4859] page_owner tracks the page as allocated [ 79.124599][ T4859] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4173, ts 49347848049, free_ts 49347688171 [ 79.143088][ T4859] get_page_from_freelist+0x1b77/0x1c60 [ 79.148639][ T4859] __alloc_pages+0x1e1/0x470 [ 79.153229][ T4859] new_slab+0xc0/0x4b0 [ 79.157294][ T4859] ___slab_alloc+0x81e/0xdf0 [ 79.161888][ T4859] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 79.167699][ T4859] __alloc_skb+0x22c/0x750 [ 79.172106][ T4859] sk_stream_alloc_skb+0x1fa/0xa60 [ 79.177208][ T4859] tcp_write_xmit+0xf9e/0x6580 [ 79.181972][ T4859] __tcp_push_pending_frames+0x92/0x250 [ 79.187510][ T4859] tcp_rcv_established+0xf25/0x1cb0 [ 79.192693][ T4859] tcp_v4_do_rcv+0x44b/0x9b0 [ 79.197261][ T4859] __release_sock+0x1b9/0x420 [ 79.201917][ T4859] __sk_flush_backlog+0x22/0x30 [ 79.206759][ T4859] tcp_sendmsg_locked+0x27f0/0x3590 [ 79.211941][ T4859] tcp_sendmsg+0x2b/0x40 [ 79.216163][ T4859] sock_write_iter+0x29c/0x380 [ 79.220910][ T4859] page last free stack trace: [ 79.225562][ T4859] free_unref_page_prepare+0x637/0x6c0 [ 79.231006][ T4859] free_unref_page+0x94/0x280 [ 79.235665][ T4859] skb_release_data+0x3fa/0x850 [ 79.240498][ T4859] __kfree_skb+0x4c/0x60 [ 79.244725][ T4859] tcp_ack+0x2086/0x6260 [ 79.248949][ T4859] tcp_rcv_established+0xea6/0x1cb0 [ 79.254128][ T4859] tcp_v4_do_rcv+0x44b/0x9b0 [ 79.258703][ T4859] __release_sock+0x1b9/0x420 [ 79.263360][ T4859] __sk_flush_backlog+0x22/0x30 [ 79.268190][ T4859] tcp_sendmsg_locked+0x27f0/0x3590 [ 79.273366][ T4859] tcp_sendmsg+0x2b/0x40 [ 79.277589][ T4859] sock_write_iter+0x29c/0x380 [ 79.282338][ T4859] vfs_write+0x712/0xd00 [ 79.286562][ T4859] ksys_write+0x14d/0x250 [ 79.290874][ T4859] do_syscall_64+0x4c/0xa0 [ 79.295270][ T4859] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.301150][ T4859] [ 79.303478][ T4859] Memory state around the buggy address: [ 79.309084][ T4859] ffff888074c91100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.317127][ T4859] ffff888074c91180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.325166][ T4859] >ffff888074c91200: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.333202][ T4859] ^ [ 79.338030][ T4859] ffff888074c91280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.346070][ T4859] ffff888074c91300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.354106][ T4859] ================================================================== [ 79.362147][ T4859] Disabling lock debugging due to kernel taint [ 79.368334][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.424773][ C0] ------------[ cut here ]------------ [ 79.430269][ C0] WARNING: CPU: 0 PID: 14 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x172c/0x1f80 [ 79.440106][ C0] Modules linked in: [ 79.444045][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B syzkaller #0 [ 79.452735][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.462808][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 79.469143][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 01 51 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 f0 50 3a f8 0f 0b e9 3c ef ff ff e8 e4 50 3a f8 <0f> 0b e9 b8 f2 ff ff e8 98 f2 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 79.488784][ C0] RSP: 0018:ffffc90000d37760 EFLAGS: 00010246 [ 79.494870][ C0] RAX: ffffffff893d7b2c RBX: ffff8880603c8c80 RCX: ffff88813fea1dc0 [ 79.502865][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.510850][ C0] RBP: ffffc90000d37988 R08: ffff88813fea1dc0 R09: 0000000000000003 [ 79.518862][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88801f277c00 [ 79.526865][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001a6efc [ 79.534856][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 79.543826][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.550426][ C0] CR2: 000000110c41ea62 CR3: 000000000be8e000 CR4: 00000000003506f0 [ 79.558397][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.566388][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.574374][ C0] Call Trace: [ 79.577652][ C0] [ 79.580603][ C0] ? read_lock_is_recursive+0x10/0x10 [ 79.585988][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 79.591995][ C0] ? ieee80211_get_buffered_bc+0x767/0x850 [ 79.597803][ C0] ? rcu_is_watching+0x11/0xa0 [ 79.602597][ C0] ? lock_acquire+0xcd/0x3f0 [ 79.607213][ C0] ? rcu_is_watching+0x11/0xa0 [ 79.612003][ C0] ? lock_acquire+0xcd/0x3f0 [ 79.616589][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 79.622092][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 79.627548][ C0] __iterate_interfaces+0x243/0x500 [ 79.632769][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 79.639006][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 