last executing test programs: 16.851158175s ago: executing program 4 (id=328): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40088d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000001440)=ANY=[], 0xffffff6a) 16.17037738s ago: executing program 4 (id=330): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmmsg$unix(r0, 0x0, 0x0, 0x4004080) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000500)='fib6_table_lookup\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x8, 0x1, 0x18e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r2, 0x26c8, 0x0, 0x1, 0x0, 0x10) 14.108385967s ago: executing program 4 (id=334): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x26) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffe, 0x111000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000020c0)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x0, @empty, 0xe2}], 0x5c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x7, 0x0, &(0x7f00000004c0)="630b008646dc3f", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x600}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) 11.928178378s ago: executing program 4 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2003, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x280) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0)=0x100000001, 0x4) 11.147944777s ago: executing program 2 (id=341): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000), 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080), 0x0) mprotect(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1000004) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x8000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x9440) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000040)=""/65) 11.071536909s ago: executing program 4 (id=342): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x318b, &(0x7f00000003c0)={0x0, 0xfec9, 0x8, 0x3}, &(0x7f0000000280), &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 11.001378102s ago: executing program 1 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_complete(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket(0xa, 0x801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 10.484082111s ago: executing program 2 (id=344): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x6120480, 0x0, 0xa6fc3956163455dc, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_setup(0x987, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000040), 0x0, 0x0, 0x1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220500ffffffff1cb976"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 10.360876516s ago: executing program 1 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x2000040, &(0x7f0000000000)={[{@codepage={'codepage', 0x3d, 'cp949'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x1, 0x302, &(0x7f00000008c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, 0x0, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffa) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) socket$inet6(0xa, 0x2, 0x0) 7.920914906s ago: executing program 1 (id=347): dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 7.155500095s ago: executing program 2 (id=350): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x81, 0xaa, &(0x7f0000000400)=""/170, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, 0x10010, r1, 0x8fe1e000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @private=0xa010101}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x14) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000200)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000840)=ANY=[@ANYBLOB="488ecaa97109a6feb81e53955feb2e64c0983d7d14cc8315c775704074673f0c2593e984c32ee3c23d989ca7b92b8a14ebe08c0be743cf60738decffb688616148e1753683cc0c045f19950af8e3c2ea31cd0815bf9b15dcbd54d8e7d766559101dccba8915836cf5948d0aeab92f2d928e2728f612282bcf4ef656fc5536254ff82147436556fc85c52a6788da4b6967656557dd9f3bca729c4b842fb00d065f5ecfe09a275abcf5a71efbef27f8293f9d3", @ANYRES16=r4], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'c6xdigio\x00', [0x8001, 0xf, 0x6, 0x8, 0xfffffffb, 0x3ff, 0x4d7, 0x2, 0x4, 0x4, 0x0, 0x401, 0x3, 0x47, 0x9, 0x7ff, 0xa, 0x0, 0x1f29, 0x5, 0x8000, 0x8c, 0x6, 0x6, 0x54, 0x10001, 0x101, 0x5, 0x10001, 0x8, 0x1]}) 6.432368951s ago: executing program 0 (id=352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) 6.100765504s ago: executing program 0 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="fff500001400030007000000000000000000009fcd1c970014000100ff"], 0x44}}, 0x0) 5.085052751s ago: executing program 0 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_complete(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket(0xa, 0x801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 4.671719567s ago: executing program 1 (id=357): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="200ecf"], 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x3}}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.017881651s ago: executing program 4 (id=358): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0xc0105702, &(0x7f00000002c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000004040), 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000004080)) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x7f, 0xf, [0x6]}}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x18) 3.945778054s ago: executing program 0 (id=359): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40088d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000001440)=ANY=[], 0xffffff6a) 3.899019236s ago: executing program 2 (id=360): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x20044050) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) 3.880494196s ago: executing program 3 (id=361): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 3.529017709s ago: executing program 0 (id=362): syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = dup(0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r1], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, 0x15, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0xa0008000, 0x86c, 0xa, 0x0, 0x7, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x3, 0x8000004, 0x3, 0x7, 0x5, 0x5]}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0xfae76000) openat(r1, 0x0, 0x351142, 0x1cd) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a3000000000080041007369770014007fa62964bd9633006c6f0000000000000000000000000000c08f1b47e9ffed01fe2356c7ec52b915b83174a7079926d0c7e7589731cc0edf24df00f503db91f45cb8294ff621200770b12f2eab65f30ea1403189a41a340a086e700c88af959ef04260a9"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 3.431741202s ago: executing program 3 (id=363): socket(0x2, 0x3, 0xff) migrate_pages(0xffffffffffffffff, 0x8000000000000001, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.334923276s ago: executing program 3 (id=364): io_uring_setup(0x564e, &(0x7f0000000180)={0x0, 0x426d, 0x80, 0x0, 0x2fb}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x81) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) recvmmsg(r3, &(0x7f0000008140), 0x0, 0x7fb10727dda9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r9, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3.332866767s ago: executing program 1 (id=365): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.697927097s ago: executing program 3 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="fff500001400030007000000000000000000009fcd1c970014000100ff"], 0x44}}, 0x0) 1.315894641s ago: executing program 0 (id=367): dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 1.226976525s ago: executing program 2 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x1000) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1.211023785s ago: executing program 1 (id=369): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x26) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffe, 0x111000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000020c0)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x0, @empty, 0xe2}], 0x5c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x7, 0x0, &(0x7f00000004c0)="630b008646dc3f", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x600}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) 685.969985ms ago: executing program 3 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001900010900000000fddbdf25021800000000ff010020000008000100ac14140008000700ae"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 31.523239ms ago: executing program 3 (id=371): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x81, 0xaa, &(0x7f0000000400)=""/170, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, 0x10010, r1, 0x8fe1e000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @private=0xa010101}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x14) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000200)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000840)=ANY=[@ANYBLOB="488ecaa97109a6feb81e53955feb2e64c0983d7d14cc8315c775704074673f0c2593e984c32ee3c23d989ca7b92b8a14ebe08c0be743cf60738decffb688616148e1753683cc0c045f19950af8e3c2ea31cd0815bf9b15dcbd54d8e7d766559101dccba8915836cf5948d0aeab92f2d928e2728f612282bcf4ef656fc5536254ff82147436556fc85c52a6788da4b6967656557dd9f3bca729c4b842fb00d065f5ecfe09a275abcf5a71efbef27f8293f9d3", @ANYRES16=r4], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 0s ago: executing program 2 (id=372): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40088d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000001440)=ANY=[], 0xffffff6a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 57.530336][ T4253] cgroup: Unknown subsys name 'net' [ 57.661127][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.919580][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.128836][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.137151][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.142881][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.146408][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.152865][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.159956][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.167238][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.174589][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.180392][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.187417][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.194309][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.201814][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.208140][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.215340][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.224141][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.230809][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.238053][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.244130][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.251186][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.264501][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.265311][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.272145][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.279795][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.292599][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.293915][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.299820][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.307239][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.334883][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.351509][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.359524][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.773562][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 