last executing test programs: 17.560497692s ago: executing program 4 (id=517): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000040)=0xd, 0x6) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="003202905dfd", 'netpci0\x00'}}, 0x1e) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001d80), 0x0, 0x48850) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x806, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r2, r1, 0x80000) 15.978670437s ago: executing program 4 (id=520): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) fchdir(0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300), 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="4cf80c33db58d6f33b63b382a0e9cd16c86d6c135744495e689f0308505dc9dc7d", 0x21) 15.011268124s ago: executing program 0 (id=522): mlockall(0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8010) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_io_uring_submit(r1, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.903633492s ago: executing program 4 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0xc9102120, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x218}, 0x18) 11.636276553s ago: executing program 4 (id=527): socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) 9.986403944s ago: executing program 0 (id=531): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000040)=0xd, 0x6) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="003202905dfd", 'netpci0\x00'}}, 0x1e) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001d80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4004004}], 0x1, 0x48850) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x806, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r2, r1, 0x80000) 7.708115066s ago: executing program 3 (id=535): r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) io_uring_setup(0x25b4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) socket$unix(0x1, 0x1, 0x0) 7.681948598s ago: executing program 2 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r1, 0x89e2, 0x0) r2 = gettid() ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000ca38045ab9fee3fa77ad7e7e683900008c000000060a010400000000000000000100000008000b400000000064000480340001800b00010065787468647200002400028008000140000000080004400000002205000200070000002c0001800a00010071756575650000001c0002800600034000020000060003400000000008000440000000040900010073797a3000000000140000001100010000000000000000000700000a"], 0x100}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x5f) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r5, &(0x7f0000007480), 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, 0x0, 0x0) 7.045494709s ago: executing program 0 (id=538): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYBLOB="01002dbd7000000003008100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff0000060066f0ff0200102200330008030000080211000000080211000001ffffffffffff0000ffffffffffff0000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.348614864s ago: executing program 3 (id=539): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendfile(r0, r1, 0x0, 0x106f) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_GET_COALESCE(r3, 0x0, 0x4044880) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000306010100000000001a0000020000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 4.937728896s ago: executing program 2 (id=541): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000003c0)='./file0\x00', 0x559002, 0x8) 4.937188077s ago: executing program 1 (id=542): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x535}], 0x1}}], 0x1, 0x240080e4) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014"], 0x38}}, 0x0) 4.885521691s ago: executing program 0 (id=543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = dup(0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000a3359a1631b9570bc19451a1ab929a9028b08e7791ede8dfa1f5b0ba"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_open_dev$video(&(0x7f0000000b40), 0x80000001, 0x189200) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="080000030000edff090000dfff"], 0x5000) socket$inet_tcp(0x2, 0x1, 0x0) 4.614279482s ago: executing program 4 (id=544): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x2000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a410400000000000000000100000708000b4000000000400004803c00018008000100636d7000300002801c00038005000100f41c295a5a6a65593d89a9057aa772a700000000080001400000050008000240"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4.562853607s ago: executing program 1 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed116837"], 0x1c}}, 0x0) 4.497492162s ago: executing program 3 (id=546): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpid() openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x40000) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) close_range(r0, 0xffffffffffffffff, 0x0) 3.754397101s ago: executing program 0 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000180)) 3.669154348s ago: executing program 2 (id=548): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000040)=0xd, 0x6) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="003202905dfd", 'netpci0\x00'}}, 0x1e) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001d80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4004004}], 0x1, 0x48850) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x806, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r2, r1, 0x80000) 3.402019829s ago: executing program 1 (id=549): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) fchdir(0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300), 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="4cf80c33db58d6f33b63b382a0e9cd16c86d6c135744495e689f0308505dc9dc7d", 0x21) 3.400789749s ago: executing program 3 (id=550): r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) io_uring_setup(0x25b4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) socket$unix(0x1, 0x1, 0x0) 2.432998536s ago: executing program 4 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r1, 0x89e2, 0x0) r2 = gettid() ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)="47221ada7bad185b39ed6435c60c3a7092064e5ee740cd7332fc6c6f85f49ed432f73ccf4b1d5129b3ba8b68e30928bbd4887f44b3b28e096a26217004b9941ea08cb28f2cc277f263362d543065a75bbbf300dd09c44af918db0367774403edea1b51d8725aa842e464ea9f1288bae64c71925b1ef1ecb4469b0218986b", 0x7e}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x5f) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r5, &(0x7f0000007480), 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, 0x0, 0x0) 2.333687724s ago: executing program 2 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0xc9102120, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x218}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 2.295568107s ago: executing program 1 (id=553): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYBLOB="01002dbd7000000003008100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff0000060066f0ff0200102200330008030000080211000000080211000001ffffffffffff0000ffffffffffff0000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.149889369s ago: executing program 0 (id=554): socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) 2.097541563s ago: executing program 3 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x535}], 0x1}}], 0x1, 0x240080e4) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014"], 0x38}}, 0x0) 2.060481446s ago: executing program 1 (id=556): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendfile(r0, r1, 0x0, 0x106f) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_GET_COALESCE(r3, 0x0, 0x4044880) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000306010100000000001a0000020000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 1.195739055s ago: executing program 2 (id=557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = dup(0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000a3359a1631b9570bc19451a1ab929a9028b08e7791ede8dfa1f5b0ba"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_open_dev$video(&(0x7f0000000b40), 0x80000001, 0x189200) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="080000030000edff090000dfff"], 0x5000) socket$inet_tcp(0x2, 0x1, 0x0) 9.548939ms ago: executing program 2 (id=558): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x38, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendfile(r0, r1, 0x0, 0x106f) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_GET_COALESCE(r4, 0x0, 0x4044880) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000306010100000000001a0000020000"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 790.94µs ago: executing program 3 (id=559): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000003c0)='./file0\x00', 0x559002, 0x8) 0s ago: executing program 1 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed116837"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 73.728791][ T4253] cgroup: Unknown subsys name 'net' [ 73.865908][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.444629][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.004980][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.005108][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.013984][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.020827][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.035961][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.036207][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.044038][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.051043][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.058611][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.065762][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.072393][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.078848][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.086757][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.095002][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.100555][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.108485][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.115894][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.122260][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.130022][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.135866][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.150957][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.158527][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.160305][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.206430][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.239785][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.248435][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.256406][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.264476][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.273648][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.281136][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.760644][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 77.775452][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 77.805060][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 77.854234][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 77.920906][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 78.022424][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.029819][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.038773][ T4263] device bridge_slave_0 entered promiscuous mode [ 78.065179][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.072740][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.081551][ T4274] device bridge_slave_0 entered promiscuous mode [ 78.094366][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.102064][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.111014][ T4263] device bridge_slave_1 entered promiscuous mode [ 78.129509][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.136778][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.145473][ T4265] device bridge_slave_0 entered promiscuous mode [ 78.153899][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.161516][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.169956][ T4274] device bridge_slave_1 entered promiscuous mode [ 78.193290][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.200548][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.208865][ T4264] device bridge_slave_0 entered promiscuous mode [ 78.216794][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.224195][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.232439][ T4265] device bridge_slave_1 entered promiscuous mode [ 78.272312][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.279962][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.288025][ T4264] device bridge_slave_1 entered promiscuous mode [ 78.307079][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.327663][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.365268][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.375257][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.382752][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.391006][ T4277] device bridge_slave_0 entered promiscuous mode [ 78.402152][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.413121][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.424461][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.442160][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.450200][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.458604][ T4277] device bridge_slave_1 entered promiscuous mode [ 78.475680][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.496182][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.550897][ T4264] team0: Port device team_slave_0 added [ 78.560014][ T4274] team0: Port device team_slave_0 added [ 78.578031][ T4263] team0: Port device team_slave_0 added [ 78.595861][ T4264] team0: Port device team_slave_1 added [ 78.609447][ T4274] team0: Port device team_slave_1 added [ 78.617192][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.627879][ T4263] team0: Port device team_slave_1 added [ 78.636507][ T4265] team0: Port device team_slave_0 added [ 78.645383][ T4265] team0: Port device team_slave_1 added [ 78.668488][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.737542][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.745109][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.773621][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.786524][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.793778][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.820837][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.841672][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.848768][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.875769][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.888410][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.901130][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.928357][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.941502][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.948598][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.976315][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.988196][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.995502][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.022063][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.035837][ T4277] team0: Port device team_slave_0 added [ 79.044277][ T4277] team0: Port device team_slave_1 added [ 79.051285][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.058537][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.085915][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.098867][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.106342][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.133909][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.199872][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 79.224548][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.231996][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.258932][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.279294][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 79.279314][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 79.279515][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 79.317147][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.324477][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.352268][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.363408][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 79.374034][ T4265] device hsr_slave_0 entered promiscuous mode [ 79.382483][ T4265] device hsr_slave_1 entered promiscuous mode [ 79.393155][ T4263] device hsr_slave_0 entered promiscuous mode [ 79.401008][ T4263] device hsr_slave_1 entered promiscuous mode [ 79.407969][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.416314][ T4263] Cannot create hsr debugfs directory [ 79.425468][ T4264] device hsr_slave_0 entered promiscuous mode [ 79.432688][ T4264] device hsr_slave_1 entered promiscuous mode [ 79.439724][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.447596][ T4264] Cannot create hsr debugfs directory [ 79.457390][ T4274] device hsr_slave_0 entered promiscuous mode [ 79.465692][ T4274] device hsr_slave_1 entered promiscuous mode [ 79.472791][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.480980][ T4274] Cannot create hsr debugfs directory [ 79.617513][ T4277] device hsr_slave_0 entered promiscuous mode [ 79.624511][ T4277] device hsr_slave_1 entered promiscuous mode [ 79.631686][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.639612][ T4277] Cannot create hsr debugfs directory [ 79.922509][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.934231][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.945746][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.957117][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.037779][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.052453][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.066458][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.080587][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.142726][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.173002][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.203178][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.229772][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.243655][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.285246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.295338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.310814][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.345224][ T4263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.377101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.386934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.396816][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.404535][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.416830][ T4263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.434311][ T4263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.444708][ T4263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.460066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.469637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.480981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.489820][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.497159][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.521579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.534443][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.546038][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.561617][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.586128][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.602352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.614919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.625508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.637202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.675777][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.687898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.697825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.711478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.720778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.735207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.743961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.771825][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.784039][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.817668][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.841067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.851082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.860142][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.868114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.876547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.886001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.896590][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.903853][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.917044][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.946874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.955508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.976870][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.986153][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.993361][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.033860][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.053081][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.062309][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.075328][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.082864][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.102089][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.122818][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.135150][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.144973][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.154277][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.161583][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.171819][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.204035][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.223682][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.236365][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.253869][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.265449][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.278803][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.287679][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 81.301082][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.315132][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.325801][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.336066][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.345435][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.359507][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 81.365799][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 81.369132][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 81.394467][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.404974][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.417147][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.428219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.437811][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.443745][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 