last executing test programs: 15.52299174s ago: executing program 2 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) unshare(0x22020600) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) 14.562206061s ago: executing program 2 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000040)={0x9}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 13.787403217s ago: executing program 2 (id=350): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000000)) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 10.190080353s ago: executing program 4 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x7, 0x2, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x7, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.41405355s ago: executing program 4 (id=365): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0xf, 0x2, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0x0, 0xfffffffc, 0x8000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x0, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0x100], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x80ce5, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, 0x0, r1}, &(0x7f0000000300)=""/71, 0x47, 0x0) unshare(0x22020600) r2 = open(0x0, 0x0, 0x0) fcntl$lock(r2, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) 9.328860692s ago: executing program 3 (id=367): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/82) 9.030808038s ago: executing program 0 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) mlock(&(0x7f00001e5000/0x2000)=nil, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x4}}) keyctl$session_to_parent(0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r5 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000340)=0x8) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3) 8.977978679s ago: executing program 3 (id=371): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83470806", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 8.172115816s ago: executing program 4 (id=372): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{0x0}], 0x1, 0x1006c, 0xfffffffe) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000040), 0x0, &(0x7f00000001c0)="e6d172bb1076cd510d2c59dda008fa9aa14d96c37fa26653480138038d2ebb78727c52178d53a84086ac", 0x0, 0x9}, 0x38) 8.122361547s ago: executing program 0 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084) 8.055817389s ago: executing program 2 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$video4linux(0x0, 0x6, 0x8000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 7.943252741s ago: executing program 3 (id=376): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0xeb, 0x1000000009, 0x4, 0x800000, 0xfffffff5, 0x5, "0fa000", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xac}) 7.913194352s ago: executing program 0 (id=377): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create(0xfff) r4 = socket(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xc0000000}) r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, r5, 0x7, r4, &(0x7f00000002c0)={r3, 0xffffffffffffffff, 0xfffff000}) 6.803333825s ago: executing program 0 (id=379): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket(0x11, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffed, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, 0xffffffffffffffff, 0x2000) 6.710174227s ago: executing program 3 (id=380): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(r1, 0x0, 0x1900, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)={0x3c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 6.378095954s ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) mlock(&(0x7f00001e5000/0x2000)=nil, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x4}}) keyctl$session_to_parent(0x12) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r5 = syz_open_pts(r4, 0x2000) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000340)=0x8) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3) 5.492740283s ago: executing program 4 (id=384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 5.462714444s ago: executing program 3 (id=385): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000000)) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 5.059536312s ago: executing program 4 (id=386): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 4.859048506s ago: executing program 1 (id=389): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000500)={0x20080522}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0], 0x4) r2 = getpgrp(0x0) ioprio_get$pid(0x207e1e73da1d2d72, r2) socket$tipc(0x1e, 0x5, 0x0) 3.838904428s ago: executing program 1 (id=390): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create(0xfff) r4 = socket(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xc0000000}) r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, r5, 0x7, r4, &(0x7f00000002c0)={r3, 0xffffffffffffffff, 0xfffff000}) 2.845007409s ago: executing program 1 (id=391): socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x29, 0x2, 0x6a}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 2.79371188s ago: executing program 3 (id=392): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f00000000c0)=0x5) 2.634105564s ago: executing program 1 (id=393): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{0x0}], 0x1, 0x1006c, 0xfffffffe) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000040), 0x0, &(0x7f00000001c0)="e6d172bb1076cd510d2c59dda008fa9aa14d96c37fa26653480138038d2ebb78727c52178d53a84086ac", 0x0, 0x9}, 0x38) 2.495865077s ago: executing program 0 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) mlock(&(0x7f00001e5000/0x2000)=nil, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x4}}) keyctl$session_to_parent(0x12) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r5 = syz_open_pts(r4, 0x2000) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000340)=0x8) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3) 1.755963582s ago: executing program 1 (id=395): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(r1, 0x0, 0x1900, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)={0x3c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 1.755092242s ago: executing program 2 (id=396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.686192264s ago: executing program 2 (id=397): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) 348.062232ms ago: executing program 0 (id=398): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x88e, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x392, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0xf, 0x2, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x80082, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0x8000d, 0x2bf, 0xffffffff, 0x0, 0xfffffffc, 0x8000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x4, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x5, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x4, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x0, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0x100], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x80ce5, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0xb, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0x80b1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, 0x0, r1}, &(0x7f0000000300)=""/71, 0x47, 0x0) unshare(0x22020600) r2 = open(0x0, 0x0, 0x0) fcntl$lock(r2, 0x410, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 1 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00\\'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x48080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 58.524864][ T4173] cgroup: Unknown subsys name 'net' [ 