last executing test programs: 8.600489488s ago: executing program 4 (id=206): socket$packet(0x11, 0x2, 0x300) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000300)=0x80000009, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='k\x9a\xf7\xdf`', 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000440)={0x3c0, 0x78, 0x0, 0x640, 0x7, 0x0, 0x0, 0x0, {}, {0x2}, {0x3}, {0x1}, 0x0, 0x90, 0x0, 0x0, 0x1, 0xfffffffa, 0x8, 0x3, 0x1ff, 0x3d, 0x8, 0x3, 0x53, 0x202, 0x1, 0xc}) 6.90953379s ago: executing program 1 (id=215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x109) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008030) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.87150086s ago: executing program 4 (id=219): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 4.840593571s ago: executing program 0 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) 4.738744104s ago: executing program 1 (id=222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x255fdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x58) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r7, &(0x7f0000000180)='10', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x20042, 0x0) write(r8, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) write(r6, &(0x7f0000001400)='dummy_udc.0', 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.526651439s ago: executing program 0 (id=223): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 4.526130479s ago: executing program 2 (id=224): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x202, 0x40) socket$tipc(0x1e, 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) 4.179936277s ago: executing program 4 (id=225): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, 0x0, 0x102030405060708, {0x0, 0x0, 0x4}, 0xff}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0xee}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) 4.123354719s ago: executing program 2 (id=226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.0492414s ago: executing program 1 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000c000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000010000c000780080006"], 0x5c}}, 0x0) 3.763942727s ago: executing program 4 (id=229): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) r1 = syz_usbip_server_init(0x1) fcntl$F_GET_RW_HINT(r1, 0x40b, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x4000) writev(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') openat(r5, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, 0x0) 3.760990368s ago: executing program 1 (id=230): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x4e22, 0x8000, 0x4e24, 0x3, 0xa, 0x20, 0x20, 0x33}, {0x80000000, 0x7, 0x8, 0x5, 0xd50, 0x81, 0x2, 0x408}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0x3, 0x1}, {{@in=@remote, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x3, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) 3.484566935s ago: executing program 0 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) 3.291298949s ago: executing program 0 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x109) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008030) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.311754013s ago: executing program 1 (id=233): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./file0\n', 0x8) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) close(0xffffffffffffffff) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r4, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r5, &(0x7f00000009c0), 0x100) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000a80), 0x100) 2.287093584s ago: executing program 2 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) 2.192006526s ago: executing program 4 (id=235): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 2.159543738s ago: executing program 3 (id=236): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x202, 0x40) socket$tipc(0x1e, 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) 2.137248798s ago: executing program 0 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.923952233s ago: executing program 2 (id=238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0xa, 0x20, 0xa0, 0x21, 0x0, 0xee00}, {@in=@multicast1, 0x4d6, 0x32}, @in=@private=0xa050100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x2}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x0, 0x19}}, 0xf0}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) 1.851362815s ago: executing program 4 (id=239): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x100, 0xa5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000b00)={0x0, 0x1, 0x0, 0x3, 0x400256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35ba, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x336}}], 0x1, &(0x7f0000000a80)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x1, 0x0, 0x0}}, 0x0) 1.811667446s ago: executing program 3 (id=240): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, 0x0, 0x102030405060708, {0x0, 0x0, 0x4}, 0xff}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0xee}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) 1.580020392s ago: executing program 2 (id=241): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = dup(r0) sendfile(r2, r3, 0x0, 0x80006) 1.579655862s ago: executing program 3 (id=242): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 1.293467409s ago: executing program 1 (id=243): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0x80000000, 0xfffffffd, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x80000001, 0x1003, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) write(r2, &(0x7f00000002c0)='snd_aloop.0', 0xb) 1.276324529s ago: executing program 3 (id=244): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x4e22, 0x8000, 0x4e24, 0x3, 0xa, 0x20, 0x20, 0x33}, {0x80000000, 0x7, 0x8, 0x5, 0xd50, 0x81, 0x2, 0x408}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0x3, 0x1}, {{@in=@remote, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x3, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) 1.078429054s ago: executing program 0 (id=245): syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x350, 0x3d8, 0x3d8, 0x350, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1dc, 0x244, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x400, 0x9], 0x1109442d, 0x2, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @local, @rand_addr=' \x01\x00', @private0, @private1, @local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback], 0xfc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x911, 0x0, 0x5, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0xff, 0xffffffff], [0xff, 0xff000000, 0x0, 0xff000000], 'netdevsim0\x00', 'ip_vti0\x00', {}, {0xff}, 0x21, 0xf4, 0x0, 0x5}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1d, 0x0, 0xfffffffc, 0x0, 'syz1\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x474) syz_open_dev$I2C(0x0, 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25210000000c000500000800000000000009001f0070687931000000000a0001007770616e33000000050020"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000092d40000ffffffea000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) 648.585184ms ago: executing program 2 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/memory/memory10/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='offline', 0x7) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='offline', 0x7) 314.049303ms ago: executing program 3 (id=247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='file', 0x4) 0s ago: executing program 3 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x109) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008030) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. [ 65.221614][ T4259] cgroup: Unknown subsys name 'net' [ 65.320544][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.574245][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.635089][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.642836][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.651343][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.659986][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.668626][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.671409][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.676954][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.683695][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.691488][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.697585][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.704746][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.711634][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.718852][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.732350][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.733753][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.744753][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.747190][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.754340][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.768792][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.769094][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.776436][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.783589][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.791364][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.798724][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.805640][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.812435][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.825812][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.866235][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.874065][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.881400][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.183042][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 