last executing test programs: 15.234648822s ago: executing program 3 (id=131): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 12.781684121s ago: executing program 4 (id=139): dup(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, 0x0, 0x0, 0x2}, 0x20) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 12.747957245s ago: executing program 1 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 11.709291168s ago: executing program 4 (id=143): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 11.397335314s ago: executing program 3 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000400)=@newtaction={0x360, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34c, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x7c2d}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}, @m_xt={0x104, 0x3, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xbe0c}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}]}, {0x90, 0x6, "3a246efa464838b826b70b01453af5f46f7337525ffaa9e45d8cdff2425f86945b92f67d620719ca47c7d066a44c78e4ae765bade1d57aef22a14d9922dec2005886d435ddf650d8813726bf86130d8ba68a87310dd27b7dfc4a8cd8c6fd2b2bc436d41733ba0493d2805f6e8967aad02922aa89baf0c8fc44802fd09cce781732c50b81aae8a3029a9e49fa"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x104, 0x9, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0xc, 0x10000000, 0x7, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x3, 0x9000, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x2, 0x80000000, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x3, 0x7, 0x8001}, 0x884c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x3ef22fdb, 0x8, 0x400007, 0x800}, 0x51}}]}, {0x47, 0x6, "290deb292b5152b0d2581e564a0f528f30756a1d1d7f6b5c9567e848203e8fc987f532582b58d9ef3b24b41704d6dfad92757f0cb8801116f5d1de21ea3ef60d62c2db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xd4, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x3, 0x7, 0x7fffffff, 0xe}, 0xf}}]}, {0x75, 0x6, "c1c11491cdf2413c12a6ef9f3dbd99822d57cc73a3acf75c494c4c19ecd8d4607e5b20833606da931afb844dbe2bba35940c82448874e77e74b0162af398b64c8c14aa71909a90813d2f2a7bddfb14cb50f80a265db65c70004e157248025cc8cf041eeb3177ddd59f5783d5b657027f2f"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x360}}, 0x0) 10.295448005s ago: executing program 4 (id=148): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.145786148s ago: executing program 2 (id=150): mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='proc\x00', 0xa00599, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 7.834585005s ago: executing program 2 (id=152): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.661737756s ago: executing program 0 (id=153): dup(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, 0x0, 0x0, 0x2}, 0x20) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 7.531793971s ago: executing program 2 (id=154): close(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 7.145179936s ago: executing program 3 (id=155): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setresgid(0xee00, 0xee01, 0x0) unshare(0x400) listen(r1, 0x0) setresgid(0x0, 0x0, 0xee01) listen(r1, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffff, 0x0, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82}, 0x0) setresgid(0x0, 0xee00, 0x0) semget$private(0x0, 0x4, 0x29b) 6.581078853s ago: executing program 0 (id=156): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 6.569898514s ago: executing program 1 (id=157): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x848010}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x84801}, 0x4040) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.306432293s ago: executing program 4 (id=161): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000880000008"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) unshare(0x2000600) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.910590958s ago: executing program 4 (id=162): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014101481344401e0fb80464eeff0203010902240001000010000904b8070296d1ca000905060200020d0006090582030002000310ee20fb4bb9f467ee5e7b57052228dece02ff2b2f28a056697c313b6b341c6575609c91d0d885879215edddb39bbfc2daa95a3f2f37c08167829a09d8cae7ae736611dba382a138e82030f7d17dff4ba8502f3b4c686b73b16ffab2c7b222edb3a9f2d58ec8a64bb7475921462797535f4016864f0b47f64a6f9925bf1ec663a8f94973f4087f7574a3bab336b3b4fd800c0bf5e0138bdbd235a1325486495ebcf585e1b5b15166e5465e54b3"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x200, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000085000000500000"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_settime(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000001e142561"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.381708241s ago: executing program 0 (id=163): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x80000001}}, 0x30) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={0x0}}, 0x0) 3.331998836s ago: executing program 2 (id=164): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) keyctl$setperm(0x5, 0x0, 0x100) r5 = syz_open_dev$sndctrl(0x0, 0x186, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000001280)=0x10001) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'comedi_test\x00', [0x2f00, 0x5, 0xd09d, 0xfff7ffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x70000000, 0xc, 0x1001, 0x9, 0x0, 0xfffb, 0x6, 0x5, 0x7, 0x830, 0x30000, 0x10003, 0x2, 0x800, 0xe2df, 0xffffffff, 0xd, 0x2, 0x1, 0x4, 0x5, 0x70f]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0xd, {0xfffffff7, 0x1, 0xe, 0xfffffff8}, {0x5, 0x0, 0x4, 0xd50f}, {0x2c00, 0x3}}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 3.30705425s ago: executing program 1 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000400)=@newtaction={0x37c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x368, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x7c2d}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}, @m_xt={0x120, 0x3, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xbe0c}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}]}, {0x90, 0x6, "3a246efa464838b826b70b01453af5f46f7337525ffaa9e45d8cdff2425f86945b92f67d620719ca47c7d066a44c78e4ae765bade1d57aef22a14d9922dec2005886d435ddf650d8813726bf86130d8ba68a87310dd27b7dfc4a8cd8c6fd2b2bc436d41733ba0493d2805f6e8967aad02922aa89baf0c8fc44802fd09cce781732c50b81aae8a3029a9e49fa"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x104, 0x9, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0xc, 0x10000000, 0x7, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x3, 0x9000, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x2, 0x80000000, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x3, 0x7, 0x8001}, 0x884c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x3ef22fdb, 0x8, 0x400007, 0x800}, 0x51}}]}, {0x47, 0x6, "290deb292b5152b0d2581e564a0f528f30756a1d1d7f6b5c9567e848203e8fc987f532582b58d9ef3b24b41704d6dfad92757f0cb8801116f5d1de21ea3ef60d62c2db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xd4, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x3, 0x7, 0x7fffffff, 0xe}, 0xf}}]}, {0x75, 0x6, "c1c11491cdf2413c12a6ef9f3dbd99822d57cc73a3acf75c494c4c19ecd8d4607e5b20833606da931afb844dbe2bba35940c82448874e77e74b0162af398b64c8c14aa71909a90813d2f2a7bddfb14cb50f80a265db65c70004e157248025cc8cf041eeb3177ddd59f5783d5b657027f2f"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x37c}}, 0x0) 3.282335492s ago: executing program 3 (id=166): dup(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r5 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, 0x0, &(0x7f0000000280)=@tcp6=r5, 0x2}, 0x20) getsockopt(r3, 0x200000000114, 0x2714, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 3.193641913s ago: executing program 0 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5}) 2.246844935s ago: executing program 2 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000580)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656baa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ec6e4e9bfcd772c74fb32c56ce1f0f156272f5b00000005defd5a32e308", 0x85) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xffffffffffffffff) 2.177729043s ago: executing program 3 (id=169): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.942583241s ago: executing program 0 (id=170): syz_open_dev$vim2m(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/fscaps', 0x101000, 0x3) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000017c0)={0x0, 'macvlan0\x00', {0x2}, 