61.860494][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 61.896932][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 61.913842][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 61.940696][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 61.957028][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.964140][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.972896][ T4264] device bridge_slave_0 entered promiscuous mode [ 61.992204][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.999449][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.007707][ T4264] device bridge_slave_1 entered promiscuous mode [ 62.057928][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.065179][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.072880][ T4265] device bridge_slave_0 entered promiscuous mode [ 62.107802][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.117123][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.125637][ T4265] device bridge_slave_1 entered promiscuous mode [ 62.141758][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.172210][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.204845][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.211999][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.219938][ T4263] device bridge_slave_0 entered promiscuous mode [ 62.242037][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.259660][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.267399][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.277411][ T4263] device bridge_slave_1 entered promiscuous mode [ 62.290357][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.299698][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.308954][ T4267] device bridge_slave_0 entered promiscuous mode [ 62.318490][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.348101][ T4264] team0: Port device team_slave_0 added [ 62.362981][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.370649][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.378793][ T4267] device bridge_slave_1 entered promiscuous mode [ 62.386122][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.393194][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.401112][ T4273] device bridge_slave_0 entered promiscuous mode [ 62.424169][ T4264] team0: Port device team_slave_1 added [ 62.431901][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.447968][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.455168][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.463087][ T4273] device bridge_slave_1 entered promiscuous mode [ 62.472282][ T4265] team0: Port device team_slave_0 added [ 62.488462][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.530434][ T4265] team0: Port device team_slave_1 added [ 62.550622][ T4263] team0: Port device team_slave_0 added [ 62.558444][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.581361][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.588569][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.614832][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.628301][ T4263] team0: Port device team_slave_1 added [ 62.634431][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.641774][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.668246][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.680831][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.692725][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.702305][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.709376][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.735465][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.770504][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.780404][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.787688][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.814421][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.864372][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.871592][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.898500][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.914189][ T4267] team0: Port device team_slave_0 added [ 62.937525][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.944490][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.970696][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.982842][ T4267] team0: Port device team_slave_1 added [ 62.999501][ T4273] team0: Port device team_slave_0 added [ 63.011562][ T4264] device hsr_slave_0 entered promiscuous mode [ 63.018621][ T4264] device hsr_slave_1 entered promiscuous mode [ 63.060602][ T4273] team0: Port device team_slave_1 added [ 63.081499][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.088815][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.114990][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.130439][ T4265] device hsr_slave_0 entered promiscuous mode [ 63.137214][ T4265] device hsr_slave_1 entered promiscuous mode [ 63.143822][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.151826][ T4265] Cannot create hsr debugfs directory [ 63.173465][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.180562][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.207244][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.219942][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.226977][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.253613][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.285412][ T4263] device hsr_slave_0 entered promiscuous mode [ 63.292289][ T4263] device hsr_slave_1 entered promiscuous mode [ 63.299015][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.306816][ T4263] Cannot create hsr debugfs directory [ 63.312782][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.319880][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.346058][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.355639][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 63.356662][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 63.434943][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 63.435076][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 63.441186][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 63.475295][ T4267] device hsr_slave_0 entered promiscuous mode [ 63.482166][ T4267] device hsr_slave_1 entered promiscuous mode [ 63.490225][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.497844][ T4267] Cannot create hsr debugfs directory [ 63.510342][ T4273] device hsr_slave_0 entered promiscuous mode [ 63.517043][ T4273] device hsr_slave_1 entered promiscuous mode [ 63.523433][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.531041][ T4273] Cannot create hsr debugfs directory [ 63.794605][ T4264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.813233][ T4264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.832334][ T4264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.855613][ T4264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.878199][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.896370][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.906039][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.921850][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.003237][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.018702][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.028018][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.051795][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.089698][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.124519][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.141927][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.151770][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.167420][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.179412][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.208675][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.216096][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.227321][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.260878][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.269102][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.302966][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.311871][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.321996][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.331371][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.338665][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.350857][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.360146][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.368723][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.375960][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.395338][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.403662][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.412943][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.421722][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.430911][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.440014][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.448810][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.457222][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.465826][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.484239][ T4263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.501210][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.513335][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.522150][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.531695][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.538827][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.547479][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.556456][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.564932][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.571998][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.579631][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.588953][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.597578][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.607071][ T4263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.618342][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.634177][ T4263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.650456][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.669343][ T4263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.680742][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.701562][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.751068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.760304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.774075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.783094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.792453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.802678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.845496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.855965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.864536][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.872108][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.881449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.890926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.899986][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.907131][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.915418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.925732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.934304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.943827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.952632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.973827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.982314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.022741][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.030052][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.040269][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.049331][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.061630][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.070213][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.079015][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.087673][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.096768][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.108023][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.115777][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.123148][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.132194][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.140752][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.154511][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.167539][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.186517][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.208678][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.227668][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.253530][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.297954][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.316162][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.345561][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.352705][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.395927][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.417178][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.427379][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.435578][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 65.445505][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 65.463974][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.471184][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.479787][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.497512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.514317][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.523048][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 65.523068][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 65.529190][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 65.578710][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.614121][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.623273][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.646425][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.665308][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.685749][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.700885][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.744505][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.767278][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.780741][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.795501][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.805331][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.813635][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.834635][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.862800][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.873468][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.887037][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.896000][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.903493][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.912342][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.954125][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.971039][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.982004][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.001122][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.014067][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.021245][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.035235][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.044101][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.059640][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.066910][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.085833][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.098442][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.111959][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.140130][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.156371][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.166351][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.176409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.203410][ T4265] device veth0_vlan entered promiscuous mode [ 66.217053][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.226117][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.242253][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.251326][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.266014][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.279112][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.288313][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.298454][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.306715][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.322450][ T4265] device veth1_vlan entered promiscuous mode [ 66.356677][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.367483][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.376232][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.388612][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.400502][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.435802][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.444251][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.461796][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.472337][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.509855][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.525680][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.533653][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.543382][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.552982][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.562342][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.570414][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.582901][ T4273] device veth0_vlan entered promiscuous mode [ 66.593814][ T4264] device veth0_vlan entered promiscuous mode [ 66.608911][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.624385][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.632892][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.657864][ T4264] device veth1_vlan entered promiscuous mode [ 66.677288][ T4273] device veth1_vlan entered promiscuous mode [ 66.696421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.704585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.718353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.733548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.755762][ T4265] device veth0_macvtap entered promiscuous mode [ 66.824200][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.832699][ T4265] device veth1_macvtap entered promiscuous mode [ 66.842720][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.852801][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.863187][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.871650][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.880852][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.890329][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.899164][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.909929][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.919267][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.927058][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.939291][ T4264] device veth0_macvtap entered promiscuous mode [ 66.953026][ T4273] device veth0_macvtap entered promiscuous mode [ 66.976368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.985853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.004174][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.013286][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.027767][ T4264] device veth1_macvtap entered promiscuous mode [ 67.049787][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.062475][ T4267] device veth0_vlan entered promiscuous mode [ 67.071821][ T4273] device veth1_macvtap entered promiscuous mode [ 67.089449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.099427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.109007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.117826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.126574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.134392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.149924][ T4267] device veth1_vlan entered promiscuous mode [ 67.168372][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.178647][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.188924][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.199253][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.223963][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.237772][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.250786][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.262055][ T4263] device veth0_vlan entered promiscuous mode [ 67.269874][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.278926][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.287372][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.295696][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.304219][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.313784][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.322705][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.333532][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.351657][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.363358][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.374083][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.386449][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.396936][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.406434][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.415430][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.424154][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.439288][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.452195][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.464017][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.479769][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.489085][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.498260][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.507416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.515775][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 67.515862][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 67.529922][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.541001][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.551413][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.562119][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.573651][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.591286][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.601099][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 67.605571][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 67.607390][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 67.619883][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.630338][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.639120][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.654102][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.663939][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.693135][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.702827][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.711884][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.723045][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.735457][ T4263] device veth1_vlan entered promiscuous mode [ 67.754589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.763584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.772514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.790758][ T4267] device veth0_macvtap entered promiscuous mode [ 67.831614][ T4267] device veth1_macvtap entered promiscuous mode [ 67.935396][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.949760][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.959548][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.969005][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.977896][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.994270][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.008918][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.019407][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.030042][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.040044][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.050565][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.062112][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.090683][ T4263] device veth0_macvtap entered promiscuous mode [ 68.100185][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.108711][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.118384][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.133103][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.147533][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.156312][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.164253][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.172291][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.182352][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.190630][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.203556][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.213440][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.224548][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.237144][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.258418][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.267333][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.275747][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.284573][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.306025][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.314006][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.322796][ T4263] device veth1_macvtap entered promiscuous mode [ 68.340232][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.349672][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.358765][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.367825][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.381783][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.407582][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.425948][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.447849][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.448377][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.468265][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.478356][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.489017][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.498939][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.507200][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.517695][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.528721][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.539287][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.551007][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.559148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.567894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.575808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.584305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.612968][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.627004][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.637791][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.642506][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.656220][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.667503][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.678764][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.689326][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.699306][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.710706][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.735718][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.762622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.777268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.787278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.823818][ T4263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.845551][ T4263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.859067][ T4263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.878962][ T4263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.894070][ T4387] loop2: detected capacity change from 0 to 64 [ 68.923366][ T4387] ======================================================= [ 68.923366][ T4387] WARNING: The mand mount option has been deprecated and [ 68.923366][ T4387] and is ignored by this kernel. Remove the mand [ 68.923366][ T4387] option from the mount to silence this warning. [ 68.923366][ T4387] ======================================================= [ 68.972573][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.012112][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.059764][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.300041][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.300047][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.300095][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.326261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.594859][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 69.675323][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 70.162086][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 70.168182][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 70.174212][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 70.255076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.263703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.272026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.280493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.288785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 70.297134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 70.305413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 70.313805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 70.323466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 70.334735][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.363360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 70.408005][ T4399] loop1: detected capacity change from 0 to 1024 [ 70.785009][ T27] audit: type=1800 audit(1753294837.593:2): pid=4400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 70.933830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.944544][ T4399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.005492][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.013455][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.108297][ T4399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.181070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.287749][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.295669][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.389196][ T4416] loop3: detected capacity change from 0 to 256 [ 71.433393][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 73.956423][ T4444] loop3: detected capacity change from 0 to 40427 [ 73.991477][ T4444] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 73.999997][ T4444] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.009522][ T4446] loop1: detected capacity change from 0 to 40427 [ 74.012759][ T4444] F2FS-fs (loop3): invalid crc value [ 74.019754][ T4431] loop4: detected capacity change from 0 to 4096 [ 74.027831][ T4446] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 74.036049][ T4446] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.047254][ T4446] F2FS-fs (loop1): invalid crc value [ 74.083896][ T4431] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 74.093961][ T4431] ntfs3: loop4: Failed to load $Extend. [ 74.150143][ T4444] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.150144][ T4446] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.195803][ T4444] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.203184][ T4444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 75.629549][ T4462] F2FS-fs (loop3): Unrecognized mount option "01777777777777777777777 Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 75.680983][ T27] audit: type=1800 audit(1753294842.763:3): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 76.013314][ T4446] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 76.020464][ T4446] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.027419][ T129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.058385][ T26] cfg80211: failed to load regulatory.db [ 77.139094][ T4273] syz-executor: attempt to access beyond end of device [ 77.139094][ T4273] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 77.279845][ T4476] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 77.344859][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 77.365133][ T129] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.415711][ T129] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.442996][ T129] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.475348][ T129] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.545379][ T129] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.554456][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.822781][ T129] usb 1-1: GET_CAPABILITIES returned 0 [ 77.828812][ T129] usbtmc 1-1:16.0: can't read capabilities [ 78.037608][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.070379][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.079551][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.114126][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.123276][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.132388][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.141497][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.150607][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.159721][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.183191][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.192310][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.201389][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.210473][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.219543][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.229643][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.238754][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.413614][ T129] usb 1-1: USB disconnect, device number 2 [ 79.747737][ T4500] mmap: syz.0.29 (4500) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.651729][ T4506] loop3: detected capacity change from 0 to 40427 [ 81.665917][ T4506] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.673771][ T4506] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.683295][ T4506] F2FS-fs (loop3): invalid crc value [ 82.052241][ T4506] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.108286][ T4506] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 82.115411][ T4506] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.336987][ T4517] F2FS-fs (loop3): Unrecognized mount option "01777777777777777777777 Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 82.358503][ T27] audit: type=1800 audit(1753294849.453:4): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.30" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 83.695076][ T127] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.984205][ T127] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.094897][ T127] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.129364][ T127] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.228519][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.242202][ T4536] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 85.328563][ T4525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.513760][ T4546] loop3: detected capacity change from 0 to 2048 [ 85.782685][ T7] usb 2-1: USB disconnect, device number 2 [ 87.789003][ T4567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.45'. [ 90.760405][ T4597] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 91.143593][ T4613] loop3: detected capacity change from 0 to 256 [ 91.188218][ T4613] exfat: Deprecated parameter 'namecase' [ 91.560805][ T4613] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 92.210394][ T4621] loop2: detected capacity change from 0 to 40427 [ 92.220402][ T4621] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 92.228855][ T4621] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 92.239168][ T4621] F2FS-fs (loop2): invalid crc value [ 92.420085][ T4621] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.059573][ T4621] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 93.066695][ T4621] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.002126][ T27] audit: type=1800 audit(1753294861.023:5): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.63" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 96.438967][ T4662] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 100.811751][ T4700] netlink: 68 bytes leftover after parsing attributes in process `syz.4.81'. [ 100.897121][ T4707] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 101.556441][ T4718] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 102.102526][ T4730] Zero length message leads to an empty skb [ 103.603865][ T27] audit: type=1326 audit(1753294870.698:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.1.94" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58f8f8e9a9 code=0x0 [ 105.296279][ T4744] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 105.534984][ T4746] loop4: detected capacity change from 0 to 1024 [ 105.599742][ T4751] netlink: 68 bytes leftover after parsing attributes in process `syz.1.99'. [ 105.642358][ T4388] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.707726][ T4778] netlink: 'syz.2.108': attribute type 4 has an invalid length. [ 109.453455][ T4800] loop4: detected capacity change from 0 to 128 [ 109.552228][ T4802] loop0: detected capacity change from 0 to 512 [ 109.631445][ T4802] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.652744][ T4800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.742720][ T4800] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.754851][ T4802] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.225607][ T4811] loop1: detected capacity change from 0 to 128 [ 110.672494][ T4813] Error: Driver 'c6xdigio' is already registered, aborting... [ 110.809041][ T27] audit: type=1800 audit(1753294877.898:7): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.115" name="file2" dev="loop4" ino=12 res=0 errno=0 [ 111.261161][ T4802] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.269956][ T4802] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.114: bad orphan inode 458763 [ 111.317267][ T4802] EXT4-fs (loop0): Remounting filesystem read-only [ 111.323933][ T4802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.331024][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 111.491758][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 112.490323][ T4840] netlink: 'syz.2.124': attribute type 4 has an invalid length. [ 113.558868][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.655470][ T4341] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 113.784850][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 113.797266][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.837058][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.873404][ T4341] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.888726][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.904833][ T4341] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.997508][ T4341] usb 5-1: can't read configurations, error -71 [ 114.005786][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.021634][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.033372][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.265697][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 114.274280][ T7] usbtmc 4-1:16.0: can't read capabilities [ 114.491529][ T4838] raw_sendmsg: syz.3.126 forgot to set AF_INET. Fix it! [ 114.507546][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.516748][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.525802][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.534850][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.543886][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.553439][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.562521][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.571673][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.580756][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.594197][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.603305][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.612378][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.621519][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.630624][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.639700][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.655070][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.677562][ T7] usb 4-1: USB disconnect, device number 2 [ 117.724629][ T4268] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 117.738529][ T4268] CPU: 1 PID: 4268 Comm: kworker/u5:1 Not tainted 6.1.146-syzkaller #0 [ 117.746822][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.756987][ T4268] Workqueue: hci2 hci_rx_work [ 117.761827][ T4268] Call Trace: [ 117.765123][ T4268] [ 117.768150][ T4268] dump_stack_lvl+0x168/0x22e [ 117.772879][ T4268] ? show_regs_print_info+0x12/0x12 [ 117.778097][ T4268] ? load_image+0x3b0/0x3b0 [ 117.782628][ T4268] sysfs_create_dir_ns+0x252/0x280 [ 117.787760][ T4268] ? hci_rx_work+0x3eb/0xd40 [ 117.792356][ T4268] ? sysfs_warn_dup+0xa0/0xa0 [ 117.797126][ T4268] ? do_raw_spin_unlock+0x11d/0x230 [ 117.802336][ T4268] kobject_add_internal+0x6b8/0xc80 [ 117.807548][ T4268] kobject_add+0x152/0x210 [ 117.811971][ T4268] ? kobject_init+0x1d0/0x1d0 [ 117.816650][ T4268] ? klist_children_get+0x50/0x50 [ 117.821667][ T4268] ? get_device_parent+0x121/0x3f0 [ 117.826775][ T4268] device_add+0x483/0xfb0 [ 117.831095][ T4268] ? kmem_cache_free+0xf7/0x290 [ 117.835947][ T4268] hci_conn_add_sysfs+0xd1/0x1e0 [ 117.840897][ T4268] le_conn_complete_evt+0xd1d/0x1320 [ 117.846287][ T4268] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 117.852528][ T4268] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 117.858160][ T4268] ? skb_pull_data+0xf7/0x200 [ 117.862839][ T4268] hci_le_conn_complete_evt+0x183/0x440 [ 117.868487][ T4268] ? hci_remote_host_features_evt+0x270/0x270 [ 117.874564][ T4268] hci_event_packet+0x791/0x1210 [ 117.879600][ T4268] ? bis_list+0x280/0x280 [ 117.883927][ T4268] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 117.889914][ T4268] ? kcov_remote_start+0x4c7/0x7e0 [ 117.895023][ T4268] ? mce_start+0x60/0x140 [ 117.899354][ T4268] ? hci_send_to_monitor+0x9c/0x4a0 [ 117.904571][ T4268] hci_rx_work+0x3eb/0xd40 [ 117.909006][ T4268] ? process_one_work+0x7a1/0x1160 [ 117.914111][ T4268] process_one_work+0x898/0x1160 [ 117.919493][ T4268] ? worker_detach_from_pool+0x240/0x240 [ 117.925130][ T4268] ? _raw_spin_lock_irq+0xab/0xe0 [ 117.930246][ T4268] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 117.935636][ T4268] ? kthread_data+0x4b/0xc0 [ 117.940157][ T4268] worker_thread+0xaa2/0x1250 [ 117.944946][ T4268] kthread+0x29d/0x330 [ 117.949059][ T4268] ? worker_clr_flags+0x1a0/0x1a0 [ 117.954077][ T4268] ? kthread_blkcg+0xd0/0xd0 [ 117.958667][ T4268] ret_from_fork+0x1f/0x30 [ 117.963092][ T4268] [ 117.966179][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.973585][ T4268] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 117.987156][ T4268] Bluetooth: hci2: failed to register connection device [ 118.106758][ T4889] netlink: 'syz.0.139': attribute type 4 has an invalid length. [ 119.201029][ T4897] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 119.207855][ T4897] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.273125][ T4897] vhci_hcd vhci_hcd.0: Device attached [ 119.357229][ T4897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 119.432969][ T4902] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 119.439622][ T4902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.461371][ T4902] vhci_hcd vhci_hcd.0: Device attached [ 119.468593][ T4312] vhci_hcd: vhci_device speed not set [ 119.474514][ T4897] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 119.481222][ T4897] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.613678][ T4907] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 119.620350][ T4907] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.631864][ T4312] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 119.634151][ T4907] vhci_hcd vhci_hcd.0: Device attached [ 119.719996][ T4897] vhci_hcd vhci_hcd.0: Device attached [ 120.151789][ T4911] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 120.158433][ T4911] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.859833][ T4911] vhci_hcd vhci_hcd.0: Device attached [ 120.886664][ T4897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.935081][ T4897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.968650][ T4897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.049450][ T4897] vhci_hcd vhci_hcd.0: port 0 already used [ 121.106523][ T4914] vhci_hcd: connection closed [ 121.107899][ T4909] vhci_hcd: connection closed [ 121.114117][ T4643] vhci_hcd: stop threads [ 121.129336][ T4905] vhci_hcd: connection closed [ 121.130332][ T4903] vhci_hcd: connection closed [ 121.139992][ T4898] vhci_hcd: connection reset by peer [ 121.160390][ T4643] vhci_hcd: release socket [ 121.178956][ T4643] vhci_hcd: disconnect device [ 121.192064][ T4643] vhci_hcd: stop threads [ 121.210575][ T4643] vhci_hcd: release socket [ 121.215807][ T4643] vhci_hcd: disconnect device [ 121.221519][ T4643] vhci_hcd: stop threads [ 121.226519][ T4643] vhci_hcd: release socket [ 121.231252][ T4643] vhci_hcd: disconnect device [ 121.237965][ T4643] vhci_hcd: stop threads [ 121.243268][ T4643] vhci_hcd: release socket [ 121.248494][ T4643] vhci_hcd: disconnect device [ 121.254051][ T4643] vhci_hcd: stop threads [ 121.258870][ T4643] vhci_hcd: release socket [ 121.264361][ T4643] vhci_hcd: disconnect device [ 121.533598][ T4932] netlink: 'syz.0.146': attribute type 3 has an invalid length. [ 124.485524][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 124.805949][ T4312] vhci_hcd: vhci_device speed not set [ 127.352749][ T4334] usb usb40-port1: attempt power cycle [ 127.867462][ T5000] netlink: 'syz.1.163': attribute type 3 has an invalid length. [ 128.164332][ T4334] usb usb40-port1: unable to enumerate USB device [ 128.823704][ T5009] loop2: detected capacity change from 0 to 512 [ 128.897444][ T5009] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.070257][ T5009] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.171: bad orphan inode 15 [ 129.148858][ T5009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 129.997925][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 130.541945][ T5030] loop2: detected capacity change from 0 to 40427 [ 130.743643][ T5030] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 130.751453][ T5030] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 130.777123][ T5030] F2FS-fs (loop2): invalid crc value [ 130.853081][ T5030] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.899850][ T5030] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 130.906975][ T5030] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.179072][ T4334] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.507842][ T27] audit: type=1800 audit(1753294898.608:8): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.177" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 131.644811][ T4334] usb 4-1: device descriptor read/64, error -71 [ 131.698058][ T5043] Bluetooth: MGMT ver 1.22 [ 131.914881][ T4334] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.164851][ T4334] usb 4-1: device descriptor read/64, error -71 [ 132.269137][ T5052] netlink: 'syz.4.183': attribute type 3 has an invalid length. [ 132.285111][ T4334] usb usb4-port1: attempt power cycle [ 132.807817][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.918493][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.024892][ T4334] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.634904][ T4268] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 135.471978][ T5077] loop2: detected capacity change from 0 to 4096 [ 136.370719][ T5077] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 136.530208][ T5085] netlink: 76 bytes leftover after parsing attributes in process `syz.0.192'. [ 136.555365][ T5085] Device name cannot be null; rc = [-22] [ 136.622344][ T5085] kernel profiling enabled (shift: 9) [ 136.932865][ T5077] ntfs3: loop2: Failed to load $Secure. [ 137.799714][ T5087] loop1: detected capacity change from 0 to 131072 [ 137.877945][ T5087] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 137.889923][ T5087] F2FS-fs (loop1): invalid crc value [ 137.957218][ T5087] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.988242][ T5087] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 138.004171][ T5087] F2FS-fs (loop1): Failed to read root inode [ 138.164980][ T4334] usb 4-1: device descriptor read/8, error -110 [ 138.323204][ T5098] netlink: 420 bytes leftover after parsing attributes in process `syz.4.195'. [ 138.914795][ T4334] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.987074][ T4334] usb 4-1: device descriptor read/8, error -71 [ 139.105551][ T4334] usb usb4-port1: unable to enumerate USB device [ 140.015835][ T5116] loop0: detected capacity change from 0 to 40427 [ 140.032342][ T5116] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 140.040188][ T5116] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 140.079415][ T5116] F2FS-fs (loop0): invalid crc value [ 140.147836][ T5116] F2FS-fs (loop0): Found nat_bits in checkpoint [ 140.206848][ T5116] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 140.213953][ T5116] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.073659][ T27] audit: type=1800 audit(1753294908.168:9): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.201" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 142.225184][ T5143] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 143.610583][ T5161] netlink: 'syz.2.214': attribute type 4 has an invalid length. [ 144.797021][ T5174] netlink: 'syz.0.220': attribute type 12 has an invalid length. [ 145.775958][ T5194] loop3: detected capacity change from 0 to 64 [ 145.928638][ T5198] netlink: 76 bytes leftover after parsing attributes in process `syz.0.226'. [ 146.008328][ T5198] Device name cannot be null; rc = [-22] [ 146.785500][ T5204] netlink: 'syz.0.229': attribute type 4 has an invalid length. [ 148.345332][ T5213] loop0: detected capacity change from 0 to 40427 [ 148.357085][ T5213] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 148.365437][ T5213] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.413482][ T5213] F2FS-fs (loop0): invalid crc value [ 149.282272][ T5213] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.429544][ T5213] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 149.437606][ T5213] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.055832][ T27] audit: type=1800 audit(1753294917.108:10): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.231" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 150.516074][ T5240] loop1: detected capacity change from 0 to 32768 [ 150.574038][ T5241] input: syz1 as /devices/virtual/input/input5 [ 150.720146][ T5240] XFS (loop1): Mounting V5 Filesystem [ 151.161020][ T5240] XFS (loop1): Ending clean mount [ 151.174472][ T5240] XFS (loop1): Quotacheck needed: Please wait. [ 151.547917][ T5240] XFS (loop1): Quotacheck: Done. [ 152.305562][ T5263] netlink: 'syz.2.241': attribute type 4 has an invalid length. [ 152.866544][ T4273] XFS (loop1): Unmounting Filesystem [ 155.363070][ T5290] delete_channel: no stack [ 156.918519][ T5286] loop0: detected capacity change from 0 to 32768 [ 158.172136][ T5320] netlink: 76 bytes leftover after parsing attributes in process `syz.4.255'. [ 158.188494][ T5320] Device name cannot be null; rc = [-22] [ 158.287724][ T5324] netlink: 'syz.3.256': attribute type 