last executing test programs: 8.185351073s ago: executing program 1 (id=655): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0xb6}}, 0x10) close(r0) close(0xffffffffffffffff) 7.951987041s ago: executing program 3 (id=656): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x2) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mount$9p_fd(0x0, 0x0, 0x0, 0x102e000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.854557999s ago: executing program 1 (id=657): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020) 6.557760514s ago: executing program 1 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x6, 0x800) io_getevents(r3, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) 6.548574494s ago: executing program 3 (id=661): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/48, &(0x7f0000000500)="5765525c5b192f2cd7170943adc7ff1ccd9237881a0aef4fb8cae2a2e948635893ec14ba14fc20c3f06ab2c209aad8ff0b3e1d575480cb8157d8742521a64f8d9bf38db5f70d6b0d1a1ed9fb556a6a612e248e79d6cfcf5651e44fa58e04f9a4a9491766b76275ebb1558aa495e421360b7458c438ecb7ae1a3f39791441eb1c24c913262bdffc37ab822d957e35b4a1be54a88aa9aa7b5d5d74f1c687ea0223ecda2aabb9122d0c1529933e987e7d7d07d411c8aa43f2e91ddffdc2a5037680da8372ed3f32ba2aab5c1683d6b9c4aa757f3a83a4ed208a130194074dcd8079e260f715f71a7a9e1bf4c7a84cd7fbc1613bb3f3", &(0x7f0000000680)="972bd846362b299efc0d8bf9e57d27320000fedfd727f3d9dd64f7b91eee4a42b28ef7e8e6cf076bbb0c4169ebc6e94684b4f09e9acb08b34fd0e0f975f2c66965ed95dc5654ce53386ba23912f8", 0x9f46, r2}, 0x38) unshare(0x400) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$inet6(0xa, 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 6.322391762s ago: executing program 4 (id=662): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) listen(0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = eventfd2(0x8, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) writev(r2, &(0x7f00000000c0), 0xc) sched_setaffinity(0x0, 0x16, &(0x7f00000002c0)=0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x4, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002008208582005109bc10000000109021200010000000009048f0000bf575a00"], 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000400), &(0x7f0000000580), &(0x7f0000000040), 0x0, 0x2000000000}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x1ff, 0x800, 0xfb, 0xf6}, 0x3c) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e00)="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", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6103020701011001df42c0af80aa8ac7cfe627ac3ff346f62885076f149144c1c03527cb09025323bb79315a3057e5b2ece8801723e65e6746b5cf9308fd601d030664c52a7054f3cde3504dca8f93687c3d3b3c6011dcb37ee424857b797fff07e0f9d6299941f1434282cff9f9b114ac845e4d1e8684ce35da83897b9c31c9dafdeffe4fb1f9dbddf14a873a408ee7f980e4c5f25dcc77d42be8b3a070b3d81e7acd93f04c"], 0xa) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x109400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000400)={'c6xdigio\x00', [0xb011, 0x5, 0xfffffff6, 0x4, 0x88d7, 0x8f, 0x1007, 0x4, 0x1002, 0xffffffff, 0x203, 0x7, 0x10000, 0x2, 0x2, 0xf, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0x2000a, 0x9, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) 6.239812639s ago: executing program 2 (id=663): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x7ffffffd) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x49, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000080)={{0xd4, 0x8}, 'port1\x00', 0x81, 0x60000, 0x400, 0x7, 0x1, 0x0, 0x5, 0x0, 0x4, 0x3}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.065125633s ago: executing program 1 (id=664): r0 = semget(0x0, 0x4, 0x284) semctl$SETVAL(r0, 0x4, 0x10, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}}, 0x0) 5.027849466s ago: executing program 1 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1}, 0x4}], 0x2, 0x2, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) 3.935344624s ago: executing program 0 (id=668): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40440) set_mempolicy_home_node(&(0x7f0000462000/0x1000)=nil, 0x1000, 0x200000000000004, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x40a700, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) kexec_load(0xff0e, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) ioctl$NBD_DO_IT(r0, 0xab03) 3.515325228s ago: executing program 3 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) 3.376871319s ago: executing program 3 (id=670): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020) 2.73064997s ago: executing program 4 (id=671): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x2) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mount$9p_fd(0x0, 0x0, 0x0, 0x102e000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.670529026s ago: executing program 0 (id=672): setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 2.499929049s ago: executing program 0 (id=673): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x12) 2.329727632s ago: executing program 2 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x6, 0x800) io_getevents(r3, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) 2.126961679s ago: executing program 2 (id=675): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) socket$inet6(0xa, 0x2, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x3086c0, 0x78e22799f4a46edc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(0x0, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0xfffffffffffffffe, 0x2, 0x7, 0xffffffff}) mq_timedreceive(r3, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) 1.501338459s ago: executing program 4 (id=676): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0) 1.468046522s ago: executing program 3 (id=677): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x2e43) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 1.387805198s ago: executing program 0 (id=678): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(0xffffffffffffffff, 0x8010aebb, 0x0) setpgid(0x0, 0x0) 1.387395938s ago: executing program 1 (id=679): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/48, &(0x7f0000000500)="5765525c5b192f2cd7170943adc7ff1ccd9237881a0aef4fb8cae2a2e948635893ec14ba14fc20c3f06ab2c209aad8ff0b3e1d575480cb8157d8742521a64f8d9bf38db5f70d6b0d1a1ed9fb556a6a612e248e79d6cfcf5651e44fa58e04f9a4a9491766b76275ebb1558aa495e421360b7458c438ecb7ae1a3f39791441eb1c24c913262bdffc37ab822d957e35b4a1be54a88aa9aa7b5d5d74f1c687ea0223ecda2aabb9122d0c1529933e987e7d7d07d411c8aa43f2e91ddffdc2a5037680da8372ed3f32ba2aab5c1683d6b9c4aa757f3a83a4ed208a130194074dcd8079e260f715f71a7a9e1bf4c7a84cd7fbc1613bb3f3", &(0x7f0000000680)="972bd846362b299efc0d8bf9e57d27320000fedfd727f3d9dd64f7b91eee4a42b28ef7e8e6cf076bbb0c4169ebc6e94684b4f09e9acb08b34fd0e0f975f2c66965ed95dc5654ce53386ba23912f8", 0x9f46, r2}, 0x38) unshare(0x400) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$inet6(0xa, 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 1.295570776s ago: executing program 4 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) 1.256113878s ago: executing program 2 (id=681): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 1.183467165s ago: executing program 3 (id=682): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) listen(0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = eventfd2(0x8, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) writev(r2, &(0x7f00000000c0), 0xc) sched_setaffinity(0x0, 0x16, &(0x7f00000002c0)=0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x4, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002008208582005109bc10000000109021200010000000009048f0000bf575a00"], 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000400), &(0x7f0000000580), &(0x7f0000000040), 0x0, 0x2000000000}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x1ff, 0x800, 0xfb, 0xf6}, 0x3c) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e00)="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", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6103020701011001df42c0af80aa8ac7cfe627ac3ff346f62885076f149144c1c03527cb09025323bb79315a3057e5b2ece8801723e65e6746b5cf9308fd601d030664c52a7054f3cde3504dca8f93687c3d3b3c6011dcb37ee424857b797fff07e0f9d6299941f1434282cff9f9b114ac845e4d1e8684ce35da83897b9c31c9dafdeffe4fb1f9dbddf14a873a408ee7f980e4c5f25dcc77d42be8b3a070b3d81e7acd93f04c"], 0xa) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x109400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000400)={'c6xdigio\x00', [0xb011, 0x5, 0xfffffff6, 0x4, 0x88d7, 0x8f, 0x1007, 0x4, 0x1002, 0xffffffff, 0x203, 0x7, 0x10000, 0x2, 0x2, 0xf, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0x2000a, 0x9, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) 1.183195545s ago: executing program 0 (id=683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238aa26e24"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) close(0x3) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1039}], 0x1, 0x0, 0x0, 0x4000}, 0x0) write(r3, 0x0, 0x0) write$tun(r0, &(0x7f0000000800)={@val={0x8, 0xf8}, @val={0x2, 0x1, 0xce, 0x68, 0x8000, 0x9}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x64, 0x0, 0x8, 0x1, 0x0, @empty, @local}, @echo={0x8, 0x0, 0x0, 0xe0}}}, 0x2a) 596.595532ms ago: executing program 2 (id=684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b1576", 0x5c}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/101, 0x65}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 487.01515ms ago: executing program 4 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x6, 0x800) io_getevents(r3, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) 230.041161ms ago: executing program 2 (id=686): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0xfffffffe, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) 229.468521ms ago: executing program 4 (id=687): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x2) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mount$9p_fd(0x0, 0x0, 0x0, 0x102e000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=688): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 56.287371][ T4254] cgroup: Unknown subsys name 'net' [ 