last executing test programs: 17.785042259s ago: executing program 0 (id=396): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4, @rand_addr=0x64010101}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1b7f000001bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) 17.748775179s ago: executing program 3 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.531962653s ago: executing program 3 (id=401): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) 16.504498763s ago: executing program 0 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 16.304486206s ago: executing program 1 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x717, @empty, 0x2}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, 0xffffffffffffffff, 0x4}}, 0x48) 15.410258266s ago: executing program 0 (id=404): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1a00000009", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000904"], 0x50) io_uring_setup(0x4685, 0x0) timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0xe0be}, 0x1c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x7, 0x0, 0x3}, 0x8) 14.022087501s ago: executing program 3 (id=407): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00'}) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, 0x0}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r6) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800b00010067656e657665000018000280140007002001000000000400000000000000000008000a005b5e8a60437c4aa3a0ee84df57f1d2f267a0ddbd4a1ea88047f9ab5dd295c374ac88b3dc99971c3f73adbba80cbead71579a48046230f70243afcb8b2c5aef3e53108dad00730cf9c8d38924d07442b02350ab9089e7436b5e9d17875de0ad7ce2232b3b818f3c4092f1a9ea81a58db7c20f459bcb8222964fb88d4ebda71d6ecd86d863e50798c179002616a44cc873fe4acb0e2c668ab6314d64", @ANYRES32, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 14.009731911s ago: executing program 0 (id=408): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, 0x0) 12.572996318s ago: executing program 0 (id=409): r0 = socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4, @rand_addr=0x64010101}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) 11.205363503s ago: executing program 4 (id=413): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x9}]}, 0x8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 9.930272097s ago: executing program 4 (id=415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) socket$inet6(0xa, 0x3, 0x2f) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224000100000000090400000103000100"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.78302889s ago: executing program 1 (id=416): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x400c4150, &(0x7f0000002380)={0x0, &(0x7f0000001380)}) 8.635108982s ago: executing program 1 (id=418): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) 8.538968593s ago: executing program 2 (id=419): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x4, 0x0}) 7.586633754s ago: executing program 2 (id=420): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000000c0)) socket(0x10, 0x803, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000080) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)) 6.438998897s ago: executing program 2 (id=421): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x8002, 0x71a6, 0x4, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0x5}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000080)=0x84, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r0, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.258831099s ago: executing program 3 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.15977463s ago: executing program 2 (id=423): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdfb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000340)) socket$inet6(0xa, 0x3, 0xff) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000040)) 6.13125552s ago: executing program 4 (id=424): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4, @rand_addr=0x64010101}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1b7f000001bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) 5.343437189s ago: executing program 3 (id=425): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc", 0xb8}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 3.628217539s ago: executing program 2 (id=426): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x9}]}, 0x8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 3.605218129s ago: executing program 3 (id=427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[], 0x120}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) socket(0xa, 0x1, 0x0) 3.53089176s ago: executing program 4 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 3.406921291s ago: executing program 1 (id=429): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x400c4150, &(0x7f0000002380)={0x0, &(0x7f0000001380)}) 2.499738212s ago: executing program 4 (id=430): r0 = syz_open_dev$hidraw(0x0, 0x82, 0x2) write$hidraw(r0, &(0x7f0000000f00), 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x10040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1000}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000a80)={0x0, 0x80000}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x14) 1.136083017s ago: executing program 1 (id=431): syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x130, 0x30, 0x1, 0x0, 0x0, {}, [{0x11c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xa8, 0x6, "842261017f7d367e534946c670a30197ce8727d11c1324967c8caf884f7368d20af64f0000000072e1af19f23c8e7ee286afdac57df3054cb2275f125e58c69acc42e1046a0784b9d5798df5b74f4ca15fefdf05997479e675a7802215e15ff00fad351e92b3ac951d9540ffec23138ae185ad1cd52049a0f1323bd62edc423b07a0256bd537b67f4fbfc3b6398efde6f0e5527d690d16d4c66e3b0ee4b4425edbd85190"}, {0xc}, {0xc}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, 0x0, 0x14) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8032) 1.030856189s ago: executing program 4 (id=432): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001014000028bd7000fbdbdf255e50b804ba8aa304e6e97f"], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYBLOB]) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(r6, &(0x7f0000000040)=[{0x0}], 0x1) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 841.585261ms ago: executing program 0 (id=433): r0 = syz_open_dev$hidraw(0x0, 0x82, 0x2) write$hidraw(r0, &(0x7f0000000f00), 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x10040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1000}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000a80)={0x0, 0x80000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x14) 367.383766ms ago: executing program 1 (id=434): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 0s ago: executing program 2 (id=435): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x4, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 63.410098][ T4178] cgroup: Unknown subsys name 'net' [ 63.539090][ T4178] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.018032][ T4178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.498193][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 