58.663554][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.895311][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.236370][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.250295][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.297372][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 61.365284][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.379794][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.408319][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.415417][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.424369][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.438063][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.445152][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.453052][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.478801][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.485888][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.494425][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.507260][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.514480][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.522418][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.541229][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.548489][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.556285][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.582923][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.593547][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.602004][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.610385][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.637013][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.654991][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.674695][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.700968][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.724185][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.735803][ T4191] team0: Port device team_slave_0 added [ 61.766113][ T4191] team0: Port device team_slave_1 added [ 61.772506][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.779780][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.788103][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.797679][ T4193] team0: Port device team_slave_0 added [ 61.804188][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.811464][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.819379][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.832662][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.839961][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.847964][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.864460][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.871821][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.879747][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.888306][ T4193] team0: Port device team_slave_1 added [ 61.908712][ T4192] team0: Port device team_slave_0 added [ 61.924218][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.931438][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.957858][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.971782][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.987880][ T4192] team0: Port device team_slave_1 added [ 61.995970][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.005778][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.012970][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.043427][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.056439][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.084733][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.106404][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.113616][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.140128][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.166042][ T4186] team0: Port device team_slave_0 added [ 62.191158][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.198475][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.224455][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.238552][ T4186] team0: Port device team_slave_1 added [ 62.247962][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.255628][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.281785][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.302551][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.311003][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.321065][ T4189] team0: Port device team_slave_0 added [ 62.341343][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.348795][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.374832][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.400573][ T4189] team0: Port device team_slave_1 added [ 62.412942][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.419999][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.447564][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.482968][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.489997][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.517060][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.548769][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.557348][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.584575][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.597076][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.605938][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.634518][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.655473][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.662733][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.669783][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.678175][ T4193] Cannot create hsr debugfs directory [ 62.702414][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.709532][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.718066][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.725636][ T4192] Cannot create hsr debugfs directory [ 62.797242][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.804567][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.812983][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.822208][ T4186] Cannot create hsr debugfs directory [ 62.858545][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.865483][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.872831][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.880764][ T4189] Cannot create hsr debugfs directory [ 62.958589][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 62.967782][ T1356] Bluetooth: hci1: command 0x0409 tx timeout [ 62.974582][ T1356] Bluetooth: hci4: command 0x0409 tx timeout [ 62.981098][ T1356] Bluetooth: hci0: command 0x0409 tx timeout [ 62.998833][ T1356] Bluetooth: hci2: command 0x0409 tx timeout [ 