4 has an invalid length. [ 160.554283][ T5354] netlink: 'syz.3.266': attribute type 3 has an invalid length. [ 161.284870][ T5368] netlink: 76 bytes leftover after parsing attributes in process `syz.0.271'. [ 161.312391][ T5368] Device name cannot be null; rc = [-22] [ 162.416661][ T5352] loop2: detected capacity change from 0 to 32768 [ 162.465716][ T5352] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.267 (5352) [ 162.893880][ T5352] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.987312][ T5352] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 163.031318][ T5352] BTRFS info (device loop2): enabling disk space caching [ 163.071796][ T5352] BTRFS info (device loop2): doing ref verification [ 163.101526][ T5352] BTRFS info (device loop2): use zlib compression, level 3 [ 163.184372][ T5352] BTRFS info (device loop2): force clearing of disk cache [ 163.222871][ T5393] netlink: 'syz.0.277': attribute type 4 has an invalid length. [ 163.341040][ T5352] BTRFS info (device loop2): setting nodatacow, compression disabled [ 163.713307][ T5352] BTRFS info (device loop2): doing ref verification [ 163.854273][ T5399] loop4: detected capacity change from 0 to 16 [ 163.870441][ T5399] erofs: Unknown parameter 'P' [ 164.185307][ T5352] BTRFS info (device loop2): disk space caching is enabled [ 164.598101][ T5352] BTRFS error (device loop2): open_ctree failed: -12 [ 164.823212][ T5420] netlink: 'syz.0.280': attribute type 3 has an invalid length. [ 165.023586][ T5427] loop1: detected capacity change from 0 to 2048 [ 165.215756][ T5427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.609257][ T27] audit: type=1800 audit(1753294932.708:11): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.283" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 167.479285][ T5439] netlink: 76 bytes leftover after parsing attributes in process `syz.1.287'. [ 167.491486][ T5439] Device name cannot be null; rc = [-22] [ 168.106698][ T5451] netlink: 'syz.1.290': attribute type 4 has an invalid length. [ 168.914759][ T5469] netlink: 'syz.3.294': attribute type 3 has an invalid length. [ 172.405800][ T5500] fuse: Unknown parameter 'gro0x0000000000000000' [ 172.415888][ T5500] loop4: detected capacity change from 0 to 16 [ 173.547417][ T5500] erofs: (device loop4): mounted with root inode @ nid 36. [ 173.562600][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 173.572305][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 173.582229][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.591564][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 173.600617][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.609908][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 173.619167][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 173.628205][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 173.637283][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.646649][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 173.655788][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.665182][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 173.674593][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 173.684005][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 173.693066][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 173.702140][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 173.711380][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 173.720515][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 173.729687][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.739394][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 173.748450][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.757795][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 173.767044][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 173.776604][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.785910][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 173.794957][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.804231][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 173.813307][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 173.822347][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.831643][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 173.840711][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.850015][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 173.859050][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.868385][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 173.877785][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.887177][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 173.896229][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 173.905360][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 173.914438][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 173.923512][ T5495] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.932897][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 173.941974][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 173.951026][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 173.960125][ T5495] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 173.969378][ T5495] syz.4.303: attempt to access beyond end of device [ 173.969378][ T5495] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 173.983379][ T5495] syz.4.303: attempt to access beyond end of device [ 173.983379][ T5495] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 173.997632][ T5495] syz.4.303: attempt to access beyond end of device [ 173.997632][ T5495] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 174.012052][ T5495] syz.4.303: attempt to access beyond end of device [ 174.012052][ T5495] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 174.025705][ T5495] syz.4.303: attempt to access beyond end of device [ 174.025705][ T5495] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 174.039079][ T5495] syz.4.303: attempt to access beyond end of device [ 174.039079][ T5495] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 175.070985][ T5513] netlink: 'syz.1.310': attribute type 4 has an invalid length. [ 175.296603][ T5515] netlink: 68 bytes leftover after parsing attributes in process `syz.4.311'. [ 179.583655][ T5561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.323'. [ 179.626125][ T5561] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 180.171214][ T5565] netlink: 'syz.2.324': attribute type 4 has an invalid length. [ 180.882722][ T5569] netlink: 'syz.4.325': attribute type 3 has an invalid length. [ 184.466870][ T5591] Device name cannot be null; rc = [-22] [ 185.370971][ T5602] loop2: detected capacity change from 0 to 40427 [ 185.392647][ T5602] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 185.400432][ T5602] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 185.417876][ T5602] F2FS-fs (loop2): invalid crc value [ 185.816781][ T5612] netlink: 'syz.1.337': attribute type 4 has an invalid length. [ 185.869046][ T5602] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.995224][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 185.995328][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 186.004901][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 186.007413][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 186.014762][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 186.202304][ T5602] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 186.209460][ T5602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 186.505178][ T27] audit: type=1800 audit(1753294953.608:12): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.335" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 187.116334][ T5624] netlink: 'syz.1.339': attribute type 3 has an invalid length. [ 189.942313][ T5645] loop1: detected capacity change from 0 to 64 [ 190.368635][ T27] audit: type=1800 audit(1753294957.458:13): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.345" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 191.388025][ T5662] loop3: detected capacity change from 0 to 40427 [ 191.397029][ T5662] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 191.404918][ T5662] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 191.417247][ T5662] F2FS-fs (loop3): invalid crc value [ 191.474551][ T5667] loop0: detected capacity change from 0 to 128 [ 191.622830][ T5667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 191.633625][ T5662] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.667775][ T5667] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.728277][ T5662] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 191.735542][ T5662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 191.979763][ T27] audit: type=1800 audit(1753294959.078:14): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 192.244090][ T27] audit: type=1800 audit(1753294959.338:15): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.348" name="file2" dev="loop0" ino=12 res=0 errno=0 [ 192.418869][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 192.484794][ T4272] Bluetooth: hci3: command 0x2016 tx timeout [ 193.024303][ T5680] netlink: 'syz.0.353': attribute type 3 has an invalid length. [ 194.159526][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165993][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.293595][ T5694] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 195.477601][ T5710] loop0: detected capacity change from 0 to 128 [ 195.744515][ T5710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.074290][ T5710] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.365734][ T27] audit: type=1800 audit(1753294964.468:16): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.362" name="file2" dev="loop0" ino=12 res=0 errno=0 [ 197.437276][ T5721] netlink: 'syz.3.366': attribute type 3 has an invalid length. [ 197.464651][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 198.834662][ T5739] netlink: 'syz.3.371': attribute type 4 has an invalid length. [ 198.991076][ T5739] ================================================================== [ 198.999178][ T5739] BUG: KASAN: use-after-free in sysfs_remove_file_ns+0x39/0x70 [ 199.006722][ T5739] Read of size 8 at addr ffff888079e34630 by task syz.3.371/5739 [ 199.014425][ T5739] [ 199.016750][ T5739] CPU: 0 PID: 5739 Comm: syz.3.371 Not tainted 6.1.146-syzkaller #0 [ 199.024718][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.034844][ T5739] Call Trace: [ 199.038214][ T5739] [ 199.041131][ T5739] dump_stack_lvl+0x168/0x22e [ 199.045802][ T5739] ? __lock_acquire+0x7c50/0x7c50 [ 199.050855][ T5739] ? show_regs_print_info+0x12/0x12 [ 199.056073][ T5739] ? load_image+0x3b0/0x3b0 [ 199.060604][ T5739] ? __virt_addr_valid+0x465/0x540 [ 