66.516754][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.558647][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.636425][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.650309][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 66.719108][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.727819][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.736879][ T4203] device bridge_slave_0 entered promiscuous mode [ 66.756990][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.764368][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.772950][ T4203] device bridge_slave_1 entered promiscuous mode [ 66.787699][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.794902][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.803035][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.832619][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.839737][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.848814][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.870042][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.877275][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.885830][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.901589][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.908813][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.917813][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.933717][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.957370][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.979091][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.989908][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.040751][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.050029][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.058003][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.066284][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.074526][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.081617][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.089625][ T4198] device bridge_slave_0 entered promiscuous mode [ 67.111912][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.121577][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.129184][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.137340][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.144758][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.151841][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.159844][ T4198] device bridge_slave_1 entered promiscuous mode [ 67.169372][ T4190] team0: Port device team_slave_0 added [ 67.178591][ T4203] team0: Port device team_slave_0 added [ 67.219037][ T4190] team0: Port device team_slave_1 added [ 67.227318][ T4203] team0: Port device team_slave_1 added [ 67.236224][ T4192] team0: Port device team_slave_0 added [ 67.245544][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.274522][ T4192] team0: Port device team_slave_1 added [ 67.281676][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.292955][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.336721][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.353784][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.360755][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.387133][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.399578][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.407020][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.434287][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.452944][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.459949][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.486496][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.505568][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.512877][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.539176][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.559043][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.566270][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.592559][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.606474][ T4191] team0: Port device team_slave_0 added [ 67.613269][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.620250][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.647303][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.664706][ T4198] team0: Port device team_slave_0 added [ 67.681446][ T4198] team0: Port device team_slave_1 added [ 67.693115][ T4191] team0: Port device team_slave_1 added [ 67.741513][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.749194][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.758122][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.765617][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.791855][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.817078][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.824368][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.850708][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.869929][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.877504][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.904517][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.927692][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.934784][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.961156][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.994444][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.001403][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.009054][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.016969][ T4192] Cannot create hsr debugfs directory [ 68.038712][ T4203] device hsr_slave_0 entered promiscuous mode [ 68.045952][ T4203] device hsr_slave_1 entered promiscuous mode [ 68.053316][ T4203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.060929][ T4203] Cannot create hsr debugfs directory [ 68.110342][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.117692][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.125324][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.133344][ T4191] Cannot create hsr debugfs directory [ 68.153166][ T4198] device hsr_slave_0 entered promiscuous mode [ 68.159947][ T4198] device hsr_slave_1 entered promiscuous mode [ 68.166827][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.174566][ T4198] Cannot create hsr debugfs directory [ 68.193385][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 68.193385][ T3521] Bluetooth: hci4: command 0x0409 tx timeout [ 68.206741][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 68.213083][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 68.219314][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 