81.451545][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.462343][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.472303][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.482402][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.489774][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.497726][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.506496][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.518469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.528867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.553071][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.565619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.575747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.584830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.595172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.604091][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.611442][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.634823][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.646031][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.671904][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.691855][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.701658][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.718490][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.728037][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.743389][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.753837][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.765312][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.778684][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.796956][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.816767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.828393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.837496][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.844764][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.854911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.864837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.898259][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.934541][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.960992][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.975391][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.987080][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.019392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.035088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.056631][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.064018][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.096497][ T4263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.107872][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.140281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.150186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.161884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.172337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.181470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.190862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.201042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.210027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.218868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.227525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.277750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.293338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.306051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.318586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.331642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.342083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.351516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.360434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.375684][ T4265] device veth0_vlan entered promiscuous mode [ 82.395335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.405698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.418444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.427677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.437981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.446753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.468456][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.503425][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.528791][ T4265] device veth1_vlan entered promiscuous mode [ 82.617636][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.629936][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.650032][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.666095][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.715554][ T4265] device veth0_macvtap entered promiscuous mode [ 82.734180][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.744229][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.771130][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.786310][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.798648][ T4264] device veth0_vlan entered promiscuous mode [ 82.827345][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.835956][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.845107][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.861528][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.874872][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.883638][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.891972][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.910152][ T4264] device veth1_vlan entered promiscuous mode [ 82.924129][ T4265] device veth1_macvtap entered promiscuous mode [ 82.952297][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.973957][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.030422][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.047771][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.059386][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.068357][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.086313][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.098477][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.108609][ T4264] device veth0_macvtap entered promiscuous mode [ 83.117485][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.127475][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.137290][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.147023][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.156198][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.173282][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.183044][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.192863][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.202896][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.237064][ T4264] device veth1_macvtap entered promiscuous mode [ 83.251220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.260910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.270574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.280557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.289840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.302101][ T4274] device veth0_vlan entered promiscuous mode [ 83.332035][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.342493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.353428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.367265][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 83.375874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.391958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.437008][ T4274] device veth1_vlan entered promiscuous mode [ 83.444256][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 83.450511][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 83.456591][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 83.514843][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.526259][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 83.538910][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.555439][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.586734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.605137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.616462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.629930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.645492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.655171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.666576][ T4263] device veth0_vlan entered promiscuous mode [ 83.675855][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.687694][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.701434][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.738697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.750669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.760966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.770768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.793783][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.810020][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.818790][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.833952][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.887418][ T4263] device veth1_vlan entered promiscuous mode [ 83.897659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.912863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.925316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.941622][ T4274] device veth0_macvtap entered promiscuous mode [ 83.953989][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.963593][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.976284][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.988445][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.043245][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.056681][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.076907][ T4274] device veth1_macvtap entered promiscuous mode [ 84.100618][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.114251][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.123365][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.146905][ T4263] device veth0_macvtap entered promiscuous mode [ 84.183015][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.196437][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.229970][ T4263] device veth1_macvtap entered promiscuous mode [ 84.247528][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.257117][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.268043][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.281114][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.291551][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.302471][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.315191][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.336629][ T4277] device veth0_vlan entered promiscuous mode [ 84.365491][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.378655][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.396855][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.407194][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.417445][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.427844][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.448367][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.449803][ T4379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.467210][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.500733][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.512351][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.525847][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.581964][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.594213][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.604914][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.617640][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.628524][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.640544][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.652654][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.660450][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.672600][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.681902][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.691899][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.704117][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.713817][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.731012][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.764248][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.787323][ T4277] device veth1_vlan entered promiscuous mode [ 