69.263668][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 69.380014][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.388512][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.397311][ T4284] device bridge_slave_0 entered promiscuous mode [ 69.408829][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.416344][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.424181][ T4284] device bridge_slave_1 entered promiscuous mode [ 69.451652][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.459095][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.466885][ T4272] device bridge_slave_0 entered promiscuous mode [ 69.474758][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 69.492119][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 69.502530][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 69.512058][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.519360][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.527131][ T4272] device bridge_slave_1 entered promiscuous mode [ 69.540254][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.578985][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.606738][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.645903][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.662078][ T4284] team0: Port device team_slave_0 added [ 69.684811][ T4284] team0: Port device team_slave_1 added [ 69.726316][ T4272] team0: Port device team_slave_0 added [ 69.751975][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.761618][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.787749][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.814185][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.821327][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.829577][ T4271] device bridge_slave_0 entered promiscuous mode [ 69.838421][ T4272] team0: Port device team_slave_1 added [ 69.851199][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.858595][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.866870][ T4274] device bridge_slave_0 entered promiscuous mode [ 69.874713][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.881763][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.910582][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.921941][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.929133][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.936950][ T4275] device bridge_slave_0 entered promiscuous mode [ 69.946237][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.953349][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.961413][ T4275] device bridge_slave_1 entered promiscuous mode [ 69.973267][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.983332][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.991460][ T4271] device bridge_slave_1 entered promiscuous mode [ 70.018122][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.025475][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.033224][ T4274] device bridge_slave_1 entered promiscuous mode [ 70.051592][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.059634][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.085661][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.098810][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.121545][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.139299][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.146302][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.172693][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.185460][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.202360][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.212935][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.244120][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.259545][ T4284] device hsr_slave_0 entered promiscuous mode [ 70.266261][ T4284] device hsr_slave_1 entered promiscuous mode [ 70.301889][ T4275] team0: Port device team_slave_0 added [ 70.309532][ T4271] team0: Port device team_slave_0 added [ 70.317357][ T4271] team0: Port device team_slave_1 added [ 70.347260][ T4275] team0: Port device team_slave_1 added [ 70.362260][ T4274] team0: Port device team_slave_0 added [ 70.374386][ T4272] device hsr_slave_0 entered promiscuous mode [ 70.381234][ T4272] device hsr_slave_1 entered promiscuous mode [ 70.387988][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.397428][ T4272] Cannot create hsr debugfs directory [ 70.414189][ T4274] team0: Port device team_slave_1 added [ 70.436938][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.443920][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.470031][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.487855][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.495024][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.521856][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.537742][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.545309][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.571354][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.586361][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.593312][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.619315][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.661255][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.668427][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.694669][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.707173][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.714285][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.740689][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.767159][ T4271] device hsr_slave_0 entered promiscuous mode [ 70.773905][ T4271] device hsr_slave_1 entered promiscuous mode [ 70.780515][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.788142][ T4271] Cannot create hsr debugfs directory [ 70.870542][ T4275] device hsr_slave_0 entered promiscuous mode [ 70.877377][ T4275] device hsr_slave_1 entered promiscuous mode [ 70.884595][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.892172][ T4275] Cannot create hsr debugfs directory [ 70.898226][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 70.898287][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 70.904608][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 70.910454][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 70.974359][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 71.006831][ T4274] device hsr_slave_0 entered promiscuous mode [ 71.013465][ T4274] device hsr_slave_1 entered promiscuous mode [ 71.020466][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.028235][ T4274] Cannot create hsr debugfs directory [ 71.218009][ T4284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.228931][ T4284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.238613][ T4284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.253233][ T4284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.297641][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.304600][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.314965][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.328446][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.346174][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.355044][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.399611][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.425559][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.450548][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.465289][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.505653][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.515085][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.557560][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.570541][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.598424][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.632455][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.649611][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.662122][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.671194][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.698770][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.706064][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.714946][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.733137][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.755790][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.765923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.774361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.782359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.792129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.801159][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.808415][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.817744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