last executing test programs: 5.881627104s ago: executing program 3 (id=41): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 5.63704942s ago: executing program 1 (id=42): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 5.564341542s ago: executing program 2 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001d80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250300000008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) setns(0xc9, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000080)=[{0x0, 0x2, 0x3, 0x6}, {0xfff, 0x4, 0xf4, 0x6}, {0x800, 0x5c, 0xff, 0xfffff34d}, {0x6, 0x4, 0x0, 0x7}, {0x2, 0xff, 0x5e, 0x4}]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='1000\x00', 0x5) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x64, 0x0, 0x1}]}}]}, 0x40}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000440)={'syz_tun\x00', 0x1001}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}}, 0x0) 5.368962817s ago: executing program 2 (id=44): ioprio_set$uid(0x3, 0x0, 0x0) 5.306481228s ago: executing program 0 (id=45): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 5.2508759s ago: executing program 2 (id=46): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="07000000010001", 0x7) 5.190640061s ago: executing program 0 (id=47): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 5.122986963s ago: executing program 2 (id=48): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40d82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x2}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.630392095s ago: executing program 3 (id=49): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xd, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8044) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x8044) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 4.606170985s ago: executing program 0 (id=50): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) 4.262459774s ago: executing program 0 (id=52): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206a0803004000010203010902a200030109e010080b0001010020010904000000010120000924010600013a000505240b060009240b9b04a8a50bd10f24070603000502000300020003000d240d030000040200010028ee07240c098102d50904010000010220000904010101010220000824020106016a030905010908003c081208250101030a020009040200000102200009040201010102200009058209100002ff0608250101300900015daa849506d2d92646501ba8486e2e4c19d845"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 4.245200585s ago: executing program 2 (id=53): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) 4.205901966s ago: executing program 1 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n\x00', 0x1e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x42e542, 0x118) write(r1, &(0x7f0000000300)='1\n\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket$unix(0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(0x3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r11, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10022, 0x0) close(r4) 4.159297647s ago: executing program 4 (id=55): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 3.729833088s ago: executing program 3 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001d80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250300000008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) setns(0xc9, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000080)=[{0x0, 0x2, 0x3, 0x6}, {0xfff, 0x4, 0xf4, 0x6}, {0x800, 0x5c, 0xff, 0xfffff34d}, {0x6, 0x4, 0x0, 0x7}, {0x2, 0xff, 0x5e, 0x4}]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='1000\x00', 0x5) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x64, 0x0, 0x1}]}}]}, 0x40}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000440)={'syz_tun\x00', 0x1001}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}}, 0x0) 3.689607429s ago: executing program 2 (id=57): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r5, r5, r5, 0x0) r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0xc, 0x0, 0x5, 0x7fff7ffc}, {0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r7 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 3.530122423s ago: executing program 4 (id=58): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="07000000010001", 0x7) 3.495666393s ago: executing program 4 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00', 0xa) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) write(0xffffffffffffffff, &(0x7f0000000300)='non_existent_event:mod:syz_mod_123\n', 0x23) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000440)={0x8001, 0x0, r0}) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x0, 0x0) write(r2, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x401, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 3.453239144s ago: executing program 3 (id=60): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 2.338342642s ago: executing program 4 (id=61): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000780000000000119078000000000000000000004e200064907802000000030000000100000056805c734ee222c29de4125f81f6e030a50f1d99f362cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed937b6f876605ac29dcb96a8901e0711afb3db3"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) close(0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1b) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.303045463s ago: executing program 3 (id=62): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 1.789645416s ago: executing program 1 (id=63): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40d82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x2}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.642491769s ago: executing program 4 (id=64): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.562327991s ago: executing program 1 (id=65): socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1.378419556s ago: executing program 1 (id=66): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xd, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8044) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x8044) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.286283618s ago: executing program 3 (id=67): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 418.36125ms ago: executing program 1 (id=68): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 415.76431ms ago: executing program 0 (id=69): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) 62.949088ms ago: executing program 0 (id=70): r0 = syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="07000000010001", 0x7) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 4 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00', 0xa) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) write(0xffffffffffffffff, &(0x7f0000000300)='non_existent_event:mod:syz_mod_123\n', 0x23) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000440)={0x8001, 0x0, r0}) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x0, 0x0) write(r2, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x401, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 66.475506][ T4173] cgroup: Unknown subsys name 'net' [ 