last executing test programs: 10.138039869s ago: executing program 0 (id=194): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x36de, 0x4800, 0x0, 0x0}], 0x1}) 8.179464793s ago: executing program 0 (id=201): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)='^', 0x1}], 0x1}}], 0x1, 0x840) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 7.917470569s ago: executing program 0 (id=203): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@ipv6_getaddr={0x58, 0x16, 0x200, 0x70bd2b, 0x25dfdbff, {0xa, 0x40, 0x60, 0x0, r4}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x31, 0x7, 0xb}}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x4, 0x7, 0x9}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xe18}]}, 0x58}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="cc89f83b00"/20, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="02000000020000000500"/27], 0x50) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f7c000/0x3000)=nil, 0x3000, 0x14) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7.746946188s ago: executing program 4 (id=204): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000140)={0x4f, 0x0}) write(r1, &(0x7f0000000000), 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x40001) 5.897866756s ago: executing program 4 (id=206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000002200)) 5.769279783s ago: executing program 2 (id=207): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x300}]}}}}}}}, 0x0) 5.645682411s ago: executing program 4 (id=208): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x5a93, 0x10100, 0xfffffffd, 0x307, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100101) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) 5.615931332s ago: executing program 2 (id=209): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.113905702s ago: executing program 3 (id=211): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x30b, @tick=0x1000, 0x31, {0xfd}}) 5.058017765s ago: executing program 1 (id=212): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x81, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6", 0x0, 0xf0}, 0x50) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000), 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x34f4abb0713c3e09}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x4c, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x38, 0xa8, @random="7e16c8c46ce24108bbeba1268b07d8aed3600204852e563762b4fcf6f2e26cc4bb9806c7c82501c6190faedf1da5937472e8b191"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x40001) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 4.420600282s ago: executing program 2 (id=213): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@empty}]}]}}, @timestamp}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 4.321881617s ago: executing program 4 (id=214): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='SYNTH \'Mic\'\t '], 0x86) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x1f, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) io_setup(0x192, &(0x7f0000000000)=0x0) io_submit(r3, 0x3, &(0x7f0000001840)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000180)="277801ee196614c6d3568f9b8bbec866d6f13ab86b0b90ab1b443238549eeb524724f819dae482665e2411798c9aa3e403a2cfe07da69385a4e10e48d7725c1236f4e46ba2933cc6", 0x48, 0x26}, 0x0, 0x0]) 4.29276778s ago: executing program 1 (id=215): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca", 0x1c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314", 0x3}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.169879117s ago: executing program 2 (id=216): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000140)={0x4f, 0x0}) write(r1, &(0x7f0000000000), 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x40001) 4.10771399s ago: executing program 4 (id=217): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwrite64(r0, &(0x7f0000000400), 0x0, 0x9a) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x4, 0x4, 0x4, {0x1, @pix={0x2, 0x0, 0x34325842, 0x0, 0xad, 0x40002, 0x8, 0xdfc, 0x1, 0x4, 0x2, 0x2}}, 0x9}) 4.069002642s ago: executing program 3 (id=218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000002200)) 2.333957223s ago: executing program 2 (id=219): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) set_mempolicy(0x8000, &(0x7f0000000180)=0x2, 0xff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x7, 0x2000, 0x8, 0x9}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) r1 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x9) syz_io_uring_setup(0x2735, &(0x7f00000002c0)={0x0, 0xb94a, 0x8000, 0x2, 0x2b0}, &(0x7f00000001c0), &(0x7f0000000340)) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x400000}]) 2.312500455s ago: executing program 1 (id=220): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x45) 2.186972612s ago: executing program 3 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.033738261s ago: executing program 1 (id=222): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c000100070015000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.033322641s ago: executing program 4 (id=223): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') getdents(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x10000}, 0x0, 0x6e6bb1, 0x1}, {{@in=@local, 0x4d2, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x1, 0x4}}, 0xe4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.924328987s ago: executing program 3 (id=224): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f00000000c0)=0x7a9c7d23) 1.820888243s ago: executing program 2 (id=225): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000140)={[{}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x300100, 0x2000000) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) r6 = syz_io_uring_setup(0x78a9, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x0, 0x3}, &(0x7f0000002480), &(0x7f00000024c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) syz_genetlink_get_family_id$l2tp(0x0, r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x46, 0xcf, 0x10, 0x4dd, 0x8002, 0xfcb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7442ff8f99b8233b0100145274da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x20000080) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.744863528s ago: executing program 3 (id=226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="01009a149f24fa12"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) bind$inet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000001c0)={0x2, 0xe000, 0x70, 0x6, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040094}, 0x4004000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 1.525484641s ago: executing program 1 (id=227): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.221780658s ago: executing program 1 (id=228): setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0xeb, 0x1, 0x6, "5e634dca576d4c36facc1fb9eadeee16", "617c8cd204cf305928de095634241493d3d849ff32d4f86d43c343b28153c2ec18c7a25c7b7c4d251539aa8f187c79872735c9491e03d7a9ac7a0e421de049199b1675db26feab2a4f2efc945bbaf100182fc407ea9e83d188af219c113134f8629cabedb6d14689ea1ec456676fb5c90f30516c3b06026b2545f07c834457bd131f566830faa9477ae5f311d63e045ce2f33ca5c7a69825e584e9ce99d8cd5564e2681c47dae0a3501b4c563f7619f4f30d902468765048d91cd01ac623410a33ae7d040cfa4cee0dc6fbf6bb0826cd71adc6314c77"}, 0xeb, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x1c, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000c00028008000300ac14141b14000300"/50], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000240)={0x422, 0x0, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x940c, 0x3002, 0x2b4, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 'syz0\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x1ff}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0xff000000, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'ip6tnl0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x3, 0x69}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x602, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)='\t\r', 0x2}], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r6 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r6, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write$tun(r0, &(0x7f0000000c40)={@val={0x8, 0x800}, @void, @ipv4=@generic={{0x6, 0x4, 0x3, 0x2, 0x1018, 0x64, 0x0, 0x4, 0x2e, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}]}}, "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"}}, 0x101c) 1.137191273s ago: executing program 0 (id=229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a000800"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[], 0x23c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003ea000/0x4000)=nil, 0x4000, 0x0) r5 = add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xe0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) 188.597488ms ago: executing program 0 (id=230): gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) 41.822167ms ago: executing program 3 (id=231): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x30b, @tick=0x1000, 0x31, {0xfd}}) 0s ago: executing program 0 (id=232): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0x6, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}}, 0x880) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x1, [{0xffffff7e, 0x5461d6e7}]}}) r8 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r9, 0x0) r10 = epoll_create1(0x0) ppoll(&(0x7f0000000040)=[{r9}, {r10, 0xbaf03d8f7cf92877}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000340)={0xc0000008}) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 51.356833][ T4251] cgroup: Unknown subsys name 'net' [ 51.469946][ T4251] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.743004][ T4251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.119801][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.127970][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.139299][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.147267][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.155518][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.163355][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.166472][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.172759][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.178151][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.185180][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.195832][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.199819][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.206512][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.221212][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.221314][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.230074][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.236203][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.242972][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.250243][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.257788][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.264160][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.270877][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.277992][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.285342][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.292039][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.299571][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.305772][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.312637][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.326879][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.329398][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.744903][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 54.804770][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 54.842501][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 54.920972][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.928504][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.937244][ T4268] device bridge_slave_0 entered promiscuous mode [ 54.956228][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 54.965471][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 54.980047][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.987322][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.995319][ T4268] device bridge_slave_1 entered promiscuous mode [ 55.066810][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.073927][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.084580][ T4267] device bridge_slave_0 entered promiscuous mode [ 55.096255][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.103378][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.111508][ T4267] device bridge_slave_1 entered promiscuous mode [ 55.128641][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.140552][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.161064][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.168323][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.178639][ T4266] device bridge_slave_0 entered promiscuous mode [ 55.214786][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.222056][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.229954][ T4266] device bridge_slave_1 entered promiscuous mode [ 55.248772][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.258215][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.266083][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.273779][ T4274] device bridge_slave_0 entered promiscuous mode [ 55.289458][ T4268] team0: Port device team_slave_0 added [ 55.305982][ T4268] team0: Port device team_slave_1 added [ 55.313011][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.322761][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.329961][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.338302][ T4274] device bridge_slave_1 entered promiscuous mode [ 55.390318][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.401510][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.411483][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.419120][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.426943][ T4277] device bridge_slave_0 entered promiscuous mode [ 55.441989][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.449020][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.475466][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.489012][ T4267] team0: Port device team_slave_0 added [ 55.496432][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.507028][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.518550][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.525820][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.533527][ T4277] device bridge_slave_1 entered promiscuous mode [ 55.544618][ T4267] team0: Port device team_slave_1 added [ 55.551158][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.558340][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.584569][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.617461][ T4274] team0: Port device team_slave_0 added [ 55.652824][ T4274] team0: Port device team_slave_1 added [ 55.672209][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.686990][ T4266] team0: Port device team_slave_0 added [ 55.700837][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.707915][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.734446][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.748270][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.772473][ T4266] team0: Port device team_slave_1 added [ 55.779005][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.787035][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.813073][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.824534][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.831653][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.863125][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.896533][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.903495][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.929734][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.950634][ T4277] team0: Port device team_slave_0 added [ 55.959469][ T4277] team0: Port device team_slave_1 added [ 55.979656][ T4268] device hsr_slave_0 entered promiscuous mode [ 55.986608][ T4268] device hsr_slave_1 entered promiscuous mode [ 56.020176][ T4267] device hsr_slave_0 entered promiscuous mode [ 56.026986][ T4267] device hsr_slave_1 entered promiscuous mode [ 56.033411][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.041405][ T4267] Cannot create hsr debugfs directory [ 56.047557][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.054506][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.080718][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.093249][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.102586][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.128914][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.140452][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.150259][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.178999][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.220661][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.227692][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.253803][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.279243][ T4274] device hsr_slave_0 entered promiscuous mode [ 56.286281][ T4274] device hsr_slave_1 entered promiscuous mode [ 56.292753][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.300414][ T4274] Cannot create hsr debugfs directory [ 56.369827][ T4266] device hsr_slave_0 entered promiscuous mode [ 56.376884][ T4266] device hsr_slave_1 entered promiscuous mode [ 56.383589][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.391281][ T4266] Cannot create hsr debugfs directory [ 56.414085][ T4277] device hsr_slave_0 entered promiscuous mode [ 56.415983][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 56.420472][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 56.426451][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 56.432620][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 56.438813][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 56.454069][ T4277] device hsr_slave_1 entered promiscuous mode [ 56.460987][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.468747][ T4277] Cannot create hsr debugfs directory [ 56.730225][ T4268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.740862][ T4268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.754018][ T4268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.764125][ T4268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.833252][ T4267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.856045][ T4267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.869315][ T4267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.881236][ T4267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.936478][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.953514][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.966964][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.979605][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.043931][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.072252][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.081976][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.091856][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.116710][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.146527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.159866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.168245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.178959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.187326][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.205666][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.214251][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.254670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.264321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.273941][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.281396][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.290275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.318211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.331252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.340933][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.348397][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.357629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.366331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.376903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.385714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.394073][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.401275][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.413061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.450587][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.460829][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.469728][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.479032][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.489402][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.497934][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.508913][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.517875][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.527008][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.534087][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.542507][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.553617][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.562874][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.577416][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.590287][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.603165][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.613226][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.623453][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.637484][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.649877][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.663393][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.673411][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.683372][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.692539][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.701843][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.723272][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.734675][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.753573][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.761846][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.771634][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.781907][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.791266][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.801349][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.810246][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.819446][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.828744][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.838398][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.845558][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.853607][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.869236][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.920938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.929978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.943550][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.950828][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.991319][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.017662][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.032371][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.058858][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.082373][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.104867][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.134322][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.166164][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.197892][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.216100][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.236250][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.246415][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.270970][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.284272][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.316583][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.325857][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.348010][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.369289][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.396493][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.404083][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.418818][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.430762][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.442665][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.449861][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.464176][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.482535][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.495308][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 58.501362][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 58.507826][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 58.507846][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 58.513831][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 58.540172][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.547937][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.558592][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.567451][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.578758][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.588017][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.595152][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.609130][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.616922][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.647275][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.657598][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.671184][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.678674][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.690931][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.699650][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.710274][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.719776][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.729360][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.744924][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.753023][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.761883][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.798454][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.809376][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.819620][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.826766][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.835463][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.844154][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.853442][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.860596][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.871927][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.880626][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.891294][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.900536][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.909363][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.953641][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.967990][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.987733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.999584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.008385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.017724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.026917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.036125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.044427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.053224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.062019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.071364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.080016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.089457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.098142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.107056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.116877][ T4268] device veth0_vlan entered promiscuous mode [ 59.123529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.131964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.141327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.149229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.171136][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.183654][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.200391][ T4268] device veth1_vlan entered promiscuous mode [ 59.213198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.223547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.238214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.250252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.259769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.274886][ T4274] device veth0_vlan entered promiscuous mode [ 59.298778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.308927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.318092][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.335861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.352905][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.368727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.379730][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.391166][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.407733][ T4267] device veth0_vlan entered promiscuous mode [ 59.443194][ T4274] device veth1_vlan entered promiscuous mode [ 