.827838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.836418][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.843477][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.858485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.867752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.877970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.887125][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.894250][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.902151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.911827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.920305][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.927417][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.939663][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.962906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.971503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.982416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.992385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.001795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.011283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.020190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.045565][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.054908][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.063371][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.072569][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.081384][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.093061][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.107129][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.116285][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.126851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.135451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.149231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.159090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.179334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.190445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.202719][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.212330][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.242138][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.250364][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.262026][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.275716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.287891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.306625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.317234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.327086][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.334212][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.342257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.362223][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.391444][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.401414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.410685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.427802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.438388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.447650][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.454792][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.463131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.473453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.482819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.492722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.505394][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.527764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.544941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.556357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.564507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.573687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.604500][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.612348][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.622888][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.642601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.651597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.662075][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.669225][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.677635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.686903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.695944][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.703042][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.711402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.721441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.730854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.740544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.752040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.765977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.775422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.784311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.792669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.800810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.808960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.819082][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.829802][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.840656][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.849850][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.858718][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.865842][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.893540][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.922233][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.944068][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.969456][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.977092][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 72.977124][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 72.977147][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 72.984844][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 73.013502][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.026876][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.037214][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.049152][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.064591][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 73.072261][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.082939][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.098034][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.111343][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.120883][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.128017][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.136399][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.205422][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.215629][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.234557][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.254388][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.271769][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.300770][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.325332][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.344786][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.362233][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.385769][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.401417][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.410339][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.419472][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.436722][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.492783][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.504921][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.517556][ T4271] device veth0_vlan entered promiscuous mode [ 73.555794][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.565421][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.585909][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.606031][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.632778][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.647795][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.673888][ T4271] device veth1_vlan entered promiscuous mode [ 73.689849][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.711268][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.721686][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.768204][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.801086][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.809075][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.826175][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.836385][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.859565][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.880804][ T4271] device veth0_macvtap entered promiscuous mode [ 73.901406][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.920307][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.930982][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.969650][ T4271] device veth1_macvtap entered promiscuous mode [ 73.993348][ T4284] device veth0_vlan entered promiscuous mode [ 