66.591563][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.082481][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.471299][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.618136][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 69.640803][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.648155][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.657097][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.676738][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.684005][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.692891][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.752146][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.773402][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.803117][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.818277][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 69.828978][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.863026][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.870326][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.878914][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.895616][ T4187] team0: Port device team_slave_0 added [ 69.918804][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.926034][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.934040][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.958120][ T4187] team0: Port device team_slave_1 added [ 70.018297][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.038601][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.046068][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.054338][ T4185] device bridge_slave_0 entered promiscuous mode [ 70.070448][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.084359][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.091886][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.118166][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.130369][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.137929][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.146561][ T4185] device bridge_slave_1 entered promiscuous mode [ 70.166977][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.174120][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.182657][ T4193] device bridge_slave_0 entered promiscuous mode [ 70.198657][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.205773][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.231989][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.255004][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.262117][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.270791][ T4193] device bridge_slave_1 entered promiscuous mode [ 70.321365][ T4192] team0: Port device team_slave_0 added [ 70.329952][ T4192] team0: Port device team_slave_1 added [ 70.335976][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.343112][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.351726][ T4186] device bridge_slave_0 entered promiscuous mode [ 70.361146][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.379646][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.396801][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.403988][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.412384][ T4186] device bridge_slave_1 entered promiscuous mode [ 70.421170][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.436140][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.442935][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.451947][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.482297][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.489485][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.515633][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.534079][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.541737][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.568808][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.631725][ T4185] team0: Port device team_slave_0 added [ 70.642389][ T4185] team0: Port device team_slave_1 added [ 70.653007][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.664420][ T4193] team0: Port device team_slave_0 added [ 70.700743][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.711144][ T4193] team0: Port device team_slave_1 added [ 70.727840][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.734615][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.742008][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.750061][ T4192] Cannot create hsr debugfs directory [ 70.793153][ T4186] team0: Port device team_slave_0 added [ 70.799573][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.806874][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.833322][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.860627][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.867949][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.894044][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.906802][ T4186] team0: Port device team_slave_1 added [ 70.913066][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.920389][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.946495][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.958111][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.965370][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.991794][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.094849][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.101844][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.130374][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.145726][ T4193] device hsr_slave_0 entered promiscuous mode [ 71.152566][ T4193] device hsr_slave_1 entered promiscuous mode [ 71.159475][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.167274][ T4193] Cannot create hsr debugfs directory [ 71.195181][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.202180][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.230520][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.268149][ T4185] device hsr_slave_0 entered promiscuous mode [ 71.275243][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 71.275243][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 71.276235][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 71.294056][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 71.294936][ T4185] device hsr_slave_1 entered promiscuous mode [ 71.301701][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 71.313246][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.321421][ T4185] Cannot create hsr debugfs directory [ 71.359341][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365968][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.399138][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.406222][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.412791][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.420556][ T4186] Cannot create hsr debugfs directory [ 