68.521565][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.542310][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.554017][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.569732][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.607672][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.621528][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.631130][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.647870][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.696790][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.710433][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.733386][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.755179][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.791025][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.848271][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.858219][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.873853][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.889215][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.898483][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.926487][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.936490][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.946419][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.953736][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.967648][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.979809][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.007413][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.032372][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.041448][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.054292][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.061401][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.070141][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.095274][ T4203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.107820][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.130992][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.138888][ T4203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.157416][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.166626][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.177000][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.187551][ T4203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.207597][ T4203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.221417][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.229745][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.238444][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.247994][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.257185][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.269333][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.293699][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.302305][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.311517][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.320653][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.341111][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.349769][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.369805][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.377785][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.386268][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.396024][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.406221][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.413354][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.421920][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.431582][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.440248][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.447371][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.494198][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.503782][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.514244][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.528751][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.535921][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.544807][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.554291][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.563272][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.570367][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.578647][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.589386][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.600517][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.639708][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.650498][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.667249][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.678438][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.687544][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.719870][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.728574][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.741839][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.751889][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.762692][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.775040][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.784279][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.793746][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.802286][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.818624][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.830585][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.839770][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.852037][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.861368][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.885413][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.898444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.906150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.920096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.928380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.941573][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.958816][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.972045][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.979999][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.988707][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.999135][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.007500][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.019491][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.030243][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.070122][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.080238][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.097724][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.104934][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.121177][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.130607][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.145558][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.152711][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.165616][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.178625][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.225291][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.235510][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.264079][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.273150][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 70.275721][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.286290][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.292670][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 70.302741][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 70.310566][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.314269][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 70.329688][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 