59.492733][ T4267] device veth1_vlan entered promiscuous mode [ 59.518618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.536119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.556110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.564426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.574279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.583684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.607793][ T4268] device veth0_macvtap entered promiscuous mode [ 59.626551][ T4268] device veth1_macvtap entered promiscuous mode [ 59.634180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.647349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.656958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.667179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.676938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.686525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.694197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.707002][ T4267] device veth0_macvtap entered promiscuous mode [ 59.723616][ T4267] device veth1_macvtap entered promiscuous mode [ 59.747179][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.757850][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.767367][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.780065][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.793724][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.820974][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.833118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.844548][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.873544][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.891822][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.909996][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.920771][ T4274] device veth0_macvtap entered promiscuous mode [ 59.933402][ T4274] device veth1_macvtap entered promiscuous mode [ 59.942459][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.951549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.960287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.970362][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.979531][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.987167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.998036][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.010082][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.028597][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.042271][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.054862][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.064539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.073852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.083903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.093053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.114434][ T4267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.124880][ T4267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.133911][ T4267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.143631][ T4267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.158394][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.168027][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.178639][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.192680][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.244037][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.263166][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.273103][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.283858][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.296771][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.306361][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.315925][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.324732][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.333904][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.377891][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.395471][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.409137][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.420590][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.436401][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.484916][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.494370][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.521978][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.532173][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.541079][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.550254][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.564341][ T4266] device veth0_vlan entered promiscuous mode [ 60.575278][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 60.581308][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 60.587712][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 60.587728][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 60.593706][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 60.617303][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.630955][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.639979][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.652041][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.664065][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.673324][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.687199][ T4266] device veth1_vlan entered promiscuous mode [ 60.756250][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.764349][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.773013][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.782298][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.807056][ T4277] device veth0_vlan entered promiscuous mode [ 60.823178][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.827300][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.839036][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.844459][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.854690][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.863052][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.872153][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.887180][ T4277] device veth1_vlan entered promiscuous mode [ 60.895922][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.903738][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.922617][ T4266] device veth0_macvtap entered promiscuous mode [ 60.933704][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.942389][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.950975][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.959903][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.983240][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.994753][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.004685][ T4266] device veth1_macvtap entered promiscuous mode [ 61.018159][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.026314][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.085238][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.093150][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.109800][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.123572][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.134225][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.149726][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.159611][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.171729][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.183504][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.192187][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.208676][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.232777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.243547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.252573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.261318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.271773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.282342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.291985][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.303548][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.314064][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.325952][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.336050][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.346728][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.359041][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.381171][ T4277] device veth0_macvtap entered promiscuous mode [ 61.391773][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.410638][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.432551][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.455879][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.463914][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.476348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.485388][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.494105][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.512791][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.521661][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.561459][ T4277] device veth1_macvtap entered promiscuous mode [ 61.641621][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.671152][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.683903][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.696873][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.707065][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.717728][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.727880][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.738602][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.750494][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.768427][ T4384] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4'. [ 