0x5}) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000000c0)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d8080000005a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efbe20b26fff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34371113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be090e4a62fb73c33424b637bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4a9ca1864f0a35d6cc38fca32ad6b39905fff27d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) 1.868198319s ago: executing program 1 (id=171): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setresgid(0xee00, 0xee01, 0x0) unshare(0x400) listen(r1, 0x0) setresgid(0x0, 0x0, 0xee01) listen(r1, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffff, 0x0, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82}, 0x0) setresgid(0x0, 0xee00, 0x0) semget$private(0x0, 0x4, 0x29b) 1.166893852s ago: executing program 2 (id=172): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000880000008"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) unshare(0x2000600) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.192959ms ago: executing program 0 (id=173): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042"], 0x0) 0s ago: executing program 1 (id=174): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x82000000) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r5) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c000) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) semget$private(0x0, 0x7, 0x180) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 66.698326][ T4255] cgroup: Unknown subsys name 'net' [ 66.827376][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.281892][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.256414][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.265237][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.273127][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.280849][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.288846][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.296490][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.303906][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.308579][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.312697][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.320278][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.327057][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.332432][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.340354][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.346747][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.360217][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.368429][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.369082][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.382577][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.384417][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.392187][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.400064][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.404989][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.411523][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.419449][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.425963][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.432691][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.439252][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.446115][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.459833][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.494663][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.833656][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 70.938069][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 70.968074][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 71.015135][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.021910][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.039665][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.047336][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.055876][ T4269] device bridge_slave_0 entered promiscuous mode [ 71.077464][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 71.089948][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 71.099761][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.106924][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.116579][ T4269] device bridge_slave_1 entered promiscuous mode [ 71.187354][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.194812][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.203291][ T4271] device bridge_slave_0 entered promiscuous mode [ 71.217056][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.224229][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.232643][ T4271] device bridge_slave_1 entered promiscuous mode [ 71.253544][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.260650][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.268904][ T4270] device bridge_slave_0 entered promiscuous mode [ 71.288013][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.306086][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.313369][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.321408][ T4270] device bridge_slave_1 entered promiscuous mode [ 71.341263][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.369581][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.383122][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.411619][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.429631][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.465550][ T4269] team0: Port device team_slave_0 added [ 71.477333][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.484673][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.493033][ T4267] device bridge_slave_0 entered promiscuous mode [ 71.500546][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.511517][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.519328][ T4277] device bridge_slave_0 entered promiscuous mode [ 71.535906][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.543293][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.551388][ T4277] device bridge_slave_1 entered promiscuous mode [ 71.561171][ T4269] team0: Port device team_slave_1 added [ 71.577281][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.584499][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.592452][ T4267] device bridge_slave_1 entered promiscuous mode [ 71.601835][ T4271] team0: Port device team_slave_0 added [ 71.633410][ T4270] team0: Port device team_slave_0 added [ 71.640406][ T4271] team0: Port device team_slave_1 added [ 71.654323][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.671947][ T4270] team0: Port device team_slave_1 added [ 71.688060][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.698857][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.712617][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.719567][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.746082][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.758609][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.765603][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.791561][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.818022][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.854548][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.861772][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.887810][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.908188][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.917121][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.943536][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.967943][ T4277] team0: Port device team_slave_0 added [ 71.980443][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.988309][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.014404][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.032881][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.039864][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.069315][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.088137][ T4277] team0: Port device team_slave_1 added [ 72.096165][ T4267] team0: Port device team_slave_0 added [ 72.139032][ T4267] team0: Port device team_slave_1 added [ 72.162236][ T4269] device hsr_slave_0 entered promiscuous mode [ 72.168862][ T4269] device hsr_slave_1 entered promiscuous mode [ 72.185904][ T4270] device hsr_slave_0 entered promiscuous mode [ 72.192861][ T4270] device hsr_slave_1 entered promiscuous mode [ 72.199738][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.207772][ T4270] Cannot create hsr debugfs directory [ 