84.900290][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.947429][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.958497][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.969862][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.980772][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.991101][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.002761][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.015468][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.028673][ T4263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.038808][ T4263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.040576][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.074756][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.250919][ T4263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.294437][ T4263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.439847][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 85.520427][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 85.527548][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 85.527593][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 85.659625][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.671082][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 85.672954][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.689181][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.755886][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.772232][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.873482][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.898057][ T4277] device veth0_macvtap entered promiscuous mode [ 85.926704][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.941372][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.952307][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.987808][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.004912][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.014226][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.027267][ T4277] device veth1_macvtap entered promiscuous mode [ 86.060457][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.074266][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.087593][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.109441][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.119928][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.132040][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.142322][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.153476][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.165821][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.177013][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.189988][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.202522][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.213785][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.224681][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.236465][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.247453][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.259444][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.270424][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.281311][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.295277][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.309969][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.325390][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.336928][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.350249][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.359207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.383533][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.387703][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.431268][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.465160][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.485140][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.536486][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.586611][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.695236][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.711166][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.832016][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.881957][ T7] cfg80211: failed to load regulatory.db [ 86.960014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 88.609687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 88.974591][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.027479][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.323116][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.359380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.404233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.506617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.601924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.712418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.786112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.023804][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.099952][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.142762][ T4423] user requested TSC rate below hardware speed [ 90.155183][ T4423] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 90.223390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.400308][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.452259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.895163][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 99.799129][ T4323] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.874642][ T4483] IPVS: Error joining to the multicast group [ 100.063114][ T4470] syz.2.19 (4470): drop_caches: 2 [ 100.317869][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 100.338842][ T4323] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 100.356220][ T4323] usb 5-1: config 0 has no interface number 0 [ 100.376551][ T4323] usb 5-1: config 0 interface 89 has no altsetting 0 [ 100.504181][ T4323] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 100.514483][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.525482][ T4323] usb 5-1: Product: syz [ 100.649537][ T4323] usb 5-1: Manufacturer: syz [ 100.667316][ T4323] usb 5-1: SerialNumber: syz [ 100.856745][ T4323] usb 5-1: config 0 descriptor?? [ 101.636414][ T4323] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 101.657556][ T4323] em28xx 5-1:0.89: Video interface 89 found: bulk [ 101.903608][ T4323] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 103.515490][ T4323] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 103.613122][ T4323] em28xx 5-1:0.89: board has no eeprom [ 103.705441][ T4323] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 103.738789][ T4323] em28xx 5-1:0.89: analog set to bulk mode. [ 104.143699][ T4323] usb 5-1: USB disconnect, device number 2 [ 104.158647][ T4323] em28xx 5-1:0.89: Disconnecting em28xx [ 104.166324][ T4331] em28xx 5-1:0.89: Registering V4L2 extension [ 104.379065][ T4390] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.767289][ T4531] IPVS: Error joining to the multicast group [ 105.470202][ T4390] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.483750][ T4390] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.545967][ T4331] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 105.557801][ T4331] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 105.609206][ T4331] em28xx 5-1:0.89: No AC97 audio processor [ 106.499537][ T4527] ALSA: mixer_oss: invalid OSS volume '' [ 106.505792][ T4390] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.515202][ T4390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.621977][ T4331] usb 5-1: Decoder not found [ 106.679954][ T4331] em28xx 5-1:0.89: failed to create media graph [ 106.756957][ T4331] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 106.780352][ T4390] usb 3-1: can't set config #27, error -71 [ 106.826848][ T4390] usb 3-1: USB disconnect, device number 2 [ 106.869744][ T4331] em28xx 5-1:0.89: Registering snapshot button... [ 106.975782][ T4543] syz.1.39 (4543): drop_caches: 2 [ 106.980695][ T4331] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input5 [ 107.071978][ T4331] em28xx 5-1:0.89: Remote control support is not available for this card. [ 107.115766][ T4323] em28xx 5-1:0.89: Closing input extension [ 107.686094][ T4552] Zero length message leads to an empty skb [ 109.308773][ T4323] em28xx 5-1:0.89: Deregistering snapshot button [ 110.842931][ T4323] em28xx 5-1:0.89: Freeing device [ 111.165383][ T4572] IPVS: Error joining to the multicast group [ 113.249256][ T4331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.873840][ T4601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 114.641506][ T4331] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.696579][ T4331] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.717415][ T4331] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.737969][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.968837][ T4331] usb 3-1: can't set config #27, error -71 [ 114.982398][ T4331] usb 3-1: USB disconnect, device number 3 [ 115.577557][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 118.505678][ T4636] IPVS: Error joining to the multicast group [ 119.859076][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.069187][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 120.674974][ T14] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 120.728166][ T14] usb 5-1: config 0 has no interface number 0 [ 120.812664][ T14] usb 5-1: config 0 interface 89 has no altsetting 0 [ 121.595834][ T14] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 121.747325][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.014666][ T14] usb 5-1: Product: syz [ 122.019033][ T14] usb 5-1: Manufacturer: syz [ 122.023808][ T14] usb 5-1: SerialNumber: syz [ 122.064437][ T14] usb 5-1: config 0 descriptor?? [ 122.075012][ T14] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 122.116743][ T14] em28xx 5-1:0.89: Video interface 89 found: bulk [ 122.228105][ T4659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.68'. [ 122.693949][ T14] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 123.559058][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.591323][ T14] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 123.601017][ T14] em28xx 5-1:0.89: board has no eeprom [ 123.679264][ T14] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 123.698526][ T14] em28xx 5-1:0.89: analog set to bulk mode. [ 123.719428][ T4390] em28xx 5-1:0.89: Registering V4L2 extension [ 123.768047][ T14] usb 5-1: USB disconnect, device number 3 [ 123.822144][ T14] em28xx 5-1:0.89: Disconnecting em28xx [ 123.939955][ T4390] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 123.947394][ T4390] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 123.962363][ T4390] em28xx 5-1:0.89: No AC97 audio processor [ 123.974996][ T4390] usb 5-1: Decoder not found [ 123.983947][ T4390] em28xx 5-1:0.89: failed to create media graph [ 123.995567][ T4390] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 124.012833][ T4390] em28xx 5-1:0.89: Registering snapshot button... [ 124.027753][ T4390] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6 [ 124.047523][ T4390] em28xx 5-1:0.89: Remote control support is not available for this card. [ 124.056841][ T14] em28xx 5-1:0.89: Closing input extension [ 124.069773][ T14] em28xx 5-1:0.89: Deregistering snapshot button [ 124.094534][ T14] em28xx 5-1:0.89: Freeing device [ 124.222420][ T22] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 124.262587][ T22] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 124.319410][ T22] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.378352][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.387766][ T4677] IPVS: Error joining to the multicast group [ 124.450678][ T4663] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.678655][ T14] usb 1-1: USB disconnect, device number 2 [ 125.932891][ T4691] binder: BINDER_SET_CONTEXT_MGR already set [ 126.009193][ T4691] binder: 4688:4691 ioctl 4018620d 200000004a80 returned -16 [ 128.237685][ T4709] syz.4.80 (4709): drop_caches: 2 [ 128.849670][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.150286][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 129.170388][ T14] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 129.179027][ T14] usb 5-1: config 0 has no interface number 0 [ 129.185639][ T14] usb 5-1: config 0 interface 89 has no altsetting 0 [ 129.219612][ T4723] IPVS: Error joining to the multicast group [ 129.240955][ T14] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 129.268326][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.291428][ T14] usb 5-1: Product: syz [ 129.304319][ T14] usb 5-1: Manufacturer: syz [ 129.324477][ T14] usb 5-1: SerialNumber: syz [ 129.365199][ T14] usb 5-1: config 0 descriptor?? [ 129.415425][ T14] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 129.452399][ T14] em28xx 5-1:0.89: Video interface 89 found: bulk [ 130.284720][ T14] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 130.465272][ T4734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 131.433664][ T14] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 132.962878][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.969985][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.457648][ T14] em28xx 5-1:0.89: board has no eeprom [ 133.539208][ T14] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 133.547596][ T14] em28xx 5-1:0.89: analog set to bulk mode. [ 133.569354][ T14] usb 5-1: USB disconnect, device number 4 [ 133.576096][ T14] em28xx 5-1:0.89: Disconnecting em28xx [ 133.582524][ T4390] em28xx 5-1:0.89: Registering V4L2 extension [ 133.997517][ T4390] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 134.062217][ T4390] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 134.328547][ T4390] em28xx 5-1:0.89: No AC97 audio processor [ 134.584717][ T4390] usb 5-1: Decoder not found [ 134.608539][ T4390] em28xx 5-1:0.89: failed to create media graph [ 134.624254][ T4390] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 134.637771][ T4390] em28xx 5-1:0.89: Registering snapshot button... [ 134.733459][ T4390] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input7 [ 134.759791][ T4390] em28xx 5-1:0.89: Remote control support is not available for this card. [ 134.849629][ T14] em28xx 5-1:0.89: Closing input extension [ 134.878753][ T14] em28xx 5-1:0.89: Deregistering snapshot button [ 135.695099][ T14] em28xx 5-1:0.89: Freeing device [ 135.839866][ T4766] syz.2.97 (4766): drop_caches: 2 [ 136.405240][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.399087][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.669084][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 137.676275][ T26] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 137.699472][ T26] usb 2-1: config 0 has no interface number 0 [ 137.707166][ T26] usb 2-1: config 0 interface 89 has no altsetting 0 [ 137.733214][ T26] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 137.769053][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.777361][ T26] usb 2-1: Product: syz [ 137.785330][ T4787] IPVS: Error joining to the multicast group [ 137.958305][ T26] usb 2-1: Manufacturer: syz [ 137.965929][ T26] usb 2-1: SerialNumber: syz [ 138.732630][ T26] usb 2-1: config 0 descriptor?? [ 138.788770][ T26] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 138.824448][ T26] em28xx 2-1:0.89: Video interface 89 found: bulk [ 138.916026][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 141.669352][ T26] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 142.601988][ T26] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 142.619392][ T26] em28xx 2-1:0.89: board has no eeprom [ 142.689031][ T26] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 142.833919][ T26] em28xx 2-1:0.89: analog set to bulk mode. [ 142.896020][ T4316] em28xx 2-1:0.89: Registering V4L2 extension [ 143.642493][ T26] usb 2-1: USB disconnect, device number 2 [ 143.671778][ T4316] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 143.791349][ T4813] syz.3.112 (4813): drop_caches: 2 [ 143.964401][ T26] em28xx 2-1:0.89: Disconnecting em28xx [ 143.970517][ T4316] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 143.977511][ T4316] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 143.985363][ T4316] em28xx 2-1:0.89: No AC97 audio processor [ 143.994219][ T4316] usb 2-1: Decoder not found [ 143.999256][ T4316] em28xx 2-1:0.89: failed to create media graph [ 144.005827][ T4316] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 144.014077][ T4316] em28xx 2-1:0.89: Registering snapshot button... [ 144.022325][ T4316] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input8 [ 144.035256][ T4316] em28xx 2-1:0.89: Remote control support is not available for this card. [ 144.056467][ T26] em28xx 2-1:0.89: Closing input extension [ 144.062622][ T26] em28xx 2-1:0.89: Deregistering snapshot button [ 144.078061][ T26] em28xx 2-1:0.89: Freeing device [ 147.229159][ T4331] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 147.726187][ T4331] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.737746][ T4331] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.749233][ T4331] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.759280][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.913367][ T4834] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.167618][ T4840] ALSA: mixer_oss: invalid OSS volume '' [ 149.098353][ T4390] usb 2-1: USB disconnect, device number 3 [ 149.572068][ T4858] IPVS: Error joining to the multicast group [ 149.849065][ T4316] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.801563][ T4866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 150.820350][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 151.748159][ T4316] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 152.344779][ T4316] usb 3-1: config 0 has no interface number 0 [ 152.387260][ T4316] usb 3-1: config 0 interface 89 has no altsetting 0 [ 152.505109][ T4316] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 152.674665][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.811547][ T4316] usb 3-1: Product: syz [ 152.880417][ T4316] usb 3-1: Manufacturer: syz [ 152.948497][ T4316] usb 3-1: SerialNumber: syz [ 153.077191][ T4316] usb 3-1: config 0 descriptor?? [ 153.372508][ T4316] usb 3-1: can't set config #0, error -71 [ 153.439555][ T4316] usb 3-1: USB disconnect, device number 4 [ 159.324915][ T4901] binder: 4899:4901 ioctl c0306201 0 returned -14 [ 159.601335][ T4907] ALSA: mixer_oss: invalid OSS volume '' [ 160.497123][ T4328] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.191730][ T4328] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.243723][ T4328] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.278109][ T4328] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.326566][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.416692][ T4911] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.682703][ T4920] IPVS: Error joining to the multicast group [ 164.296614][ T4934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'. [ 165.661947][ T4945] binder: 4944:4945 ioctl c0306201 0 returned -14 [ 165.879385][ T4943] syz.0.145 (4943): drop_caches: 2 [ 166.075326][ T26] usb 4-1: USB disconnect, device number 2 [ 167.211666][ T4952] ALSA: mixer_oss: invalid OSS volume '' [ 167.451990][ T4962] lo speed is unknown, defaulting to 1000 [ 167.458218][ T4962] lo speed is unknown, defaulting to 1000 [ 167.466046][ T4962] lo speed is unknown, defaulting to 1000 [ 167.475753][ T4962] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.487885][ T4962] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 167.513327][ T4962] lo speed is unknown, defaulting to 1000 [ 167.520201][ T4962] lo speed is unknown, defaulting to 1000 [ 167.526843][ T4962] lo speed is unknown, defaulting to 1000 [ 167.533951][ T4962] lo speed is unknown, defaulting to 1000 [ 167.541873][ T4962] lo speed is unknown, defaulting to 1000 [ 168.223928][ T4982] IPVS: Error joining to the multicast group [ 168.984139][ T4994] syz.1.162 (4994): drop_caches: 2 [ 169.706263][ T4991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'. [ 170.033543][ T4328] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.012372][ T4328] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.072353][ T4328] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 171.105295][ T4328] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.134774][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.161875][ T4988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.802821][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 173.193178][ T5004] ALSA: mixer_oss: invalid OSS volume '' [ 175.601550][ T4328] usb 5-1: can't set config #27, error -71 [ 175.618255][ T4328] usb 5-1: USB disconnect, device number 6 [ 175.782216][ T5029] syz.0.173 (5029): drop_caches: 2 [ 176.769129][ T5036] siw: device registration error -23 [ 178.025508][ T5031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'. [ 179.164483][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 180.817621][ T5052] ALSA: mixer_oss: invalid OSS volume '' [ 183.089048][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 183.097174][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 183.279081][ T126] usb 4-1: device descriptor read/64, error -32 [ 183.639105][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.522061][ T5092] syz.4.188 (5092): drop_caches: 2 [ 184.693743][ T126] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.900491][ T5095] siw: device registration error -23 [ 185.001701][ T126] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.013118][ T126] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.023830][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.825324][ T5102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 190.362327][ T5141] ubi31: attaching mtd0 [ 190.370485][ T5141] ubi31: scanning is finished [ 190.376114][ T5141] ubi31: empty MTD device detected [ 191.140649][ T126] usb 4-1: can't set config #27, error -110 [ 191.709526][ T5141] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 191.717276][ T5141] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 191.724948][ T5141] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 191.732064][ T5141] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 191.740186][ T5141] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 191.747144][ T5141] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 191.755726][ T5141] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 76221838 [ 191.762575][ T5144] siw: device registration error -23 [ 191.766062][ T5141] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 191.784013][ T5143] ubi31: background thread "ubi_bgt31d" started, PID 5143 [ 191.844524][ T126] usb 4-1: USB disconnect, device number 4 [ 194.402935][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.409679][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.518892][ T5163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.209'. [ 194.683495][ T5156] IPVS: Error joining to the multicast group [ 196.489754][ T5186] ubi: mtd0 is already attached to ubi31 [ 197.476223][ T5191] siw: device registration error -23 [ 197.809055][ T4374] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.733085][ T4374] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.791911][ T4374] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.907253][ T5197] syz.2.218 (5197): drop_caches: 2 [ 199.556740][ T4374] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.593391][ T4374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.686945][ T4374] usb 4-1: can't set config #27, error -71 [ 199.701439][ T4374] usb 4-1: USB disconnect, device number 5 [ 200.106002][ T5205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 201.857292][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 201.857349][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 201.857396][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 201.857441][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 201.857533][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 203.530223][ T5233] siw: device registration error -23 [ 203.890592][ T5239] ubi: mtd0 is already attached to ubi31 [ 206.908183][ T5258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.235'. [ 207.259370][ T4328] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 