61.906001][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.925957][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.949878][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.962863][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.975482][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.985871][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.996663][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.007477][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.018478][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.050928][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.061847][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.079774][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.099829][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.116730][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.142774][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.157379][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.170355][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.183658][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.205459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.246916][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.254779][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.320230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.344066][ T4391] block device autoloading is deprecated and will be removed. [ 62.385428][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.393304][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.490656][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.655221][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 62.661278][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 62.667364][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 62.673354][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 62.679565][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 62.692795][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.745246][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.762758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.811876][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.820286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 62.853292][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.893248][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.357877][ T4418] mmap: syz.2.10 (4418) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.323465][ T4429] Zero length message leads to an empty skb [ 64.341066][ T4429] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.375098][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.609469][ T4429] random: crng reseeded on system resumption [ 64.627693][ T41] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 64.645566][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.668423][ T41] usb 1-1: config 0 has no interface number 0 [ 64.692238][ T41] usb 1-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.725266][ T4333] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.759983][ T41] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 64.773241][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.784177][ T41] usb 1-1: Product: syz [ 64.792452][ T41] usb 1-1: Manufacturer: syz [ 64.813358][ T41] usb 1-1: SerialNumber: syz [ 64.846403][ T41] usb 1-1: config 0 descriptor?? [ 64.925115][ T4333] usb 5-1: Using ep0 maxpacket: 16 [ 64.934645][ T4333] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 64.950180][ T41] yurex 1-1:0.50: Could not find endpoints [ 64.959952][ T4333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.984907][ T4333] usb 5-1: Product: syz [ 64.992707][ T4333] usb 5-1: Manufacturer: syz [ 65.021912][ T4333] usb 5-1: SerialNumber: syz [ 65.063926][ T4333] usb 5-1: config 0 descriptor?? [ 65.115093][ T4333] as10x_usb: device has been detected [ 65.145935][ T4333] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 65.221061][ T4333] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 65.321868][ T4333] as10x_usb: error during firmware upload part1 [ 65.348526][ T4333] Registered device Sky IT Digital Key (green led) [ 65.755633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.784997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 65.793328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 65.801629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 65.809919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 65.818262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 65.826564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 65.834930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 66.668834][ T41] usb 5-1: USB disconnect, device number 2 [ 66.711848][ T4450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16'. [ 66.775467][ T41] Unregistered device Sky IT Digital Key (green led) [ 66.788700][ T41] as10x_usb: device has been disconnected [ 68.166884][ T4468] netlink: 'syz.2.22': attribute type 12 has an invalid length. [ 68.185109][ T4468] netlink: 'syz.2.22': attribute type 29 has an invalid length. [ 68.193137][ T4468] netlink: 148 bytes leftover after parsing attributes in process `syz.2.22'. [ 68.246628][ T4282] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 69.213678][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.505226][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 69.520990][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.565494][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.592504][ T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.602764][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.611176][ T14] usb 4-1: Product: syz [ 69.616051][ T14] usb 4-1: Manufacturer: syz [ 69.620800][ T14] usb 4-1: SerialNumber: syz [ 69.631863][ T41] usb 1-1: USB disconnect, device number 2 [ 69.862354][ T4467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.872981][ T4467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.913836][ T4467] loop3: detected capacity change from 0 to 4096 [ 69.972080][ T4467] ntfs3: loop3: failed to convert "0080" to cp864 [ 69.989675][ T14] usb 4-1: 0:2 : does not exist [ 70.010504][ T14] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 70.069153][ T14] usb 4-1: USB disconnect, device number 2 [ 70.185219][ T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.318031][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.375159][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 70.393543][ T41] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 71.180213][ T41] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 71.250685][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.310214][ T41] usb 1-1: Product: syz [ 71.327725][ T41] usb 1-1: Manufacturer: syz [ 71.355094][ T41] usb 1-1: SerialNumber: syz [ 71.372828][ T41] usb 1-1: config 0 descriptor?? [ 71.381263][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.381393][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.452221][ T41] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 71.503403][ T41] usb 1-1: setting power ON [ 71.522752][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 71.572234][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.640931][ T41] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 71.696168][ T41] usb 1-1: media controller created [ 71.788327][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.804435][ T4518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35'. [ 71.834696][ T41] usb 1-1: selecting invalid altsetting 6 [ 71.854376][ T41] usb 1-1: digital interface selection failed (-22) [ 71.875139][ T41] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 71.915508][ T41] usb 1-1: setting power OFF [ 71.932213][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 71.949336][ T41] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 71.979105][ T41] (NULL device *): no alternate interface [ 72.028931][ T41] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 72.056733][ T41] usb 1-1: USB disconnect, device number 3 [ 73.557940][ T4282] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 74.189153][ T4282] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 75.589563][ T4562] netlink: 'syz.2.46': attribute type 10 has an invalid length. [ 75.715031][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.757702][ T4562] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 75.903804][ T4565] loop3: detected capacity change from 0 to 32768 [ 75.952789][ T4561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.025127][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 76.034341][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.054202][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.101956][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.122487][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.133769][ T7] usb 5-1: Product: syz [ 76.138509][ T7] usb 5-1: Manufacturer: syz [ 76.143630][ T7] usb 5-1: SerialNumber: syz [ 76.180620][ T4567] Set syz0 is full, maxelem 0 reached [ 76.209062][ T4567] netlink: 6 bytes leftover after parsing attributes in process `syz.1.48'. [ 76.323036][ T4570] fuse: Unknown parameter '0x0000000000000005' [ 76.372188][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.380915][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.420051][ T4558] loop4: detected capacity change from 0 to 4096 [ 76.470723][ T4558] ntfs3: loop4: failed to convert "0080" to cp864 [ 76.487353][ T7] usb 5-1: 0:2 : does not exist [ 76.497212][ T125] cfg80211: failed to load regulatory.db [ 76.505965][ T7] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 76.555625][ T7] usb 5-1: USB disconnect, device number 3 [ 76.832822][ T4572] loop1: detected capacity change from 0 to 65536 [ 76.971926][ T4572] XFS (loop1): Mounting V5 Filesystem [ 77.016040][ T4502] udevd[4502]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.115281][ T4572] XFS (loop1): Ending clean mount [ 77.127970][ T4572] XFS (loop1): Quotacheck needed: Please wait. [ 77.383695][ T4572] XFS (loop1): Quotacheck: Done. [ 78.206603][ T4274] XFS (loop1): Unmounting Filesystem [ 79.543629][ T4613] ptrace attach of "./syz-executor exec"[4267] was attempted by ""[4613] [ 80.267099][ T4282] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 80.573789][ T4618] Set syz0 is full, maxelem 0 reached [ 80.800521][ T4620] fuse: Unknown parameter '0x0000000000000005' [ 81.410835][ T4637] netlink: 'syz.2.67': attribute type 12 has an invalid length. [ 81.478786][ T4637] netlink: 'syz.2.67': attribute type 29 has an invalid length. [ 81.505629][ T4637] netlink: 148 bytes leftover after parsing attributes in process `syz.2.67'. [ 81.618012][ T4386] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.302610][ T4386] usb 4-1: Using ep0 maxpacket: 16 [ 82.384783][ T4386] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.395146][ T4386] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.408366][ T4386] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.418220][ T4386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.426438][ T4386] usb 4-1: Product: syz [ 82.430811][ T4386] usb 4-1: Manufacturer: syz [ 82.451110][ T4386] usb 4-1: SerialNumber: syz [ 82.592646][ T4647] device syzkaller0 entered promiscuous mode [ 82.849352][ T4633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.858223][ T4633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.303459][ T4633] loop3: detected capacity change from 0 to 4096 [ 83.416883][ T4633] ntfs3: loop3: failed to convert "0080" to cp864 [ 83.426578][ T4386] usb 4-1: 0:2 : does not exist [ 83.452511][ T4386] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 83.490252][ T4386] usb 4-1: USB disconnect, device number 3 [ 83.731304][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.815151][ T4658] input: syz0 as /devices/virtual/input/input6 [ 85.651979][ T4282] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 85.778890][ T4671] syz.4.79 uses obsolete (PF_INET,SOCK_PACKET) [ 85.799776][ T4673] syz.3.76 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.221945][ T4684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'. [ 87.391615][ T4692] tipc: Started in network mode [ 87.453551][ T4692] tipc: Node identity ac14140f, cluster identity 4711 [ 87.512333][ T4692] tipc: New replicast peer: 255.255.255.255 [ 87.557160][ T4692] tipc: Enabled bearer , priority 10 [ 87.573504][ T4698] netlink: 'syz.1.88': attribute type 10 has an invalid length. [ 87.609690][ T4698] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.626845][ T4697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.865064][ T4386] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.686877][ T41] tipc: Node number set to 2886997007 [ 89.575065][ T4386] usb 1-1: Using ep0 maxpacket: 16 [ 89.596535][ T4386] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.648497][ T4386] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.667457][ T4386] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.683907][ T4386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.692370][ T4386] usb 1-1: Product: syz [ 89.696752][ T4386] usb 1-1: Manufacturer: syz [ 89.701400][ T4386] usb 1-1: SerialNumber: syz [ 89.908892][ T4282] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 89.915926][ T4702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.932217][ T4702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.973180][ T4702] loop0: detected capacity change from 0 to 4096 [ 90.049712][ T4702] ntfs3: loop0: failed to convert "0080" to cp864 [ 90.059300][ T4386] usb 1-1: 0:2 : does not exist [ 90.083513][ T4386] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 90.258736][ T4386] usb 1-1: USB disconnect, device number 4 [ 90.339837][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.786033][ T4731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.97'. [ 93.365115][ T4386] psmouse serio2: Failed to reset mouse on : -5 [ 95.505265][ T4311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.748979][ T4311] usb 1-1: Using ep0 maxpacket: 16 [ 96.347083][ T4311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.434284][ T4311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.513516][ T4311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.550650][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.615068][ T4311] usb 1-1: Product: syz [ 96.619285][ T4311] usb 1-1: Manufacturer: syz [ 96.648796][ T4311] usb 1-1: SerialNumber: syz [ 96.809710][ T4794] netlink: 'syz.2.111': attribute type 6 has an invalid length. [ 96.852106][ T4794] netlink: 'syz.2.111': attribute type 6 has an invalid length. [ 96.893803][ T4771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.902388][ T4771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.942606][ T4771] loop0: detected capacity change from 0 to 4096 [ 96.984260][ T4771] ntfs3: loop0: failed to convert "0080" to cp864 [ 96.995565][ T4311] usb 1-1: 0:2 : does not exist [ 97.017889][ T4311] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 97.043790][ T4311] usb 1-1: USB disconnect, device number 5 [ 97.142936][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.687820][ T4796] tipc: Started in network mode [ 97.713080][ T4796] tipc: Node identity ac14140f, cluster identity 4711 [ 97.761939][ T4796] tipc: New replicast peer: 255.255.255.255 [ 97.800931][ T4796] tipc: Enabled bearer , priority 10 [ 98.445251][ T4386] misc userio: Buffer overflowed, userio client isn't keeping up [ 98.915087][ T41] tipc: Node number set to 2886997007 [ 100.635232][ T4386] input: PS/2 Generic Mouse as /devices/serio2/input/input7 [ 100.865513][ T4386] psmouse serio2: Failed to enable mouse on [ 102.895974][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.095182][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 103.103279][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.131289][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.258361][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.972344][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.982533][ T7] usb 3-1: Product: syz [ 103.986979][ T7] usb 3-1: Manufacturer: syz [ 103.991622][ T7] usb 3-1: SerialNumber: syz [ 104.315635][ T4832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.324194][ T4832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.364798][ T4832] loop2: detected capacity change from 0 to 4096 [ 104.472180][ T4832] ntfs3: loop2: failed to convert "0080" to cp864 [ 104.484557][ T7] usb 3-1: 0:2 : does not exist [ 104.495642][ T7] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 104.562899][ T7] usb 3-1: USB disconnect, device number 2 [ 104.835638][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.474254][ T4858] kernel profiling enabled (shift: 63) [ 105.489299][ T4858] profiling shift: 63 too large [ 105.695371][ T4871] loop1: detected capacity change from 0 to 32768 [ 108.108238][ T4282] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 108.165322][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.248558][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 108.297834][ T4874] kernel profiling enabled (shift: 63) [ 108.313880][ T4874] profiling shift: 63 too large [ 108.385130][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 108.397707][ T22] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 108.451043][ T22] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 108.484874][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.514563][ T22] usb 2-1: Product: syz [ 108.535192][ T22] usb 2-1: Manufacturer: syz [ 108.552937][ T22] usb 2-1: SerialNumber: syz [ 108.580917][ T22] usb 2-1: config 0 descriptor?? [ 108.603022][ T22] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 108.630053][ T22] usb 2-1: setting power ON [ 108.653095][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 108.687053][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.734843][ T22] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 108.767708][ T22] usb 2-1: media controller created [ 108.801714][ T4888] dvb-usb: bulk message failed: -22 (3/0) [ 108.815316][ T4888] dvb-usb: bulk message failed: -22 (3/0) [ 108.832747][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.006165][ T22] usb 2-1: selecting invalid altsetting 6 [ 109.012044][ T22] usb 2-1: digital interface selection failed (-22) [ 109.813224][ T22] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 109.865970][ T22] usb 2-1: setting power OFF [ 109.877479][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 109.883432][ T22] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 109.897562][ T22] (NULL device *): no alternate interface [ 109.942620][ T22] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 110.016594][ T22] usb 2-1: USB disconnect, device number 2 [ 110.282991][ T26] audit: type=1326 audit(1771149829.398:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab99bf79 code=0x7ffc0000 [ 110.517379][ T4915] loop2: detected capacity change from 0 to 32768 [ 110.585832][ T26] audit: type=1326 audit(1771149829.398:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab99bf79 code=0x7ffc0000 [ 110.731141][ T26] audit: type=1326 audit(1771149829.428:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f85ab99bf79 code=0x7ffc0000 [ 110.753144][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.836154][ T4918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 111.608562][ T26] audit: type=1326 audit(1771149829.428:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab99bf79 code=0x7ffc0000 [ 111.632420][ T26] audit: type=1326 audit(1771149829.428:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab99bf79 code=0x7ffc0000 [ 114.735309][ T4350] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.955042][ T4350] usb 5-1: Using ep0 maxpacket: 8 [ 114.963698][ T4350] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 114.995811][ T4350] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 115.043306][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.072151][ T4950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.154'. [ 115.081756][ T4350] usb 5-1: Product: syz [ 115.096286][ T4350] usb 5-1: Manufacturer: syz [ 115.100885][ T4350] usb 5-1: SerialNumber: syz [ 115.157668][ T4350] usb 5-1: config 0 descriptor?? [ 