72.213885][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.220843][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.249576][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.267614][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.274715][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.301093][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.338445][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.345483][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.371815][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.390697][ T4271] device hsr_slave_0 entered promiscuous mode [ 72.398288][ T4271] device hsr_slave_1 entered promiscuous mode [ 72.405217][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.413382][ T4271] Cannot create hsr debugfs directory [ 72.433344][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.440315][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.466755][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.532071][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 72.532087][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 72.538368][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 72.546517][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 72.550517][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 72.590031][ T4277] device hsr_slave_0 entered promiscuous mode [ 72.597006][ T4277] device hsr_slave_1 entered promiscuous mode [ 72.603764][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.611574][ T4277] Cannot create hsr debugfs directory [ 72.646561][ T4267] device hsr_slave_0 entered promiscuous mode [ 72.656189][ T4267] device hsr_slave_1 entered promiscuous mode [ 72.663128][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.670685][ T4267] Cannot create hsr debugfs directory [ 72.938244][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.952557][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.969758][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.988402][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.033014][ T4270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.057573][ T4270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.087669][ T4270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.105844][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.128735][ T4270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.137910][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.158496][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.170586][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.245796][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.281014][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.303800][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.315133][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.325744][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.376606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.385808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.404561][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.418890][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.444125][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.465137][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.479155][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.488223][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.500664][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.508168][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.527534][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.535458][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.546522][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.557949][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.579294][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.595814][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.604732][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.614306][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.621462][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.632844][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.640752][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.650325][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.666643][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.676472][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.685073][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.692237][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.712714][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.736436][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.752977][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.767841][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.776083][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.785560][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.794329][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.801492][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.813282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.842185][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.851504][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.860188][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.869434][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.876574][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.885580][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.895292][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.904063][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.911146][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.919429][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.928884][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.938327][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.947152][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.955856][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.993529][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.002283][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.011018][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.025055][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.034736][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.044796][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.054117][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.063412][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.071853][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.080680][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.093240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.106910][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.122385][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.143563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.152151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.160668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.170227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.180797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.202066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.230259][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.244525][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.259751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.275549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.286969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.299878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.311004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.339677][ T4270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.358834][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.375802][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.412411][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.426481][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.437247][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.456222][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.465839][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.474307][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.489881][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.526983][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.542714][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.552445][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.559562][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.596721][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.612026][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 74.618079][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 74.624674][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 