207.365030][ T5271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.248'. [ 207.484193][ T4328] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.041614][ T4328] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.562243][ T4328] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.626145][ T4328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.771961][ T4328] usb 1-1: can't set config #27, error -71 [ 209.884266][ T4328] usb 1-1: USB disconnect, device number 3 [ 211.877848][ T5288] siw: device registration error -23 [ 213.677445][ T5306] syz.3.246 (5306): drop_caches: 2 [ 216.979043][ T4374] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.246671][ T4374] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.299215][ T4374] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 218.353288][ T4374] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.369178][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.551589][ T5323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.007079][ T4374] usb 2-1: USB disconnect, device number 4 [ 221.989896][ T5358] syz.0.261 (5358): drop_caches: 2 [ 222.484582][ T5365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 224.060172][ T5368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.264'. [ 226.799235][ T4269] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.748243][ T4269] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.803666][ T4269] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 227.857581][ T4269] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.919734][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.024042][ T5399] syz.3.274 (5399): drop_caches: 2 [ 228.807621][ T5386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.166433][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'. [ 230.438766][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 234.176492][ T4315] usb 5-1: USB disconnect, device number 7 [ 237.001830][ T5458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.289'. [ 238.559054][ T5470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 241.599080][ T5460] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 242.081309][ T4345] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 242.291417][ T4345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.335410][ T4345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.412463][ T4345] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 242.456661][ T4345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.503273][ T4345] usb 2-1: config 0 descriptor?? [ 243.023749][ T4345] samsung 0003:0419:0001.0001: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 243.156959][ T4374] usb 2-1: USB disconnect, device number 5 [ 243.586101][ T5506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'. [ 244.315283][ T5501] fido_id[5501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 246.469215][ T5460] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 247.089337][ T5460] usb 5-1: Using ep0 maxpacket: 32 [ 247.108863][ T5460] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 247.117361][ T5460] usb 5-1: config 0 has no interface number 0 [ 247.243820][ T5535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 248.743597][ T5460] usb 5-1: config 0 interface 89 has no altsetting 0 [ 248.833989][ T5460] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 248.926105][ T5460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.036148][ T5460] usb 5-1: Product: syz [ 249.088497][ T5460] usb 5-1: Manufacturer: syz [ 249.131336][ T5460] usb 5-1: SerialNumber: syz [ 249.261379][ T5460] usb 5-1: config 0 descriptor?? [ 249.512083][ T5460] usb 5-1: can't set config #0, error -71 [ 249.574519][ T5460] usb 5-1: USB disconnect, device number 9 [ 250.863817][ T5562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'. [ 252.749536][ T4390] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.029161][ T5472] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 253.069077][ T4390] usb 1-1: Using ep0 maxpacket: 32 [ 253.080280][ T4390] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 253.126152][ T4390] usb 1-1: config 0 has no interface number 0 [ 253.143110][ T4390] usb 1-1: config 0 interface 89 has no altsetting 0 [ 253.263149][ T4390] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 253.292366][ T5472] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.315206][ T5472] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 253.329121][ T4390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.348215][ T4390] usb 1-1: Product: syz [ 253.358366][ T5472] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.369071][ T4390] usb 1-1: Manufacturer: syz [ 253.402560][ T4390] usb 1-1: SerialNumber: syz [ 253.431035][ T5472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.463171][ T4390] usb 1-1: config 0 descriptor?? [ 253.491516][ T4390] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 253.498248][ T5576] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 253.521709][ T4390] em28xx 1-1:0.89: Video interface 89 found: bulk [ 254.457815][ T4390] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 254.787550][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 255.841704][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.848217][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.565273][ T4390] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 257.277195][ T4316] usb 3-1: USB disconnect, device number 5 [ 257.926364][ T4390] em28xx 1-1:0.89: board has no eeprom [ 258.009058][ T4390] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 258.016607][ T4390] em28xx 1-1:0.89: analog set to bulk mode. [ 258.023220][ T7] em28xx 1-1:0.89: Registering V4L2 extension [ 258.031966][ T4390] usb 1-1: USB disconnect, device number 4 [ 258.038658][ T4390] em28xx 1-1:0.89: Disconnecting em28xx [ 258.091902][ T7] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 258.110840][ T7] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 258.127560][ T7] em28xx 1-1:0.89: No AC97 audio processor [ 258.205164][ T5609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 258.995891][ T7] usb 1-1: Decoder not found [ 259.151189][ T7] em28xx 1-1:0.89: failed to create media graph [ 259.337618][ T7] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 259.346150][ T7] em28xx 1-1:0.89: Registering snapshot button... [ 259.354619][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input9 [ 260.144318][ T7] em28xx 1-1:0.89: Remote control support is not available for this card. [ 260.168140][ T4390] em28xx 1-1:0.89: Closing input extension [ 260.174805][ T4390] em28xx 1-1:0.89: Deregistering snapshot button [ 260.255821][ T4390] em28xx 1-1:0.89: Freeing device [ 261.265647][ T5630] fuse: Unknown parameter 'grou00000000000000000000' [ 262.478349][ T5634] mmap: syz.1.337 (5634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 262.729187][ T4390] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 262.818134][ T5655] syz.3.342 (5655): drop_caches: 2 [ 262.988965][ T4374] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 264.749414][ T5654] sched: RT throttling activated [ 264.761772][ T4390] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.790414][ T4374] usb 3-1: Using ep0 maxpacket: 32 [ 264.800933][ T4374] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 264.833108][ T4390] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.856674][ T4374] usb 3-1: config 0 has no interface number 0 [ 264.885477][ T4374] usb 3-1: config 0 interface 89 has no altsetting 0 [ 264.895825][ T4390] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.966839][ T5662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 266.572164][ T4390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.831893][ T4390] usb 5-1: can't set config #27, error -71 [ 267.069121][ T4390] usb 5-1: USB disconnect, device number 10 [ 267.730878][ T4374] usb 3-1: string descriptor 0 read error: -71 [ 267.737490][ T4374] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 267.939047][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.950409][ T4374] usb 3-1: config 0 descriptor?? [ 267.959903][ T4374] usb 3-1: can't set config #0, error -71 [ 267.966827][ T4374] usb 3-1: USB disconnect, device number 6 [ 269.866527][ T5685] fuse: Unknown parameter 'grou00000000000000000000' [ 270.109015][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 272.353555][ T7] usb 3-1: device descriptor read/all, error -71 [ 272.418207][ T5674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.825884][ T5664] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 273.079600][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 273.559163][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 273.569967][ T5664] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.298596][ T5664] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.310308][ T7] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 274.318702][ T7] usb 3-1: config 0 has no interface number 0 [ 274.325901][ T5664] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.335419][ T7] usb 3-1: config 0 interface 89 has no altsetting 0 [ 274.591044][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 274.601198][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 275.199125][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 276.804253][ T5664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.449072][ T5664] usb 2-1: can't set config #27, error -71 [ 278.469746][ T5664] usb 2-1: USB disconnect, device number 6 [ 278.549114][ T7] usb 3-1: string descriptor 0 read error: -71 [ 278.570229][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 278.610860][ T5733] fuse: Unknown parameter 'group_i00000000000000000000' [ 278.619766][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.653674][ T7] usb 3-1: config 0 descriptor?? [ 278.676289][ T7] usb 3-1: can't set config #0, error -71 [ 278.881296][ T7] usb 3-1: USB disconnect, device number 8 [ 279.295950][ T5741] lo speed is unknown, defaulting to 1000 [ 279.666612][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 279.936205][ T5754] ubi: mtd0 is already attached to ubi31 [ 281.283269][ T5755] capability: warning: `syz.0.368' uses deprecated v2 capabilities in a way that may be insecure [ 283.205122][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 283.439949][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 285.880764][ T5780] fuse: Unknown parameter 'group_i00000000000000000000' [ 286.239674][ T5789] siw: device registration error -23 [ 286.260590][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 286.319138][ T5187] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 286.459339][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 286.488021][ T7] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 287.128002][ T7] usb 2-1: config 0 has no interface number 0 [ 287.139652][ T7] usb 2-1: config 0 interface 89 has no altsetting 0 [ 287.157063][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 287.167002][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.177210][ T7] usb 2-1: Product: syz [ 287.182497][ T7] usb 2-1: Manufacturer: syz [ 287.187406][ T7] usb 2-1: SerialNumber: syz [ 287.201439][ T7] usb 2-1: config 0 descriptor?? [ 287.219389][ T7] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 287.229459][ T7] em28xx 2-1:0.89: Video interface 89 found: bulk [ 287.927861][ T7] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 288.181342][ T5187] usb 5-1: device descriptor read/all, error -71 [ 288.400455][ T7] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 288.540371][ T7] em28xx 2-1:0.89: board has no eeprom [ 288.615760][ T5806] ubi: mtd0 is already attached to ubi31 [ 289.422045][ T7] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 290.041003][ T7] em28xx 2-1:0.89: analog set to bulk mode. [ 290.066499][ T4338] em28xx 2-1:0.89: Registering V4L2 extension [ 290.076558][ T7] usb 2-1: USB disconnect, device number 7 [ 290.145416][ T7] em28xx 2-1:0.89: Disconnecting em28xx [ 290.368985][ T4338] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 