70.344044][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.360023][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.375118][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.387682][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.399324][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.412033][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.421485][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.430450][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.437606][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.447046][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.458400][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.466861][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.478756][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.487808][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.517835][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.530136][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.541852][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.553502][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.561916][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.588848][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.604496][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.620731][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.631130][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.648871][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.661943][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.674914][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.684366][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.691926][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.700441][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.708229][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.716603][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.734555][ T4190] device veth0_vlan entered promiscuous mode [ 70.744979][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.756382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.765700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.777708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.788479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.798391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.807315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.827655][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.873136][ T4190] device veth1_vlan entered promiscuous mode [ 70.903432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.911779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.930046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.949780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.964991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.999291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.008585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.018727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.052733][ T4190] device veth0_macvtap entered promiscuous mode [ 71.061864][ T4192] device veth0_vlan entered promiscuous mode [ 71.070662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.081442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.095109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.104679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.115935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.128712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.144890][ T4190] device veth1_macvtap entered promiscuous mode [ 71.163908][ T4191] device veth0_vlan entered promiscuous mode [ 71.179066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.187480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.196507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.205222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.213957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.221443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.234358][ T4192] device veth1_vlan entered promiscuous mode [ 71.250292][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.265094][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.277209][ T4191] device veth1_vlan entered promiscuous mode [ 71.296067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.310998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.320983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.336165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.355918][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.371732][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.381739][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.390796][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.401134][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.403541][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.408339][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.427682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.437062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.446489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.501928][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.509982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.526039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.539554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.552014][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.563490][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.587511][ T4192] device veth0_macvtap entered promiscuous mode [ 71.626899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.649689][ T4192] device veth1_macvtap entered promiscuous mode [ 71.679496][ T4191] device veth0_macvtap entered promiscuous mode [ 71.696549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.708442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.720447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.731382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.748105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.770988][ T4191] device veth1_macvtap entered promiscuous mode [ 71.797610][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.815883][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.828262][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.843031][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.854306][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.864685][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.876690][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.889751][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.901478][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.910328][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.920189][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.929939][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.939379][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.950267][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.960410][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.970618][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.983246][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.995982][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.007268][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.020506][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.021022][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.044903][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.055102][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.065865][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.077182][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.087404][ T4203] device veth0_vlan entered promiscuous mode [ 72.097646][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.106801][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.116286][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.124343][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.133630][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.142948][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.151651][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.164225][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.173498][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.189394][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.199939][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.209343][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.218543][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.234656][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.244505][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.254337][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.263396][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.302356][ T4203] device veth1_vlan entered promiscuous mode [ 72.344536][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.354131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.362264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.370601][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 72.377021][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 72.383494][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 72.389601][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 72.391743][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.399553][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 72.413919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.446798][ T4198] device veth0_vlan entered promiscuous mode [ 72.459993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.474206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.482072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.491197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.512339][ T4198] device veth1_vlan entered promiscuous mode [ 72.576752][ T4203] device veth0_macvtap entered promiscuous mode [ 72.617336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.627920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.636939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.646973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.657938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.673820][ T4203] device veth1_macvtap entered promiscuous mode [ 72.693868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.704311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.717167][ T4198] device veth0_macvtap entered promiscuous mode [ 72.733579][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.747144][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.785728][ T4198] device veth1_macvtap entered promiscuous mode [ 72.801883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.878462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.916014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.963905][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.978760][ T4276] Zero length message leads to an empty skb [ 72.989930][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.047872][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.086108][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.122077][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.160139][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.206616][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.318313][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.326698][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.358597][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.376538][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.493141][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.564387][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.589708][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.624572][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.655487][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.699657][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.738354][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.777249][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.877783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.906225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.966367][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.021742][ T4203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.047619][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.091156][ T4203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.125975][ T4203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.158620][ T4203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.235253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.263205][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.322568][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.385630][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.426655][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.462020][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.477105][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 74.483349][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.510223][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.549783][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.618177][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.684181][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.697988][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.724173][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.748246][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.863626][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.935128][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.033772][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.128695][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.271221][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.311882][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 75.368376][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.431976][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.504145][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.585919][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.647225][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.692542][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 75.698946][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 75.705227][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 