74.626009][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.630719][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 74.639848][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 74.676389][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.683551][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.739632][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.749516][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.801401][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.822698][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.842329][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.858978][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.879767][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.918194][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.935774][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.949064][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.959178][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.968420][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.977890][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.991013][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.000510][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.055671][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.064862][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.077438][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.087510][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.100940][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.115044][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.129047][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.153587][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.168212][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.180154][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.187309][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.201400][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.210113][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.223254][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.230353][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.241507][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.301475][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.319018][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.329607][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.340024][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.349050][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.358645][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.367562][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.376419][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.385083][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.392771][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.400218][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.423853][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.450690][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.466466][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.476411][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.489985][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.498363][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.515898][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.542993][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.576962][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.592168][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.618635][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.652260][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.708794][ T4270] device veth0_vlan entered promiscuous mode [ 75.738062][ T4269] device veth0_vlan entered promiscuous mode [ 75.745821][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.762236][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.797127][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.813213][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.837952][ T4270] device veth1_vlan entered promiscuous mode [ 75.864486][ T4269] device veth1_vlan entered promiscuous mode [ 75.900770][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.910591][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.935958][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.954983][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.973332][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.991807][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.029983][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.039597][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.050038][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.069703][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.077537][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.120944][ T4269] device veth0_macvtap entered promiscuous mode [ 76.151891][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.160559][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.176576][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.185722][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.197154][ T4270] device veth0_macvtap entered promiscuous mode [ 76.207895][ T4269] device veth1_macvtap entered promiscuous mode [ 76.222341][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.242252][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.250483][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.259121][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.267615][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.280113][ T4270] device veth1_macvtap entered promiscuous mode [ 76.312406][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.320775][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.331070][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.353092][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.378885][ T4267] device veth0_vlan entered promiscuous mode [ 76.396737][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.405455][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.414773][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.423881][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.435140][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.446747][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.459717][ T4267] device veth1_vlan entered promiscuous mode [ 76.471717][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.480148][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.489124][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.498723][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.507705][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.524741][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.535650][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.552289][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.571022][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.582246][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.598229][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.610687][ T4270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.620245][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.629788][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.638722][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.652622][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.662819][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.671704][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.680265][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.688994][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.697975][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 76.704133][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 76.706431][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.710157][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 76.724355][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 76.730366][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 76.735935][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.750959][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.759970][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.780014][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.790680][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.799900][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.809307][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.877102][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.895299][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.906498][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.914813][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.923592][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.934013][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.943015][ T4277] device veth0_vlan entered promiscuous mode [ 76.960656][ T4267] device veth0_macvtap entered promiscuous mode [ 76.977394][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.986575][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.995619][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.012270][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.025334][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.034335][ T4271] device veth0_vlan entered promiscuous mode [ 77.046269][ T4267] device veth1_macvtap entered promiscuous mode [ 77.093769][ T4271] device veth1_vlan entered promiscuous mode [ 77.113659][ T4277] device veth1_vlan entered promiscuous mode [ 77.121512][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.132987][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.143868][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.154388][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.166575][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.178569][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.191010][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.222121][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.230094][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.245003][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.265874][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.276071][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.286675][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.298046][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.311882][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.322455][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.331019][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.354384][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.363715][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.366117][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.380287][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.381246][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.389685][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.419222][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.430861][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.440369][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.456409][ T4271] device veth0_macvtap entered promiscuous mode [ 77.469482][ T4277] device veth0_macvtap entered promiscuous mode [ 77.490641][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.500771][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.509822][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.524645][ T4271] device veth1_macvtap entered promiscuous mode [ 77.537483][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.540307][ T4277] device veth1_macvtap entered promiscuous mode [ 77.551693][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.573571][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.583741][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.592511][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.600401][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.623567][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.638079][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.646668][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.663328][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.678743][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.688772][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.701779][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.711955][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.722904][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.744911][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.783832][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.798611][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.823475][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.862676][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.903285][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.925402][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.935772][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.946495][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.957279][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.978563][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.001118][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.017775][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.029955][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.040202][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.051646][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.071305][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.082684][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.094366][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.120153][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.130757][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.159409][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.186367][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.207879][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.240003][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.290744][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.319074][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.340657][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.361027][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.382929][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.411282][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.452095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.461251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.471219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.481221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.491229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.499477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.507692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.515904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.524117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.532337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 79.470166][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 79.472892][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 79.476309][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 79.482278][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 79.488317][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 79.521944][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.545618][ T4390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 79.554666][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.632520][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.648739][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.667555][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.686481][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.695372][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.709313][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.719309][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.728322][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.737756][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.755798][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.781309][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.828730][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.881348][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.898431][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.977121][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.030408][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.052399][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.096655][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.227752][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.235739][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.258332][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.265847][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.393942][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.412076][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.463021][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.470890][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.522887][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.253670][ T128] cfg80211: failed to load regulatory.db [ 81.441775][ T4415] ======================================================= [ 81.441775][ T4415] WARNING: The mand mount option has been deprecated and [ 81.441775][ T4415] and is ignored by this kernel. Remove the mand [ 81.441775][ T4415] option from the mount to silence this warning. [ 81.441775][ T4415] ======================================================= [ 81.476708][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.663057][ T4415] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.702374][ T4415] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.716298][ T4415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 81.731135][ T4415] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.740917][ T4415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 81.758180][ T4415] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 81.767457][ T4415] UDF-fs: Scanning with blocksize 512 failed [ 81.815875][ T4415] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.886882][ T4415] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.968858][ T4415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 82.150447][ T4415] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.291463][ T4415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 82.344771][ T4415] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 82.552618][ T4422] trusted_key: encrypted_key: insufficient parameters specified [ 82.813211][ T4415] UDF-fs: Scanning with blocksize 1024 failed [ 82.964335][ T4415] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.996326][ T4415] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.114630][ T4415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 83.375521][ T4415] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.415384][ T4415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 83.435669][ T4415] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 83.451901][ T4415] UDF-fs: Scanning with blocksize 2048 failed [ 83.475338][ T4415] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.502326][ T4415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 83.547520][ T4415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 83.557371][ T4415] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 83.566003][ T4415] UDF-fs: Scanning with blocksize 4096 failed [ 83.574273][ T4415] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 84.160616][ T4434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 86.656873][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078d73800: rx timeout, send abort [ 86.749491][ T4284] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 86.825256][ T4445] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.165943][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078d73800: abort rx timeout. Force session deactivation [ 88.261855][ T4284] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 88.631936][ T4478] trusted_key: encrypted_key: insufficient parameters specified [ 89.485516][ T27] audit: type=1326 audit(1771334874.572:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 89.578587][ T27] audit: type=1326 audit(1771334874.572:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 89.617809][ T27] audit: type=1326 audit(1771334874.572:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 89.924040][ T27] audit: type=1326 audit(1771334874.612:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 90.496954][ T27] audit: type=1326 audit(1771334874.612:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 90.920173][ T27] audit: type=1326 audit(1771334874.632:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 91.487916][ T27] audit: type=1326 audit(1771334874.632:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 91.513074][ T27] audit: type=1326 audit(1771334874.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 91.768468][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059197000: rx timeout, send abort [ 92.443477][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059197000: abort rx timeout. Force session deactivation [ 92.495434][ T27] audit: type=1326 audit(1771334874.632:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 92.636973][ T27] audit: type=1326 audit(1771334874.632:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 92.718008][ T4505] Zero length message leads to an empty skb [ 93.450755][ T4512] comedi comedi1: comedi_test: 12032 microvolt, 5 microsecond waveform attached [ 93.814147][ T4512] comedi comedi1: Buffer allocation failed [ 94.097399][ T4508] delete_channel: no stack [ 95.621652][ T4284] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 95.926133][ T4536] comedi comedi1: comedi_test: 12032 microvolt, 5 microsecond waveform attached [ 95.948669][ T4541] trusted_key: encrypted_key: insufficient parameters specified [ 99.341065][ T4568] delete_channel: no stack [ 100.741240][ T4576] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 102.213160][ T4284] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 102.261426][ T3598] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.521349][ T3598] usb 3-1: device descriptor read/64, error -71 [ 102.892508][ T3598] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.121344][ T3598] usb 3-1: device descriptor read/64, error -71 [ 103.704718][ T4610] trusted_key: encrypted_key: insufficient parameters specified [ 103.720003][ T3598] usb usb3-port1: attempt power cycle [ 104.991348][ T3598] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.211321][ T3598] usb 3-1: device not accepting address 4, error -71 [ 106.045623][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 106.045663][ T27] audit: type=1326 audit(1771334891.132:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff599bf79 code=0x7ffc0000 [ 106.117704][ T27] audit: type=1326 audit(1771334891.132:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff599bf79 code=0x7ffc0000 [ 106.213098][ T27] audit: type=1326 audit(1771334891.132:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff599bf79 code=0x7ffc0000 [ 106.682305][ T27] audit: type=1326 audit(1771334891.132:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff599bf79 code=0x7ffc0000 [ 106.810793][ T27] audit: type=1326 audit(1771334891.132:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feff599bf79 code=0x7ffc0000 [ 106.976170][ T27] audit: type=1326 audit(1771334891.182:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff599bf79 code=0x7ffc0000 [ 107.075485][ T27] audit: type=1326 audit(1771334891.182:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feff599bce2 code=0x7ffc0000 [ 107.170360][ T27] audit: type=1326 audit(1771334891.182:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff599bf79 code=0x7ffc0000 [ 107.251445][ T4284] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 107.260745][ T27] audit: type=1326 audit(1771334891.182:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff599bf79 code=0x7ffc0000 [ 107.333351][ T27] audit: type=1326 audit(1771334891.242:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feff599bd77 code=0x7ffc0000 [ 107.755743][ T4648] delete_channel: no stack [ 110.781357][ T3598] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.971447][ T3598] usb 4-1: device descriptor read/64, error -71 [ 111.052303][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 111.052317][ T27] audit: type=1326 audit(1771334896.142:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99d59bf79 code=0x7ffc0000 [ 111.251296][ T3598] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.551438][ T3598] usb 4-1: device descriptor read/64, error -71 [ 111.558101][ T27] audit: type=1326 audit(1771334896.192:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99d59bf79 code=0x7ffc0000 [ 111.580816][ T27] audit: type=1326 audit(1771334896.192:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99d59bf79 code=0x7ffc0000 [ 111.639975][ T27] audit: type=1326 audit(1771334896.202:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99d59bf79 code=0x7ffc0000 [ 111.719811][ T3598] usb usb4-port1: attempt power cycle [ 111.754868][ T27] audit: type=1326 audit(1771334896.252:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99d59bf79 code=0x7ffc0000 [ 111.797472][ T27] audit: type=1326 audit(1771334896.252:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff99d59bce2 code=0x7ffc0000 [ 111.871223][ T27] audit: type=1326 audit(1771334896.282:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff99d59bd77 code=0x7ffc0000 [ 111.961282][ T27] audit: type=1326 audit(1771334896.282:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff99d558d11 