63.116828][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.131089][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.141352][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.150207][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.197541][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.213793][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.224761][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.239438][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.259263][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.275197][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.298907][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.310118][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.395882][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.415625][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.427295][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.462339][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.469990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.481085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.489621][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.501987][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.519129][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.528799][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.537930][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.545193][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.556974][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.586146][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.594260][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.602475][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.613189][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.622338][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.635079][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.644053][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.653366][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.660477][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.670700][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.688061][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.710516][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.719412][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.730146][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.739196][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.748455][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.758129][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.782689][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.791636][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.800356][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.809076][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.817569][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.827336][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.836538][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.845385][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.852505][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.862474][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.871925][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.893820][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.904847][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.927209][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.936000][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.945489][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.954641][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.965797][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.972961][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.981818][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.990538][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.999851][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.006902][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.014773][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.023968][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.032870][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.041576][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.051997][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.060788][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.070119][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.079609][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.088518][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.095602][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.104232][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.113097][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.121260][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.155051][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.170358][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.195256][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.204520][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.215027][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.224305][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.232832][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.241459][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.250574][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.259468][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.291022][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.303209][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.314693][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.331813][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.341222][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.350346][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.363982][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.394535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.404146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.419463][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.436575][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.450556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.459920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.468631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.476102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.493452][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.526057][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.534841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.542928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.563189][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.583130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.596533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.618819][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.630532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.645639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.655690][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.662850][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.673490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.704149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.712940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.723210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.732807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.744335][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.751471][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.760155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.769357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.778137][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.785199][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.794260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.803931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.812334][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.819444][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.827065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.836169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.845864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.855100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.870658][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.880752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.890419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.945887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.956616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.969262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.980109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.989052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.997900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.006072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.015104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.024247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.033130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.040707][ T4175] Bluetooth: hci3: command 0x041b tx timeout [ 65.040959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.054530][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 65.058312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.067969][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 65.074034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.074037][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 65.082089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.087739][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 65.100557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.109485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.118550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.129559][ T4191] device veth0_vlan entered promiscuous mode [ 65.143777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.157080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.167149][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.183226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.196118][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.206823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.215638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.240532][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.257407][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.266820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.282403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.295545][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.309827][ T4191] device veth1_vlan entered promiscuous mode [ 65.342741][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.358919][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.376424][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.445471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.463540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.505342][ T4192] device veth0_vlan entered promiscuous mode [ 65.518880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.528499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.536806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.545855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.555384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.563881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.579332][ T4191] device veth0_macvtap entered promiscuous mode [ 65.590644][ T4191] device veth1_macvtap entered promiscuous mode [ 65.608932][ T4193] device veth0_vlan entered promiscuous mode [ 65.615834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.624460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.633500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.642487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.651752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.659848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.670767][ T4192] device veth1_vlan entered promiscuous mode [ 65.683263][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.704839][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.715315][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.723732][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.732155][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.739867][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.747300][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.766684][ T4193] device veth1_vlan entered promiscuous mode [ 65.785379][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.801601][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.811076][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.819962][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.829161][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.837883][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.846588][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.855226][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.877382][ T4193] device veth0_macvtap entered promiscuous mode [ 65.888062][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.901003][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.911735][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.921353][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.931346][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.943445][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.952782][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.961437][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.970925][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.983431][ T4193] device veth1_macvtap entered promiscuous mode [ 66.001650][ T4192] device veth0_macvtap entered promiscuous mode [ 66.023008][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.032222][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.042363][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.050750][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.059932][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.096704][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.105632][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.129334][ T4192] device veth1_macvtap entered promiscuous mode [ 66.151255][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.163017][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.179229][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.196381][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.207028][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.217281][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.228460][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.239996][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.252650][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.264246][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.273340][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.282540][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.291786][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.302223][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.311281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.322525][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.334158][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.345646][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.358728][ T4189] device veth0_vlan entered promiscuous mode [ 66.374006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.382894][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.391234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.400636][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.410283][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.419246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.428276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.436162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.449312][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.460721][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.470600][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.481893][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.493451][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.506338][ T4189] device veth1_vlan entered promiscuous mode [ 66.514916][ T4186] device veth0_vlan entered promiscuous mode [ 