75.713867][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.754788][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.817607][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.855895][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.926344][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.957622][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.793485][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.812741][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.863542][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.908806][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.956912][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.057473][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.402276][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.733751][ T4306] comedi comedi2: comedi_config --init_data is deprecated [ 79.893468][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.913335][ T1199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.083888][ T4314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.091340][ T4314] IPv6: NLM_F_CREATE should be set when creating new route [ 80.098670][ T4314] IPv6: NLM_F_CREATE should be set when creating new route [ 80.105944][ T4314] IPv6: NLM_F_CREATE should be set when creating new route [ 80.232251][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.367777][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.737212][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.802473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.822460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.832452][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.842453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.852457][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.862472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.872457][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.882462][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.892457][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.902453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.269520][ T1326] cfg80211: failed to load regulatory.db [ 84.083946][ T4348] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.117471][ T263] block nbd4: Attempted send on invalid socket [ 84.125729][ T263] blk_update_request: I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 84.138428][ T263] gfs2: error 10 reading superblock [ 85.349939][ T4366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.357296][ T4366] IPv6: NLM_F_CREATE should be set when creating new route [ 85.364704][ T4366] IPv6: NLM_F_CREATE should be set when creating new route [ 85.372004][ T4366] IPv6: NLM_F_CREATE should be set when creating new route [ 87.132614][ T4337] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.592792][ T4337] usb 3-1: Using ep0 maxpacket: 8 [ 89.327815][ T4390] syz.1.34 (4390) used greatest stack depth: 20784 bytes left [ 89.803045][ T4337] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 89.892741][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 90.043594][ T4337] usb 3-1: Product: syz [ 90.117352][ T4337] usb 3-1: Manufacturer: syz [ 90.203453][ T4337] usb 3-1: SerialNumber: syz [ 90.525455][ T4337] usb 3-1: config 0 descriptor?? [ 90.650648][ T4337] usb 3-1: can't set config #0, error -71 [ 90.812813][ T4337] usb 3-1: USB disconnect, device number 2 [ 91.276526][ T4408] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.528726][ T4411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.536101][ T4411] IPv6: NLM_F_CREATE should be set when creating new route [ 92.543384][ T4411] IPv6: NLM_F_CREATE should be set when creating new route [ 92.550622][ T4411] IPv6: NLM_F_CREATE should be set when creating new route [ 93.487692][ T4410] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 95.648857][ T4453] netlink: 80 bytes leftover after parsing attributes in process `syz.4.47'. [ 97.350248][ T4464] device dummy0 entered promiscuous mode [ 97.387300][ T4464] device netdevsim0 entered promiscuous mode [ 97.450548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 98.718315][ T4470] sched: RT throttling activated [ 100.578980][ T4501] netlink: 80 bytes leftover after parsing attributes in process `syz.4.60'. [ 102.423525][ T4518] team0: Device ip6tnl1 is of different type [ 105.740275][ T4538] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure [ 111.062659][ T4310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.842896][ T4310] usb 4-1: unable to read config index 0 descriptor/all [ 111.912552][ T4310] usb 4-1: can't read configurations, error -71 [ 116.625518][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 116.701746][ T4605] syz.0.91 (4605) used greatest stack depth: 18512 bytes left [ 119.118311][ T4627] ODEBUG: Out of memory. ODEBUG disabled [ 121.999728][ T4659] autofs4:pid:4659:autofs_fill_super: called with bogus options [ 125.942509][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.212664][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 126.582801][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.655550][ T4232] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 126.860682][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.599140][ T4232] usb 1-1: config 0 descriptor?? [ 127.692462][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.800396][ T4699] fuse: Bad value for 'user_id' [ 127.863579][ T4699] tipc: Started in network mode [ 127.868743][ T4699] tipc: Node identity 1696aae5825e, cluster identity 4711 [ 127.895580][ T4699] tipc: Enabled bearer , priority 0 [ 127.908797][ T4699] device syzkaller0 entered promiscuous mode [ 128.050606][ T4698] tipc: Resetting bearer [ 128.307527][ T4232] sunplus 0003:04FC:05D8.0001: unknown global tag 0xe [ 128.415621][ T4232] sunplus 0003:04FC:05D8.0001: item 0 4 1 14 parsing failed [ 128.511723][ T4232] sunplus: probe of 0003:04FC:05D8.0001 failed with error -22 [ 128.572772][ T4232] usb 1-1: USB disconnect, device number 2 [ 128.680174][ T4698] tipc: Disabling bearer [ 130.102619][ T13] usb 2-1: unable to read config index 0 descriptor/all [ 130.109709][ T13] usb 2-1: can't read configurations, error -71 [ 130.493286][ T4740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.129'. [ 132.865451][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.871876][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.869162][ T4816] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 135.881378][ T4816] hfsplus: unable to find HFS+ superblock [ 140.364004][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 140.460802][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 140.525422][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 140.652007][ T4860] syz.4.166 uses obsolete (PF_INET,SOCK_PACKET) [ 140.675291][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 140.739621][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 140.798779][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 140.875799][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 140.992569][ T4337] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 143.162840][ T4337] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.688168][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.735126][ T4337] usb 3-1: Product: syz [ 143.739365][ T4337] usb 3-1: Manufacturer: syz [ 143.981193][ T4337] usb 3-1: SerialNumber: syz [ 144.036904][ T4337] usb 3-1: config 0 descriptor?? [ 144.180520][ T4337] usb 3-1: can't set config #0, error -71 [ 145.735674][ T4337] usb 3-1: USB disconnect, device number 3 [ 152.002484][ T4310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.838560][ T4310] usb 2-1: Using ep0 maxpacket: 16 [ 153.121021][ T4954] netlink: 80 bytes leftover after parsing attributes in process `syz.0.194'. [ 153.881807][ T4310] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 153.891572][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.911730][ T4310] usb 2-1: Product: syz [ 153.916046][ T4310] usb 2-1: Manufacturer: syz [ 153.920669][ T4310] usb 2-1: SerialNumber: syz [ 153.937739][ T4310] usb 2-1: config 0 descriptor?? [ 154.175015][ T4310] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 155.792855][ T4310] ssu100: probe of 2-1:0.0 failed with error -71 [ 156.144048][ T4310] usb 2-1: USB disconnect, device number 4 [ 160.152492][ T4337] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.792569][ T4337] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.683747][ T4337] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.746352][ T4337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.644892][ T4337] usb 2-1: Product: syz [ 162.653489][ T4337] usb 2-1: Manufacturer: syz [ 162.661359][ T4337] usb 2-1: SerialNumber: syz [ 162.925963][ T4337] usb 2-1: can't set config #1, error -71 [ 162.956842][ T4337] usb 2-1: USB disconnect, device number 5 [ 165.419431][ T5043] netlink: 80 bytes leftover after parsing attributes in process `syz.0.221'. [ 175.528039][ T5138] netlink: 80 bytes leftover after parsing attributes in process `syz.1.250'. [ 179.626126][ T5178] netlink: 80 bytes leftover after parsing attributes in process `syz.3.263'. [ 184.227284][ T5222] netlink: 80 bytes leftover after parsing attributes in process `syz.2.275'. [ 190.816110][ T5269] netlink: 80 bytes leftover after parsing attributes in process `syz.1.290'. [ 191.313284][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 191.455582][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 191.468770][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 191.562805][ T4235] Bluetooth: hci4: command 0x0406 tx timeout [ 191.570386][ T4235] Bluetooth: hci2: command 0x0406 tx timeout [ 194.457364][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.632858][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.141952][ T5312] netlink: 80 bytes leftover after parsing attributes in process `syz.1.305'. [ 197.525293][ T5339] netlink: 64 bytes leftover after parsing attributes in process `syz.4.314'. [ 197.584472][ T5341] device syzkaller1 entered promiscuous mode [ 197.674009][ T5345] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 199.072128][ T5358] netlink: 80 bytes leftover after parsing attributes in process `syz.1.316'. [ 201.922716][ T5371] cifs: Unknown parameter '€' [ 204.743790][ T5395] netlink: 80 bytes leftover after parsing attributes in process `syz.1.328'. [ 207.209135][ T5418] overlayfs: failed to resolve './file0': -2 [ 209.979332][ T5442] netlink: 80 bytes leftover after parsing attributes in process `syz.0.339'. [ 211.707539][ T5431] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 215.970952][ T5472] overlayfs: failed to resolve './file0': -2 [ 218.965701][ T5506] netlink: 80 bytes leftover after parsing attributes in process `syz.1.356'. [ 221.518818][ T5531] overlayfs: failed to resolve './file0': -2 [ 223.349664][ T5547] netlink: 80 bytes leftover after parsing attributes in process `syz.0.371'. [ 230.126531][ T5601] netlink: 80 bytes leftover after parsing attributes in process `syz.1.384'. [ 236.282604][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 242.292464][ T4235] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 243.262559][ T4235] usb 5-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 243.335172][ T5729] tipc: Can't bind to reserved service type 1 [ 244.111221][ T5722] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 244.119158][ T4235] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.132261][ T4235] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 244.142479][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.170767][ T4235] usb 5-1: config 0 descriptor?? [ 244.252587][ T4235] usb 5-1: can't set config #0, error -71 [ 244.277761][ T4235] usb 5-1: USB disconnect, device number 2 [ 251.257543][ T5782] ================================================================== [ 251.265970][ T5782] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 251.273315][ T5782] Read of size 8 at addr ffff88802a336e18 by task syz.2.435/5782 [ 251.281066][ T5782] [ 251.283427][ T5782] CPU: 0 PID: 5782 Comm: syz.2.435 Not tainted syzkaller #0 [ 251.290743][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.300837][ T5782] Call Trace: [ 251.304145][ T5782] [ 251.307108][ T5782] dump_stack_lvl+0x188/0x250 [ 251.311831][ T5782] ? show_regs_print_info+0x20/0x20 [ 251.317069][ T5782] ? _printk+0xda/0x130 [ 251.321724][ T5782] ? dvb_device_open+0xc6/0x370 [ 251.326625][ T5782] ? load_image+0x400/0x400 [ 251.331159][ T5782] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 251.336662][ T5782] print_address_description+0x60/0x2d0 [ 251.342252][ T5782] ? dvb_device_open+0xc6/0x370 [ 251.347137][ T5782] kasan_report+0xdf/0x130 [ 251.351604][ T5782] ? dvb_device_open+0xc6/0x370 [ 251.356505][ T5782] dvb_device_open+0xc6/0x370 [ 251.361233][ T5782] ? do_raw_spin_unlock+0x11d/0x230 [ 251.366497][ T5782] chrdev_open+0x5c5/0x6a0 [ 251.370979][ T5782] ? cd_forget+0x160/0x160 [ 251.375456][ T5782] ? fsnotify_perm+0x3a7/0x560 [ 251.380265][ T5782] ? cd_forget+0x160/0x160 [ 251.384724][ T5782] do_dentry_open+0x7ff/0xf80 [ 251.389453][ T5782] path_openat+0x26f5/0x2fa0 [ 251.394121][ T5782] ? verify_lock_unused+0x140/0x140 [ 251.399369][ T5782] ? slab_post_alloc_hook+0x4c/0x380 [ 251.404841][ T5782] ? do_filp_open+0x410/0x410 [ 251.409587][ T5782] do_filp_open+0x1e2/0x410 [ 251.414148][ T5782] ? vfs_tmpfile+0x300/0x300 [ 251.418800][ T5782] ? _raw_spin_unlock+0x24/0x40 [ 251.423685][ T5782] ? alloc_fd+0x598/0x630 [ 251.428058][ T5782] do_sys_openat2+0x150/0x4b0 [ 251.432779][ T5782] ? __lock_acquire+0x7d10/0x7d10 [ 251.437846][ T5782] ? do_sys_open+0xe0/0xe0 [ 251.442313][ T5782] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 251.448349][ T5782] ? lock_chain_count+0x20/0x20 [ 251.453678][ T5782] ? vtime_user_exit+0x2c8/0x3e0 [ 251.458676][ T5782] __x64_sys_openat+0x135/0x160 [ 251.463574][ T5782] do_syscall_64+0x4c/0xa0 [ 251.468032][ T5782] ? clear_bhb_loop+0x30/0x80 [ 251.472753][ T5782] ? clear_bhb_loop+0x30/0x80 [ 251.477464][ T5782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.483402][ T5782] RIP: 0033:0x7f9fe5eea60e [ 251.487848][ T5782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.507593][ T5782] RSP: 002b:00007f9fe4182b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.516156][ T5782] RAX: ffffffffffffffda RBX: 00007f9fe41836c0 RCX: 00007f9fe5eea60e [ 251.524166][ T5782] RDX: 0000000000020000 RSI: 00007f9fe4182c00 