56.398951][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.611328][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.793050][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.801075][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.809093][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.811844][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.826006][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.826284][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.833480][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.841300][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.848081][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.856070][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.862143][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.868808][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.875904][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.885027][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.889518][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.897401][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.903996][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.918570][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.926875][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.934391][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.937972][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.942316][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.948686][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.964858][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.988677][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.997420][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.003213][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.005844][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.018977][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.019213][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.365380][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 60.438995][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 60.481828][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 60.545486][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 60.617128][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 60.639344][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.647107][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.655835][ T4267] device bridge_slave_0 entered promiscuous mode [ 60.667788][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.675304][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.682976][ T4266] device bridge_slave_0 entered promiscuous mode [ 60.703350][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.710795][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.719214][ T4267] device bridge_slave_1 entered promiscuous mode [ 60.738874][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.746067][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.754007][ T4266] device bridge_slave_1 entered promiscuous mode [ 60.795676][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.802793][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.811238][ T4282] device bridge_slave_0 entered promiscuous mode [ 60.831749][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.847373][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.854632][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.862576][ T4270] device bridge_slave_0 entered promiscuous mode [ 60.870434][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.878292][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.886659][ T4282] device bridge_slave_1 entered promiscuous mode [ 60.898816][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.909125][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.921492][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.930797][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.938174][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.946078][ T4270] device bridge_slave_1 entered promiscuous mode [ 61.013828][ T4266] team0: Port device team_slave_0 added [ 61.028061][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.043298][ T4267] team0: Port device team_slave_0 added [ 61.051770][ T4266] team0: Port device team_slave_1 added [ 61.059143][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.069740][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.079191][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.086459][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.094581][ T4265] device bridge_slave_0 entered promiscuous mode [ 61.102997][ T4267] team0: Port device team_slave_1 added [ 61.117762][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.142296][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.149685][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.157887][ T4265] device bridge_slave_1 entered promiscuous mode [ 61.207182][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.214282][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.240367][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.254181][ T4270] team0: Port device team_slave_0 added [ 61.262568][ T4282] team0: Port device team_slave_0 added [ 61.276568][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.283563][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.310157][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.321792][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.328775][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.354931][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.367679][ T4270] team0: Port device team_slave_1 added [ 61.379562][ T4282] team0: Port device team_slave_1 added [ 61.386913][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.406551][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.413545][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.439777][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.480830][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.540139][ T4267] device hsr_slave_0 entered promiscuous mode [ 61.552117][ T4267] device hsr_slave_1 entered promiscuous mode [ 61.559563][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.566659][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.592623][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.604627][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.611590][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.638386][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.652007][ T4265] team0: Port device team_slave_0 added [ 61.660996][ T4266] device hsr_slave_0 entered promiscuous mode [ 61.667927][ T4266] device hsr_slave_1 entered promiscuous mode [ 61.675133][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.682876][ T4266] Cannot create hsr debugfs directory [ 61.699230][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.706268][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.732236][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.743581][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.750694][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.776661][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.789565][ T4265] team0: Port device team_slave_1 added [ 61.872542][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.879853][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.906037][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.934922][ T4270] device hsr_slave_0 entered promiscuous mode [ 61.941780][ T4270] device hsr_slave_1 entered promiscuous mode [ 61.948480][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.956313][ T4270] Cannot create hsr debugfs directory [ 61.964115][ T4282] device hsr_slave_0 entered promiscuous mode [ 61.970837][ T4282] device hsr_slave_1 entered promiscuous mode [ 61.977527][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.985250][ T4282] Cannot create hsr debugfs directory [ 61.991193][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.998473][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.025370][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.025463][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 62.036080][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 62.042330][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 62.103896][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 62.103936][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 62.170962][ T4265] device hsr_slave_0 entered promiscuous mode [ 62.177757][ T4265] device hsr_slave_1 entered promiscuous mode [ 62.184932][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.192503][ T4265] Cannot create hsr debugfs directory [ 62.361447][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.379919][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.395949][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.405266][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.495803][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.515308][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.533104][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.542530][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.568923][ T4282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.578905][ T4282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.592792][ T4282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.614137][ T4282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.679994][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.690074][ T4270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.699756][ T4270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.715152][ T4270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.735554][ T4270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.783100][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.795281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.805006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.833226][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.857452][ T4265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.879198][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.888710][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.897959][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.905235][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.915898][ T4265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.928749][ T4265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.942797][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.953504][ T4265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.979658][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.987016][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.996187][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.006369][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.015243][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.023601][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.030738][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.041448][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.077170][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.086980][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.097323][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.106258][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.113358][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.128714][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.137012][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.154633][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.163310][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.175167][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.182289][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.197836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.209307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.218290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.226880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.235186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.245214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.254210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.271641][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.294997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.304082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.312742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.322122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.331287][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.338454][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.347325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.356256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.366780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.375698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.384320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.392938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.417698][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.429177][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.450453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.459910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.469010][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.476165][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.486180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.495293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.504479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.513096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.522199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.531481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.546015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.559898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.588295][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.609207][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.618385][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.642344][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.652843][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.666720][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.689617][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.712042][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.726693][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.743972][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.752960][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.762515][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.771515][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.788824][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.801416][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.812311][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.829217][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.840649][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.855742][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.902758][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.921974][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.942689][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.951598][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.010144][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.019342][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.033001][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.042501][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.052761][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.059914][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.068551][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.082321][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.090878][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.097969][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.106345][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 64.111191][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.112413][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 64.126650][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 64.131063][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.147658][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.157801][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.166707][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.175502][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.182684][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.184104][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 64.193766][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 64.197442][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.210571][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.219209][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.226368][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.266640][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.280500][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.290765][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.306045][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.319440][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.329762][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.343778][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.353353][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.366586][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.375633][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.385643][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.395427][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.428451][ T4266] device veth0_vlan entered promiscuous mode [ 64.442044][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.450674][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.458917][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.467680][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.476787][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.485934][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.496697][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.505996][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.514650][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.522844][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.531632][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.539561][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.557165][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.577316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.587020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.598280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.610286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.621511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.632686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.647412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.657476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.673053][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.684835][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.695373][ T4266] device veth1_vlan entered promiscuous mode [ 64.708361][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.794347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.811152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.862240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.875611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.910279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.930881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.949139][ T4282] device veth0_vlan entered promiscuous mode [ 64.960459][ T4266] device veth0_macvtap entered promiscuous mode [ 64.973856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.981953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.998081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.007432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.015785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.032223][ T4282] device veth1_vlan entered promiscuous mode [ 65.051903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.060371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.068104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.078957][ T4266] device veth1_macvtap entered promiscuous mode [ 65.096029][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.109296][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.118572][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.136483][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.145552][ T4267] device veth0_vlan entered promiscuous mode [ 65.161183][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.171235][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.181607][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.189956][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.200066][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.218429][ T4267] device veth1_vlan entered promiscuous mode [ 65.231847][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.260499][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.269597][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.278171][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.286738][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.295840][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.306501][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.315639][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.335719][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.345848][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.354900][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.363601][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.386918][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.395199][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.406373][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.431807][ T4270] device veth0_vlan entered promiscuous mode [ 65.443545][ T4267] device veth0_macvtap entered promiscuous mode [ 65.469800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.482586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.492708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.505410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.516127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.525277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.535754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.543602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.553581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.567774][ T4270] device veth1_vlan entered promiscuous mode [ 65.585275][ T4267] device veth1_macvtap entered promiscuous mode [ 65.595485][ T4282] device veth0_macvtap entered promiscuous mode [ 65.621693][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.641574][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.659815][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.672179][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.683380][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.700956][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.729355][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.746358][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.755590][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.765110][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.774862][ T4282] device veth1_macvtap entered promiscuous mode [ 65.788696][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.798494][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.807437][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.816396][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872827][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.882535][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.916428][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.929998][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.940949][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.952571][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.965362][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.976196][ T4270] device veth0_macvtap entered promiscuous mode [ 66.003351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.019006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.028337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.039467][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.050216][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.060207][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.070916][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.082535][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.116043][ T4270] device veth1_macvtap entered promiscuous mode [ 66.123259][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.132544][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.141979][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.162067][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.171763][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.180830][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.189714][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 66.189750][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 66.195779][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 66.208682][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.248919][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.259561][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.268505][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 66.274978][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 66.278837][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.294981][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.305485][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.316186][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.326059][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.336754][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.347985][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.370720][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.380601][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.389475][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.412520][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.423736][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.433605][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.446108][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.455985][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.466496][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.477893][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.488643][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.497474][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.507357][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.516168][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.534204][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.539086][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.542144][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.550727][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.569606][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.582217][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.594928][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.605134][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.614679][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.641066][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.705170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.713532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.731294][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.747641][ T4265] device veth0_vlan entered promiscuous mode [ 66.756532][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.767353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.771934][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.794492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.802508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.812681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.821235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.838312][ T4265] device veth1_vlan entered promiscuous mode [ 66.965527][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.978541][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.993755][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.007700][ T4265] device veth0_macvtap entered promiscuous mode [ 67.045140][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.074278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.082733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.317025][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.406828][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.494598][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.142772][ T4390] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.404551][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.412804][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.422140][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.434071][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.463952][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 68.464194][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 68.476057][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 68.482102][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 68.488263][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 68.508112][ T4265] device veth1_macvtap entered promiscuous mode [ 68.538994][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.553308][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.603546][ T4388] Zero length message leads to an empty skb [ 68.653426][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.666205][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.682372][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.694404][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.704990][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.715836][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.726145][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.737484][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.750346][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.763849][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.774718][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.786750][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.841041][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.851314][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.862098][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.872589][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.883547][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.910692][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.929276][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.934075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.143665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 69.152133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 