290.400208][ T4338] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 290.428142][ T4338] em28xx 2-1:0.89: No AC97 audio processor [ 290.889403][ T4338] usb 2-1: Decoder not found [ 290.900733][ T4338] em28xx 2-1:0.89: failed to create media graph [ 290.907906][ T4338] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 290.922267][ T4338] em28xx 2-1:0.89: Registering snapshot button... [ 290.934264][ T4338] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input10 [ 291.061354][ T4338] em28xx 2-1:0.89: Remote control support is not available for this card. [ 291.080286][ T7] em28xx 2-1:0.89: Closing input extension [ 291.094298][ T7] em28xx 2-1:0.89: Deregistering snapshot button [ 291.135880][ T7] em28xx 2-1:0.89: Freeing device [ 291.583423][ T5822] fuse: Unknown parameter 'group_i00000000000000000000' [ 292.103740][ T5831] siw: device registration error -23 [ 293.169161][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 293.707209][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 293.730925][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 293.742832][ T7] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 293.753273][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.763585][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.790756][ T5838] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.061198][ T4345] usb 5-1: USB disconnect, device number 13 [ 294.349003][ T4315] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 294.548977][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 294.556630][ T4315] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 294.575836][ T4315] usb 1-1: config 0 has no interface number 0 [ 294.592647][ T4315] usb 1-1: config 0 interface 89 has no altsetting 0 [ 294.655148][ T4315] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 294.664728][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.673334][ T4315] usb 1-1: Product: syz [ 294.677796][ T4315] usb 1-1: Manufacturer: syz [ 294.682793][ T4315] usb 1-1: SerialNumber: syz [ 294.697376][ T4315] usb 1-1: config 0 descriptor?? [ 294.725790][ T4315] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 295.227934][ T4315] em28xx 1-1:0.89: Video interface 89 found: bulk [ 296.093488][ T5864] ubi: mtd0 is already attached to ubi31 [ 296.131029][ T4315] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 296.872797][ T4315] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 296.890575][ T4315] em28xx 1-1:0.89: board has no eeprom [ 297.512137][ T4315] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 297.535698][ T4315] em28xx 1-1:0.89: analog set to bulk mode. [ 297.553900][ T5460] em28xx 1-1:0.89: Registering V4L2 extension [ 297.898295][ T4315] usb 1-1: USB disconnect, device number 5 [ 298.021038][ T4315] em28xx 1-1:0.89: Disconnecting em28xx [ 298.515506][ T5882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 299.236237][ T5460] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 299.274219][ T5460] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 299.355671][ T5460] em28xx 1-1:0.89: No AC97 audio processor [ 299.551559][ T5893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.421'. [ 299.799058][ T5460] usb 1-1: Decoder not found [ 300.348983][ T5460] em28xx 1-1:0.89: failed to create media graph [ 300.355766][ T5460] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 300.406129][ T5460] em28xx 1-1:0.89: Registering snapshot button... [ 300.495359][ T5460] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input11 [ 300.571469][ T5460] em28xx 1-1:0.89: Remote control support is not available for this card. [ 300.652638][ T4315] em28xx 1-1:0.89: Closing input extension [ 300.660497][ T4315] em28xx 1-1:0.89: Deregistering snapshot button [ 300.739872][ T4315] em28xx 1-1:0.89: Freeing device [ 300.882315][ T5913] fuse: Unknown parameter 'group_id00000000000000000000' [ 301.109337][ T4338] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 301.741213][ T4338] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.741250][ T4338] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.741297][ T4338] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.741323][ T4338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.750691][ T5897] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.957054][ T5664] usb 2-1: USB disconnect, device number 8 [ 302.156323][ T5924] syz.2.416 (5924): drop_caches: 2 [ 304.971790][ T6005] ubi: mtd0 is already attached to ubi31 [ 305.783276][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.423'. [ 306.792869][ T6017] fuse: Unknown parameter 'group_id00000000000000000000' [ 306.945334][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 308.211589][ T6042] syz.0.431 (6042): drop_caches: 2 [ 308.848951][ T5664] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 309.130852][ T5664] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.153771][ T5664] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 309.170309][ T5664] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.203646][ T5664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.219075][ T5664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.436531][ T5664] usb 3-1: Product: syz [ 309.444235][ T5664] usb 3-1: Manufacturer: syz [ 309.454512][ T5664] usb 3-1: SerialNumber: syz [ 309.557512][ T5664] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 309.579306][ T5664] cdc_mbim 3-1:1.0: bind() failure [ 309.719469][ T6058] IPVS: Error joining to the multicast group [ 309.870992][ T4315] usb 3-1: USB disconnect, device number 9 [ 310.035616][ T6065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.436'. [ 311.134623][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 311.980367][ T6079] fuse: Bad value for 'fd' [ 312.678383][ T6083] ubi: mtd0 is already attached to ubi31 [ 313.625606][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 315.449472][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.448'. [ 317.329891][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.336705][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.999043][ T6132] ubi: mtd0 is already attached to ubi31 [ 321.493382][ T6136] fuse: Bad value for 'user_id' [ 321.512418][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 323.369275][ T4316] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 323.649093][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 323.661846][ T4316] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 323.734842][ T4316] usb 3-1: config 0 has no interface number 0 [ 323.799026][ T4316] usb 3-1: config 0 interface 89 has no altsetting 0 [ 323.839659][ T4316] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 323.899195][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.944424][ T4316] usb 3-1: Product: syz [ 323.948782][ T4316] usb 3-1: Manufacturer: syz [ 323.953964][ T4316] usb 3-1: SerialNumber: syz [ 323.969838][ T4316] usb 3-1: config 0 descriptor?? [ 323.979986][ T4316] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 323.990022][ T4316] em28xx 3-1:0.89: Video interface 89 found: bulk [ 324.018528][ T6162] IPVS: Error joining to the multicast group [ 324.239070][ T4413] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 324.335630][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 324.463691][ T4413] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.529637][ T4413] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.588804][ T4316] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 324.695593][ T4413] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.846767][ T4413] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.859684][ T4413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.867817][ T4413] usb 4-1: Product: syz [ 325.037636][ T4413] usb 4-1: Manufacturer: syz [ 325.043273][ T4413] usb 4-1: SerialNumber: syz [ 325.080666][ T4413] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 325.088114][ T4413] cdc_mbim 4-1:1.0: bind() failure [ 325.895694][ T4316] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 325.905905][ T4316] em28xx 3-1:0.89: board has no eeprom [ 325.914359][ T4413] usb 4-1: USB disconnect, device number 6 [ 326.001094][ T4316] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 326.016980][ T4316] em28xx 3-1:0.89: analog set to bulk mode. [ 326.056817][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 326.174095][ T5460] em28xx 3-1:0.89: Registering V4L2 extension [ 326.278530][ T6187] ubi: mtd0 is already attached to ubi31 [ 327.132474][ T4316] usb 3-1: USB disconnect, device number 10 [ 327.286008][ T4316] em28xx 3-1:0.89: Disconnecting em28xx [ 328.805953][ T5460] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 328.828991][ T5460] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 328.888971][ T5460] em28xx 3-1:0.89: No AC97 audio processor [ 328.918007][ T5460] usb 3-1: Decoder not found [ 329.023999][ T5460] em28xx 3-1:0.89: failed to create media graph [ 329.031461][ T5460] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 329.123744][ T5460] em28xx 3-1:0.89: Registering snapshot button... [ 329.159814][ T5460] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input12 [ 330.024339][ T5460] em28xx 3-1:0.89: Remote control support is not available for this card. [ 330.175942][ T6201] IPVS: Error joining to the multicast group [ 330.279196][ T4316] em28xx 3-1:0.89: Closing input extension [ 330.587888][ T4316] em28xx 3-1:0.89: Deregistering snapshot button [ 330.631807][ T4316] em28xx 3-1:0.89: Freeing device [ 330.667946][ T6217] fuse: Bad value for 'fd' [ 330.726907][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 331.079095][ T126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 331.949117][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 331.980092][ T126] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 332.145727][ T126] usb 2-1: config 0 has no interface number 0 [ 332.179021][ T126] usb 2-1: config 0 interface 89 has no altsetting 0 [ 332.255783][ T126] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 332.372457][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.588434][ T126] usb 2-1: Product: syz [ 332.588568][ T126] usb 2-1: Manufacturer: syz [ 332.588643][ T126] usb 2-1: SerialNumber: syz [ 332.642395][ T126] usb 2-1: config 0 descriptor?? [ 332.736493][ T126] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 332.737681][ T126] em28xx 2-1:0.89: Video interface 89 found: bulk [ 333.289044][ T126] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 333.992672][ T126] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 334.010887][ T126] em28xx 2-1:0.89: board has no eeprom [ 334.109203][ T126] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 334.119223][ T126] em28xx 2-1:0.89: analog set to bulk mode. [ 334.167327][ T5460] em28xx 2-1:0.89: Registering V4L2 extension [ 334.179696][ T126] usb 2-1: USB disconnect, device number 9 [ 334.186357][ T126] em28xx 2-1:0.89: Disconnecting em28xx [ 334.413295][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 334.529092][ T6256] device bpq0 entered promiscuous mode [ 335.261280][ T5460] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 335.268547][ T5460] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 335.288935][ T5460] em28xx 2-1:0.89: No AC97 audio processor [ 335.309244][ T5460] usb 2-1: Decoder not found [ 335.313913][ T5460] em28xx 2-1:0.89: failed to create media graph [ 335.320662][ T5460] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 335.350689][ T5460] em28xx 2-1:0.89: Registering snapshot button... [ 335.361039][ T5460] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input13 [ 336.187810][ T6268] netlink: 84 bytes leftover after parsing attributes in process `syz.1.497'. [ 336.603511][ T5460] em28xx 2-1:0.89: Remote control support is not available for this card. [ 336.612758][ T126] em28xx 2-1:0.89: Closing input extension [ 336.619768][ T126] em28xx 2-1:0.89: Deregistering snapshot button [ 336.862720][ T126] em28xx 2-1:0.89: Freeing device [ 336.871170][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 336.905739][ T6273] siw: device registration error -23 [ 339.122951][ T6277] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 340.999608][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 342.739375][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.511'. [ 345.262043][ T6328] siw: device registration error -23 [ 345.365133][ T6336] device bpq0 left promiscuous mode [ 346.674889][ T6348] IPVS: Error joining to the multicast group [ 347.941757][ T6361] syz.4.520 (6361): drop_caches: 2 [ 349.436527][ T6344] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 351.211383][ T6377] fuse: Bad value for 'fd' [ 352.662474][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 353.144636][ T6397] siw: device registration error -23 [ 356.449443][ T6423] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 357.960570][ T6435] siw: device registration error -23 [ 358.059036][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 358.333428][ T6444] fuse: Bad value for 'fd' [ 358.932619][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 359.341550][ T6451] IPVS: Error joining to the multicast group [ 359.902533][ T6458] syz.1.549 (6458): drop_caches: 2 [ 361.681200][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.555'. [ 362.154510][ T6481] siw: device registration error -23 [ 363.180264][ T6492] fuse: Bad value for 'fd' [ 363.253198][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 364.152619][ C1] ================================================================== [ 364.160811][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 364.168303][ C1] Read of size 2 at addr ffff88805691ec2a by task ksoftirqd/1/21 [ 364.176019][ C1] [ 364.178459][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.147-syzkaller #0 [ 364.186571][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.196910][ C1] Call Trace: [ 364.200220][ C1] [ 364.203203][ C1] dump_stack_lvl+0x168/0x22e [ 364.208000][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 364.213049][ C1] ? show_regs_print_info+0x12/0x12 [ 364.218272][ C1] ? load_image+0x3b0/0x3b0 [ 364.222899][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 364.228292][ C1] ? __virt_addr_valid+0x188/0x540 [ 364.233477][ C1] ? __virt_addr_valid+0x465/0x540 [ 364.238715][ C1] ? rose_timer_expiry+0x470/0x490 [ 364.244036][ C1] print_report+0xa8/0x200 [ 364.248751][ C1] kasan_report+0x10b/0x140 [ 364.253300][ C1] ? rose_timer_expiry+0x470/0x490 [ 364.258551][ C1] rose_timer_expiry+0x470/0x490 [ 364.263574][ C1] call_timer_fn+0x1a0/0x670 [ 364.268313][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 364.273571][ C1] ? call_timer_fn+0xc1/0x670 [ 364.278268][ C1] ? __run_timers+0x7c0/0x7c0 [ 364.283134][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 364.288492][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 364.293726][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 364.298783][ C1] __run_timers+0x525/0x7c0 [ 364.303400][ C1] ? detach_timer+0x350/0x350 [ 364.308155][ C1] ? lock_chain_count+0x20/0x20 [ 364.313131][ C1] run_timer_softirq+0x63/0xf0 [ 364.317944][ C1] handle_softirqs+0x2a1/0x920 [ 364.322944][ C1] ? run_ksoftirqd+0x98/0xf0 [ 364.327567][ C1] ? do_softirq+0x200/0x200 [ 364.332101][ C1] run_ksoftirqd+0x98/0xf0 [ 364.336622][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 364.342092][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 364.347495][ C1] ? takeover_tasklets+0x800/0x800 [ 364.352793][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 364.358088][ C1] smpboot_thread_fn+0x64a/0xa40 [ 364.363071][ C1] ? smpboot_thread_fn+0x4c/0xa40 [ 364.368467][ C1] kthread+0x29d/0x330 [ 364.372670][ C1] ? cpu_report_death+0x230/0x230 [ 364.377992][ C1] ? kthread_blkcg+0xd0/0xd0 [ 364.382616][ C1] ret_from_fork+0x1f/0x30 [ 364.387157][ C1] [ 364.390392][ C1] [ 364.392737][ C1] Allocated by task 6329: [ 364.397108][ C1] kasan_set_track+0x4b/0x70 [ 364.401818][ C1] __kasan_kmalloc+0x8e/0xa0 [ 364.406609][ C1] __kmalloc_node_track_caller+0xae/0x230 [ 364.412371][ C1] __alloc_skb+0x22a/0x7e0 [ 364.416808][ C1] __netdev_alloc_skb+0x107/0x4d0 [ 364.421960][ C1] __ieee80211_beacon_get+0xc48/0x1f50 [ 364.427608][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 364.433132][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 364.438692][ C1] __iterate_interfaces+0x243/0x500 [ 364.443897][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 364.451018][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 364.456519][ C1] __hrtimer_run_queues+0x554/0xd60 [ 364.461887][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 364.467105][ C1] handle_softirqs+0x2a1/0x920 [ 364.471994][ C1] __irq_exit_rcu+0x12f/0x220 [ 364.476867][ C1] irq_exit_rcu+0x5/0x20 [ 364.481137][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 364.486883][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.492971][ C1] [ 364.495323][ C1] Freed by task 6329: [ 364.499515][ C1] kasan_set_track+0x4b/0x70 [ 364.504249][ C1] kasan_save_free_info+0x2d/0x50 [ 364.509386][ C1] ____kasan_slab_free+0x126/0x1e0 [ 364.514606][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 364.520166][ C1] __kmem_cache_free+0xb6/0x1f0 [ 364.525044][ C1] skb_release_data+0x5db/0x7c0 [ 364.529916][ C1] consume_skb+0xa2/0x100 [ 364.534456][ C1] mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 364.540229][ C1] __iterate_interfaces+0x243/0x500 [ 364.545886][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 364.553186][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 364.558782][ C1] __hrtimer_run_queues+0x554/0xd60 [ 364.564188][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 364.569407][ C1] handle_softirqs+0x2a1/0x920 [ 364.574206][ C1] __irq_exit_rcu+0x12f/0x220 [ 364.578999][ C1] irq_exit_rcu+0x5/0x20 [ 364.583566][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 364.589313][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.596058][ C1] [ 364.598463][ C1] Last potentially related work creation: [ 364.604536][ C1] kasan_save_stack+0x3a/0x60 [ 364.609488][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 364.614963][ C1] call_rcu+0x154/0x980 [ 364.619824][ C1] ip6_route_info_create+0x9c5/0x1210 [ 364.625294][ C1] ip6_route_add+0x24/0x130 [ 364.630228][ C1] addrconf_prefix_route+0x20d/0x2b0 [ 364.635798][ C1] inet6_addr_add+0x4fe/0x9b0 [ 364.640596][ C1] inet6_rtm_newaddr+0x617/0x870 [ 364.645560][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 364.650700][ C1] netlink_rcv_skb+0x1de/0x420 [ 364.655645][ C1] netlink_unicast+0x74d/0x8d0 [ 364.660419][ C1] netlink_sendmsg+0x89e/0xbc0 [ 364.665265][ C1] __sys_sendto+0x44f/0x5c0 [ 364.669866][ C1] __x64_sys_sendto+0xda/0xf0 [ 364.674915][ C1] do_syscall_64+0x4c/0xa0 [ 364.679635][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.685820][ C1] [ 364.688146][ C1] The buggy address belongs to the object at ffff88805691ec00 [ 364.688146][ C1] which belongs to the cache kmalloc-512 of size 512 [ 364.702817][ C1] The buggy address is located 42 bytes inside of [ 364.702817][ C1] 512-byte region [ffff88805691ec00, ffff88805691ee00) [ 364.716825][ C1] [ 364.719167][ C1] The buggy address belongs to the physical page: [ 364.725911][ C1] page:ffffea00015a4700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5691c [ 364.736703][ C1] head:ffffea00015a4700 order:2 compound_mapcount:0 compound_pincount:0 [ 364.745389][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 364.753570][ C1] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441c80 [ 364.762703][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 364.771476][ C1] page dumped because: kasan: bad access detected [ 364.778163][ C1] page_owner tracks the page as allocated [ 364.784354][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4264, tgid 4264 (syz-executor), ts 80758300033, free_ts 24906653730 [ 364.806002][ C1] post_alloc_hook+0x173/0x1a0 [ 364.811055][ C1] get_page_from_freelist+0x1a26/0x1ac0 [ 364.816714][ C1] __alloc_pages+0x1df/0x4e0 [ 364.821384][ C1] alloc_slab_page+0x5d/0x160 [ 364.826183][ C1] new_slab+0x87/0x2c0 [ 364.830402][ C1] ___slab_alloc+0xbc6/0x1220 [ 364.835611][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 364.841167][ C1] __kmalloc_node_track_caller+0x9e/0x230 [ 364.847008][ C1] __alloc_skb+0x22a/0x7e0 [ 364.851529][ C1] rtmsg_ifa+0xf9/0x1f0 [ 364.855789][ C1] __inet_insert_ifa+0x996/0xb60 [ 364.860871][ C1] inet_rtm_newaddr+0x930/0x1890 [ 364.865838][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 364.870884][ C1] netlink_rcv_skb+0x1de/0x420 [ 364.875990][ C1] netlink_unicast+0x74d/0x8d0 [ 364.881033][ C1] netlink_sendmsg+0x89e/0xbc0 [ 364.885989][ C1] page last free stack trace: [ 364.891173][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 364.896877][ C1] free_unref_page+0x2e/0x3f0 [ 364.902123][ C1] free_contig_range+0x9d/0x150 [ 364.907459][ C1] destroy_args+0xef/0x8bf [ 364.911892][ C1] debug_vm_pgtable+0x32a/0x37e [ 364.916802][ C1] do_one_initcall+0x214/0x7a0 [ 364.921591][ C1] do_initcall_level+0x137/0x1e4 [ 364.926749][ C1] do_initcalls+0x4b/0x8a [ 364.931359][ C1] kernel_init_freeable+0x3fa/0x5ac [ 364.936749][ C1] kernel_init+0x19/0x1b0 [ 364.941108][ C1] ret_from_fork+0x1f/0x30 [ 364.945736][ C1] [ 364.948081][ C1] Memory state around the buggy address: [ 364.953976][ C1] ffff88805691eb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.962194][ C1] ffff88805691eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.970612][ C1] >ffff88805691ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.979582][ C1] ^ [ 364.984972][ C1] ffff88805691ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.993746][ C1] ffff88805691ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.002390][ C1] ================================================================== [ 365.010962][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 365.018352][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.147-syzkaller #0 [ 365.026375][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.036627][ C1] Call Trace: [ 365.039920][ C1] [ 365.042947][ C1] dump_stack_lvl+0x168/0x22e [ 365.047727][ C1] ? memcpy+0x3c/0x60 [ 365.051904][ C1] ? show_regs_print_info+0x12/0x12 [ 365.057608][ C1] ? load_image+0x3b0/0x3b0 [ 365.062141][ C1] panic+0x2c9/0x710 [ 365.066173][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 365.072825][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 365.077469][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 365.083402][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 365.089673][ C1] ? _raw_spin_unlock+0x40/0x40 [ 365.094654][ C1] check_panic_on_warn+0x80/0xa0 [ 365.099794][ C1] ? rose_timer_expiry+0x470/0x490 [ 365.105098][ C1] end_report+0x66/0x110 [ 365.109542][ C1] kasan_report+0x118/0x140 [ 365.114164][ C1] ? rose_timer_expiry+0x470/0x490 [ 365.119570][ C1] rose_timer_expiry+0x470/0x490 [ 365.124624][ C1] call_timer_fn+0x1a0/0x670 [ 365.129545][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 365.134786][ C1] ? call_timer_fn+0xc1/0x670 [ 365.139600][ C1] ? __run_timers+0x7c0/0x7c0 [ 365.144478][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 365.149704][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 365.155195][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 365.160390][ C1] __run_timers+0x525/0x7c0 [ 365.164928][ C1] ? detach_timer+0x350/0x350 [ 365.169712][ C1] ? lock_chain_count+0x20/0x20 [ 365.174588][ C1] run_timer_softirq+0x63/0xf0 [ 365.179473][ C1] handle_softirqs+0x2a1/0x920 [ 365.184542][ C1] ? run_ksoftirqd+0x98/0xf0 [ 365.189423][ C1] ? do_softirq+0x200/0x200 [ 365.194156][ C1] run_ksoftirqd+0x98/0xf0 [ 365.198604][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 365.204444][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 365.210652][ C1] ? takeover_tasklets+0x800/0x800 [ 365.215803][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 365.221086][ C1] smpboot_thread_fn+0x64a/0xa40 [ 365.226228][ C1] ? smpboot_thread_fn+0x4c/0xa40 [ 365.231440][ C1] kthread+0x29d/0x330 [ 365.235550][ C1] ? cpu_report_death+0x230/0x230 [ 365.240948][ C1] ? kthread_blkcg+0xd0/0xd0 [ 365.245571][ C1] ret_from_fork+0x1f/0x30 [ 365.250089][ C1] [ 365.253671][ C1] Kernel Offset: disabled [ 365.258201][ C1] Rebooting in 86400 seconds..