RDI: ffffffffffffff9c [ 251.532203][ T5782] RBP: 00007f9fe4182c00 R08: 0000000000000000 R09: 0000000000000000 [ 251.540220][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 251.548704][ T5782] R13: 00007f9fe61a3038 R14: 00007f9fe61a2fa0 R15: 00007ffc812cfc78 [ 251.556750][ T5782] [ 251.559891][ T5782] [ 251.562243][ T5782] Allocated by task 1: [ 251.566352][ T5782] __kasan_kmalloc+0xb5/0xf0 [ 251.570988][ T5782] dvb_register_device+0x311/0x2170 [ 251.576220][ T5782] dvb_register_frontend+0x645/0x920 [ 251.581548][ T5782] vidtv_bridge_probe+0x9a1/0xf70 [ 251.586605][ T5782] platform_probe+0x137/0x1c0 [ 251.591326][ T5782] really_probe+0x284/0xc80 [ 251.596222][ T5782] __driver_probe_device+0x18c/0x330 [ 251.601554][ T5782] driver_probe_device+0x4f/0x420 [ 251.606730][ T5782] __driver_attach+0x46b/0x670 [ 251.611528][ T5782] bus_for_each_dev+0x182/0x1f0 [ 251.616413][ T5782] bus_add_driver+0x30a/0x5a0 [ 251.621128][ T5782] driver_register+0x32d/0x430 [ 251.625930][ T5782] vidtv_bridge_init+0x39/0x70 [ 251.630730][ T5782] do_one_initcall+0x272/0x730 [ 251.635530][ T5782] do_initcall_level+0x137/0x1f0 [ 251.640512][ T5782] do_initcalls+0x4b/0x90 [ 251.644884][ T5782] kernel_init_freeable+0x3e9/0x570 [ 251.650130][ T5782] kernel_init+0x19/0x1b0 [ 251.654505][ T5782] ret_from_fork+0x1f/0x30 [ 251.658959][ T5782] [ 251.661397][ T5782] Freed by task 5722: [ 251.665399][ T5782] kasan_set_track+0x4b/0x70 [ 251.670037][ T5782] kasan_set_free_info+0x1f/0x40 [ 251.675029][ T5782] ____kasan_slab_free+0xd5/0x110 [ 251.680122][ T5782] slab_free_freelist_hook+0xea/0x170 [ 251.685531][ T5782] kfree+0xef/0x2a0 [ 251.689378][ T5782] dvb_device_open+0x2e7/0x370 [ 251.694369][ T5782] chrdev_open+0x5c5/0x6a0 [ 251.698821][ T5782] do_dentry_open+0x7ff/0xf80 [ 251.703549][ T5782] path_openat+0x26f5/0x2fa0 [ 251.708177][ T5782] do_filp_open+0x1e2/0x410 [ 251.712720][ T5782] do_sys_openat2+0x150/0x4b0 [ 251.717462][ T5782] __x64_sys_openat+0x135/0x160 [ 251.722343][ T5782] do_syscall_64+0x4c/0xa0 [ 251.726793][ T5782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.732841][ T5782] [ 251.735208][ T5782] The buggy address belongs to the object at ffff88802a336e00 [ 251.735208][ T5782] which belongs to the cache kmalloc-256 of size 256 [ 251.749295][ T5782] The buggy address is located 24 bytes inside of [ 251.749295][ T5782] 256-byte region [ffff88802a336e00, ffff88802a336f00) [ 251.762707][ T5782] The buggy address belongs to the page: [ 251.768391][ T5782] page:ffffea0000a8cd80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a336 [ 251.778594][ T5782] head:ffffea0000a8cd80 order:1 compound_mapcount:0 [ 251.785232][ T5782] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 251.793278][ T5782] raw: 00fff00000010200 ffffea0005259f00 0000000400000004 ffff888016c41b40 [ 251.801903][ T5782] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 251.810520][ T5782] page dumped because: kasan: bad access detected [ 251.816964][ T5782] page_owner tracks the page as allocated [ 251.822703][ T5782] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2837, ts 18545147143, free_ts 0 [ 251.840977][ T5782] get_page_from_freelist+0x1bbd/0x1ca0 [ 251.846587][ T5782] __alloc_pages+0x1ee/0x480 [ 251.851242][ T5782] new_slab+0xc0/0x4b0 [ 251.855352][ T5782] ___slab_alloc+0x80a/0xdd0 [ 251.859978][ T5782] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 251.865381][ T5782] kthread+0x10b/0x520 [ 251.869782][ T5782] ret_from_fork+0x1f/0x30 [ 251.874417][ T5782] page_owner free stack trace missing [ 251.879816][ T5782] [ 251.882146][ T5782] Memory state around the buggy address: [ 251.887787][ T5782] ffff88802a336d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 251.895848][ T5782] ffff88802a336d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 251.903999][ T5782] >ffff88802a336e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.912057][ T5782] ^ [ 251.916902][ T5782] ffff88802a336e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.925118][ T5782] ffff88802a336f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 251.933194][ T5782] ================================================================== [ 251.941383][ T5782] Disabling lock debugging due to kernel taint [ 252.130307][ T5782] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 252.137674][ T5782] CPU: 1 PID: 5782 Comm: syz.2.435 Tainted: G B syzkaller #0 [ 252.146383][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.156480][ T5782] Call Trace: [ 252.159793][ T5782] [ 252.162753][ T5782] dump_stack_lvl+0x188/0x250 [ 252.167473][ T5782] ? show_regs_print_info+0x20/0x20 [ 252.172716][ T5782] ? load_image+0x400/0x400 [ 252.177306][ T5782] panic+0x2e5/0x810 [ 252.181245][ T5782] ? bpf_jit_dump+0xd0/0xd0 [ 252.185787][ T5782] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 252.191481][ T5782] ? check_panic_on_warn+0x6c/0xa0 [ 252.196636][ T5782] ? dvb_device_open+0xc6/0x370 [ 252.201528][ T5782] check_panic_on_warn+0x80/0xa0 [ 252.206512][ T5782] ? dvb_device_open+0xc6/0x370 [ 252.211453][ T5782] end_report+0x6d/0xf0 [ 252.215665][ T5782] kasan_report+0x102/0x130 [ 252.220211][ T5782] ? dvb_device_open+0xc6/0x370 [ 252.225204][ T5782] dvb_device_open+0xc6/0x370 [ 252.229920][ T5782] ? do_raw_spin_unlock+0x11d/0x230 [ 252.235178][ T5782] chrdev_open+0x5c5/0x6a0 [ 252.239644][ T5782] ? cd_forget+0x160/0x160 [ 252.244189][ T5782] ? fsnotify_perm+0x3a7/0x560 [ 252.249022][ T5782] ? cd_forget+0x160/0x160 [ 252.253565][ T5782] do_dentry_open+0x7ff/0xf80 [ 252.258378][ T5782] path_openat+0x26f5/0x2fa0 [ 252.263018][ T5782] ? verify_lock_unused+0x140/0x140 [ 252.268261][ T5782] ? slab_post_alloc_hook+0x4c/0x380 [ 252.273584][ T5782] ? do_filp_open+0x410/0x410 [ 252.278309][ T5782] do_filp_open+0x1e2/0x410 [ 252.282849][ T5782] ? vfs_tmpfile+0x300/0x300 [ 252.287494][ T5782] ? _raw_spin_unlock+0x24/0x40 [ 252.292369][ T5782] ? alloc_fd+0x598/0x630 [ 252.296734][ T5782] do_sys_openat2+0x150/0x4b0 [ 252.301442][ T5782] ? __lock_acquire+0x7d10/0x7d10 [ 252.306494][ T5782] ? do_sys_open+0xe0/0xe0 [ 252.310932][ T5782] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 252.316937][ T5782] ? lock_chain_count+0x20/0x20 [ 252.321806][ T5782] ? vtime_user_exit+0x2c8/0x3e0 [ 252.326760][ T5782] __x64_sys_openat+0x135/0x160 [ 252.331627][ T5782] do_syscall_64+0x4c/0xa0 [ 252.336057][ T5782] ? clear_bhb_loop+0x30/0x80 [ 252.340750][ T5782] ? clear_bhb_loop+0x30/0x80 [ 252.345449][ T5782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.351361][ T5782] RIP: 0033:0x7f9fe5eea60e [ 252.355792][ T5782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.375421][ T5782] RSP: 002b:00007f9fe4182b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.383865][ T5782] RAX: ffffffffffffffda RBX: 00007f9fe41836c0 RCX: 00007f9fe5eea60e [ 252.391873][ T5782] RDX: 0000000000020000 RSI: 00007f9fe4182c00 RDI: ffffffffffffff9c [ 252.399879][ T5782] RBP: 00007f9fe4182c00 R08: 0000000000000000 R09: 0000000000000000 [ 252.407870][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 252.415853][ T5782] R13: 00007f9fe61a3038 R14: 00007f9fe61a2fa0 R15: 00007ffc812cfc78 [ 252.423849][ T5782] [ 252.427138][ T5782] Kernel Offset: disabled [ 252.431483][ T5782] Rebooting in 86400 seconds..