66.540260][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.549227][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.559904][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.569334][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.579555][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.590408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.604287][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.613510][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.622702][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.631761][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.649403][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.666460][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.695967][ T4186] device veth1_vlan entered promiscuous mode [ 66.703592][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.740272][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.750482][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.765957][ T4189] device veth0_macvtap entered promiscuous mode [ 66.775549][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.784400][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.820467][ T4189] device veth1_macvtap entered promiscuous mode [ 66.842916][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.851746][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.859888][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.867838][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.876352][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.896694][ T4186] device veth0_macvtap entered promiscuous mode [ 66.939072][ T4186] device veth1_macvtap entered promiscuous mode [ 66.960114][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.974603][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.978460][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.984510][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.001838][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.010479][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.020991][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.031921][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.042909][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.054123][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.065345][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.083663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.093859][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.102541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.110686][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.118726][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 67.122668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.133557][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 67.135990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.139866][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 67.154245][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 67.164679][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.176473][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.189243][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.200712][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.208082][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 67.221205][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.234871][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.251466][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.251761][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 67.264324][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.268827][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 67.287292][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.297010][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.310319][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.320273][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.330722][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.340882][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.351705][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.363244][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.378018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.388755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.397395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.406597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.418325][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.429180][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.439825][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.453402][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.463304][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.473843][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.484011][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.494528][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.506293][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.519776][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.536163][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.544637][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 67.551537][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 67.552247][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.571590][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.581223][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.601256][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.615389][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.626432][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.635533][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.660550][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.667790][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.675804][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.686662][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.696067][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.704857][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.721131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.976063][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.006069][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.062143][ T4263] ceph: No mds server is up or the cluster is laggy [ 68.070540][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 68.090964][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.099626][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.117338][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 68.131695][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.177773][ T1111] libceph: connect (1)[c::]:6789 error -101 [ 68.203035][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.215553][ T1111] libceph: mon0 (1)[c::]:6789 connect error [ 68.226425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.238547][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.256241][ T4266] ceph: No mds server is up or the cluster is laggy [ 68.276041][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.301640][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.311659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.393105][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.797603][ C0] sched: RT throttling activated [ 68.957643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.967636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.977636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.987621][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 68.997630][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 69.007629][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.017627][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.027634][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.037623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.047629][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.686335][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 69.743129][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 69.801698][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 