69.168363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 69.176705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 69.185119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 69.193406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 69.201850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 69.232365][ T26] audit: type=1107 audit(1755473021.626:2): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 69.825148][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.859244][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.919033][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.002687][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.097335][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.251312][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.312771][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.365025][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.307528][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.314224][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.698381][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.741678][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.792588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.866368][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.887791][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.923980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.214264][ T4280] block nbd4: Receive control failed (result -32) [ 74.226993][ T4442] block nbd4: shutting down sockets [ 76.436064][ T127] cfg80211: failed to load regulatory.db [ 79.473869][ T4502] block nbd1: shutting down sockets [ 79.613362][ T4504] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 82.329038][ T4534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 83.612066][ T4547] block nbd4: shutting down sockets [ 86.453983][ T4280] block nbd0: Receive control failed (result -32) [ 86.463585][ T4588] block nbd0: shutting down sockets [ 87.885548][ T4610] block nbd1: shutting down sockets [ 90.778126][ T4279] block nbd1: Receive control failed (result -32) [ 90.787660][ T4641] block nbd1: shutting down sockets [ 90.823859][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 91.169012][ T4656] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 91.629934][ T4665] comedi comedi3: board detection failed [ 92.024166][ T4672] atomic_op ffff88805a306198 conn xmit_atomic 0000000000000000 [ 93.053298][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 94.845375][ T4701] tmpfs: Unknown parameter 'grpquota' [ 95.201120][ T4706] capability: warning: `syz.0.85' uses deprecated v2 capabilities in a way that may be insecure [ 96.447969][ T4726] syz.2.90 sent an empty control message without MSG_MORE. [ 96.521664][ T4728] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 98.555761][ T4740] netlink: 88 bytes leftover after parsing attributes in process `syz.1.94'. [ 99.771278][ T4762] syz.4.99 uses obsolete (PF_INET,SOCK_PACKET) [ 100.204700][ T127] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 100.405597][ T127] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.545593][ T127] usb 2-1: config 0 has no interface number 0 [ 100.551841][ T127] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 100.561447][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.581452][ T127] usb 2-1: config 0 descriptor?? [ 100.595589][ T127] usb 2-1: selecting invalid altsetting 1 [ 100.602411][ T127] dvb_ttusb_budget: ttusb_init_controller: error [ 100.616464][ T127] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 101.294835][ T4778] Illegal XDP return value 4294967282 on prog (id 22) dev N/A, expect packet loss! [ 101.621651][ T127] DVB: Unable to find symbol cx22700_attach() [ 101.927017][ T127] DVB: Unable to find symbol tda10046_attach() [ 101.934462][ T127] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 102.002085][ T127] usb 2-1: USB disconnect, device number 2 [ 102.840317][ T4280] block nbd1: Receive control failed (result -32) [ 102.927535][ T4801] netlink: 96 bytes leftover after parsing attributes in process `syz.0.109'. [ 102.939796][ T4799] block nbd1: shutting down sockets [ 104.364851][ T4825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 104.374395][ T4825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 104.389296][ T4825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 104.398310][ T4825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 105.235932][ T4835] program syz.0.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.265297][ T4835] program syz.0.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.275217][ T4835] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 106.943771][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.133201][ T4280] block nbd3: Receive control failed (result -32) [ 107.143099][ T4861] block nbd3: shutting down sockets [ 107.333689][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 107.392142][ T14] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 107.456841][ T14] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.479579][ T14] usb 5-1: Product: syz [ 107.505567][ T14] usb 5-1: Manufacturer: syz [ 107.523894][ T14] usb 5-1: SerialNumber: syz [ 107.551326][ T14] usb 5-1: config 0 descriptor?? [ 107.745539][ T4871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 107.893810][ T4273] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.123979][ T4273] usb 4-1: Using ep0 maxpacket: 32 [ 108.131690][ T4273] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 108.161382][ T4273] usb 4-1: config 0 has no interface number 0 [ 108.182910][ T4273] usb 4-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 108.214071][ T4273] usb 4-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 108.245832][ T4273] usb 4-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 108.283372][ T4273] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.333296][ T4273] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.378418][ T4273] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.449733][ T4273] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 108.496091][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.518913][ T4273] usb 4-1: Product: syz [ 108.533306][ T4273] usb 4-1: Manufacturer: syz [ 108.543824][ T4273] usb 4-1: SerialNumber: syz [ 108.617033][ T4273] usb 4-1: config 0 descriptor?? [ 108.637498][ T4869] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.660900][ T4273] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 108.847676][ T4890] Bluetooth: MGMT ver 1.22 [ 108.881525][ T4384] usb 4-1: USB disconnect, device number 2 [ 109.013102][ T14] usb 5-1: USB disconnect, device number 2 [ 111.126743][ T4280] block nbd0: Receive control failed (result -32) [ 111.256742][ T4922] block nbd0: shutting down sockets [ 112.835436][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 114.522911][ T4967] overlayfs: missing 'lowerdir' [ 114.879886][ T4968] sch_fq: defrate 2 ignored. [ 117.038252][ T4982] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 118.335202][ T4999] fuse: Bad value for 'user_id' [ 119.909633][ T4280] block nbd4: Receive control failed (result -32) [ 119.933451][ T5006] block nbd4: shutting down sockets [ 121.462251][ T5039] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 121.768591][ T4280] block nbd2: Receive control failed (result -32) [ 121.779807][ T5033] block nbd2: shutting down sockets [ 122.849911][ T5050] fuse: Bad value for 'user_id' [ 125.073453][ T5062] block nbd2: shutting down sockets [ 128.367091][ T5087] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 128.403549][ T5096] fuse: Bad value for 'user_id' [ 131.218224][ T4280] block nbd4: Receive control failed (result -32) [ 131.225911][ T5109] block nbd4: shutting down sockets [ 132.794145][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800476][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986549][ T5129] block nbd4: shutting down sockets [ 134.492250][ T5156] fuse: Bad value for 'fd' [ 134.635967][ T5158] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 136.753908][ T4280] block nbd2: Receive control failed (result -32) [ 136.767057][ T4278] block nbd2: shutting down sockets [ 137.394365][ T5195] fuse: Bad value for 'fd' [ 138.257829][ T5203] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 140.253874][ T5219] block nbd1: shutting down sockets [ 141.460258][ T4280] block nbd4: Receive control failed (result -32) [ 141.468608][ T5228] block nbd4: shutting down sockets [ 141.504620][ T5247] fuse: Bad value for 'fd' [ 141.835440][ T5252] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 145.568214][ T5279] block nbd1: shutting down sockets [ 146.032527][ T5305] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 147.209387][ T5317] fuse: Bad value for 'fd' [ 148.815089][ T5310] block nbd3: shutting down sockets [ 150.186250][ T5355] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 150.809161][ T5351] block nbd4: shutting down sockets [ 152.181714][ T5375] fuse: Bad value for 'fd' [ 154.018374][ T5348] syz.3.252 (5348): drop_caches: 2 [ 155.139687][ T4280] block nbd4: Receive control failed (result -32) [ 155.174422][ T5397] block nbd4: shutting down sockets [ 156.792528][ T5426] fuse: Bad value for 'fd' [ 157.961802][ T5413] block nbd2: shutting down sockets [ 159.546706][ T5447] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 163.191272][ T5482] fuse: Invalid rootmode [ 163.384576][ T4280] block nbd4: Receive control failed (result -32) [ 163.468706][ T5471] block nbd4: shutting down sockets [ 165.908792][ T5496] block nbd1: shutting down sockets [ 167.991286][ T5534] fuse: Invalid rootmode [ 169.965033][ T4280] block nbd3: Receive control failed (result -32) [ 169.976446][ T5544] block nbd3: shutting down sockets [ 170.552955][ T5556] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 172.571924][ T5574] fuse: Invalid rootmode [ 174.049585][ T5580] block nbd0: shutting down sockets [ 175.102879][ T4280] block nbd1: Receive control failed (result -32) [ 175.117415][ T4278] block nbd1: shutting down sockets [ 175.173667][ T4383] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.485203][ T4383] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.503043][ T4383] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 175.543273][ T4383] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 