74.012585][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.022690][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.036718][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.045372][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.053552][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.070644][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.083739][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.109538][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.119223][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.128734][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.139999][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.149950][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.165440][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.180171][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.190122][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.204868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.212739][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.228524][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.240626][ T4284] device veth1_vlan entered promiscuous mode [ 74.249741][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.262285][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.271873][ T4275] device veth0_vlan entered promiscuous mode [ 74.280785][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.289769][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.298777][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.307782][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.343339][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.356852][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.371413][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.381177][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.398767][ T4275] device veth1_vlan entered promiscuous mode [ 74.410155][ T4284] device veth0_macvtap entered promiscuous mode [ 74.438068][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.447133][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.457447][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.493907][ T4284] device veth1_macvtap entered promiscuous mode [ 74.509887][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.520059][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.528527][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.537171][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.545581][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.554564][ T4272] device veth0_vlan entered promiscuous mode [ 74.582858][ T4274] device veth0_vlan entered promiscuous mode [ 74.622480][ T4275] device veth0_macvtap entered promiscuous mode [ 74.631778][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.645589][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.654706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.663326][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.672084][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.680473][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.689947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.702205][ T4272] device veth1_vlan entered promiscuous mode [ 74.733186][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.748675][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.759949][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.772396][ T4274] device veth1_vlan entered promiscuous mode [ 74.789372][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.797784][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.807592][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.816109][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.826680][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.836646][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.847565][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.858713][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.870551][ T4275] device veth1_macvtap entered promiscuous mode [ 74.886050][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.900430][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.910867][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.919703][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.928743][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.937192][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.947424][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.963841][ T4272] device veth0_macvtap entered promiscuous mode [ 74.981430][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.993518][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.003730][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.015142][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.026935][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.040236][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.052180][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.060863][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 75.060879][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 75.066890][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 75.066915][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 75.077076][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.099006][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.118024][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.127299][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.136941][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.145762][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 75.152197][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.164616][ T4272] device veth1_macvtap entered promiscuous mode [ 75.185116][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.193592][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.219309][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.229928][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.245849][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.258954][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.271249][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.294499][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.303091][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.313324][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.327393][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.337574][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.348088][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.357962][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.368859][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.382203][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.390641][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.399737][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.408683][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.416664][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.426296][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.435684][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.444612][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.456089][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.468090][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.477062][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.486645][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.500254][ T4274] device veth0_macvtap entered promiscuous mode [ 75.513468][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.528104][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.543790][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.554850][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.564990][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.575732][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.587214][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.617111][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.633372][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.645919][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.660869][ T4274] device veth1_macvtap entered promiscuous mode [ 