115.190385][ T4350] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 115.219469][ T4350] usb 5-1: setting power ON [ 115.224083][ T4350] dvb-usb: bulk message failed: -22 (2/0) [ 115.251698][ T4350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.272255][ T4350] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 115.292202][ T4350] usb 5-1: media controller created [ 115.368053][ T4947] dvb-usb: bulk message failed: -22 (3/0) [ 115.384887][ T4350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.404581][ T4947] dvb-usb: bulk message failed: -22 (3/0) [ 115.445551][ T4350] usb 5-1: selecting invalid altsetting 6 [ 115.459758][ T4350] usb 5-1: digital interface selection failed (-22) [ 115.562073][ T4350] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 115.580953][ T4350] usb 5-1: setting power OFF [ 115.591698][ T4350] dvb-usb: bulk message failed: -22 (2/0) [ 115.618568][ T4350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 115.658648][ T4350] (NULL device *): no alternate interface [ 115.729629][ T4350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 115.817735][ T4960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 116.596935][ T4350] usb 5-1: USB disconnect, device number 4 [ 116.773895][ T4957] loop0: detected capacity change from 0 to 32768 [ 118.754835][ T4282] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 119.017299][ T4989] netlink: 260 bytes leftover after parsing attributes in process `syz.0.167'. [ 119.855183][ T4318] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.065090][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 120.777805][ T4318] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 120.789070][ T4318] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 120.801802][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.810998][ T4318] usb 4-1: Product: syz [ 120.815387][ T4318] usb 4-1: Manufacturer: syz [ 120.820017][ T4318] usb 4-1: SerialNumber: syz [ 120.827844][ T4318] usb 4-1: config 0 descriptor?? [ 120.847978][ T4318] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 120.875231][ T4318] usb 4-1: setting power ON [ 120.879826][ T4318] dvb-usb: bulk message failed: -22 (2/0) [ 120.916966][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.942358][ T4318] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 120.956283][ T4318] usb 4-1: media controller created [ 120.995229][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.049944][ T4999] dvb-usb: bulk message failed: -22 (3/0) [ 121.065519][ T4999] dvb-usb: bulk message failed: -22 (3/0) [ 121.075315][ T4318] usb 4-1: selecting invalid altsetting 6 [ 121.081065][ T4318] usb 4-1: digital interface selection failed (-22) [ 121.119778][ T4318] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 121.158693][ T4318] usb 4-1: setting power OFF [ 121.163428][ T4318] dvb-usb: bulk message failed: -22 (2/0) [ 121.174094][ T4318] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 121.185039][ T4318] (NULL device *): no alternate interface [ 121.256963][ T4318] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 121.305408][ T4350] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.342467][ T4318] usb 4-1: USB disconnect, device number 4 [ 121.505031][ T4350] usb 5-1: Using ep0 maxpacket: 16 [ 121.511764][ T4350] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.543329][ T4350] usb 5-1: config 0 has no interfaces? [ 121.559438][ T4350] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.600941][ T4350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.660292][ T4350] usb 5-1: config 0 descriptor?? [ 123.070415][ T4282] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 124.026624][ T22] usb 5-1: USB disconnect, device number 5 [ 124.227760][ T4282] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 124.445178][ T125] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.645678][ T125] usb 1-1: Using ep0 maxpacket: 8 [ 124.653589][ T125] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 124.673005][ T125] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 124.684787][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.697868][ T125] usb 1-1: Product: syz [ 124.703554][ T125] usb 1-1: Manufacturer: syz [ 124.711468][ T125] usb 1-1: SerialNumber: syz [ 124.734716][ T125] usb 1-1: config 0 descriptor?? [ 124.763924][ T125] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 124.804825][ T125] usb 1-1: setting power ON [ 124.822760][ T125] dvb-usb: bulk message failed: -22 (2/0) [ 124.860587][ T125] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.907224][ T125] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 124.929088][ T125] usb 1-1: media controller created [ 124.960548][ T5062] dvb-usb: bulk message failed: -22 (3/0) [ 124.970520][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.975068][ T5062] dvb-usb: bulk message failed: -22 (3/0) [ 125.035798][ T125] usb 1-1: selecting invalid altsetting 6 [ 125.062601][ T125] usb 1-1: digital interface selection failed (-22) [ 125.087058][ T125] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 125.120810][ T125] usb 1-1: setting power OFF [ 125.136790][ T125] dvb-usb: bulk message failed: -22 (2/0) [ 125.149876][ T125] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 126.026989][ T125] (NULL device *): no alternate interface [ 126.114659][ T125] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 126.170096][ T4282] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 126.213915][ T125] usb 1-1: USB disconnect, device number 6 [ 130.044286][ T4282] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 132.313035][ T5161] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 132.390511][ T5161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.477348][ T5164] bond1: (slave vlan2): making interface the new active one [ 132.583085][ T5164] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 132.615508][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 132.828626][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836681][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.091621][ T5185] netlink: 48 bytes leftover after parsing attributes in process `syz.1.228'. [ 133.151101][ T5187] ALSA: mixer_oss: invalid OSS volume '' [ 134.135079][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 134.285051][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.356942][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.388149][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.443665][ T7] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.485029][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 134.503588][ T14] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 134.514679][ T7] usb 2-1: Product: syz [ 134.519330][ T7] usb 2-1: Manufacturer: syz [ 134.544641][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.552951][ T7] usb 2-1: SerialNumber: syz [ 134.558918][ T14] usb 3-1: Product: syz [ 134.574521][ T7] usb 2-1: config 0 descriptor?? [ 134.579803][ T14] usb 3-1: Manufacturer: syz [ 134.586527][ T14] usb 3-1: SerialNumber: syz [ 134.596652][ T7] usb 2-1: selecting invalid altsetting 0 [ 134.620379][ T14] usb 3-1: config 0 descriptor?? [ 134.651377][ T14] safe_serial 3-1:0.0: safe_serial converter detected [ 134.743978][ T14] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 134.797957][ T5185] ================================================================== [ 134.806249][ T5185] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x21f/0x410 [ 134.813705][ T5185] Write of size 264 at addr ffff888028a6b900 by task syz.1.228/5185 [ 134.821674][ T5185] [ 134.824012][ T5185] CPU: 0 PID: 5185 Comm: syz.1.228 Not tainted syzkaller #0 [ 134.831633][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.841886][ T5185] Call Trace: [ 134.845245][ T5185] [ 134.848216][ T5185] dump_stack_lvl+0x188/0x24e [ 134.852920][ T5185] ? read_lock_is_recursive+0x10/0x10 [ 134.858723][ T5185] ? show_regs_print_info+0x12/0x12 [ 134.864018][ T5185] ? load_image+0x400/0x400 [ 134.868710][ T5185] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 134.874153][ T5185] ? __virt_addr_valid+0x188/0x540 [ 134.879286][ T5185] ? __virt_addr_valid+0x465/0x540 [ 134.884386][ T5185] ? copy_to_urb+0x21f/0x410 [ 134.889053][ T5185] print_report+0xa8/0x210 [ 134.893462][ T5185] kasan_report+0x10b/0x140 [ 134.897964][ T5185] ? copy_to_urb+0x21f/0x410 [ 134.902548][ T5185] kasan_check_range+0x235/0x290 [ 134.907575][ T5185] ? copy_to_urb+0x21f/0x410 [ 134.912155][ T5185] memcpy+0x3c/0x60 [ 134.915944][ T5185] copy_to_urb+0x21f/0x410 [ 134.920348][ T5185] prepare_playback_urb+0x910/0x1440 [ 134.925625][ T5185] snd_usb_endpoint_start+0x4a6/0x12e0 [ 134.931076][ T5185] ? snd_usb_endpoint_get_clock_rate+0x100/0x100 [ 134.937669][ T5185] ? __rwlock_init+0x140/0x140 [ 134.942416][ T5185] start_endpoints+0xa1/0x270 [ 134.947081][ T5185] ? snd_usb_substream_playback_trigger+0x3d9/0x7d0 [ 134.953656][ T5185] snd_usb_substream_playback_trigger+0x3eb/0x7d0 [ 134.960065][ T5185] snd_pcm_action+0xda/0x230 [ 134.964659][ T5185] __snd_pcm_lib_xfer+0x17ba/0x1c90 [ 134.969849][ T5185] ? fill_silence+0x240/0x240 [ 134.974507][ T5185] ? __snd_pcm_lib_xfer+0x1c90/0x1c90 [ 134.979865][ T5185] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 134.985482][ T5185] ? resample_expand+0x7e2/0x860 [ 134.990402][ T5185] ? pcm_lib_apply_appl_ptr+0x540/0x540 [ 134.995935][ T5185] snd_pcm_oss_write3+0x1b8/0x310 [ 135.000946][ T5185] snd_pcm_plug_write_transfer+0x2ba/0x4b0 [ 135.006737][ T5185] ? snd_pcm_plug_client_channels_buf+0x600/0x600 [ 135.013135][ T5185] ? snd_pcm_plug_client_channels_buf+0x466/0x600 [ 135.019533][ T5185] snd_pcm_oss_write2+0x1a5/0x410 [ 135.024563][ T5185] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 135.030114][ T5185] ? snd_pcm_do_prepare+0x220/0x220 [ 135.035317][ T5185] ? snd_pcm_action_nonatomic+0x24a/0x2a0 [ 135.041029][ T5185] snd_pcm_oss_write+0x6a7/0xaf0 [ 135.045979][ T5185] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 135.051006][ T5185] vfs_write+0x2e6/0xa30 [ 135.055270][ T5185] ? file_end_write+0x250/0x250 [ 135.060233][ T5185] ? __fget_files+0x28/0x4b0 [ 135.064859][ T5185] ? __fget_files+0x28/0x4b0 [ 135.069476][ T5185] ? __fget_files+0x43d/0x4b0 [ 135.074235][ T5185] ? __fdget_pos+0x1d4/0x360 [ 135.078860][ T5185] ? ksys_write+0x71/0x250 [ 135.083282][ T5185] ksys_write+0x14c/0x250 [ 135.087603][ T5185] ? __ia32_sys_read+0x80/0x80 [ 135.092352][ T5185] ? lockdep_hardirqs_on+0x94/0x140 [ 135.097535][ T5185] do_syscall_64+0x4c/0xa0 [ 135.101944][ T5185] ? clear_bhb_loop+0x60/0xb0 [ 135.107035][ T5185] ? clear_bhb_loop+0x60/0xb0 [ 135.111696][ T5185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.117570][ T5185] RIP: 0033:0x7f85ab99bf79 [ 135.121975][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.141849][ T5185] RSP: 002b:00007f85ac824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.150255][ T5185] RAX: ffffffffffffffda RBX: 00007f85abc15fa0 RCX: 00007f85ab99bf79 [ 135.158217][ T5185] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000007 [ 135.166261][ T5185] RBP: 00007f85aba327e0 R08: 0000000000000000 R09: 0000000000000000 [ 135.174212][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.182172][ T5185] R13: 00007f85abc16038 R14: 00007f85abc15fa0 R15: 00007fff54195ed8 [ 135.190147][ T5185] [ 135.193151][ T5185] [ 135.195464][ T5185] Allocated by task 5185: [ 135.199782][ T5185] kasan_set_track+0x4b/0x70 [ 135.204369][ T5185] __kasan_kmalloc+0x8e/0xa0 [ 135.208951][ T5185] __kmalloc+0xb0/0x240 [ 135.213091][ T5185] snd_usb_endpoint_set_params+0x17f5/0x2f00 [ 135.219064][ T5185] snd_usb_hw_params+0x1239/0x19d0 [ 135.224184][ T5185] snd_pcm_hw_params+0x8a2/0x1ce0 [ 135.229331][ T5185] snd_pcm_oss_change_params_locked+0x2062/0x3c60 [ 135.235743][ T5185] snd_pcm_oss_write+0x277/0xaf0 [ 135.240775][ T5185] vfs_write+0x2e6/0xa30 [ 135.245013][ T5185] ksys_write+0x14c/0x250 [ 135.249342][ T5185] do_syscall_64+0x4c/0xa0 [ 135.253826][ T5185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.259804][ T5185] [ 135.262199][ T5185] Last potentially related work creation: [ 135.267896][ T5185] kasan_save_stack+0x3a/0x60 [ 135.272573][ T5185] __kasan_record_aux_stack+0xb2/0xc0 [ 135.277934][ T5185] insert_work+0x54/0x3c0 [ 135.282242][ T5185] __queue_work+0xba3/0xfb0 [ 135.286740][ T5185] queue_work_on+0x124/0x1f0 [ 135.291316][ T5185] netdevice_event+0x802/0x900 [ 135.296062][ T5185] raw_notifier_call_chain+0xcb/0x160 [ 135.301416][ T5185] dev_set_mac_address+0x2e8/0x400 [ 135.306506][ T5185] dev_set_mac_address_user+0x2d/0x50 [ 135.311855][ T5185] do_setlink+0x79a/0x3e60 [ 135.316257][ T5185] rtnl_newlink+0x177c/0x2080 [ 135.320917][ T5185] rtnetlink_rcv_msg+0x87c/0xfc0 [ 135.325923][ T5185] netlink_rcv_skb+0x1fb/0x450 [ 135.330691][ T5185] netlink_unicast+0x74d/0x8d0 [ 135.335442][ T5185] netlink_sendmsg+0x8ad/0xbd0 [ 135.340189][ T5185] __sys_sendto+0x497/0x650 [ 135.344678][ T5185] __x64_sys_sendto+0xda/0xf0 [ 135.349348][ T5185] do_syscall_64+0x4c/0xa0 [ 135.353748][ T5185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.359623][ T5185] [ 135.361926][ T5185] The buggy address belongs to the object at ffff888028a6b900 [ 135.361926][ T5185] which belongs to the cache kmalloc-192 of size 192 [ 135.375973][ T5185] The buggy address is located 0 bytes inside of [ 135.375973][ T5185] 192-byte region [ffff888028a6b900, ffff888028a6b9c0) [ 135.389073][ T5185] [ 135.391475][ T5185] The buggy address belongs to the physical page: [ 135.397969][ T5185] page:ffffea0000a29ac0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28a6b [ 135.408470][ T5185] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 135.416098][ T5185] raw: 00fff00000000200 ffffea000076da00 dead000000000005 ffff888017441a00 [ 135.424679][ T5185] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 135.433265][ T5185] page dumped because: kasan: bad access detected [ 135.439675][ T5185] page_owner tracks the page as allocated [ 135.445461][ T5185] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 125, tgid 125 (kworker/1:2), ts 8927939988, free_ts 8886187410 [ 135.463166][ T5185] post_alloc_hook+0x173/0x1a0 [ 135.467919][ T5185] get_page_from_freelist+0x1a1e/0x1ab0 [ 135.473447][ T5185] __alloc_pages+0x1ec/0x4f0 [ 135.478021][ T5185] alloc_slab_page+0x5d/0x160 [ 135.482679][ T5185] new_slab+0x87/0x2c0 [ 135.486733][ T5185] ___slab_alloc+0xbc6/0x1240 [ 135.491414][ T5185] __kmem_cache_alloc_node+0x1a0/0x260 [ 135.496858][ T5185] __kmalloc+0xa0/0x240 [ 135.501066][ T5185] usb_alloc_urb+0x3f/0x140 [ 135.505552][ T5185] usb_control_msg+0x115/0x3e0 [ 135.510339][ T5185] hub_ext_port_status+0x103/0x6d0 [ 135.515444][ T5185] hub_activate+0x77b/0x1a60 [ 135.520113][ T5185] process_one_work+0x8a2/0x1160 [ 135.525041][ T5185] worker_thread+0xaa2/0x1270 [ 135.529715][ T5185] kthread+0x29d/0x330 [ 135.533764][ T5185] ret_from_fork+0x1f/0x30 [ 135.538343][ T5185] page last free stack trace: [ 135.542994][ T5185] free_unref_page_prepare+0x8b4/0x9a0 [ 135.548439][ T5185] free_unref_page_list+0xbb/0x8e0 [ 135.553542][ T5185] release_pages+0x1fa6/0x2220 [ 135.558384][ T5185] tlb_flush_mmu+0x105/0x220 [ 135.562960][ T5185] tlb_finish_mmu+0xbd/0x1c0 [ 135.567539][ T5185] exit_mmap+0x384/0x960 [ 135.571778][ T5185] __mmput+0x118/0x3c0 [ 135.575826][ T5185] free_bprm+0x141/0x300 [ 135.580065][ T5185] kernel_execve+0x3be/0x9c0 [ 135.584650][ T5185] call_usermodehelper_exec_async+0x207/0x350 [ 135.590794][ T5185] ret_from_fork+0x1f/0x30 [ 135.595201][ T5185] [ 135.597505][ T5185] Memory state around the buggy address: [ 135.603127][ T5185] ffff888028a6b880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 135.611168][ T5185] ffff888028a6b900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 135.619300][ T5185] >ffff888028a6b980: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.627341][ T5185] ^ [ 135.632011][ T5185] ffff888028a6ba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.640086][ T5185] ffff888028a6ba80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 135.648135][ T5185] ================================================================== [ 135.656202][ T5185] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.663377][ T5185] CPU: 0 PID: 5185 Comm: syz.1.228 Not tainted syzkaller #0 [ 135.670661][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.680725][ T5185] Call Trace: [ 135.683990][ T5185] [ 135.686908][ T5185] dump_stack_lvl+0x188/0x24e [ 135.691570][ T5185] ? memcpy+0x3c/0x60 [ 135.695543][ T5185] ? show_regs_print_info+0x12/0x12 [ 135.700772][ T5185] ? load_image+0x400/0x400 [ 135.705351][ T5185] panic+0x2e5/0x730 [ 135.709234][ T5185] ? bpf_jit_dump+0xd0/0xd0 [ 135.713803][ T5185] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 135.719697][ T5185] ? _raw_spin_unlock+0x40/0x40 [ 135.724526][ T5185] check_panic_on_warn+0x80/0xa0 [ 135.729453][ T5185] ? copy_to_urb+0x21f/0x410 [ 135.734028][ T5185] end_report+0x66/0x110 [ 135.738267][ T5185] kasan_report+0x118/0x140 [ 135.742755][ T5185] ? copy_to_urb+0x21f/0x410 [ 135.747331][ T5185] kasan_check_range+0x235/0x290 [ 135.752251][ T5185] ? copy_to_urb+0x21f/0x410 [ 135.756822][ T5185] memcpy+0x3c/0x60 [ 135.760610][ T5185] copy_to_urb+0x21f/0x410 [ 135.765143][ T5185] prepare_playback_urb+0x910/0x1440 [ 135.770517][ T5185] snd_usb_endpoint_start+0x4a6/0x12e0 [ 135.775973][ T5185] ? snd_usb_endpoint_get_clock_rate+0x100/0x100 [ 135.782289][ T5185] ? __rwlock_init+0x140/0x140 [ 135.787033][ T5185] start_endpoints+0xa1/0x270 [ 135.791695][ T5185] ? snd_usb_substream_playback_trigger+0x3d9/0x7d0 [ 135.798274][ T5185] snd_usb_substream_playback_trigger+0x3eb/0x7d0 [ 135.804683][ T5185] snd_pcm_action+0xda/0x230 [ 135.809439][ T5185] __snd_pcm_lib_xfer+0x17ba/0x1c90 [ 135.814629][ T5185] ? fill_silence+0x240/0x240 [ 135.819291][ T5185] ? __snd_pcm_lib_xfer+0x1c90/0x1c90 [ 135.824732][ T5185] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 135.830365][ T5185] ? resample_expand+0x7e2/0x860 [ 135.835342][ T5185] ? pcm_lib_apply_appl_ptr+0x540/0x540 [ 135.840886][ T5185] snd_pcm_oss_write3+0x1b8/0x310 [ 135.845900][ T5185] snd_pcm_plug_write_transfer+0x2ba/0x4b0 [ 135.851691][ T5185] ? snd_pcm_plug_client_channels_buf+0x600/0x600 [ 135.858439][ T5185] ? snd_pcm_plug_client_channels_buf+0x466/0x600 [ 135.864848][ T5185] snd_pcm_oss_write2+0x1a5/0x410 [ 135.869946][ T5185] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 135.875304][ T5185] ? snd_pcm_do_prepare+0x220/0x220 [ 135.880479][ T5185] ? snd_pcm_action_nonatomic+0x24a/0x2a0 [ 135.886178][ T5185] snd_pcm_oss_write+0x6a7/0xaf0 [ 135.891116][ T5185] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 135.896125][ T5185] vfs_write+0x2e6/0xa30 [ 135.900358][ T5185] ? file_end_write+0x250/0x250 [ 135.905369][ T5185] ? __fget_files+0x28/0x4b0 [ 135.909955][ T5185] ? __fget_files+0x28/0x4b0 [ 135.914629][ T5185] ? __fget_files+0x43d/0x4b0 [ 135.919309][ T5185] ? __fdget_pos+0x1d4/0x360 [ 135.923890][ T5185] ? ksys_write+0x71/0x250 [ 135.928384][ T5185] ksys_write+0x14c/0x250 [ 135.932701][ T5185] ? __ia32_sys_read+0x80/0x80 [ 135.937489][ T5185] ? lockdep_hardirqs_on+0x94/0x140 [ 135.942682][ T5185] do_syscall_64+0x4c/0xa0 [ 135.947094][ T5185] ? clear_bhb_loop+0x60/0xb0 [ 135.951760][ T5185] ? clear_bhb_loop+0x60/0xb0 [ 135.956427][ T5185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.962393][ T5185] RIP: 0033:0x7f85ab99bf79 [ 135.966790][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.986395][ T5185] RSP: 002b:00007f85ac824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.994799][ T5185] RAX: ffffffffffffffda RBX: 00007f85abc15fa0 RCX: 00007f85ab99bf79 [ 136.002793][ T5185] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000007 [ 136.010761][ T5185] RBP: 00007f85aba327e0 R08: 0000000000000000 R09: 0000000000000000 [ 136.018724][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.026708][ T5185] R13: 00007f85abc16038 R14: 00007f85abc15fa0 R15: 00007fff54195ed8 [ 136.034664][ T5185] [ 136.038073][ T5185] Kernel Offset: disabled [ 136.042387][ T5185] Rebooting in 86400 seconds..