79.645270][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 79.652302][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 79.657498][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 79.662721][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 79.668702][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 79.674718][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 79.679406][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 79.684518][ C0] hrtimer_run_softirq+0x176/0x240 [ 79.689656][ C0] handle_softirqs+0x328/0x820 [ 79.694417][ C0] ? run_ksoftirqd+0x98/0xf0 [ 79.699007][ C0] ? do_softirq+0x200/0x200 [ 79.703533][ C0] ? release_firmware_map_entry+0x190/0x190 [ 79.709440][ C0] ? run_ksoftirqd+0x9d/0xf0 [ 79.714024][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 79.719238][ C0] run_ksoftirqd+0x98/0xf0 [ 79.723653][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 79.728855][ C0] smpboot_thread_fn+0x4f6/0x970 [ 79.733834][ C0] kthread+0x436/0x520 [ 79.737904][ C0] ? cpu_report_death+0x180/0x180 [ 79.742951][ C0] ? kthread_blkcg+0xd0/0xd0 [ 79.747533][ C0] ret_from_fork+0x1f/0x30 [ 79.751973][ C0] [ 79.754997][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.762259][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B syzkaller #0 [ 79.770908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.780939][ C0] Call Trace: [ 79.784205][ C0] [ 79.787123][ C0] dump_stack_lvl+0x168/0x230 [ 79.791783][ C0] ? show_regs_print_info+0x20/0x20 [ 79.796960][ C0] ? load_image+0x3b0/0x3b0 [ 79.801454][ C0] panic+0x2c9/0x7f0 [ 79.805331][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 79.809829][ C0] ? ret_from_fork+0x1f/0x30 [ 79.814409][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 79.820107][ C0] __warn+0x248/0x2b0 [ 79.824068][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 79.829782][ C0] report_bug+0x1b7/0x2e0 [ 79.834092][ C0] handle_bug+0x3a/0x70 [ 79.838225][ C0] exc_invalid_op+0x16/0x40 [ 79.842705][ C0] asm_exc_invalid_op+0x16/0x20 [ 79.847535][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 79.853844][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 01 51 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 f0 50 3a f8 0f 0b e9 3c ef ff ff e8 e4 50 3a f8 <0f> 0b e9 b8 f2 ff ff e8 98 f2 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 79.873426][ C0] RSP: 0018:ffffc90000d37760 EFLAGS: 00010246 [ 79.879474][ C0] RAX: ffffffff893d7b2c RBX: ffff8880603c8c80 RCX: ffff88813fea1dc0 [ 79.887423][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.895381][ C0] RBP: ffffc90000d37988 R08: ffff88813fea1dc0 R09: 0000000000000003 [ 79.903331][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88801f277c00 [ 79.911280][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001a6efc [ 79.919234][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 79.924960][ C0] ? read_lock_is_recursive+0x10/0x10 [ 79.930313][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 79.936274][ C0] ? ieee80211_get_buffered_bc+0x767/0x850 [ 79.942067][ C0] ? rcu_is_watching+0x11/0xa0 [ 79.946813][ C0] ? lock_acquire+0xcd/0x3f0 [ 79.951388][ C0] ? rcu_is_watching+0x11/0xa0 [ 79.956129][ C0] ? lock_acquire+0xcd/0x3f0 [ 79.960698][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 79.966137][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 79.971575][ C0] __iterate_interfaces+0x243/0x500 [ 79.976754][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 79.982984][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 79.989210][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 79.996213][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 80.001388][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 80.006570][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 80.012552][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 80.018512][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 80.023174][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 80.028267][ C0] hrtimer_run_softirq+0x176/0x240 [ 80.033359][ C0] handle_softirqs+0x328/0x820 [ 80.038106][ C0] ? run_ksoftirqd+0x98/0xf0 [ 80.042677][ C0] ? do_softirq+0x200/0x200 [ 80.047157][ C0] ? release_firmware_map_entry+0x190/0x190 [ 80.053029][ C0] ? run_ksoftirqd+0x9d/0xf0 [ 80.057605][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 80.062784][ C0] run_ksoftirqd+0x98/0xf0 [ 80.067176][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 80.072364][ C0] smpboot_thread_fn+0x4f6/0x970 [ 80.077314][ C0] kthread+0x436/0x520 [ 80.081358][ C0] ? cpu_report_death+0x180/0x180 [ 80.086368][ C0] ? kthread_blkcg+0xd0/0xd0 [ 80.090935][ C0] ret_from_fork+0x1f/0x30 [ 80.095337][ C0] [ 80.098549][ C0] Kernel Offset: disabled [ 80.102853][ C0] Rebooting in 86400 seconds..