75.687681][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.699610][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.709632][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.718571][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.791435][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.816085][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.829185][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.840293][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.850327][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.860912][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.871217][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.881913][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.905556][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.941474][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.952408][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.965020][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.987082][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.999350][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.009556][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.025220][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.036456][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.047768][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.058312][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.070047][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.089048][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.102162][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.119435][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.161520][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.180917][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.196465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.215378][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.218562][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.224446][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.239523][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.250472][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.260623][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.288619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.378247][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.394090][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.445254][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.463365][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.471354][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.492270][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.524467][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.542542][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.550257][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.550277][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.596946][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.619869][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.668906][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.709151][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.748560][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.788203][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.810546][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.878417][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.134569][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 77.136802][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 77.140606][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 77.140633][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 77.223217][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 77.282044][ T4383] tipc: Started in network mode [ 77.319195][ T4383] tipc: Node identity f651cd14035d, cluster identity 4711 [ 77.393457][ T4383] tipc: Enabled bearer , priority 0 [ 77.411419][ T4385] device syzkaller0 entered promiscuous mode [ 77.520344][ T4383] tipc: Resetting bearer [ 77.555642][ T4375] Zero length message leads to an empty skb [ 77.582527][ T4382] tipc: Resetting bearer [ 77.650077][ T4382] tipc: Disabling bearer [ 77.714097][ T4321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.917240][ T4321] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.946989][ T4321] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.006256][ T4321] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 78.035995][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.061592][ T4321] usb 3-1: Product: syz [ 78.089677][ T4321] usb 3-1: Manufacturer: syz [ 78.156840][ T4321] usb 3-1: SerialNumber: syz [ 78.231919][ T53] block nbd3: Attempted send on invalid socket [ 78.239187][ T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 78.452698][ T4321] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 78.727426][ T4321] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 78.890629][ T4321] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 79.360274][ T4412] Mass Storage Function, version: 2009/09/11 [ 79.431515][ T4412] LUN: removable file: (no medium) [ 79.436314][ T4411] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 79.878953][ T4433] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.505435][ T4387] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 80.729419][ T4387] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 80.779705][ T4387] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 81.301275][ T94] block nbd4: Attempted send on invalid socket [ 81.307860][ T94] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 81.959465][ T4321] usb 3-1: USB disconnect, device number 2 [ 81.970214][ T4321] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 81.983798][ T4321] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 81.995943][ T4321] ti_usb_3410_5052 3-1:2.0: device disconnected [ 82.117315][ T4455] XFS (mtdblock0): Invalid superblock magic number [ 82.505272][ T4486] netlink: 156 bytes leftover after parsing attributes in process `syz.1.29'. [ 84.578105][ T53] block nbd3: Attempted send on invalid socket [ 84.585264][ T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 84.774018][ T4324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.999191][ T4324] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.087329][ T4324] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.244037][ T4324] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 85.271720][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.300656][ T4508] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.312977][ T4324] usb 1-1: Product: syz [ 85.332316][ T4324] usb 1-1: Manufacturer: syz [ 85.357328][ T4324] usb 1-1: SerialNumber: syz [ 85.409952][ T4324] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 85.445784][ T4526] binder: 4525:4526 unknown command 0 [ 85.451323][ T4526] binder: 4525:4526 ioctl c0306201 2000000001c0 returned -22 [ 85.461549][ T4324] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 85.475243][ T4524] Bluetooth: MGMT ver 1.22 [ 85.503328][ T4324] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 86.072369][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 86.079170][ T4292] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 86.083963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 86.669002][ T14] cfg80211: failed to load regulatory.db [ 86.683846][ T4504] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 86.718333][ T4504] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 86.754293][ T4504] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 86.804597][ T4504] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 86.833975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 86.853978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 86.863969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.873968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.883968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.893963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.903966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.913965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.923965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 87.753670][ T4550] jffs2: notice: (4550) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.857996][ T4324] usb 1-1: USB disconnect, device number 2 [ 87.931994][ T4324] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 87.966542][ T4324] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 88.135999][ T4324] ti_usb_3410_5052 1-1:2.0: device disconnected [ 88.254902][ T94] block nbd2: Attempted send on invalid socket [ 88.261126][ T94] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 89.847376][ T4595] ======================================================= [ 89.847376][ T4595] WARNING: The mand mount option has been deprecated and [ 89.847376][ T4595] and is ignored by this kernel. Remove the mand [ 89.847376][ T4595] option from the mount to silence this warning. [ 89.847376][ T4595] ======================================================= [ 89.891241][ T4595] NILFS (loop1): device size too small [ 90.004074][ T4366] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.512388][ T4366] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.536715][ T4366] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.665971][ T4366] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 91.697747][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.737896][ T4366] usb 1-1: Product: syz [ 91.742078][ T4366] usb 1-1: Manufacturer: syz [ 91.775668][ T4366] usb 1-1: SerialNumber: syz [ 91.807338][ T4366] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 91.837531][ T4366] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 91.878972][ T4366] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 91.980955][ T4606] jffs2: notice: (4606) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.261370][ T4612] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 92.276049][ T4612] cramfs: wrong magic [ 93.064241][ T4589] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 93.925195][ T4589] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 93.932422][ T4589] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 93.994211][ T4589] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 94.134622][ T4625] vcan0: tx address claim with broadcast sa [ 95.001784][ T22] usb 1-1: USB disconnect, device number 3 [ 95.034732][ T22] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 95.118712][ T22] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 95.153051][ T22] ti_usb_3410_5052 1-1:2.0: device disconnected [ 95.432178][ T26] audit: type=1800 audit(1787044815.700:2): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.76" name="cdrom" dev="configfs" ino=34814 res=0 errno=0 [ 95.499737][ T26] audit: type=1800 audit(1787044815.750:3): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.76" name="file" dev="configfs" ino=34815 res=0 errno=0 [ 95.574620][ T4641] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.884816][ T4657] jffs2: notice: (4657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.053718][ T4665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.142708][ T4665] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.199147][ T4665] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 97.224136][ T4665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.234744][ T4665] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.270893][ T4665] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 97.273684][ T4684] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 97.306326][ T4665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.319797][ T4665] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.137442][ T4665] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 98.146487][ T4665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.152489][ T4665] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.162306][ T4665] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 98.169681][ T4665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.176751][ T4665] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.185581][ T4292] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.195957][ T4665] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 98.370783][ T26] audit: type=1800 audit(1787044818.640:4): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.89" name="cdrom" dev="configfs" ino=35912 res=0 errno=0 [ 98.462582][ T26] audit: type=1800 audit(1787044818.670:5): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.89" name="file" dev="configfs" ino=35913 res=0 errno=0 [ 98.484104][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.710216][ T14] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.294405][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.354648][ T14] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.374107][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.393751][ T4292] Bluetooth: hci0: unexpected event for opcode 0x201c [ 99.446316][ T14] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 99.477765][ T4705] jffs2: notice: (4705) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.498262][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.509052][ T14] usb 5-1: Product: syz [ 99.513254][ T14] usb 5-1: Manufacturer: syz [ 99.520857][ T14] usb 5-1: SerialNumber: syz [ 99.551485][ T14] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 99.589979][ T14] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 99.615438][ T14] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 100.149834][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.174181][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.174951][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout [ 100.264230][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 100.415708][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 100.429133][ T14] usb 1-1: config 0 has no interfaces? [ 100.577227][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.777400][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.824599][ T4679] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 100.952238][ T4679] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 100.970556][ T14] usb 1-1: Product: syz [ 101.058850][ T14] usb 1-1: Manufacturer: syz [ 101.106850][ T4679] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 101.151879][ T14] usb 1-1: SerialNumber: syz [ 101.325946][ T14] usb 1-1: config 0 descriptor?? [ 101.342795][ T4679] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 101.454103][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 102.254129][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 102.254197][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 102.306517][ T4280] usb 5-1: USB disconnect, device number 2 [ 102.491738][ T4280] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 102.771480][ T4280] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 102.993263][ T4280] ti_usb_3410_5052 5-1:2.0: device disconnected [ 103.248875][ T4723] syz.1.97 (4723): drop_caches: 2 [ 103.325846][ T4732] tipc: Started in network mode [ 103.362625][ T4732] tipc: Node identity , cluster identity 4711 [ 103.405444][ T4732] tipc: Failed to obtain node identity [ 103.472986][ T4732] tipc: Enabling of bearer rejected, failed to enable media [ 104.705335][ T4366] usb 1-1: USB disconnect, device number 4 [ 104.892054][ T26] audit: type=1800 audit(1787044825.160:6): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.103" name="cdrom" dev="configfs" ino=35963 res=0 errno=0 [ 105.299998][ T26] audit: type=1800 audit(1787044825.260:7): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.103" name="file" dev="configfs" ino=35964 res=0 errno=0 [ 105.707482][ T4814] jffs2: notice: (4814) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.606225][ T4833] loop0: detected capacity change from 0 to 3904 [ 107.706996][ T4833] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 107.774474][ T4833] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 107.804173][ T4833] loop0: [ 108.304201][ T4366] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.516494][ T4366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.575542][ T4366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.610143][ T4366] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.643626][ T4366] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.656359][ T4366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.668116][ T4858] jffs2: notice: (4858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.704536][ T4366] usb 2-1: config 0 descriptor?? [ 109.128858][ T4366] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 109.150590][ T4366] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 110.584105][ T22] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 111.428107][ T4323] usb 2-1: USB disconnect, device number 2 [ 112.430547][ T4904] comedi comedi3: pcmmio: I/O port conflict (0x5,32) [ 112.448139][ T4906] nvmet: adding nsid 1 to subsystem testsubsys [ 112.566148][ T26] audit: type=1800 audit(1787044832.840:8): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="cdrom" dev="configfs" ino=36172 res=0 errno=0 [ 112.649587][ T26] audit: type=1800 audit(1787044832.840:9): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="file" dev="configfs" ino=36173 res=0 errno=0 [ 112.780193][ T4906] nvmet: transport type 0 not supported [ 112.887568][ T4280] nvmet: connect request for invalid subsystem testsubsys! [ 112.905585][ T4909] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 115.640124][ T26] audit: type=1800 audit(1787044835.910:10): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.148" name="file" dev="configfs" ino=35223 res=0 errno=0 [ 115.667347][ T4946] mass_storage.0/lun.0: unable to open backing file: fil [ 115.695216][ T26] audit: type=1800 audit(1787044835.970:11): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.147" name="cdrom" dev="configfs" ino=35225 res=0 errno=0 [ 116.046175][ T4958] nvmet: disable ns before setting buffered_io value. [ 116.184195][ T4280] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.204882][ T4958] nvmet: transport type 0 not supported [ 116.277834][ T4320] nvmet: connect request for invalid subsystem testsubsys! [ 116.311158][ T4962] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 116.345597][ T4968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 116.375548][ T4280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.404055][ T4280] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.425322][ T4280] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.476077][ T4280] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 116.504805][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 117.376704][ T4280] usb 4-1: Product: syz [ 117.404587][ T4280] usb 4-1: Manufacturer: syz [ 117.449253][ T4280] usb 4-1: SerialNumber: syz [ 117.684808][ T26] audit: type=1800 audit(1787044837.960:12): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.160" name="cdrom" dev="configfs" ino=36262 res=0 errno=0 [ 118.591302][ T26] audit: type=1800 audit(1787044837.990:13): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.160" name="file" dev="configfs" ino=36264 res=0 errno=0 [ 118.630253][ T4280] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 118.679711][ T26] audit: type=1800 audit(1787044838.950:14): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.163" name="file" dev="configfs" ino=35315 res=0 errno=0 [ 118.701503][ T4987] mass_storage.0/lun.0: unable to open backing file: fil [ 119.192731][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 119.273174][ T4322] usb 4-1: USB disconnect, device number 2 [ 119.295291][ T26] audit: type=1800 audit(1787044839.570:15): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.171" name="cdrom" dev="configfs" ino=35357 res=0 errno=0 [ 119.328101][ T4322] usblp0: removed [ 119.351218][ T26] audit: type=1800 