175.593933][ T4383] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 175.605114][ T4383] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 175.751841][ T4383] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.022221][ T4383] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.379621][ T4383] usb 4-1: Product: syz [ 176.384012][ T4383] usb 4-1: Manufacturer: syz [ 176.476511][ T4383] cdc_wdm 4-1:1.0: skipping garbage [ 176.503801][ T4383] cdc_wdm 4-1:1.0: skipping garbage [ 176.523440][ T5625] fuse: Bad value for 'rootmode' [ 176.565594][ T4383] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 176.589762][ T4383] cdc_wdm 4-1:1.0: Unknown control protocol [ 176.841734][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.848618][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.861818][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.868448][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.876622][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.883270][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.524059][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.530717][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.537947][ T41] usb 4-1: USB disconnect, device number 3 [ 177.544042][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 177.544065][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 177.544089][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 177.867431][ T5647] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 179.822506][ T5651] block nbd1: shutting down sockets [ 181.949685][ T4280] block nbd1: Receive control failed (result -32) [ 181.969858][ T5669] block nbd1: shutting down sockets [ 182.813496][ T5683] fuse: Bad value for 'rootmode' [ 184.843987][ T5715] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 185.648564][ T5712] block nbd4: shutting down sockets [ 186.103876][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 186.114039][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 186.114042][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 186.114076][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 186.120050][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 189.076696][ T4279] block nbd4: Receive control failed (result -32) [ 189.091481][ T4278] block nbd4: shutting down sockets [ 189.232556][ T5739] fuse: Bad value for 'rootmode' [ 191.699595][ T5755] block nbd0: shutting down sockets [ 192.892358][ T5780] fuse: Unknown parameter 'use00000000000000000000' [ 194.199668][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214331][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.650115][ T4280] block nbd0: Receive control failed (result -32) [ 194.660891][ T5801] block nbd0: shutting down sockets [ 195.883048][ T5815] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 197.476826][ T5834] fuse: Unknown parameter 'use00000000000000000000' [ 200.083440][ T5845] block nbd2: shutting down sockets [ 200.194206][ T4334] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 200.410680][ T4334] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 200.456885][ T4334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.528450][ T4334] usb 1-1: config 0 descriptor?? [ 201.499837][ T4334] kaweth 1-1:0.0: Firmware present in device. [ 201.999909][ T4334] kaweth 1-1:0.0: Statistics collection: 0 [ 202.006171][ T4334] kaweth 1-1:0.0: Multicast filter limit: 0 [ 202.012103][ T4334] kaweth 1-1:0.0: MTU: 0 [ 202.025003][ T4334] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 202.579503][ T4280] block nbd2: Receive control failed (result -32) [ 202.590165][ T4334] kaweth 1-1:0.0: Error setting SOFS wait [ 202.611542][ T4892] block nbd2: shutting down sockets [ 202.619268][ T4334] kaweth: probe of 1-1:0.0 failed with error -5 [ 202.629353][ T4334] usb 1-1: USB disconnect, device number 2 [ 203.908098][ T5889] fuse: Unknown parameter 'use00000000000000000000' [ 206.281662][ T5918] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 207.270404][ T5902] block nbd4: shutting down sockets [ 209.822919][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 210.227211][ T4280] block nbd4: Receive control failed (result -32) [ 210.238724][ T4278] block nbd4: shutting down sockets [ 210.320862][ T5954] hugetlbfs: syz.2.403 (5954): Using mlock ulimits for SHM_HUGETLB is obsolete [ 213.216803][ T5973] fuse: Unknown parameter 'user_i00000000000000000000' [ 215.970860][ T5987] block nbd3: shutting down sockets [ 216.091341][ T5997] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 218.554376][ T6024] fuse: Unknown parameter 'user_i00000000000000000000' [ 218.899022][ T4280] block nbd3: Receive control failed (result -32) [ 218.926160][ T4278] block nbd3: shutting down sockets [ 220.749853][ T6047] block nbd0: shutting down sockets [ 224.667218][ T6090] fuse: Unknown parameter 'user_i00000000000000000000' [ 225.654651][ T4280] block nbd2: Receive control failed (result -32) [ 225.677464][ T4892] block nbd2: shutting down sockets [ 226.595192][ T6104] block nbd1: shutting down sockets [ 231.107419][ T6169] fuse: Unknown parameter 'user_id00000000000000000000' [ 232.356306][ T4280] block nbd2: Receive control failed (result -32) [ 233.512481][ T6174] block nbd2: shutting down sockets [ 233.538109][ T6175] block nbd1: shutting down sockets [ 233.638542][ T6184] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 234.115248][ T6193] netlink: 5 bytes leftover after parsing attributes in process `syz.4.456'. [ 238.460709][ T6225] fuse: Unknown parameter 'user_id00000000000000000000' [ 240.181431][ T4280] block nbd0: Receive control failed (result -32) [ 240.188885][ T6233] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 240.195852][ T6237] block nbd0: shutting down sockets [ 240.266658][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.331560][ T6233] device bridge_slave_1 left promiscuous mode [ 240.348129][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.492856][ T6233] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 241.172253][ T6238] block nbd0: shutting down sockets [ 244.805027][ T6273] fuse: Unknown parameter 'user_id00000000000000000000' [ 245.434088][ T6286] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 245.583715][ T4864] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 246.340345][ T6287] block nbd3: shutting down sockets [ 246.980730][ T4280] block nbd2: Receive control failed (result -32) [ 246.988489][ T6278] block nbd2: shutting down sockets [ 247.236309][ T4368] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 247.247430][ T4864] usb 2-1: Using ep0 maxpacket: 8 [ 247.263452][ T4864] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 247.331142][ T4864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.352258][ T4864] usb 2-1: Product: syz [ 247.361161][ T4864] usb 2-1: Manufacturer: syz [ 247.367327][ T4864] usb 2-1: SerialNumber: syz [ 247.415907][ T4864] usb 2-1: config 0 descriptor?? [ 247.430086][ T4864] gspca_main: se401-2.14.0 probing 047d:5003 [ 249.902233][ T4864] gspca_se401: read req failed req 0x06 error -19 [ 249.947401][ T4864] usb 2-1: USB disconnect, device number 3 [ 250.305286][ T6332] fuse: Bad value for 'fd' [ 250.486136][ T6333] netlink: 5 bytes leftover after parsing attributes in process `syz.1.489'. [ 254.973592][ T6379] fuse: Bad value for 'fd' [ 255.629240][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.639383][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.700368][ T6380] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 260.477819][ T6434] fuse: Bad value for 'fd' [ 264.868058][ T6509] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 268.471511][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 271.813654][ T4384] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 272.023813][ T4384] usb 3-1: Using ep0 maxpacket: 8 [ 272.074607][ T4384] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 272.143280][ T4384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.256154][ T4384] usb 3-1: Product: syz [ 272.279779][ T4384] usb 3-1: Manufacturer: syz [ 272.284864][ T4384] usb 3-1: SerialNumber: syz [ 272.291654][ T4384] usb 3-1: config 0 descriptor?? [ 272.396468][ T4384] gspca_main: se401-2.14.0 probing 047d:5003 [ 273.299552][ T6652] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 275.795222][ T4383] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 275.960436][ T6688] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 276.013858][ T4383] usb 4-1: Using ep0 maxpacket: 8 [ 276.027129][ T4383] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 276.089821][ T4383] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.245150][ T4383] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.357175][ T4384] gspca_se401: read req failed req 0x06 error -19 [ 276.517351][ T4383] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.569416][ T4384] usb 3-1: USB disconnect, device number 2 [ 276.715569][ T4280] block nbd0: Receive control failed (result -32) [ 276.724282][ T6690] block nbd0: shutting down sockets [ 276.779564][ T4383] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.842013][ T4383] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.853879][ T4383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.872334][ T4383] usb 4-1: can't set config #16, error -71 [ 276.880112][ T4383] usb 4-1: USB disconnect, device number 4 [ 277.021834][ T6716] process 'syz.4.564' launched './file0' with NULL argv: empty string added [ 278.943008][ T6750] overlayfs: conflicting options: userxattr,redirect_dir=on [ 280.273405][ T4280] block nbd0: Receive control failed (result -32) [ 280.280215][ T6772] block nbd0: shutting down sockets [ 282.413390][ T6811] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 282.420315][ T6811] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.429737][ T6811] vhci_hcd vhci_hcd.0: Device attached [ 283.253715][ T4864] vhci_hcd: vhci_device speed not set [ 283.946101][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 284.053718][ T4384] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 284.153678][ T4864] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 284.265134][ T4384] usb 5-1: config 0 has no interfaces? [ 284.270694][ T4384] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.974823][ T4384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.994126][ T4384] usb 5-1: config 0 descriptor?? [ 285.164367][ T6814] vhci_hcd: connection reset by peer [ 285.410939][ T4408] vhci_hcd: stop threads [ 285.946969][ T6839] block nbd2: shutting down sockets [ 285.959345][ T41] usb 5-1: USB disconnect, device number 3 [ 286.004720][ T4408] vhci_hcd: release socket [ 286.321558][ T4408] vhci_hcd: disconnect device [ 286.564546][ T4280] block nbd0: Receive control failed (result -32) [ 286.572595][ T6842] block nbd0: shutting down sockets [ 288.033541][ C1] sched: RT throttling activated [ 288.473619][ T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 288.674043][ T41] usb 1-1: Using ep0 maxpacket: 32 [ 289.303643][ T4864] vhci_hcd: vhci_device speed not set [ 289.313260][ T41] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 289.359117][ T41] usb 1-1: config 0 has no interface number 0 [ 289.370719][ T41] usb 1-1: config 0 interface 184 has no altsetting 0 [ 289.395148][ T41] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 289.419904][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.439936][ T41] usb 1-1: Product: syz [ 289.461339][ T41] usb 1-1: Manufacturer: syz [ 289.478438][ T41] usb 1-1: SerialNumber: syz [ 289.529332][ T41] usb 1-1: config 0 descriptor?? [ 289.560470][ T41] smsc75xx v1.0.0 [ 290.091372][ T6916] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 290.097931][ T6916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.105482][ T6916] vhci_hcd vhci_hcd.0: Device attached [ 290.175748][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 290.193843][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 290.481718][ T4384] vhci_hcd: vhci_device speed not set [ 290.853968][ T4334] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 290.873913][ T4384] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 291.342948][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 291.538459][ T4334] usb 3-1: config 0 has no interfaces? [ 291.545511][ T4334] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 291.555191][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.571730][ T4334] usb 3-1: config 0 descriptor?? [ 292.092547][ T6918] vhci_hcd: unknown pdu 2 [ 292.328034][ T4384] vhci_hcd: vhci_device speed not set [ 292.397273][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 293.609960][ T4944] vhci_hcd: stop threads [ 293.614399][ T4944] vhci_hcd: release socket [ 293.793348][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 293.804482][ T41] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 293.814550][ T41] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 293.823477][ T41] usb 1-1: USB disconnect, device number 3 [ 293.904265][ T6961] block nbd3: shutting down sockets [ 294.103311][ T4384] usb 37-1: device descriptor read/64, error -71 [ 294.313739][ T4384] vhci_hcd: vhci_device speed not set [ 294.386061][ T4280] block nbd1: Receive control failed (result -32) [ 294.392894][ T6968] block nbd1: shutting down sockets [ 294.449027][ T41] usb 3-1: USB disconnect, device number 3 [ 294.463785][ T4384] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 294.540788][ T4944] vhci_hcd: disconnect device [ 295.637425][ T4368] Bluetooth: hci5: Frame reassembly failed (-84) [ 297.463752][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 297.673772][ T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 297.720409][ T7049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.621'. [ 297.870872][ T41] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.053057][ T41] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 298.084064][ T41] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.104188][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.623407][ T4280] block nbd2: Receive control failed (result -32) [ 298.654707][ T7054] block nbd2: shutting down sockets [ 298.667255][ T7033] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 298.679018][ T7056] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 298.883269][ T7033] lo speed is unknown, defaulting to 1000 [ 298.889359][ T7033] lo speed is unknown, defaulting to 1000 [ 298.897465][ T7033] lo speed is unknown, defaulting to 1000 [ 298.906771][ T7033] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.918743][ T7033] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 298.942896][ T7033] lo speed is unknown, defaulting to 1000 [ 298.949815][ T7033] lo speed is unknown, defaulting to 1000 [ 298.957207][ T7033] lo speed is unknown, defaulting to 1000 [ 298.963838][ T7033] lo speed is unknown, defaulting to 1000 [ 298.970323][ T7033] lo speed is unknown, defaulting to 1000 [ 299.753438][ T4384] vhci_hcd: vhci_device speed not set [ 300.718554][ T41] usb 5-1: USB disconnect, device number 4 [ 301.736610][ T4280] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 301.915759][ T4280] Bluetooth: hci3: Injecting HCI hardware error event [ 301.935176][ T4287] Bluetooth: hci3: hardware error 0x00 [ 301.963009][ T4395] Bluetooth: hci5: Frame reassembly failed (-84) [ 303.144080][ T7144] syz.3.634 (7144) used greatest stack depth: 20512 bytes left [ 303.943872][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.950377][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 304.078208][ T4280] block nbd4: Receive control failed (result -32) [ 304.093821][ T4287] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 304.209716][ T4278] block nbd4: shutting down sockets [ 304.411894][ T7175] binder_alloc: 7174: pid 7174 spamming oneway? 1 buffers allocated for a total size of 4096 [ 311.123112][ T4287] block nbd2: Receive control failed (result -32) [ 311.131709][ T7231] block nbd2: shutting down sockets [ 311.403748][ T41] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 311.633654][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 311.643348][ T41] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 311.662225][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.681190][ T41] usb 1-1: Product: syz [ 311.685493][ T41] usb 1-1: Manufacturer: syz [ 311.690104][ T41] usb 1-1: SerialNumber: syz [ 311.715597][ T41] usb 1-1: config 0 descriptor?? [ 311.731919][ T41] gspca_main: sq905-2.14.0 probing 2770:9120 [ 312.723654][ T41] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 312.731228][ T41] sq905: probe of 1-1:0.0 failed with error -110 [ 313.225423][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 313.977369][ T4273] usb 1-1: USB disconnect, device number 4 [ 314.063623][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 314.096609][ T41] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 314.116762][ T41] usb 5-1: config 0 has no interface number 0 [ 314.122924][ T41] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 314.196829][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.233011][ T41] usb 5-1: config 0 descriptor?? [ 314.354169][ T41] viperboard 5-1:0.143: version 0.00 found at bus 005 address 005 [ 314.403279][ T41] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 314.422009][ T41] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 314.773763][ T41] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 314.978007][ T7278] comedi comedi0: c6xdigio: I/O port conflict (0xb011,3) [ 315.046916][ T41] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.073023][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.097823][ T4273] usb 5-1: USB disconnect, device number 5 [ 315.111569][ T41] usb 2-1: Product: syz [ 315.118064][ T41] usb 2-1: Manufacturer: syz [ 315.122740][ T41] usb 2-1: SerialNumber: syz [ 315.279903][ T41] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 315.309212][ T7337] syz.0.667 (7337) used greatest stack depth: 17448 bytes left [ 315.591320][ T41] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 316.300704][ T4287] block nbd0: Receive control failed (result -32) [ 316.311190][ T7374] block nbd0: shutting down sockets [ 316.354383][ T4334] usb 2-1: USB disconnect, device number 4 [ 316.663678][ T41] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 316.672972][ T41] ath9k_htc: Failed to initialize the device [ 316.681954][ T4334] usb 2-1: ath9k_htc: USB layer deinitialized [ 317.075841][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.082234][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.085335][ T4334] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 317.283865][ T4334] usb 2-1: Using ep0 maxpacket: 16 [ 317.300188][ T4334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.550504][ T4334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.680503][ T4334] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 317.691122][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.758081][ T4334] usb 2-1: config 0 descriptor?? [ 317.771922][ T4334] usb 2-1: can't set config #0, error -71 [ 317.816083][ T4334] usb 2-1: USB disconnect, device number 5 [ 318.246039][ T7446] overlayfs: workdir and upperdir must be separate subtrees [ 318.773691][ T41] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 318.964093][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 318.971000][ T41] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 318.983761][ T41] usb 4-1: config 0 has no interface number 0 [ 318.991271][ T41] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 319.011853][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.029853][ T41] usb 4-1: config 0 descriptor?? [ 319.144657][ T41] viperboard 4-1:0.143: version 0.00 found at bus 004 address 005 [ 319.188998][ T41] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 319.200704][ T41] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 319.262827][ T7450] comedi comedi0: c6xdigio: I/O port conflict (0xb011,3) [ 319.277454][ T7450] ================================================================== [ 319.285548][ T7450] BUG: KASAN: use-after-free in sysfs_remove_file_ns+0x39/0x70 [ 319.293090][ T7450] Read of size 8 at addr ffff8880267ba430 by task syz.3.682/7450 [ 319.300821][ T7450] [ 319.303168][ T7450] CPU: 1 PID: 7450 Comm: syz.3.682 Not tainted 6.1.148-syzkaller #0 [ 319.311142][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.321205][ T7450] Call Trace: [ 319.324472][ T7450] [ 319.327401][ T7450] dump_stack_lvl+0x168/0x22e [ 319.332072][ T7450] ? read_lock_is_recursive+0x10/0x10 [ 319.337434][ T7450] ? show_regs_print_info+0x12/0x12 [ 319.342648][ T7450] ? load_image+0x3b0/0x3b0 [ 319.347139][ T7450] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 319.352497][ T7450] ? __virt_addr_valid+0x188/0x540 [ 319.357588][ T7450] ? __virt_addr_valid+0x465/0x540 [ 319.362698][ T7450] ? sysfs_remove_file_ns+0x39/0x70 [ 319.367903][ T7450] print_report+0xa8/0x210 [ 319.372306][ T7450] kasan_report+0x10b/0x140 [ 319.376796][ T7450] ? sysfs_remove_file_ns+0x39/0x70 [ 319.381997][ T7450] sysfs_remove_file_ns+0x39/0x70 [ 319.387002][ T7450] bus_remove_driver+0x89/0x230 [ 319.391834][ T7450] ? sysfs_remove_groups+0x8a/0xa0 [ 319.396934][ T7450] comedi_device_detach+0x12d/0x6e0 [ 319.402123][ T7450] ? comedi_request_region+0x163/0x170 [ 319.407585][ T7450] comedi_device_attach+0x55d/0x650 [ 319.412769][ T7450] comedi_unlocked_ioctl+0x5ec/0xf20 [ 319.418071][ T7450] ? tomoyo_path_number_perm+0x4ae/0x600 [ 319.423693][ T7450] ? comedi_poll+0x8b0/0x8b0 [ 319.428281][ T7450] ? __fget_files+0x28/0x4d0 [ 319.432875][ T7450] ? bpf_lsm_file_ioctl+0x5/0x10 [ 319.437795][ T7450] ? security_file_ioctl+0x7c/0xa0 [ 319.442888][ T7450] ? comedi_poll+0x8b0/0x8b0 [ 319.447581][ T7450] __se_sys_ioctl+0xfa/0x170 [ 319.452168][ T7450] do_syscall_64+0x4c/0xa0 [ 319.456572][ T7450] ? clear_bhb_loop+0x60/0xb0 [ 319.461236][ T7450] ? clear_bhb_loop+0x60/0xb0 [ 319.465895][ T7450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.471778][ T7450] RIP: 0033:0x7ff72e78ebe9 [ 319.476188][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.495899][ T7450] RSP: 002b:00007ff72f65e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.504315][ T7450] RAX: ffffffffffffffda RBX: 00007ff72e9b5fa0 RCX: 00007ff72e78ebe9 [ 319.512280][ T7450] RDX: 0000200000000400 RSI: 0000000040946400 RDI: 000000000000000d [ 319.520239][ T7450] RBP: 00007ff72e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 319.528213][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.536175][ T7450] R13: 00007ff72e9b6038 R14: 00007ff72e9b5fa0 R15: 00007ffd5ceeb008 [ 319.544134][ T7450] [ 319.547132][ T7450] [ 319.549435][ T7450] Allocated by task 6527: [ 319.553736][ T7450] kasan_set_track+0x4b/0x70 [ 319.558311][ T7450] __kasan_kmalloc+0x8e/0xa0 [ 319.562882][ T7450] bus_add_driver+0xda/0x5a0 [ 319.567456][ T7450] driver_register+0x32d/0x430 [ 319.572202][ T7450] c6xdigio_attach+0x90/0x880 [ 319.576879][ T7450] comedi_device_attach+0x515/0x650 [ 319.582066][ T7450] comedi_unlocked_ioctl+0x5ec/0xf20 [ 319.587335][ T7450] __se_sys_ioctl+0xfa/0x170 [ 319.591927][ T7450] do_syscall_64+0x4c/0xa0 [ 319.596323][ T7450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.602220][ T7450] [ 319.604526][ T7450] Freed by task 7278: [ 319.608483][ T7450] kasan_set_track+0x4b/0x70 [ 319.613055][ T7450] kasan_save_free_info+0x2d/0x50 [ 319.618064][ T7450] ____kasan_slab_free+0x126/0x1e0 [ 319.623160][ T7450] slab_free_freelist_hook+0x131/0x1a0 [ 319.628621][ T7450] __kmem_cache_free+0xb6/0x1f0 [ 319.633449][ T7450] kobject_put+0x21d/0x460 [ 319.637845][ T7450] bus_remove_driver+0x13c/0x230 [ 319.642761][ T7450] comedi_device_detach+0x12d/0x6e0 [ 319.647942][ T7450] comedi_device_attach+0x55d/0x650 [ 319.653120][ T7450] comedi_unlocked_ioctl+0x5ec/0xf20 [ 319.658386][ T7450] __se_sys_ioctl+0xfa/0x170 [ 319.662957][ T7450] do_syscall_64+0x4c/0xa0 [ 319.667354][ T7450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.673231][ T7450] [ 319.675558][ T7450] Last potentially related work creation: [ 319.681264][ T7450] kasan_save_stack+0x3a/0x60 [ 319.685933][ T7450] __kasan_record_aux_stack+0xb2/0xc0 [ 319.691286][ T7450] call_rcu+0x154/0x980 [ 319.695426][ T7450] __vlan_del+0x3a4/0x910 [ 319.699736][ T7450] __vlan_flush+0x1be/0x3c0 [ 319.704218][ T7450] nbp_vlan_flush+0x106/0x1b0 [ 319.708873][ T7450] del_nbp+0x650/0xb40 [ 319.712925][ T7450] br_del_if+0x15d/0x330 [ 319.717150][ T7450] do_setlink+0xe3c/0x3c40 [ 319.721552][ T7450] rtnl_newlink+0x17d6/0x1ff0 [ 319.726208][ T7450] rtnetlink_rcv_msg+0x79b/0xed0 [ 319.731156][ T7450] netlink_rcv_skb+0x1de/0x420 [ 319.735903][ T7450] netlink_unicast+0x74d/0x8d0 [ 319.740645][ T7450] netlink_sendmsg+0x89e/0xbc0 [ 319.745399][ T7450] ____sys_sendmsg+0x59b/0x970 [ 319.750142][ T7450] ___sys_sendmsg+0x21c/0x290 [ 319.754821][ T7450] __se_sys_sendmsg+0x19e/0x270 [ 319.759650][ T7450] do_syscall_64+0x4c/0xa0 [ 319.764051][ T7450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.769927][ T7450] [ 319.772249][ T7450] The buggy address belongs to the object at ffff8880267ba400 [ 319.772249][ T7450] which belongs to the cache kmalloc-256 of size 256 [ 319.786297][ T7450] The buggy address is located 48 bytes inside of [ 319.786297][ T7450] 256-byte region [ffff8880267ba400, ffff8880267ba500) [ 319.799481][ T7450] [ 319.801783][ T7450] The buggy address belongs to the physical page: [ 319.808185][ T7450] page:ffffea000099ee80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x267ba [ 319.818321][ T7450] head:ffffea000099ee80 order:1 compound_mapcount:0 compound_pincount:0 [ 319.826624][ T7450] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 319.834603][ T7450] raw: 00fff00000010200 ffffea0000c20f80 dead000000000006 ffff888017441b40 [ 319.843166][ T7450] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 319.851732][ T7450] page dumped because: kasan: bad access detected [ 319.858190][ T7450] page_owner tracks the page as allocated [ 319.863890][ T7450] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4282, tgid 4282 (syz-executor), ts 60893212884, free_ts 60787324892 [ 319.885234][ T7450] post_alloc_hook+0x173/0x1a0 [ 319.889985][ T7450] get_page_from_freelist+0x1a26/0x1ac0 [ 319.895516][ T7450] __alloc_pages+0x1df/0x4e0 [ 319.900182][ T7450] alloc_slab_page+0x5d/0x160 [ 319.904866][ T7450] new_slab+0x87/0x2c0 [ 319.908936][ T7450] ___slab_alloc+0xbc6/0x1220 [ 319.913656][ T7450] __kmem_cache_alloc_node+0x1a0/0x260 [ 319.919120][ T7450] kmalloc_trace+0x26/0xe0 [ 319.923529][ T7450] vlan_vid_add+0x141/0x750 [ 319.928025][ T7450] __vlan_add+0x2b2/0x26e0 [ 319.932421][ T7450] nbp_vlan_add+0x25e/0x3b0 [ 319.936921][ T7450] nbp_vlan_init+0x354/0x440 [ 319.941489][ T7450] br_add_if+0xaa4/0xec0 [ 319.945711][ T7450] do_setlink+0xdc0/0x3c40 [ 319.950108][ T7450] rtnl_newlink+0x17d6/0x1ff0 [ 319.954781][ T7450] rtnetlink_rcv_msg+0x79b/0xed0 [ 319.959699][ T7450] page last free stack trace: [ 319.964352][ T7450] free_unref_page_prepare+0x8b4/0x9a0 [ 319.969812][ T7450] free_unref_page+0x2e/0x3f0 [ 319.974470][ T7450] __unfreeze_partials+0x1a5/0x200 [ 319.979574][ T7450] put_cpu_partial+0x17c/0x250 [ 319.984346][ T7450] qlist_free_all+0x76/0xe0 [ 319.988831][ T7450] kasan_quarantine_reduce+0x144/0x160 [ 319.994274][ T7450] __kasan_slab_alloc+0x1e/0x80 [ 319.999105][ T7450] slab_post_alloc_hook+0x4b/0x480 [ 320.004190][ T7450] __kmem_cache_alloc_node+0x140/0x260 [ 320.009626][ T7450] kmalloc_trace+0x26/0xe0 [ 320.014027][ T7450] kobject_uevent_env+0x270/0x8a0 [ 320.019033][ T7450] __kobject_del+0xd2/0x2f0 [ 320.023520][ T7450] kobject_put+0x235/0x460 [ 320.027927][ T7450] net_rx_queue_update_kobjects+0x43e/0x4a0 [ 320.033800][ T7450] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 320.039586][ T7450] veth_newlink+0x917/0xbe0 [ 320.044119][ T7450] [ 320.046445][ T7450] Memory state around the buggy address: [ 320.052057][ T7450] ffff8880267ba300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 320.060099][ T7450] ffff8880267ba380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 320.068150][ T7450] >ffff8880267ba400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 320.076188][ T7450] ^ [ 320.081796][ T7450] ffff8880267ba480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 320.089855][ T7450] ffff8880267ba500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 320.097892][ T7450] ================================================================== [ 320.135589][ T7450] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 320.142818][ T7450] CPU: 1 PID: 7450 Comm: syz.3.682 Not tainted 6.1.148-syzkaller #0 [ 320.150796][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.160843][ T7450] Call Trace: [ 320.164122][ T7450] [ 320.167035][ T7450] dump_stack_lvl+0x168/0x22e [ 320.171693][ T7450] ? memcpy+0x3c/0x60 [ 320.175658][ T7450] ? show_regs_print_info+0x12/0x12 [ 320.180838][ T7450] ? load_image+0x3b0/0x3b0 [ 320.185326][ T7450] panic+0x2c9/0x710 [ 320.189200][ T7450] ? bpf_jit_dump+0xd0/0xd0 [ 320.193684][ T7450] ? check_panic_on_warn+0x6c/0xa0 [ 320.198824][ T7450] check_panic_on_warn+0x80/0xa0 [ 320.203752][ T7450] ? sysfs_remove_file_ns+0x39/0x70 [ 320.208943][ T7450] end_report+0x66/0x110 [ 320.213177][ T7450] kasan_report+0x118/0x140 [ 320.217680][ T7450] ? sysfs_remove_file_ns+0x39/0x70 [ 320.222864][ T7450] sysfs_remove_file_ns+0x39/0x70 [ 320.227871][ T7450] bus_remove_driver+0x89/0x230 [ 320.232702][ T7450] ? sysfs_remove_groups+0x8a/0xa0 [ 320.237798][ T7450] comedi_device_detach+0x12d/0x6e0 [ 320.242996][ T7450] ? comedi_request_region+0x163/0x170 [ 320.248442][ T7450] comedi_device_attach+0x55d/0x650 [ 320.253644][ T7450] comedi_unlocked_ioctl+0x5ec/0xf20 [ 320.258912][ T7450] ? tomoyo_path_number_perm+0x4ae/0x600 [ 320.264523][ T7450] ? comedi_poll+0x8b0/0x8b0 [ 320.269105][ T7450] ? __fget_files+0x28/0x4d0 [ 320.273680][ T7450] ? bpf_lsm_file_ioctl+0x5/0x10 [ 320.278625][ T7450] ? security_file_ioctl+0x7c/0xa0 [ 320.283715][ T7450] ? comedi_poll+0x8b0/0x8b0 [ 320.288285][ T7450] __se_sys_ioctl+0xfa/0x170 [ 320.292859][ T7450] do_syscall_64+0x4c/0xa0 [ 320.297257][ T7450] ? clear_bhb_loop+0x60/0xb0 [ 320.301909][ T7450] ? clear_bhb_loop+0x60/0xb0 [ 320.306581][ T7450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.312459][ T7450] RIP: 0033:0x7ff72e78ebe9 [ 320.316858][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.336445][ T7450] RSP: 002b:00007ff72f65e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.344839][ T7450] RAX: ffffffffffffffda RBX: 00007ff72e9b5fa0 RCX: 00007ff72e78ebe9 [ 320.352801][ T7450] RDX: 0000200000000400 RSI: 0000000040946400 RDI: 000000000000000d [ 320.360776][ T7450] RBP: 00007ff72e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 320.368739][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.376698][ T7450] R13: 00007ff72e9b6038 R14: 00007ff72e9b5fa0 R15: 00007ffd5ceeb008 [ 320.384665][ T7450] [ 320.387920][ T7450] Kernel Offset: disabled [ 320.392240][ T7450] Rebooting in 86400 seconds..