69.831445][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 69.851944][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 71.063215][ T4307] Zero length message leads to an empty skb [ 71.362075][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.368727][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.476839][ T4317] block nbd1: NBD_DISCONNECT [ 72.483575][ T4317] block nbd1: Disconnected due to user request. [ 72.490118][ T4317] block nbd1: shutting down sockets [ 75.974318][ T4336] ======================================================= [ 75.974318][ T4336] WARNING: The mand mount option has been deprecated and [ 75.974318][ T4336] and is ignored by this kernel. Remove the mand [ 75.974318][ T4336] option from the mount to silence this warning. [ 75.974318][ T4336] ======================================================= [ 77.422952][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.808242][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 77.958439][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.027234][ T4227] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 78.147017][ T4227] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.242335][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.548625][ T4227] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 78.612563][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.711914][ T4227] usb 1-1: Product: syz [ 78.770037][ T4227] usb 1-1: Manufacturer: syz [ 78.826899][ T4227] usb 1-1: SerialNumber: syz [ 79.099811][ T4227] usb 1-1: config 0 descriptor?? [ 79.294271][ T4227] usb 1-1: can't set config #0, error -71 [ 79.968815][ T4227] usb 1-1: USB disconnect, device number 2 [ 80.153643][ T4372] UBIFS error (pid: 4372): cannot open "ubifs", error -22 [ 84.864373][ T4409] tmpfs: Unknown parameter 'nn•×Û7‰¾>­xoswap' [ 87.132215][ T7] cfg80211: failed to load regulatory.db [ 88.250036][ T4448] UBIFS error (pid: 4448): cannot open "ubifs", error -22 [ 88.707098][ T4456] loop3: detected capacity change from 0 to 4096 [ 88.940887][ T4456] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 88.968613][ T4456] ntfs3: loop3: failed to replay log file. Can't mount rw! [ 92.049015][ T4487] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.333550][ T4508] overlayfs: conflicting lowerdir path [ 95.413059][ T4517] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 95.457783][ T4517] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 95.465564][ T4517] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.70'. [ 96.349924][ T4526] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.358707][ T4526] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 96.366984][ T4526] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.966634][ T4540] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 99.148213][ T4295] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.978526][ T4567] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.177763][ T4295] usb 3-1: Using ep0 maxpacket: 32 [ 101.344032][ T4295] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.977638][ T4295] usb 3-1: config 0 has no interface number 0 [ 101.997940][ T4295] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 102.013217][ T4295] usb 3-1: config 0 interface 1 has no altsetting 0 [ 102.062182][ T4579] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.256587][ T4295] usb 3-1: string descriptor 0 read error: -71 [ 102.959168][ T4295] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 102.968543][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.978515][ T4295] usb 3-1: config 0 descriptor?? [ 103.007761][ T4295] usb 3-1: can't set config #0, error -71 [ 103.039668][ T4295] usb 3-1: USB disconnect, device number 2 [ 103.040775][ T4584] autofs4:pid:4584:autofs_fill_super: called with bogus options [ 105.627155][ T4616] netlink: 52 bytes leftover after parsing attributes in process `syz.2.99'. [ 105.770826][ T4621] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.570560][ T4261] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.878360][ T4261] usb 5-1: Using ep0 maxpacket: 32 [ 109.238564][ T4261] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.617986][ T4261] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 109.618955][ T4680] UBIFS error (pid: 4680): cannot open "ubifs", error -22 [ 109.632424][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.825118][ T4261] usb 5-1: Product: syz [ 109.829433][ T4261] usb 5-1: Manufacturer: syz [ 109.834152][ T4261] usb 5-1: SerialNumber: syz [ 110.452824][ T4261] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 110.489992][ T4261] usb 5-1: USB disconnect, device number 2 [ 112.677908][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.482553][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 113.607896][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.745475][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 150 [ 113.816891][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 114.379379][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.484175][ T21] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.497822][ T21] usb 4-1: Manufacturer: syz [ 114.521242][ T21] usb 4-1: config 0 descriptor?? [ 114.547937][ T4719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.853007][ T21] usb 4-1: USB disconnect, device number 2 [ 115.200644][ T4779] UBIFS error (pid: 4779): cannot open "ubifs", error -22 [ 116.903041][ T4795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 121.392380][ T4230] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 121.808538][ T4230] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.860103][ T4230] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.093748][ T4230] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.190128][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.289014][ T4230] hub 4-1:4.0: USB hub found [ 122.508066][ T4230] hub 4-1:4.0: 2 ports detected [ 122.515163][ T4230] usb 4-1: selecting invalid altsetting 1 [ 122.576433][ T4230] hub 4-1:4.0: Using single TT (err -22) [ 123.000682][ T4230] usb 4-1: USB disconnect, device number 3 [ 128.847872][ T4234] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 129.155084][ T4907] tmpfs: Unknown parameter 'nn•×Û7‰¾>­xoswap' [ 129.627988][ T4234] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.683333][ T4234] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.713541][ T4234] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 129.769718][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.860532][ T4234] usb 1-1: config 0 descriptor?? [ 130.857748][ T4234] usbhid 1-1:0.0: can't add hid device: -71 [ 130.863862][ T4234] usbhid: probe of 1-1:0.0 failed with error -71 [ 130.905970][ T4234] usb 1-1: USB disconnect, device number 3 [ 132.881259][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.888459][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.448048][ T4940] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.699365][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.947718][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 138.078335][ T4232] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 138.131340][ T4232] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 138.228198][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 138.319289][ T4232] usb 1-1: config 1 has no interface number 0 [ 138.325441][ T4232] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.350617][ T4232] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 138.426812][ T4232] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 138.441850][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.496766][ T4232] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 138.708905][ T4232] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 