71.571486][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.602011][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.632297][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.673161][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.728859][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.738857][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.749007][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.762168][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.802034][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.830527][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.840311][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.855515][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.951037][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.968023][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.975387][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.986718][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.015340][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.032531][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.056438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.067684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.080695][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.108444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.123117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.133108][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.140448][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.154160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.168775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.176951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.188034][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.198597][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.211135][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.226686][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.237134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.247578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.256857][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.263933][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.272897][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.297859][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.307572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.316713][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.323786][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.345830][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.366390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.375290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.383940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.396935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.407215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.416594][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.423665][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.432145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.442349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.452063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.462558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.478372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.503967][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.514059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.524171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.534031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.544524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.554117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.562087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.571009][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.580043][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.588785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.611678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.623559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.632647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.644611][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.658031][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.669782][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.685877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.694303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.704169][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.713916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.728505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.737886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.746739][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.753822][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.763907][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.784596][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.795639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.812085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.822059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.839778][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.847304][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.862059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.870880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.899515][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.913039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.938028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.976738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.997469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.047241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.056545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.066527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.075422][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.082508][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.094270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.104560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.113905][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.121055][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.130121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.139801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.149409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.158736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.168705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.177900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.187063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.211654][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.226172][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.245773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.254361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.267591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.278159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.290119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.298304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.321445][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.332680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.342435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.352437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.354835][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 73.380140][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.393005][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 73.400481][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 