199.065735][ T5739] ? sysfs_remove_file_ns+0x39/0x70 [ 199.070932][ T5739] print_report+0xa8/0x200 [ 199.075357][ T5739] kasan_report+0x10b/0x140 [ 199.079884][ T5739] ? sysfs_remove_file_ns+0x39/0x70 [ 199.085181][ T5739] sysfs_remove_file_ns+0x39/0x70 [ 199.090210][ T5739] bus_remove_driver+0x89/0x230 [ 199.095140][ T5739] ? sysfs_remove_groups+0x8a/0xa0 [ 199.100244][ T5739] comedi_device_detach+0x12d/0x6e0 [ 199.105442][ T5739] comedi_unlocked_ioctl+0xbd0/0xe90 [ 199.110726][ T5739] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 199.116087][ T5739] ? comedi_poll+0x8b0/0x8b0 [ 199.120665][ T5739] ? __schedule+0x1379/0x40d0 [ 199.125334][ T5739] ? release_firmware_map_entry+0x18a/0x18a [ 199.131213][ T5739] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 199.137182][ T5739] ? lock_chain_count+0x20/0x20 [ 199.142022][ T5739] ? asm_sysvec_call_function_single+0x16/0x20 [ 199.148161][ T5739] ? lockdep_hardirqs_on+0x94/0x140 [ 199.153346][ T5739] ? asm_sysvec_call_function_single+0x16/0x20 [ 199.159493][ T5739] ? comedi_poll+0x8b0/0x8b0 [ 199.164073][ T5739] ? __se_sys_ioctl+0xee/0x170 [ 199.168827][ T5739] ? comedi_poll+0x8b0/0x8b0 [ 199.173404][ T5739] __se_sys_ioctl+0xfa/0x170 [ 199.177985][ T5739] do_syscall_64+0x4c/0xa0 [ 199.182393][ T5739] ? clear_bhb_loop+0x60/0xb0 [ 199.187060][ T5739] ? clear_bhb_loop+0x60/0xb0 [ 199.191723][ T5739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.197693][ T5739] RIP: 0033:0x7fe2daf8e9a9 [ 199.202104][ T5739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.221795][ T5739] RSP: 002b:00007fe2dbd4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.230206][ T5739] RAX: ffffffffffffffda RBX: 00007fe2db1b6080 RCX: 00007fe2daf8e9a9 [ 199.238171][ T5739] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 199.246136][ T5739] RBP: 00007fe2db010d69 R08: 0000000000000000 R09: 0000000000000000 [ 199.254093][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.262057][ T5739] R13: 0000000000000000 R14: 00007fe2db1b6080 R15: 00007ffcd1b45278 [ 199.270023][ T5739] [ 199.273028][ T5739] [ 199.275334][ T5739] Allocated by task 4714: [ 199.279652][ T5739] kasan_set_track+0x4b/0x70 [ 199.284237][ T5739] __kasan_kmalloc+0x8e/0xa0 [ 199.288853][ T5739] bus_add_driver+0xda/0x5a0 [ 199.293436][ T5739] driver_register+0x32d/0x430 [ 199.298190][ T5739] c6xdigio_attach+0x90/0x880 [ 199.302857][ T5739] comedi_device_attach+0x515/0x650 [ 199.308052][ T5739] comedi_unlocked_ioctl+0x5ec/0xe90 [ 199.313323][ T5739] __se_sys_ioctl+0xfa/0x170 [ 199.317908][ T5739] do_syscall_64+0x4c/0xa0 [ 199.322311][ T5739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.328196][ T5739] [ 199.330507][ T5739] Freed by task 5702: [ 199.334475][ T5739] kasan_set_track+0x4b/0x70 [ 199.339060][ T5739] kasan_save_free_info+0x2d/0x50 [ 199.344075][ T5739] ____kasan_slab_free+0x126/0x1e0 [ 199.349172][ T5739] slab_free_freelist_hook+0x131/0x1a0 [ 199.354706][ T5739] __kmem_cache_free+0xb6/0x1f0 [ 199.359543][ T5739] kobject_put+0x21d/0x460 [ 199.363947][ T5739] bus_remove_driver+0x13c/0x230 [ 199.368872][ T5739] comedi_device_detach+0x12d/0x6e0 [ 199.374065][ T5739] comedi_unlocked_ioctl+0xbd0/0xe90 [ 199.379341][ T5739] __se_sys_ioctl+0xfa/0x170 [ 199.383931][ T5739] do_syscall_64+0x4c/0xa0 [ 199.388420][ T5739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.394308][ T5739] [ 199.396619][ T5739] Last potentially related work creation: [ 199.402319][ T5739] kasan_save_stack+0x3a/0x60 [ 199.406991][ T5739] __kasan_record_aux_stack+0xb2/0xc0 [ 199.412369][ T5739] call_rcu+0x154/0x980 [ 199.416516][ T5739] fib_create_info+0x1871/0x2490 [ 199.421441][ T5739] fib_table_insert+0xc3/0x1b50 [ 199.426277][ T5739] fib_magic+0x2c1/0x390 [ 199.430513][ T5739] fib_add_ifaddr+0x140/0x5e0 [ 199.435176][ T5739] fib_netdev_event+0x361/0x470 [ 199.440016][ T5739] raw_notifier_call_chain+0xcb/0x160 [ 199.445379][ T5739] __dev_notify_flags+0x178/0x2d0 [ 199.450391][ T5739] dev_change_flags+0xe3/0x1a0 [ 199.455139][ T5739] do_setlink+0xc31/0x3c40 [ 199.459548][ T5739] rtnl_newlink+0x17d6/0x1ff0 [ 199.464219][ T5739] rtnetlink_rcv_msg+0x79b/0xed0 [ 199.469143][ T5739] netlink_rcv_skb+0x1de/0x420 [ 199.473893][ T5739] netlink_unicast+0x74d/0x8d0 [ 199.478645][ T5739] netlink_sendmsg+0x89e/0xbc0 [ 199.483395][ T5739] __sys_sendto+0x44f/0x5c0 [ 199.487883][ T5739] __x64_sys_sendto+0xda/0xf0 [ 199.492544][ T5739] do_syscall_64+0x4c/0xa0 [ 199.496942][ T5739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.502922][ T5739] [ 199.505227][ T5739] The buggy address belongs to the object at ffff888079e34600 [ 199.505227][ T5739] which belongs to the cache kmalloc-256 of size 256 [ 199.519267][ T5739] The buggy address is located 48 bytes inside of [ 199.519267][ T5739] 256-byte region [ffff888079e34600, ffff888079e34700) [ 199.532439][ T5739] [ 199.534746][ T5739] The buggy address belongs to the physical page: [ 199.541152][ T5739] page:ffffea0001e78d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079e35400 pfn:0x79e34 [ 199.552587][ T5739] head:ffffea0001e78d00 order:1 compound_mapcount:0 compound_pincount:0 [ 199.560922][ T5739] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 199.569333][ T5739] raw: 00fff00000010200 ffffea0001e65088 ffffea0001f27c88 ffff888017441b40 [ 199.577920][ T5739] raw: ffff888079e35400 000000000010000f 00000001ffffffff 0000000000000000 [ 199.586570][ T5739] page dumped because: kasan: bad access detected [ 199.592973][ T5739] page_owner tracks the page as allocated [ 199.598675][ T5739] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4264, tgid 4264 (syz-executor), ts 65185793732, free_ts 65151042205 [ 199.620020][ T5739] post_alloc_hook+0x173/0x1a0 [ 199.624774][ T5739] get_page_from_freelist+0x1a26/0x1ac0 [ 199.630308][ T5739] __alloc_pages+0x1df/0x4e0 [ 199.634893][ T5739] alloc_slab_page+0x5d/0x160 [ 199.639559][ T5739] new_slab+0x87/0x2c0 [ 199.643614][ T5739] ___slab_alloc+0xbc6/0x1220 [ 199.648284][ T5739] __kmem_cache_alloc_node+0x1a0/0x260 [ 199.653734][ T5739] __kmalloc+0xa0/0x240 [ 199.657886][ T5739] fib_create_info+0xa53/0x2490 [ 199.662719][ T5739] fib_table_insert+0xc3/0x1b50 [ 199.667559][ T5739] fib_magic+0x2c1/0x390 [ 199.671793][ T5739] fib_add_ifaddr+0x3f7/0x5e0 [ 199.676462][ T5739] fib_netdev_event+0x361/0x470 [ 199.681301][ T5739] raw_notifier_call_chain+0xcb/0x160 [ 199.686667][ T5739] __dev_notify_flags+0x178/0x2d0 [ 199.691761][ T5739] dev_change_flags+0xe3/0x1a0 [ 199.696509][ T5739] page last free stack trace: [ 199.701169][ T5739] free_unref_page_prepare+0x8b4/0x9a0 [ 199.706617][ T5739] free_unref_page+0x2e/0x3f0 [ 199.711280][ T5739] qlist_free_all+0x76/0xe0 [ 199.715767][ T5739] kasan_quarantine_reduce+0x144/0x160 [ 199.721301][ T5739] __kasan_slab_alloc+0x1e/0x80 [ 199.726148][ T5739] slab_post_alloc_hook+0x4b/0x480 [ 199.731266][ T5739] __kmem_cache_alloc_node+0x140/0x260 [ 199.736712][ T5739] __kmalloc+0xa0/0x240 [ 199.740861][ T5739] fib6_info_alloc+0x2e/0xe0 [ 199.745445][ T5739] ip6_route_info_create+0x44f/0x1210 [ 199.750803][ T5739] ip6_route_add+0x24/0x130 [ 199.755292][ T5739] addrconf_add_dev+0x253/0x330 [ 199.760133][ T5739] addrconf_init_auto_addrs+0x601/0xa60 [ 199.765672][ T5739] addrconf_notify+0xaca/0xf40 [ 199.770424][ T5739] raw_notifier_call_chain+0xcb/0x160 [ 199.775800][ T5739] netdev_state_change+0xd2/0x140 [ 199.780816][ T5739] [ 199.783123][ T5739] Memory state around the buggy address: [ 199.788753][ T5739] ffff888079e34500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.796816][ T5739] ffff888079e34580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.804867][ T5739] >ffff888079e34600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.812912][ T5739] ^ [ 199.818541][ T5739] ffff888079e34680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.826587][ T5739] ffff888079e34700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 199.834638][ T5739] ================================================================== [ 199.859428][ T5739] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 199.866663][ T5739] CPU: 0 PID: 5739 Comm: syz.3.371 Not tainted 6.1.146-syzkaller #0 [ 199.874644][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.884706][ T5739] Call Trace: [ 199.888000][ T5739] [ 199.890934][ T5739] dump_stack_lvl+0x168/0x22e [ 199.895621][ T5739] ? memcpy+0x3c/0x60 [ 199.899623][ T5739] ? show_regs_print_info+0x12/0x12 [ 199.904836][ T5739] ? load_image+0x3b0/0x3b0 [ 199.909514][ T5739] panic+0x2c9/0x710 [ 199.913441][ T5739] ? bpf_jit_dump+0xd0/0xd0 [ 199.917971][ T5739] ? check_panic_on_warn+0x6c/0xa0 [ 199.923096][ T5739] check_panic_on_warn+0x80/0xa0 [ 199.928046][ T5739] ? sysfs_remove_file_ns+0x39/0x70 [ 199.933255][ T5739] end_report+0x66/0x110 [ 199.937531][ T5739] kasan_report+0x118/0x140 [ 199.942069][ T5739] ? sysfs_remove_file_ns+0x39/0x70 [ 199.947460][ T5739] sysfs_remove_file_ns+0x39/0x70 [ 199.952507][ T5739] bus_remove_driver+0x89/0x230 [ 199.957377][ T5739] ? sysfs_remove_groups+0x8a/0xa0 [ 199.962620][ T5739] comedi_device_detach+0x12d/0x6e0 [ 199.967846][ T5739] comedi_unlocked_ioctl+0xbd0/0xe90 [ 199.973163][ T5739] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 199.978559][ T5739] ? comedi_poll+0x8b0/0x8b0 [ 199.983160][ T5739] ? __schedule+0x1379/0x40d0 [ 199.987947][ T5739] ? release_firmware_map_entry+0x18a/0x18a [ 199.993864][ T5739] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 199.999861][ T5739] ? lock_chain_count+0x20/0x20 [ 200.004726][ T5739] ? asm_sysvec_call_function_single+0x16/0x20 [ 200.010890][ T5739] ? lockdep_hardirqs_on+0x94/0x140 [ 200.016080][ T5739] ? asm_sysvec_call_function_single+0x16/0x20 [ 200.022228][ T5739] ? comedi_poll+0x8b0/0x8b0 [ 200.026816][ T5739] ? __se_sys_ioctl+0xee/0x170 [ 200.031571][ T5739] ? comedi_poll+0x8b0/0x8b0 [ 200.036152][ T5739] __se_sys_ioctl+0xfa/0x170 [ 200.040742][ T5739] do_syscall_64+0x4c/0xa0 [ 200.045251][ T5739] ? clear_bhb_loop+0x60/0xb0 [ 200.049939][ T5739] ? clear_bhb_loop+0x60/0xb0 [ 200.054638][ T5739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.060526][ T5739] RIP: 0033:0x7fe2daf8e9a9 [ 200.064936][ T5739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.084551][ T5739] RSP: 002b:00007fe2dbd4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.092961][ T5739] RAX: ffffffffffffffda RBX: 00007fe2db1b6080 RCX: 00007fe2daf8e9a9 [ 200.100930][ T5739] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 200.108902][ T5739] RBP: 00007fe2db010d69 R08: 0000000000000000 R09: 0000000000000000 [ 200.116860][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.125078][ T5739] R13: 0000000000000000 R14: 00007fe2db1b6080 R15: 00007ffcd1b45278 [ 200.133040][ T5739] [ 200.136301][ T5739] Kernel Offset: disabled [ 200.140615][ T5739] Rebooting in 86400 seconds..