138.808255][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060e7a800: rx timeout, send abort [ 139.310677][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060e78400: rx timeout, send abort [ 139.319234][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060e7a800: abort rx timeout. Force session deactivation [ 139.764552][ T4232] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 139.785904][ T5017] UBIFS error (pid: 5017): cannot open "ubifs", error -22 [ 139.818915][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060e78400: abort rx timeout. Force session deactivation [ 140.687535][ T23] usb 1-1: USB disconnect, device number 4 [ 140.699335][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 142.150981][ T5032] virtio-fs: tag not found [ 142.247588][ T5039] fuse: Bad value for 'fd' [ 147.478844][ T26] audit: type=1326 audit(1784742717.373:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5200107e99 code=0x0 [ 147.641919][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 147.866271][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 154.423775][ T5164] UBIFS error (pid: 5164): cannot open "ubifs", error -22 [ 155.622052][ T5165] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.501891][ T5187] overlayfs: failed to clone lowerpath [ 159.827922][ T4231] Bluetooth: hci4: command 0x0411 tx timeout [ 160.113343][ T5199] overlayfs: missing 'lowerdir' [ 161.681068][ T5209] UBIFS error (pid: 5209): cannot open "ubifs", error -22 [ 166.187409][ T5247] ODEBUG: Out of memory. ODEBUG disabled [ 167.082684][ T5278] virtio-fs: tag not found [ 167.197504][ T5283] fuse: Bad value for 'fd' [ 168.268869][ T5289] netlink: 'syz.3.306': attribute type 12 has an invalid length. [ 168.276864][ T5289] netlink: 'syz.3.306': attribute type 29 has an invalid length. [ 168.284875][ T5289] netlink: 148 bytes leftover after parsing attributes in process `syz.3.306'. [ 168.294033][ T5289] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 168.301769][ T5289] netlink: 'syz.3.306': attribute type 2 has an invalid length. [ 168.309524][ T5289] netlink: 11 bytes leftover after parsing attributes in process `syz.3.306'. [ 170.071687][ T5305] netlink: 'syz.3.312': attribute type 12 has an invalid length. [ 170.084014][ T5304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.190995][ T4780] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 174.117760][ T4780] usb 4-1: Using ep0 maxpacket: 16 [ 174.847757][ T4780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.911145][ T4780] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 174.942718][ T4780] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.990592][ T4780] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.248001][ T4780] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 175.430473][ T4780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.469265][ T4780] usb 4-1: Product: syz [ 175.504460][ T4780] usb 4-1: Manufacturer: syz [ 175.699008][ T4780] usb 4-1: SerialNumber: syz [ 175.736002][ T4780] usb 4-1: config 0 descriptor?? [ 175.827843][ T4780] usb 4-1: Can not set alternate setting to 1, error: -71 [ 175.837763][ T4780] synaptics_usb: probe of 4-1:0.0 failed with error -71 [ 175.863684][ T4780] usb 4-1: USB disconnect, device number 4 [ 178.157350][ T5380] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 178.406750][ T5396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.344'. [ 178.741748][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.524193][ T5407] capability: warning: `syz.0.346' uses 32-bit capabilities (legacy support in use) [ 180.147775][ T4261] usb 5-1: Using ep0 maxpacket: 8 [ 180.287741][ T4261] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 180.297139][ T4261] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 180.562876][ T4261] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 180.637791][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.646276][ T4261] usb 5-1: Product: syz [ 180.660043][ T4261] usb 5-1: Manufacturer: syz [ 180.664956][ T4261] usb 5-1: SerialNumber: syz [ 180.710090][ T5421] UBIFS error (pid: 5421): cannot open "ubifs", error -22 [ 180.768238][ T4261] usb 5-1: config 0 descriptor?? [ 180.878016][ T5394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.910565][ T4261] powermate: probe of 5-1:0.0 failed with error -22 [ 181.782885][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 181.934409][ T5434] binder_alloc: 5433: binder_alloc_buf, no vma [ 182.942916][ T4261] usb 5-1: USB disconnect, device number 3 [ 182.960758][ T5445] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 183.097308][ T5445] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.127079][ T5445] bond0: (slave team0): Enslaving as an active interface with an up link [ 184.003094][ T5445] syz.1.357 (5445) used greatest stack depth: 20880 bytes left [ 184.093650][ T5469] UBIFS error (pid: 5469): cannot open "ubifs", error -22 [ 184.672945][ T5430] virtio-fs: tag not found [ 185.075420][ T5481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.368'. [ 185.145084][ T5487] binder_alloc: 5485: binder_alloc_buf, no vma [ 186.077760][ T1356] Bluetooth: hci2: command 0x0406 tx timeout [ 186.084017][ T1356] Bluetooth: hci3: command 0x0406 tx timeout [ 186.127674][ T1356] Bluetooth: hci1: command 0x0406 tx timeout [ 188.940728][ T5536] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 194.242661][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.249026][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.335161][ T5589] ================================================================== [ 194.343590][ T5589] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 194.350834][ T5589] Read of size 8 at addr ffff88814b496218 by task syz.0.398/5589 [ 194.358570][ T5589] [ 194.360920][ T5589] CPU: 1 PID: 5589 Comm: syz.0.398 Not tainted syzkaller #0 [ 194.368212][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 194.378296][ T5589] Call Trace: [ 194.381585][ T5589] [ 194.384517][ T5589] dump_stack_lvl+0x188/0x250 [ 194.389213][ T5589] ? show_regs_print_info+0x20/0x20 [ 194.394418][ T5589] ? _printk+0xda/0x130 [ 194.398582][ T5589] ? dvb_device_open+0xc5/0x360 [ 194.403451][ T5589] ? load_image+0x410/0x410 [ 194.407958][ T5589] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 194.413434][ T5589] print_address_description+0x60/0x2d0 [ 194.418990][ T5589] ? dvb_device_open+0xc5/0x360 [ 194.423856][ T5589] kasan_report+0xdf/0x130 [ 194.428293][ T5589] ? dvb_device_open+0xc5/0x360 [ 194.433155][ T5589] dvb_device_open+0xc5/0x360 [ 194.437843][ T5589] chrdev_open+0x585/0x5f0 [ 194.442268][ T5589] ? cd_forget+0x160/0x160 [ 194.446700][ T5589] ? fsnotify_perm+0x3a7/0x560 [ 194.451472][ T5589] ? cd_forget+0x160/0x160 [ 194.455894][ T5589] do_dentry_open+0x7f7/0xf90 [ 194.460584][ T5589] ? vfs_open+0x2b/0x80 [ 194.464758][ T5589] path_openat+0x2718/0x2fb0 [ 194.469385][ T5589] ? do_filp_open+0x400/0x400 [ 194.474066][ T5589] ? lockdep_hardirqs_off+0x70/0x100 [ 194.479379][ T5589] do_filp_open+0x1df/0x400 [ 194.483900][ T5589] ? vfs_tmpfile+0x300/0x300 [ 194.488532][ T5589] ? _raw_spin_unlock+0x24/0x40 [ 194.493428][ T5589] ? alloc_fd+0x59e/0x650 [ 194.497771][ T5589] do_sys_openat2+0x14b/0x500 [ 194.502453][ T5589] ? __lock_acquire+0x7b50/0x7b50 [ 194.507485][ T5589] ? do_sys_open+0xe0/0xe0 [ 194.512174][ T5589] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 194.518165][ T5589] ? lock_chain_count+0x20/0x20 [ 194.523027][ T5589] __x64_sys_openat+0x135/0x160 [ 194.527887][ T5589] do_syscall_64+0x4c/0xa0 [ 194.532306][ T5589] ? clear_bhb_loop+0x30/0x80 [ 194.536983][ T5589] ? clear_bhb_loop+0x30/0x80 [ 194.541667][ T5589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.547574][ T5589] RIP: 0033:0x7efec0dfa6ce [ 