audit(1787044839.590:16): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.171" name="file" dev="configfs" ino=35358 res=0 errno=0 [ 119.494413][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.704303][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 119.741469][ T4320] usb 5-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 121.784961][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.846453][ T4320] usb 5-1: Product: У [ 121.882310][ T4320] usb 5-1: Manufacturer: 쟙䉻存ⶡ㷧཈聞햔䄭녅ꗸﰳ恪蹛컦蝷ꖮᔹ㎺⫓璌ᒯ졁푏绰鴺櫳뽔吔㺋錺鍬☒鱋ꄬ蹭粴喹슇얈ᯩ狒宪䓄ڈ㘈╔룝ﱈ⪷ቹઅ핪鈒챚﹩ힾ쮷꺻뼧ﮱ⇃녡悩⶘曩஝녈ಓ唤粃휶ዩऽ钫㓞雳䭦삍ꑪ넡㠢ꃡ郃颳牾ڌ飪聄륒﹤껊ᬠ︺芴 [ 122.254902][ T4320] usb 5-1: SerialNumber: H [ 122.378733][ T26] audit: type=1800 audit(1787044842.650:17): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.175" name="cdrom" dev="configfs" ino=35384 res=0 errno=0 [ 122.462624][ T4320] usb 5-1: can't set config #1, error -71 [ 122.487999][ T4320] usb 5-1: USB disconnect, device number 3 [ 122.534305][ T26] audit: type=1800 audit(1787044842.680:18): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.175" name="file" dev="configfs" ino=35385 res=0 errno=0 [ 123.098065][ T5039] autofs4:pid:5039:autofs_fill_super: called with bogus options [ 123.171732][ T26] audit: type=1800 audit(1787044843.440:19): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="cdrom" dev="configfs" ino=36416 res=0 errno=0 [ 123.201356][ T26] audit: type=1800 audit(1787044843.460:20): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="file" dev="configfs" ino=36417 res=0 errno=0 [ 123.424168][ T4322] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.938147][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.038170][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.190292][ T4322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.329704][ T4322] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.413137][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.531419][ T4322] usb 4-1: config 0 descriptor?? [ 124.709140][ T26] audit: type=1800 audit(1787044844.980:21): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="cdrom" dev="configfs" ino=35459 res=0 errno=0 [ 124.762113][ T26] audit: type=1800 audit(1787044844.980:22): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="file" dev="configfs" ino=35460 res=0 errno=0 [ 124.993646][ T4322] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 125.015899][ T4322] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 126.092687][ T26] audit: type=1800 audit(1787044846.360:23): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="cdrom" dev="configfs" ino=36496 res=0 errno=0 [ 126.394128][ T4724] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.994457][ T26] audit: type=1800 audit(1787044846.360:24): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="file" dev="configfs" ino=36497 res=0 errno=0 [ 127.084102][ T4322] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 127.155556][ T26] audit: type=1800 audit(1787044847.430:25): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="cdrom" dev="configfs" ino=35506 res=0 errno=0 [ 127.179208][ T4724] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.204098][ T4724] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 127.241418][ T4724] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 127.265913][ T26] audit: type=1800 audit(1787044847.470:26): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="file" dev="configfs" ino=35507 res=0 errno=0 [ 127.290799][ T4724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.325594][ T4724] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 127.356000][ T4724] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 127.544296][ T4357] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.749018][ T4357] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.785842][ T4357] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.847266][ T4357] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 127.871234][ T4357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.881484][ T4357] usb 5-1: Product: syz [ 127.888111][ T4357] usb 5-1: Manufacturer: syz [ 127.898136][ T4357] usb 5-1: SerialNumber: syz [ 127.941301][ T4357] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 127.954125][ T4366] usb 4-1: USB disconnect, device number 3 [ 128.000084][ T4357] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 128.049874][ T4357] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 128.234179][ T5095] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 128.248314][ T5095] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 128.280156][ T5095] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 128.334934][ T4724] usb 1-1: USB disconnect, device number 5 [ 128.368376][ T4724] SPCP8x5 ttyUSB0: failed to set control lines: -19 [ 128.405835][ T4724] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 128.433672][ T4724] spcp8x5 1-1:1.0: device disconnected [ 128.653708][ T26] audit: type=1800 audit(1787044848.920:27): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.213" name="cdrom" dev="configfs" ino=35527 res=0 errno=0 [ 128.689019][ T26] audit: type=1800 audit(1787044848.950:28): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.213" name="file" dev="configfs" ino=35528 res=0 errno=0 [ 129.803878][ T26] audit: type=1800 audit(1787044850.070:29): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.217" name="cdrom" dev="configfs" ino=36569 res=0 errno=0 [ 130.766794][ T26] audit: type=1800 audit(1787044850.080:30): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.217" name="file" dev="configfs" ino=36570 res=0 errno=0 [ 130.819826][ T4724] usb 5-1: USB disconnect, device number 4 [ 130.879223][ T4724] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 130.948254][ T4724] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 131.038298][ T4724] ti_usb_3410_5052 5-1:2.0: device disconnected [ 131.156629][ T5145] using random self ethernet address [ 131.175061][ T5145] using random host ethernet address [ 131.261232][ T5145] usb0: HOST MAC ba:42:b1:c6:58:6a [ 131.282601][ T5145] usb0: MAC 9a:2c:97:73:1b:a3 [ 131.381598][ T26] audit: type=1800 audit(1787044851.650:31): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.224" name="cdrom" dev="configfs" ino=36605 res=0 errno=0 [ 131.511377][ T26] audit: type=1800 audit(1787044851.680:32): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.224" name="file" dev="configfs" ino=36606 res=0 errno=0 [ 131.615098][ T4366] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.830116][ T4366] usb 1-1: Dual-Role OTG device on HNP port [ 131.874165][ T4366] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 131.883310][ T4366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.947673][ T4366] usb-storage 1-1:1.0: USB Mass Storage device detected [ 132.040557][ T4366] scsi host1: usb-storage 1-1:1.0 [ 132.095802][ T4366] cdc_ncm 1-1:1.1: MAC-Address: ba:42:b1:c6:58:6a [ 132.113038][ T4366] cdc_ncm 1-1:1.1 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), ba:42:b1:c6:58:6a [ 132.134658][ T26] audit: type=1800 audit(1787044852.410:33): pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.230" name="cdrom" dev="configfs" ino=35616 res=0 errno=0 [ 132.162112][ T26] audit: type=1800 audit(1787044852.420:34): pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.230" name="file" dev="configfs" ino=35617 res=0 errno=0 [ 132.263420][ T5174] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 132.270417][ T5174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.311323][ T5174] vhci_hcd vhci_hcd.0: Device attached [ 132.338274][ T5177] vhci_hcd: connection closed [ 132.340437][ T4780] vhci_hcd: stop threads [ 132.367269][ T4780] vhci_hcd: release socket [ 132.385864][ T4780] vhci_hcd: disconnect device [ 132.534487][ T5185] mass_storage.0/lun.0: unable to open backing file: file [ 132.736099][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742422][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.408017][ T4401] scsi 1:0:0:0: CD-ROM Linux File-CD Gadget 0601 PQ: 0 ANSI: 2 [ 133.502553][ T5171] sr 1:0:0:0: Power-on or device reset occurred [ 133.530606][ T4401] sr 1:0:0:0: [sr0] scsi-1 drive [ 133.554480][ T4401] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 133.679844][ T5194] nvmet: disable ns before setting buffered_io value. [ 133.707148][ T4401] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 133.813447][ T26] audit: type=1800 audit(1787044854.080:35): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.236" name="cdrom" dev="configfs" ino=36676 res=0 errno=0 [ 133.872851][ T26] audit: type=1800 audit(1787044854.110:36): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.236" name="file" dev="configfs" ino=36677 res=0 errno=0 [ 133.954153][ T5194] nvmet: transport type 0 not supported [ 134.177438][ T4280] nvmet: connect request for invalid subsystem testsubsys! [ 134.190624][ T5205] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 134.670541][ T26] audit: type=1800 audit(1787044854.940:37): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="cdrom" dev="configfs" ino=35767 res=0 errno=0 [ 134.779731][ T26] audit: type=1800 audit(1787044854.960:38): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="file" dev="configfs" ino=35768 res=0 errno=0 [ 135.242724][ T5247] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00 [ 135.313318][ T5247] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0 [ 135.348068][ T5247] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 135.460156][ T5247] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801744c140 [ 135.540349][ T26] audit: type=1800 audit(1787044855.810:39): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.247" name="file" dev="configfs" ino=35795 res=0 errno=0 [ 135.654601][ T5247] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 135.756104][ T5226] ================================================================== [ 135.764206][ T5226] BUG: KASAN: use-after-free in release_card_device+0x192/0x1a0 [ 135.771872][ T5226] Read of size 1 at addr ffff88802e8ccd11 by task syz.1.243/5226 [ 135.779569][ T5226] [ 135.781975][ T5226] CPU: 1 PID: 5226 Comm: syz.1.243 Not tainted syzkaller #0 [ 135.789237][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.799307][ T5226] Call Trace: [ 135.802571][ T5226] [ 135.805488][ T5226] dump_stack_lvl+0x188/0x24e [ 135.810170][ T5226] ? __lock_acquire+0x7c40/0x7c40 [ 135.815189][ T5226] ? show_regs_print_info+0x12/0x12 [ 135.820380][ T5226] ? load_image+0x410/0x410 [ 135.824867][ T5226] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 135.830309][ T5226] ? __virt_addr_valid+0x188/0x540 [ 135.835408][ T5226] ? __virt_addr_valid+0x467/0x540 [ 135.840525][ T5226] ? release_card_device+0x192/0x1a0 [ 135.845813][ T5226] print_report+0xa8/0x210 [ 135.850213][ T5226] kasan_report+0x10b/0x140 [ 135.854706][ T5226] ? release_card_device+0x192/0x1a0 [ 135.859978][ T5226] release_card_device+0x192/0x1a0 [ 135.865083][ T5226] ? snd_power_wait+0x90/0x90 [ 135.869759][ T5226] device_release+0x92/0x1c0 [ 135.874332][ T5226] kobject_put+0x217/0x450 [ 135.878732][ T5226] snd_card_file_remove+0x32d/0x380 [ 135.883922][ T5226] snd_pcm_release+0x12b/0x150 [ 135.888684][ T5226] ? snd_disconnect_mmap+0x10/0x10 [ 135.893780][ T5226] __fput+0x20a/0x8b0 [ 135.897744][ T5226] task_work_run+0x1d0/0x260 [ 135.902324][ T5226] ? task_work_cancel+0x220/0x220 [ 135.907332][ T5226] ? __close_range+0x20c/0x770 [ 135.912083][ T5226] ? exit_to_user_mode_loop+0x3b/0x110 [ 135.917532][ T5226] exit_to_user_mode_loop+0xe6/0x110 [ 135.922805][ T5226] exit_to_user_mode_prepare+0xee/0x180 [ 135.928337][ T5226] syscall_exit_to_user_mode+0x16/0x40 [ 135.933782][ T5226] do_syscall_64+0x58/0xa0 [ 135.938180][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 135.942844][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 135.947506][ T5226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.953398][ T5226] RIP: 0033:0x7f0814d9e0d9 [ 135.957812][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.977408][ T5226] RSP: 002b:00007fffe36c31d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 135.985820][ T5226] RAX: 0000000000000000 RBX: 00007f0815027da0 RCX: 00007f0814d9e0d9 [ 135.993789][ T5226] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 136.001745][ T5226] RBP: 00007f0815027da0 R08: 0000000000000006 R09: 0000000000000000 [ 136.009700][ T5226] R10: 00007f0815027cb0 R11: 0000000000000246 R12: 00000000000210b0 [ 136.017658][ T5226] R13: 00007f0815025fac R14: 0000000000020e4c R15: 00007fffe36c32e0 [ 136.025615][ T5226] [ 136.028618][ T5226] [ 136.030921][ T5226] The buggy address belongs to the physical page: [ 136.037334][ T5226] page:ffffea0000ba3300 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x2e8cc [ 136.047820][ T5226] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.054922][ T5226] raw: 00fff00000000000 ffffea00015d7108 ffff88813fffa910 0000000000000000 [ 136.063512][ T5226] raw: 0000000000000000 0000000000000002 00000000ffffff7f 0000000000000000 [ 136.072073][ T5226] page dumped because: kasan: bad access detected [ 136.078474][ T5226] page_owner tracks the page as freed [ 136.083815][ T5226] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 19613409163, free_ts 135738207391 [ 136.100984][ T5226] post_alloc_hook+0x173/0x1a0 [ 136.105734][ T5226] get_page_from_freelist+0x206b/0x2180 [ 136.111356][ T5226] __alloc_pages+0x1ec/0x4f0 [ 136.115931][ T5226] __kmalloc_large_node+0x8c/0x1f0 [ 136.121026][ T5226] __kmalloc_node_track_caller+0x10f/0x240 [ 136.126813][ T5226] __devres_alloc_node+0x49/0x110 [ 136.131823][ T5226] snd_devm_card_new+0x74/0x150 [ 136.136656][ T5226] loopback_probe+0x14d/0x1a20 [ 136.141409][ T5226] platform_probe+0x137/0x1c0 [ 136.146094][ T5226] really_probe+0x24a/0xb40 [ 136.149912][ T5247] page dumped because: unmovable page [ 136.150608][ T5226] __driver_probe_device+0x1f5/0x390 [ 136.150629][ T5226] driver_probe_device+0x4f/0x420 [ 136.150644][ T5226] __device_attach_driver+0x2c6/0x510 [ 136.150658][ T5226] bus_for_each_drv+0x184/0x210 [ 136.150670][ T5226] __device_attach+0x2a7/0x480 [ 136.150683][ T5226] bus_probe_device+0xba/0x1d0 [ 136.185991][ T5226] page last free stack trace: [ 136.190648][ T5226] free_unref_page_prepare+0x8e5/0x9e0 [ 136.196093][ T5226] free_unref_page+0x2e/0x3f0 [ 136.200756][ T5226] free_large_kmalloc+0xfd/0x1a0 [ 136.205678][ T5226] devres_release_all+0x1a9/0x230 [ 136.210689][ T5226] device_release_driver_internal+0x53b/0x7c0 [ 136.216770][ T5226] unbind_store+0x2e2/0x300 [ 136.221271][ T5226] kernfs_fop_write_iter+0x3a0/0x520 [ 136.226556][ T5226] vfs_write+0x482/0x9a0 [ 136.230791][ T5226] ksys_write+0x14d/0x260 [ 136.235113][ T5226] do_syscall_64+0x4c/0xa0 [ 136.239521][ T5226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.245417][ T5226] [ 136.247730][ T5226] Memory state around the buggy address: [ 136.253343][ T5226] ffff88802e8ccc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 136.261386][ T5226] ffff88802e8ccc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 136.269432][ T5226] >ffff88802e8ccd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 136.277477][ T5226] ^ [ 136.282045][ T5226] ffff88802e8ccd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 136.290087][ T5226] ffff88802e8cce00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 136.298155][ T5226] ================================================================== [ 136.316081][ T5247] page_owner tracks the page as allocated [ 136.330010][ T5247] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4274, tgid 4274 (syz-executor), ts 69735504148, free_ts 21759633281 [ 136.421780][ T5247] post_alloc_hook+0x173/0x1a0 [ 136.441449][ T5247] get_page_from_freelist+0x206b/0x2180 [ 136.481282][ T5247] __alloc_pages+0x1ec/0x4f0 [ 136.509446][ T5247] alloc_slab_page+0x5d/0x180 [ 137.367771][ T5247] new_slab+0x87/0x2d0 [ 137.391377][ T5247] ___slab_alloc+0xbc5/0x1240 [ 137.426721][ T5247] __kmem_cache_alloc_node+0x126/0x270 [ 137.444091][ T5226] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.451323][ T5226] CPU: 0 PID: 5226 Comm: syz.1.243 Not tainted syzkaller #0 [ 137.458587][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.468631][ T5226] Call Trace: [ 137.471895][ T5226] [ 137.474809][ T5226] dump_stack_lvl+0x188/0x24e [ 137.479478][ T5226] ? memcpy+0x3c/0x60 [ 137.483443][ T5226] ? show_regs_print_info+0x12/0x12 [ 137.488626][ T5226] ? load_image+0x410/0x410 [ 137.493113][ T5226] panic+0x2d3/0x710 [ 137.496991][ T5226] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 137.503125][ T5226] ? bpf_jit_dump+0xd0/0xd0 [ 137.507611][ T5226] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 137.513567][ T5226] ? _raw_spin_unlock+0x40/0x40 [ 137.518399][ T5226] check_panic_on_warn+0x80/0xa0 [ 137.523324][ T5226] ? release_card_device+0x192/0x1a0 [ 137.528595][ T5226] end_report+0x66/0x110 [ 137.532821][ T5226] kasan_report+0x118/0x140 [ 137.537307][ T5226] ? release_card_device+0x192/0x1a0 [ 137.542582][ T5226] release_card_device+0x192/0x1a0 [ 137.547676][ T5226] ? snd_power_wait+0x90/0x90 [ 137.552331][ T5226] device_release+0x92/0x1c0 [ 137.556903][ T5226] kobject_put+0x217/0x450 [ 137.561295][ T5226] snd_card_file_remove+0x32d/0x380 [ 137.566489][ T5226] snd_pcm_release+0x12b/0x150 [ 137.571238][ T5226] ? snd_disconnect_mmap+0x10/0x10 [ 137.576332][ T5226] __fput+0x20a/0x8b0 [ 137.580295][ T5226] task_work_run+0x1d0/0x260 [ 137.584868][ T5226] ? task_work_cancel+0x220/0x220 [ 137.589879][ T5226] ? __close_range+0x20c/0x770 [ 137.594630][ T5226] ? exit_to_user_mode_loop+0x3b/0x110 [ 137.600187][ T5226] exit_to_user_mode_loop+0xe6/0x110 [ 137.605458][ T5226] exit_to_user_mode_prepare+0xee/0x180 [ 137.610988][ T5226] syscall_exit_to_user_mode+0x16/0x40 [ 137.616426][ T5226] do_syscall_64+0x58/0xa0 [ 137.620823][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 137.625482][ T5226] ? clear_bhb_loop+0x60/0xb0 [ 137.630140][ T5226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.636047][ T5226] RIP: 0033:0x7f0814d9e0d9 [ 137.640445][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.660035][ T5226] RSP: 002b:00007fffe36c31d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 137.668431][ T5226] RAX: 0000000000000000 RBX: 00007f0815027da0 RCX: 00007f0814d9e0d9 [ 137.676382][ T5226] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 137.684338][ T5226] RBP: 00007f0815027da0 R08: 0000000000000006 R09: 0000000000000000 [ 137.692287][ T5226] R10: 00007f0815027cb0 R11: 0000000000000246 R12: 00000000000210b0 [ 137.700266][ T5226] R13: 00007f0815025fac R14: 0000000000020e4c R15: 00007fffe36c32e0 [ 137.708249][ T5226] [ 137.711499][ T5226] Kernel Offset: disabled [ 137.715811][ T5226] Rebooting in 86400 seconds..