73.414533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.423118][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 73.429299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.431984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.448593][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 73.451765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.463051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.471970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.481589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.490289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.501261][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.513141][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.550715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.566188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.583838][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.590992][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.638720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.649011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.664156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.682922][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.690082][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.705274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.721317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.730882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.756916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.767473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.776812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.799771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.809494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.819101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.839197][ T4192] device veth0_vlan entered promiscuous mode [ 73.854456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.863432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.877789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.889114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.908891][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.934452][ T4187] device veth0_vlan entered promiscuous mode [ 73.961402][ T4192] device veth1_vlan entered promiscuous mode [ 73.975888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.984439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.999887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.011228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.022337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.031100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.040832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.049826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.058127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.069770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.080076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.093248][ T4187] device veth1_vlan entered promiscuous mode [ 74.116909][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.135743][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.151564][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.165291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.173962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.184372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.193530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.202376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.210621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.246137][ T4192] device veth0_macvtap entered promiscuous mode [ 74.265926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.274594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.293087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.303905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.327927][ T4192] device veth1_macvtap entered promiscuous mode [ 74.350525][ T4187] device veth0_macvtap entered promiscuous mode [ 74.375951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.392776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.409003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.437414][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.448312][ T4187] device veth1_macvtap entered promiscuous mode [ 74.460744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.475555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.484128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.500589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.511284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.525471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.549247][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.566050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.582872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.601506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.611360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.634110][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.643117][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.653652][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.663027][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.682304][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.693750][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.709095][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.717327][ T4186] device veth0_vlan entered promiscuous mode [ 74.725053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.733069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.742112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.751419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.760355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.769218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.799940][ T4186] device veth1_vlan entered promiscuous mode [ 74.819389][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.827911][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.836796][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.845927][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.853390][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.862582][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.873838][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.885498][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.893978][ T4193] device veth0_vlan entered promiscuous mode [ 74.913437][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.920718][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.932787][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.941972][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.951519][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.986956][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.996198][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.005825][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.014571][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.051354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.062281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.072518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.081586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.098011][ T4193] device veth1_vlan entered promiscuous mode [ 75.118411][ T4186] device veth0_macvtap entered promiscuous mode [ 75.170370][ T4186] device veth1_macvtap entered promiscuous mode [ 75.221370][ T4185] device veth0_vlan entered promiscuous mode [ 75.257142][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.270456][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.279587][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.288718][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.297750][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.306590][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.320826][ T4193] device veth0_macvtap entered promiscuous mode [ 75.329921][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.343875][ T4185] device veth1_vlan entered promiscuous mode [ 75.350828][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.370556][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.383946][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.392419][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.405358][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.413996][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.425457][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 75.438152][ T4193] device veth1_macvtap entered promiscuous mode [ 75.444872][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 75.454570][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.457143][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.473781][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.477303][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 75.486680][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.501142][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.505576][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.521439][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.523313][ T2284] Bluetooth: hci1: command 0x040f tx timeout [ 75.535446][ T2284] Bluetooth: hci0: command 0x040f tx timeout [ 75.562894][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.577434][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.586989][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.595261][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.603875][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.619200][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.631177][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.641557][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.655196][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.668256][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.702828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.711627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.724583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.733698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.749318][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.759452][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.768519][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.777610][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.789201][ T4185] device veth0_macvtap entered promiscuous mode [ 75.802041][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.806020][ T4185] device veth1_macvtap entered promiscuous mode [ 75.810143][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.827671][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.847370][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.861429][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.870464][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.881222][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.892689][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.939374][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.955833][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.966189][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.980271][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.993047][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.008919][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.021922][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.094507][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.108194][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.120399][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.131631][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.141795][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.155088][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.174411][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.185754][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.236356][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.262307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.291337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.300610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.310310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.327230][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.349884][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.360175][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.405948][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.418960][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.437737][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.453306][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.472818][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.501960][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.513340][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.532467][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.542858][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.571948][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.601294][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.614996][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.643224][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.655244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.675191][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.692370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.709464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.727373][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.736256][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.745641][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.754382][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.776465][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.795556][ T2284] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.810759][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.820025][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.830911][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.845105][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.852961][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.054778][ T2284] usb 4-1: Using ep0 maxpacket: 8 [ 77.124853][ T4216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.132727][ T4216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.155030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.172350][ T4290] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 77.203020][ T4290] team0: Port device dummy0 added [ 77.238139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.286232][ T2284] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.353586][ T4294] raw_sendmsg: syz.2.8 forgot to set AF_INET. Fix it! [ 77.365131][ T2284] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 77.389484][ T2284] usb 4-1: config 0 has no interface number 0 [ 77.414120][ T2284] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 77.430953][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.448700][ T2284] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 77.459333][ T2284] usb 4-1: config 0 interface 88 has no altsetting 0 [ 77.464890][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.505170][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 77.512898][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 77.526747][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.585503][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 77.594972][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 77.613852][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.633418][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 77.647292][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.671258][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.672457][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.695698][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.709771][ T2284] usb 4-1: string descriptor 0 read error: -22 [ 77.718795][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.733826][ T2284] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 77.735538][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.752219][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.760997][ T2284] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 77.791383][ T2284] usb 4-1: config 0 descriptor?? [ 77.796630][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.883459][ T2284] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input5 [ 78.276326][ T4235] usb 4-1: USB disconnect, device number 2 [ 78.295606][ T4268] udevd[4268]: Error opening device "/dev/input/event4": Input/output error [ 79.068278][ T4268] udevd[4268]: Unable to EVIOCGABS device "/dev/input/event4" [ 79.121579][ T4268] udevd[4268]: Unable to EVIOCGABS device "/dev/input/event4" [ 79.369687][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 79.389840][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 79.410510][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 79.433645][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 79.452706][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 79.466281][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 79.561955][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 80.159747][ T4321] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 80.264702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 80.330367][ T4325] program syz.0.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.368518][ T4325] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 81.744701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 83.644711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.984702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.034705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.054701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.074687][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.104702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.114702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.124705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.961552][ T4348] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 86.003044][ T4345] i2c i2c-0: new_device: Extra parameters [ 86.370212][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 86.455475][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.473179][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 86.492018][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 86.512668][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 86.527999][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 86.540752][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 86.644805][ T4233] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 86.671721][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 86.708563][ T1111] cfg80211: failed to load regulatory.db [ 86.924930][ T26] audit: type=1800 audit(1785975345.151:2): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28" name="attr_allow_any_host" dev="configfs" ino=32672 res=0 errno=0 [ 86.929162][ T4372] nvmet: adding nsid 1 to subsystem testnqn [ 87.015012][ T26] audit: type=1800 audit(1785975345.241:3): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28" name="enable" dev="configfs" ino=32680 res=0 errno=0 [ 87.057370][ T4372] nvmet_rdma: address family 255 not supported [ 87.075041][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.103316][ T26] audit: type=1800 audit(1785975345.271:4): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28" name="addr_trtype" dev="configfs" ino=32686 res=0 errno=0 [ 87.126508][ T4233] usb 5-1: not running at top speed; connect to a high speed hub [ 87.333570][ T26] audit: type=1800 audit(1785975345.271:5): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28" name="addr_traddr" dev="configfs" ino=32687 res=0 errno=0 [ 87.374843][ T4233] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 87.383118][ T4233] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 87.392513][ T4233] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 87.404791][ T4233] usb 5-1: config 14 has no interface number 0 [ 87.411098][ T4233] usb 5-1: config 14 has no interface number 1 [ 87.417435][ T4233] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 87.428954][ T4233] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 87.439839][ T4233] usb 5-1: config 14 interface 57 has no altsetting 0 [ 87.447328][ T4233] usb 5-1: config 14 interface 228 has no altsetting 0 [ 87.507533][ T26] audit: type=1800 audit(1785975345.271:6): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28" name="addr_trsvcid" dev="configfs" ino=32688 res=0 errno=0 [ 87.645048][ T4233] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 87.654162][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.662850][ T4233] usb 5-1: Product: syz [ 87.667312][ T4233] usb 5-1: Manufacturer: syz [ 87.672089][ T4233] usb 5-1: SerialNumber: syz [ 87.866998][ T4393] i2c i2c-0: new_device: Extra parameters [ 88.297430][ T4233] legousbtower 5-1:14.57: interrupt endpoints not found [ 88.755401][ T4233] legousbtower 5-1:14.228: interrupt endpoints not found [ 89.105386][ T26] audit: type=1800 audit(1785975347.341:7): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="attr_allow_any_host" dev="configfs" ino=33303 res=0 errno=0 [ 89.116883][ T4404] nvmet_rdma: address family 255 not supported [ 89.137640][ T4399] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 89.170931][ T26] audit: type=1800 audit(1785975347.341:8): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="enable" dev="configfs" ino=33304 res=0 errno=0 [ 89.199908][ T26] audit: type=1800 