194.552000][ T5589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.571626][ T5589] RSP: 002b:00007efebf070b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.580075][ T5589] RAX: ffffffffffffffda RBX: 00007efebf0716c0 RCX: 00007efec0dfa6ce [ 194.588068][ T5589] RDX: 0000000000040002 RSI: 00007efebf070c00 RDI: ffffffffffffff9c [ 194.596066][ T5589] RBP: 00007efebf070c00 R08: 0000000000000000 R09: 0000000000000000 [ 194.604049][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 194.612037][ T5589] R13: 00007efec10c2128 R14: 00007efec10c2090 R15: 00007ffe5948e728 [ 194.620034][ T5589] [ 194.623058][ T5589] [ 194.625378][ T5589] Allocated by task 1: [ 194.629445][ T5589] __kasan_kmalloc+0xaf/0xe0 [ 194.634051][ T5589] dvb_register_device+0x300/0x1dc0 [ 194.639272][ T5589] dvb_register_frontend+0x629/0x900 [ 194.644568][ T5589] vidtv_bridge_probe+0x9c1/0xf30 [ 194.649596][ T5589] platform_probe+0x137/0x1c0 [ 194.654274][ T5589] really_probe+0x276/0xc70 [ 194.658785][ T5589] __driver_probe_device+0x1f5/0x390 [ 194.664073][ T5589] driver_probe_device+0x4f/0x420 [ 194.669097][ T5589] __driver_attach+0x45d/0x660 [ 194.673864][ T5589] bus_for_each_dev+0x182/0x1f0 [ 194.678726][ T5589] bus_add_driver+0x324/0x5d0 [ 194.683418][ T5589] driver_register+0x32d/0x430 [ 194.688187][ T5589] vidtv_bridge_init+0x39/0x70 [ 194.692961][ T5589] do_one_initcall+0x272/0x730 [ 194.697729][ T5589] do_initcall_level+0x13d/0x1f0 [ 194.702670][ T5589] do_initcalls+0x4b/0x90 [ 194.707008][ T5589] kernel_init_freeable+0x3d5/0x560 [ 194.712209][ T5589] kernel_init+0x19/0x1b0 [ 194.716543][ T5589] ret_from_fork+0x1f/0x30 [ 194.720967][ T5589] [ 194.723288][ T5589] Freed by task 5536: [ 194.727266][ T5589] kasan_set_track+0x4b/0x70 [ 194.731861][ T5589] kasan_set_free_info+0x1f/0x40 [ 194.736807][ T5589] ____kasan_slab_free+0xd5/0x110 [ 194.741837][ T5589] slab_free_freelist_hook+0xec/0x170 [ 194.747214][ T5589] kfree+0xef/0x2a0 [ 194.751018][ T5589] dvb_device_open+0x2d2/0x360 [ 194.755782][ T5589] chrdev_open+0x585/0x5f0 [ 194.760204][ T5589] do_dentry_open+0x7f7/0xf90 [ 194.764888][ T5589] path_openat+0x2718/0x2fb0 [ 194.769490][ T5589] do_filp_open+0x1df/0x400 [ 194.774010][ T5589] do_sys_openat2+0x14b/0x500 [ 194.778694][ T5589] __x64_sys_openat+0x135/0x160 [ 194.783552][ T5589] do_syscall_64+0x4c/0xa0 [ 194.787974][ T5589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.793872][ T5589] [ 194.796198][ T5589] The buggy address belongs to the object at ffff88814b496200 [ 194.796198][ T5589] which belongs to the cache kmalloc-256 of size 256 [ 194.810253][ T5589] The buggy address is located 24 bytes inside of [ 194.810253][ T5589] 256-byte region [ffff88814b496200, ffff88814b496300) [ 194.823449][ T5589] The buggy address belongs to the page: [ 194.829096][ T5589] page:ffffea00052d2580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14b496 [ 194.839342][ T5589] head:ffffea00052d2580 order:1 compound_mapcount:0 [ 194.845928][ T5589] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 194.854022][ T5589] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888016c41b40 [ 194.862614][ T5589] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 194.871196][ T5589] page dumped because: kasan: bad access detected [ 194.877612][ T5589] page_owner tracks the page as allocated [ 194.883338][ T5589] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 19055942838, free_ts 0 [ 194.901326][ T5589] get_page_from_freelist+0x24f6/0x2670 [ 194.906892][ T5589] __alloc_pages+0x1ee/0x480 [ 194.911488][ T5589] alloc_page_interleave+0x24/0x1e0 [ 194.916690][ T5589] new_slab+0xc0/0x4b0 [ 194.920763][ T5589] ___slab_alloc+0x807/0xdd0 [ 194.925354][ T5589] kmem_cache_alloc_trace+0xf9/0x290 [ 194.930644][ T5589] bus_add_driver+0xdc/0x5d0 [ 194.935235][ T5589] driver_register+0x32d/0x430 [ 194.940004][ T5589] vim2m_init+0x39/0x70 [ 194.944168][ T5589] do_one_initcall+0x272/0x730 [ 194.948950][ T5589] do_initcall_level+0x13d/0x1f0 [ 194.953976][ T5589] do_initcalls+0x4b/0x90 [ 194.958304][ T5589] kernel_init_freeable+0x3d5/0x560 [ 194.963502][ T5589] kernel_init+0x19/0x1b0 [ 194.967832][ T5589] ret_from_fork+0x1f/0x30 [ 194.972255][ T5589] page_owner free stack trace missing [ 194.977615][ T5589] [ 194.979931][ T5589] Memory state around the buggy address: [ 194.985555][ T5589] ffff88814b496100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.993615][ T5589] ffff88814b496180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.001681][ T5589] >ffff88814b496200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.009746][ T5589] ^ [ 195.014594][ T5589] ffff88814b496280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.022656][ T5589] ffff88814b496300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.030721][ T5589] ================================================================== [ 195.038786][ T5589] Disabling lock debugging due to kernel taint [ 195.053104][ T5589] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.060343][ T5589] CPU: 1 PID: 5589 Comm: syz.0.398 Tainted: G B syzkaller #0 [ 195.069016][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 195.079071][ T5589] Call Trace: [ 195.082352][ T5589] [ 195.085279][ T5589] dump_stack_lvl+0x188/0x250 [ 195.089967][ T5589] ? show_regs_print_info+0x20/0x20 [ 195.095166][ T5589] ? load_image+0x410/0x410 [ 195.099674][ T5589] panic+0x2f8/0x850 [ 195.103574][ T5589] ? bpf_jit_dump+0xd0/0xd0 [ 195.108083][ T5589] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 195.113717][ T5589] ? check_panic_on_warn+0x6c/0xa0 [ 195.118839][ T5589] ? dvb_device_open+0xc5/0x360 [ 195.123688][ T5589] check_panic_on_warn+0x80/0xa0 [ 195.128669][ T5589] ? dvb_device_open+0xc5/0x360 [ 195.133530][ T5589] end_report+0x6d/0xf0 [ 195.137684][ T5589] kasan_report+0x102/0x130 [ 195.142627][ T5589] ? dvb_device_open+0xc5/0x360 [ 195.147483][ T5589] dvb_device_open+0xc5/0x360 [ 195.152164][ T5589] chrdev_open+0x585/0x5f0 [ 195.156581][ T5589] ? cd_forget+0x160/0x160 [ 195.161002][ T5589] ? fsnotify_perm+0x3a7/0x560 [ 195.165768][ T5589] ? cd_forget+0x160/0x160 [ 195.170182][ T5589] do_dentry_open+0x7f7/0xf90 [ 195.174860][ T5589] ? vfs_open+0x2b/0x80 [ 195.179016][ T5589] path_openat+0x2718/0x2fb0 [ 195.183613][ T5589] ? do_filp_open+0x400/0x400 [ 195.188288][ T5589] ? lockdep_hardirqs_off+0x70/0x100 [ 195.193579][ T5589] do_filp_open+0x1df/0x400 [ 195.198081][ T5589] ? vfs_tmpfile+0x300/0x300 [ 195.202672][ T5589] ? _raw_spin_unlock+0x24/0x40 [ 195.207527][ T5589] ? alloc_fd+0x59e/0x650 [ 195.211853][ T5589] do_sys_openat2+0x14b/0x500 [ 195.216526][ T5589] ? __lock_acquire+0x7b50/0x7b50 [ 195.221571][ T5589] ? do_sys_open+0xe0/0xe0 [ 195.225978][ T5589] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 195.231956][ T5589] ? lock_chain_count+0x20/0x20 [ 195.236814][ T5589] __x64_sys_openat+0x135/0x160 [ 195.241665][ T5589] do_syscall_64+0x4c/0xa0 [ 195.246083][ T5589] ? clear_bhb_loop+0x30/0x80 [ 195.250757][ T5589] ? clear_bhb_loop+0x30/0x80 [ 195.255434][ T5589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.261335][ T5589] RIP: 0033:0x7efec0dfa6ce [ 195.265748][ T5589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.285350][ T5589] RSP: 002b:00007efebf070b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.293763][ T5589] RAX: ffffffffffffffda RBX: 00007efebf0716c0 RCX: 00007efec0dfa6ce [ 195.301732][ T5589] RDX: 0000000000040002 RSI: 00007efebf070c00 RDI: ffffffffffffff9c [ 195.309704][ T5589] RBP: 00007efebf070c00 R08: 0000000000000000 R09: 0000000000000000 [ 195.317678][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 195.325653][ T5589] R13: 00007efec10c2128 R14: 00007efec10c2090 R15: 00007ffe5948e728 [ 195.333637][ T5589] [ 195.336876][ T5589] Kernel Offset: disabled [ 195.341199][ T5589] Rebooting in 86400 seconds..