code=0x7ffc0000 [ 112.006044][ T27] audit: type=1326 audit(1771334896.282:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff99d59cd89 code=0x7ffc0000 [ 112.099134][ T27] audit: type=1326 audit(1771334896.282:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4686 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff99d558d7b code=0x7ffc0000 [ 112.211334][ T3598] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.246179][ T4697] trusted_key: encrypted_key: insufficient parameters specified [ 112.262033][ T3598] usb 4-1: device descriptor read/8, error -71 [ 112.943160][ T4284] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 112.951266][ T3598] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.032110][ T3598] usb 4-1: device descriptor read/8, error -71 [ 113.096354][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805962b000: rx timeout, send abort [ 113.153291][ T3598] usb usb4-port1: unable to enumerate USB device [ 113.604719][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805962b000: abort rx timeout. Force session deactivation [ 113.689730][ T4284] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 116.978556][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 116.978607][ T27] audit: type=1326 audit(1771334902.052:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 117.536970][ T27] audit: type=1326 audit(1771334902.062:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 117.631640][ T27] audit: type=1326 audit(1771334902.062:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 117.714449][ T27] audit: type=1326 audit(1771334902.062:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 117.801427][ T27] audit: type=1326 audit(1771334902.082:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 117.901387][ T27] audit: type=1326 audit(1771334902.082:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 117.994516][ T27] audit: type=1326 audit(1771334902.082:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 118.091377][ T27] audit: type=1326 audit(1771334902.082:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 118.175043][ T27] audit: type=1326 audit(1771334902.082:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 118.268500][ T27] audit: type=1326 audit(1771334902.082:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53359bf79 code=0x7ffc0000 [ 119.632453][ T4284] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 120.405061][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023e9f400: rx timeout, send abort [ 121.802964][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023e9f400: abort rx timeout. Force session deactivation [ 121.976388][ T4315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.015926][ T4284] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 122.141287][ T4315] usb 4-1: device descriptor read/64, error -71 [ 122.501348][ T4315] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.681359][ T4315] usb 4-1: device descriptor read/64, error -71 [ 122.812987][ T4315] usb usb4-port1: attempt power cycle [ 123.241493][ T4315] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.305811][ T4315] usb 4-1: device descriptor read/8, error -71 [ 124.069279][ T4315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.139299][ T4315] usb 4-1: device descriptor read/8, error -71 [ 124.302088][ T4315] usb usb4-port1: unable to enumerate USB device [ 125.138750][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055b07000: rx timeout, send abort [ 125.647028][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055b07000: abort rx timeout. Force session deactivation [ 126.243046][ T4284] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 127.461283][ T4315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.791329][ T4315] usb 1-1: device descriptor read/64, error -71 [ 128.061336][ T4315] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.241373][ T4315] usb 1-1: device descriptor read/64, error -71 [ 128.371950][ T4315] usb usb1-port1: attempt power cycle [ 128.791314][ T4315] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.862716][ T4315] usb 1-1: device descriptor read/8, error -71 [ 129.039674][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d2ce800: rx timeout, send abort [ 129.151688][ T4315] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.548076][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d2ce800: abort rx timeout. Force session deactivation [ 129.892318][ T4315] usb 1-1: device descriptor read/8, error -71 [ 130.031742][ T4315] usb usb1-port1: unable to enumerate USB device [ 131.579537][ T3598] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.771355][ T3598] usb 3-1: Using ep0 maxpacket: 16 [ 131.785104][ T3598] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 132.261377][ T3598] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.270517][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.436073][ T3598] usb 3-1: Product: syz [ 132.455002][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.460864][ T3598] usb 3-1: Manufacturer: syz [ 132.461373][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.468422][ T4284] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 132.596354][ T3598] usb 3-1: SerialNumber: syz [ 132.666168][ T3598] usb 3-1: config 0 descriptor?? [ 134.744973][ T4346] usb 3-1: USB disconnect, device number 6 [ 135.623654][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.111430][ T26] usb 4-1: device descriptor read/64, error -71 [ 136.136375][ T4284] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 136.381426][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.591381][ T26] usb 4-1: device descriptor read/64, error -71 [ 137.390179][ T26] usb usb4-port1: attempt power cycle [ 140.073253][ T4953] trusted_key: encrypted_key: insufficient parameters specified [ 143.530212][ T125] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.831378][ T125] usb 1-1: device descriptor read/64, error -71 [ 144.784411][ T4992] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 145.601221][ T125] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.941283][ T4345] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.493204][ T4345] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 146.508999][ T4345] usb 5-1: config 0 has no interface number 0 [ 146.529889][ T4345] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.569037][ T4345] usb 5-1: config 0 interface 184 has no altsetting 0 [ 146.620236][ T4345] usb 5-1: New USB device found, idVendor=0f1e, idProduct=04b8, bcdDevice=ee.64 [ 146.649690][ T4345] usb 5-1: New USB device strings: Mfr=255, Product=2, SerialNumber=3 [ 146.674717][ T4345] usb 5-1: Product: syz [ 146.681118][ T4345] usb 5-1: Manufacturer: syz [ 146.702667][ T4345] usb 5-1: SerialNumber: syz [ 146.725971][ T4345] usb 5-1: config 0 descriptor?? [ 147.941314][ T5023] trusted_key: encrypted_key: insufficient parameters specified [ 149.606507][ T5040] ================================================================== [ 149.614629][ T5040] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 149.621879][ T5040] Read of size 8 at addr ffff888147747818 by task syz.2.172/5040 [ 149.629599][ T5040] [ 149.631938][ T5040] CPU: 0 PID: 5040 Comm: syz.2.172 Not tainted syzkaller #0 [ 149.639233][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.649394][ T5040] Call Trace: [ 149.652693][ T5040] [ 149.655648][ T5040] dump_stack_lvl+0x188/0x24e [ 149.660337][ T5040] ? read_lock_is_recursive+0x10/0x10 [ 149.665719][ T5040] ? show_regs_print_info+0x12/0x12 [ 149.670946][ T5040] ? load_image+0x400/0x400 [ 149.675476][ T5040] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 149.680937][ T5040] ? __virt_addr_valid+0x188/0x540 [ 149.686055][ T5040] ? __virt_addr_valid+0x465/0x540 [ 149.691193][ T5040] ? dvb_device_open+0xc6/0x370 [ 149.696060][ T5040] print_report+0xa8/0x210 [ 149.700475][ T5040] kasan_report+0x10b/0x140 [ 149.704995][ T5040] ? dvb_device_open+0xc6/0x370 [ 149.709852][ T5040] dvb_device_open+0xc6/0x370 [ 149.714533][ T5040] ? do_raw_spin_unlock+0x11d/0x230 [ 149.719726][ T5040] chrdev_open+0x5c5/0x6a0 [ 149.724140][ T5040] ? cd_forget+0x160/0x160 [ 149.728554][ T5040] ? do_dentry_open+0x7e0/0x10d0 [ 149.733503][ T5040] ? cd_forget+0x160/0x160 [ 149.737935][ T5040] do_dentry_open+0x7e9/0x10d0 [ 149.742726][ T5040] path_openat+0x2635/0x2ee0 [ 149.747335][ T5040] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 149.752716][ T5040] ? do_filp_open+0x430/0x430 [ 149.757426][ T5040] do_filp_open+0x1f1/0x430 [ 149.761939][ T5040] ? vfs_tmpfile+0x480/0x480 [ 149.766543][ T5040] ? preempt_schedule_common+0xa5/0xd0 [ 149.772015][ T5040] ? _raw_spin_unlock+0x36/0x40 [ 149.776861][ T5040] ? alloc_fd+0x58f/0x630 [ 149.781220][ T5040] do_sys_openat2+0x150/0x4b0 [ 149.785905][ T5040] ? rcu_is_watching+0x11/0xa0 [ 149.790669][ T5040] ? do_sys_open+0xe0/0xe0 [ 149.795097][ T5040] ? lockdep_hardirqs_on+0x94/0x140 [ 149.800301][ T5040] ? asm_sysvec_call_function_single+0x16/0x20 [ 149.806462][ T5040] __x64_sys_openat+0x135/0x160 [ 149.811340][ T5040] do_syscall_64+0x4c/0xa0 [ 149.815786][ T5040] ? clear_bhb_loop+0x60/0xb0 [ 149.820459][ T5040] ? clear_bhb_loop+0x60/0xb0 [ 149.825138][ T5040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.831041][ T5040] RIP: 0033:0x7feff595c84e [ 149.835462][ T5040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.855070][ T5040] RSP: 002b:00007feff689cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.863487][ T5040] RAX: ffffffffffffffda RBX: 00007feff689d6c0 RCX: 00007feff595c84e [ 149.871460][ T5040] RDX: 0000000000040002 RSI: 00007feff689cc00 RDI: ffffffffffffff9c [ 149.879427][ T5040] RBP: 00007feff689cc00 R08: 0000000000000000 R09: 0000000000000000 [ 149.887399][ T5040] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 149.895390][ T5040] R13: 00007feff5c16128 R14: 00007feff5c16090 R15: 00007ffe43444198 [ 149.903369][ T5040] [ 149.906388][ T5040] [ 149.908735][ T5040] Allocated by task 1: [ 149.912800][ T5040] kasan_set_track+0x4b/0x70 [ 149.917425][ T5040] __kasan_kmalloc+0x8e/0xa0 [ 149.922032][ T5040] dvb_register_device+0x311/0x2150 [ 149.927266][ T5040] dvb_register_frontend+0x645/0x920 [ 149.932583][ T5040] vidtv_bridge_probe+0x9a1/0xf70 [ 149.937646][ T5040] platform_probe+0x137/0x1c0 [ 149.942361][ T5040] really_probe+0x2aa/0xc70 [ 149.946890][ T5040] __driver_probe_device+0x18c/0x330 [ 149.952187][ T5040] driver_probe_device+0x4f/0x420 [ 149.957222][ T5040] __driver_attach+0x44a/0x6e0 [ 149.962002][ T5040] bus_for_each_dev+0x182/0x1f0 [ 149.966859][ T5040] bus_add_driver+0x30a/0x5a0 [ 149.971539][ T5040] driver_register+0x32d/0x430 [ 149.976310][ T5040] vidtv_bridge_init+0x39/0x67 [ 149.981092][ T5040] do_one_initcall+0x26a/0x840 [ 149.985909][ T5040] do_initcall_level+0x137/0x1e4 [ 149.990864][ T5040] do_initcalls+0x4b/0x8a [ 149.995220][ T5040] kernel_init_freeable+0x415/0x5be [ 150.000436][ T5040] kernel_init+0x19/0x1b0 [ 150.004774][ T5040] ret_from_fork+0x1f/0x30 [ 150.009222][ T5040] [ 150.011579][ T5040] Freed by task 4992: [ 150.015677][ T5040] kasan_set_track+0x4b/0x70 [ 150.020313][ T5040] kasan_save_free_info+0x2d/0x50 [ 150.025446][ T5040] ____kasan_slab_free+0x126/0x1e0 [ 150.030564][ T5040] slab_free_freelist_hook+0x131/0x1a0 [ 150.036033][ T5040] __kmem_cache_free+0xb6/0x1f0 [ 150.040917][ T5040] dvb_device_open+0x2e7/0x370 [ 150.045720][ T5040] chrdev_open+0x5c5/0x6a0 [ 150.050175][ T5040] do_dentry_open+0x7e9/0x10d0 [ 150.055040][ T5040] path_openat+0x2635/0x2ee0 [ 150.059649][ T5040] do_filp_open+0x1f1/0x430 [ 150.064157][ T5040] do_sys_openat2+0x150/0x4b0 [ 150.068846][ T5040] __x64_sys_openat+0x135/0x160 [ 150.073877][ T5040] do_syscall_64+0x4c/0xa0 [ 150.078307][ T5040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.084207][ T5040] [ 150.086568][ T5040] The buggy address belongs to the object at ffff888147747800 [ 150.086568][ T5040] which belongs to the cache kmalloc-256 of size 256 [ 150.100634][ T5040] The buggy address is located 24 bytes inside of [ 150.100634][ T5040] 256-byte region [ffff888147747800, ffff888147747900) [ 150.113912][ T5040] [ 150.116240][ T5040] The buggy address belongs to the physical page: [ 150.122658][ T5040] page:ffffea00051dd180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147746 [ 150.132896][ T5040] head:ffffea00051dd180 order:1 compound_mapcount:0 compound_pincount:0 [ 150.141233][ T5040] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 150.149320][ T5040] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 150.157909][ T5040] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 150.166517][ T5040] page dumped because: kasan: bad access detected [ 150.172942][ T5040] page_owner tracks the page as allocated [ 150.178657][ T5040] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11508082867, free_ts 0 [ 150.198387][ T5040] post_alloc_hook+0x173/0x1a0 [ 150.203163][ T5040] get_page_from_freelist+0x1a1e/0x1ab0 [ 150.208717][ T5040] __alloc_pages+0x1ec/0x4f0 [ 150.213314][ T5040] alloc_page_interleave+0x24/0x1e0 [ 150.218518][ T5040] alloc_slab_page+0x5d/0x160 [ 150.223199][ T5040] new_slab+0x87/0x2c0 [ 150.227270][ T5040] ___slab_alloc+0xbc6/0x1240 [ 150.231954][ T5040] __kmem_cache_alloc_node+0x1a0/0x260 [ 150.237431][ T5040] kmalloc_trace+0x26/0xe0 [ 150.241854][ T5040] bus_add_driver+0xda/0x5a0 [ 150.246447][ T5040] driver_register+0x32d/0x430 [ 150.251226][ T5040] usb_register_driver+0x202/0x3d0 [ 150.256377][ T5040] do_one_initcall+0x26a/0x840 [ 150.261166][ T5040] do_initcall_level+0x137/0x1e4 [ 150.266167][ T5040] do_initcalls+0x4b/0x8a [ 150.270508][ T5040] kernel_init_freeable+0x415/0x5be [ 150.275714][ T5040] page_owner free stack trace missing [ 150.281073][ T5040] [ 150.283393][ T5040] Memory state around the buggy address: [ 150.289027][ T5040] ffff888147747700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.297104][ T5040] ffff888147747780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.305167][ T5040] >ffff888147747800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.313229][ T5040] ^ [ 150.318071][ T5040] ffff888147747880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.326132][ T5040] ffff888147747900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.334192][ T5040] ================================================================== [ 150.345360][ T5040] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.352593][ T5040] CPU: 0 PID: 5040 Comm: syz.2.172 Not tainted syzkaller #0 [ 150.359899][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.369968][ T5040] Call Trace: [ 150.373251][ T5040] [ 150.376181][ T5040] dump_stack_lvl+0x188/0x24e [ 150.380871][ T5040] ? memcpy+0x3c/0x60 [ 150.384856][ T5040] ? show_regs_print_info+0x12/0x12 [ 150.390059][ T5040] ? load_image+0x400/0x400 [ 150.394567][ T5040] panic+0x2e5/0x730 [ 150.398459][ T5040] ? bpf_jit_dump+0xd0/0xd0 [ 150.402966][ T5040] ? check_panic_on_warn+0x6c/0xa0 [ 150.408085][ T5040] check_panic_on_warn+0x80/0xa0 [ 150.413024][ T5040] ? dvb_device_open+0xc6/0x370 [ 150.417880][ T5040] end_report+0x66/0x110 [ 150.422136][ T5040] kasan_report+0x118/0x140 [ 150.426648][ T5040] ? dvb_device_open+0xc6/0x370 [ 150.431507][ T5040] dvb_device_open+0xc6/0x370 [ 150.436206][ T5040] ? do_raw_spin_unlock+0x11d/0x230 [ 150.441409][ T5040] chrdev_open+0x5c5/0x6a0 [ 150.445830][ T5040] ? cd_forget+0x160/0x160 [ 150.450246][ T5040] ? do_dentry_open+0x7e0/0x10d0 [ 150.455192][ T5040] ? cd_forget+0x160/0x160 [ 150.459614][ T5040] do_dentry_open+0x7e9/0x10d0 [ 150.464387][ T5040] path_openat+0x2635/0x2ee0 [ 150.468988][ T5040] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 150.474373][ T5040] ? do_filp_open+0x430/0x430 [ 150.479062][ T5040] do_filp_open+0x1f1/0x430 [ 150.483598][ T5040] ? vfs_tmpfile+0x480/0x480 [ 150.488191][ T5040] ? preempt_schedule_common+0xa5/0xd0 [ 150.493668][ T5040] ? _raw_spin_unlock+0x36/0x40 [ 150.498523][ T5040] ? alloc_fd+0x58f/0x630 [ 150.502876][ T5040] do_sys_openat2+0x150/0x4b0 [ 150.507558][ T5040] ? rcu_is_watching+0x11/0xa0 [ 150.512338][ T5040] ? do_sys_open+0xe0/0xe0 [ 150.516759][ T5040] ? lockdep_hardirqs_on+0x94/0x140 [ 150.521963][ T5040] ? asm_sysvec_call_function_single+0x16/0x20 [ 150.528125][ T5040] __x64_sys_openat+0x135/0x160 [ 150.532985][ T5040] do_syscall_64+0x4c/0xa0 [ 150.537411][ T5040] ? clear_bhb_loop+0x60/0xb0 [ 150.542099][ T5040] ? clear_bhb_loop+0x60/0xb0 [ 150.546776][ T5040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.552674][ T5040] RIP: 0033:0x7feff595c84e [ 150.557090][ T5040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.576719][ T5040] RSP: 002b:00007feff689cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.585215][ T5040] RAX: ffffffffffffffda RBX: 00007feff689d6c0 RCX: 00007feff595c84e [ 150.593200][ T5040] RDX: 0000000000040002 RSI: 00007feff689cc00 RDI: ffffffffffffff9c [ 150.601215][ T5040] RBP: 00007feff689cc00 R08: 0000000000000000 R09: 0000000000000000 [ 150.609217][ T5040] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 150.617211][ T5040] R13: 00007feff5c16128 R14: 00007feff5c16090 R15: 00007ffe43444198 [ 150.625210][ T5040] [ 150.628390][ T5040] Kernel Offset: disabled [ 150.632722][ T5040] Rebooting in 86400 seconds..