audit(1785975347.341:9): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="addr_trtype" dev="configfs" ino=33305 res=0 errno=0 [ 89.233754][ T26] audit: type=1800 audit(1785975347.341:10): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="addr_traddr" dev="configfs" ino=33306 res=0 errno=0 [ 89.308670][ T26] audit: type=1800 audit(1785975347.351:11): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="addr_trsvcid" dev="configfs" ino=33307 res=0 errno=0 [ 89.576688][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 90.112384][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 90.129216][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 90.145991][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 90.246983][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 90.261309][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 90.275696][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 90.290070][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 90.813594][ T4440] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 90.873304][ T4432] Zero length message leads to an empty skb [ 91.126540][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.138607][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 91.146923][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 91.155223][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 91.163603][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 91.172636][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 91.305083][ T7] usb 5-1: USB disconnect, device number 2 [ 91.345332][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.368966][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 91.490626][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 91.625318][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 91.794923][ T4233] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.844302][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.861050][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 91.878690][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 91.951915][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 91.963543][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 91.975266][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 91.987345][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.067993][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.079940][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.091937][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.103409][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.115524][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.127034][ T4467] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.207169][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 92.220869][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 92.233444][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 92.247405][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 92.573058][ T4465] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 92.584775][ T4233] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.594729][ T4233] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 92.614749][ T4233] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.621432][ T4233] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 92.644742][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.675718][ T4233] usb 1-1: config 0 descriptor?? [ 93.414858][ T4233] usbhid 1-1:0.0: can't add hid device: -71 [ 93.422225][ T4233] usbhid: probe of 1-1:0.0 failed with error -71 [ 93.430891][ T4233] usb 1-1: USB disconnect, device number 2 [ 93.623267][ T4492] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 94.875574][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 94.892124][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 94.910440][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 95.045677][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 95.247053][ T4510] program syz.0.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.280499][ T4510] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 97.232878][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 97.437755][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 97.452583][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 97.462780][ T4512] sctp_transport_update_pmtu: 91 callbacks suppressed [ 97.462799][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.482399][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.495127][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.507277][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.519238][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.531808][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.543857][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.555848][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.568278][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.580594][ T4512] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.665512][ T4505] ================================================================== [ 97.673889][ T4505] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 97.681141][ T4505] Read of size 8 at addr ffff88802989c618 by task syz.1.68/4505 [ 97.688802][ T4505] [ 97.691177][ T4505] CPU: 1 PID: 4505 Comm: syz.1.68 Not tainted syzkaller #0 [ 97.698401][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.708497][ T4505] Call Trace: [ 97.711822][ T4505] [ 97.714854][ T4505] dump_stack_lvl+0x188/0x250 [ 97.719575][ T4505] ? show_regs_print_info+0x20/0x20 [ 97.724796][ T4505] ? _printk+0xda/0x130 [ 97.728968][ T4505] ? dvb_device_open+0xc5/0x360 [ 97.733843][ T4505] ? load_image+0x410/0x410 [ 97.738349][ T4505] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 97.743816][ T4505] print_address_description+0x60/0x2d0 [ 97.749386][ T4505] ? dvb_device_open+0xc5/0x360 [ 97.754241][ T4505] kasan_report+0xdf/0x130 [ 97.758662][ T4505] ? dvb_device_open+0xc5/0x360 [ 97.763527][ T4505] dvb_device_open+0xc5/0x360 [ 97.768222][ T4505] chrdev_open+0x585/0x5f0 [ 97.772792][ T4505] ? cd_forget+0x160/0x160 [ 97.777226][ T4505] ? fsnotify_perm+0x3a7/0x560 [ 97.782001][ T4505] ? cd_forget+0x160/0x160 [ 97.786606][ T4505] do_dentry_open+0x7f7/0xf90 [ 97.791318][ T4505] ? vfs_open+0x2b/0x80 [ 97.795490][ T4505] path_openat+0x2718/0x2fb0 [ 97.800115][ T4505] ? __kasan_slab_alloc+0xa9/0xc0 [ 97.805159][ T4505] ? do_filp_open+0x400/0x400 [ 97.809880][ T4505] do_filp_open+0x1df/0x400 [ 97.814398][ T4505] ? vfs_tmpfile+0x300/0x300 [ 97.819012][ T4505] ? _raw_spin_unlock+0x24/0x40 [ 97.823871][ T4505] ? alloc_fd+0x59e/0x650 [ 97.828210][ T4505] do_sys_openat2+0x14b/0x500 [ 97.832894][ T4505] ? __lock_acquire+0x7b50/0x7b50 [ 97.837949][ T4505] ? do_sys_open+0xe0/0xe0 [ 97.842410][ T4505] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.848435][ T4505] ? lock_chain_count+0x20/0x20 [ 97.853332][ T4505] __x64_sys_openat+0x135/0x160 [ 97.858222][ T4505] do_syscall_64+0x4c/0xa0 [ 97.862668][ T4505] ? clear_bhb_loop+0x30/0x80 [ 97.867381][ T4505] ? clear_bhb_loop+0x30/0x80 [ 97.872094][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.878034][ T4505] RIP: 0033:0x7f7a0639390e [ 97.882493][ T4505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.902215][ T4505] RSP: 002b:00007f7a04609b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.911017][ T4505] RAX: ffffffffffffffda RBX: 00007f7a0460a6c0 RCX: 00007f7a0639390e [ 97.919026][ T4505] RDX: 0000000000040402 RSI: 00007f7a04609c00 RDI: ffffffffffffff9c [ 97.927039][ T4505] RBP: 00007f7a04609c00 R08: 0000000000000000 R09: 0000000000000000 [ 97.935055][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 97.943080][ T4505] R13: 00007f7a0665b128 R14: 00007f7a0665b090 R15: 00007ffffc476258 [ 97.951108][ T4505] [ 97.954158][ T4505] [ 97.956503][ T4505] Allocated by task 1: [ 97.960585][ T4505] __kasan_kmalloc+0xaf/0xe0 [ 97.965209][ T4505] dvb_register_device+0x300/0x1dc0 [ 97.970438][ T4505] dvb_register_frontend+0x629/0x900 [ 97.975751][ T4505] vidtv_bridge_probe+0x9c1/0xf30 [ 97.980814][ T4505] platform_probe+0x137/0x1c0 [ 97.985524][ T4505] really_probe+0x276/0xc70 [ 97.990062][ T4505] __driver_probe_device+0x1f5/0x390 [ 97.995374][ T4505] driver_probe_device+0x4f/0x420 [ 98.000427][ T4505] __driver_attach+0x45d/0x660 [ 98.005217][ T4505] bus_for_each_dev+0x182/0x1f0 [ 98.010119][ T4505] bus_add_driver+0x324/0x5d0 [ 98.014825][ T4505] driver_register+0x32d/0x430 [ 98.019632][ T4505] vidtv_bridge_init+0x39/0x70 [ 98.024428][ T4505] do_one_initcall+0x272/0x730 [ 98.029227][ T4505] do_initcall_level+0x13d/0x1f0 [ 98.034192][ T4505] do_initcalls+0x4b/0x90 [ 98.038552][ T4505] kernel_init_freeable+0x3d5/0x560 [ 98.043781][ T4505] kernel_init+0x19/0x1b0 [ 98.048153][ T4505] ret_from_fork+0x1f/0x30 [ 98.052613][ T4505] [ 98.054954][ T4505] Freed by task 4465: [ 98.058951][ T4505] kasan_set_track+0x4b/0x70 [ 98.063577][ T4505] kasan_set_free_info+0x1f/0x40 [ 98.068549][ T4505] ____kasan_slab_free+0xd5/0x110 [ 98.073615][ T4505] slab_free_freelist_hook+0xec/0x170 [ 98.079152][ T4505] kfree+0xef/0x2a0 [ 98.082988][ T4505] dvb_device_open+0x2d2/0x360 [ 98.087822][ T4505] chrdev_open+0x585/0x5f0 [ 98.092274][ T4505] do_dentry_open+0x7f7/0xf90 [ 98.096992][ T4505] path_openat+0x2718/0x2fb0 [ 98.101616][ T4505] do_filp_open+0x1df/0x400 [ 98.106170][ T4505] do_sys_openat2+0x14b/0x500 [ 98.110883][ T4505] __x64_sys_openat+0x135/0x160 [ 98.115763][ T4505] do_syscall_64+0x4c/0xa0 [ 98.120209][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.126133][ T4505] [ 98.128487][ T4505] The buggy address belongs to the object at ffff88802989c600 [ 98.128487][ T4505] which belongs to the cache kmalloc-256 of size 256 [ 98.142566][ T4505] The buggy address is located 24 bytes inside of [ 98.142566][ T4505] 256-byte region [ffff88802989c600, ffff88802989c700) [ 98.155791][ T4505] The buggy address belongs to the page: [ 98.161458][ T4505] page:ffffea0000a62700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2989c [ 98.171646][ T4505] head:ffffea0000a62700 order:1 compound_mapcount:0 [ 98.178276][ T4505] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 98.186324][ T4505] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c41b40 [ 98.194948][ T4505] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 98.203577][ T4505] page dumped because: kasan: bad access detected [ 98.210057][ T4505] page_owner tracks the page as allocated [ 98.215800][ T4505] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2806, ts 21279927190, free_ts 0 [ 98.234077][ T4505] get_page_from_freelist+0x24f6/0x2670 [ 98.239669][ T4505] __alloc_pages+0x1ee/0x480 [ 98.244310][ T4505] new_slab+0xc0/0x4b0 [ 98.248407][ T4505] ___slab_alloc+0x807/0xdd0 [ 98.253021][ T4505] kmem_cache_alloc_trace+0xf9/0x290 [ 98.258342][ T4505] kthread+0x10a/0x520 [ 98.262472][ T4505] ret_from_fork+0x1f/0x30 [ 98.266931][ T4505] page_owner free stack trace missing [ 98.272317][ T4505] [ 98.274661][ T4505] Memory state around the buggy address: [ 98.280315][ T4505] ffff88802989c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.288414][ T4505] ffff88802989c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.296501][ T4505] >ffff88802989c600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.304583][ T4505] ^ [ 98.309460][ T4505] ffff88802989c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.317550][ T4505] ffff88802989c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.325632][ T4505] ================================================================== [ 98.333710][ T4505] Disabling lock debugging due to kernel taint [ 98.345404][ T4505] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.352636][ T4505] CPU: 1 PID: 4505 Comm: syz.1.68 Tainted: G B syzkaller #0 [ 98.361249][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.371323][ T4505] Call Trace: [ 98.374623][ T4505] [ 98.377570][ T4505] dump_stack_lvl+0x188/0x250 [ 98.382284][ T4505] ? show_regs_print_info+0x20/0x20 [ 98.387516][ T4505] ? load_image+0x410/0x410 [ 98.392063][ T4505] panic+0x2f8/0x850 [ 98.395990][ T4505] ? bpf_jit_dump+0xd0/0xd0 [ 98.401236][ T4505] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 98.406997][ T4505] ? check_panic_on_warn+0x6c/0xa0 [ 98.412153][ T4505] ? dvb_device_open+0xc5/0x360 [ 98.417029][ T4505] check_panic_on_warn+0x80/0xa0 [ 98.422023][ T4505] ? dvb_device_open+0xc5/0x360 [ 98.426908][ T4505] end_report+0x6d/0xf0 [ 98.431123][ T4505] kasan_report+0x102/0x130 [ 98.435651][ T4505] ? dvb_device_open+0xc5/0x360 [ 98.440521][ T4505] dvb_device_open+0xc5/0x360 [ 98.445221][ T4505] chrdev_open+0x585/0x5f0 [ 98.449669][ T4505] ? cd_forget+0x160/0x160 [ 98.454117][ T4505] ? fsnotify_perm+0x3a7/0x560 [ 98.458911][ T4505] ? cd_forget+0x160/0x160 [ 98.463358][ T4505] do_dentry_open+0x7f7/0xf90 [ 98.468067][ T4505] ? vfs_open+0x2b/0x80 [ 98.472248][ T4505] path_openat+0x2718/0x2fb0 [ 98.476874][ T4505] ? __kasan_slab_alloc+0xa9/0xc0 [ 98.481925][ T4505] ? do_filp_open+0x400/0x400 [ 98.486780][ T4505] do_filp_open+0x1df/0x400 [ 98.491359][ T4505] ? vfs_tmpfile+0x300/0x300 [ 98.495990][ T4505] ? _raw_spin_unlock+0x24/0x40 [ 98.500872][ T4505] ? alloc_fd+0x59e/0x650 [ 98.505237][ T4505] do_sys_openat2+0x14b/0x500 [ 98.509942][ T4505] ? __lock_acquire+0x7b50/0x7b50 [ 98.514999][ T4505] ? do_sys_open+0xe0/0xe0 [ 98.519435][ T4505] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.525457][ T4505] ? lock_chain_count+0x20/0x20 [ 98.530343][ T4505] __x64_sys_openat+0x135/0x160 [ 98.535220][ T4505] do_syscall_64+0x4c/0xa0 [ 98.539662][ T4505] ? clear_bhb_loop+0x30/0x80 [ 98.544362][ T4505] ? clear_bhb_loop+0x30/0x80 [ 98.549069][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.554993][ T4505] RIP: 0033:0x7f7a0639390e [ 98.559437][ T4505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.579068][ T4505] RSP: 002b:00007f7a04609b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.587523][ T4505] RAX: ffffffffffffffda RBX: 00007f7a0460a6c0 RCX: 00007f7a0639390e [ 98.595528][ T4505] RDX: 0000000000040402 RSI: 00007f7a04609c00 RDI: ffffffffffffff9c [ 98.603532][ T4505] RBP: 00007f7a04609c00 R08: 0000000000000000 R09: 0000000000000000 [ 98.611526][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 98.619522][ T4505] R13: 00007f7a0665b128 R14: 00007f7a0665b090 R15: 00007ffffc476258 [ 98.627535][ T4505] [ 98.630793][ T4505] Kernel Offset: disabled [ 98.635144][ T4505] Rebooting in 86400 seconds..