last executing test programs: 4m18.896142532s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000002c0)='./file0/file0\x00', 0x98427d7363e5173a, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) 4m16.294555241s ago: executing program 2 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e23, @broadcast}}) 4m1.122546414s ago: executing program 32 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e23, @broadcast}}) 16.775296961s ago: executing program 1 (id=582): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 15.528872298s ago: executing program 5 (id=584): keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) 15.49121366s ago: executing program 1 (id=585): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) 15.093997271s ago: executing program 5 (id=587): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r5, 0x0, 0x10040800) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$zero(0xffffffffffffff9c, 0x0, 0x660bbb32c8e0e6fb, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) 13.750161813s ago: executing program 5 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000000)="2200000809809a85", 0x8) 12.593442955s ago: executing program 5 (id=592): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x86) renameat2(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000003200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x2f00, 0x5, 0xd09a, 0x0, 0x3, 0xd47c, 0x20000004, 0x6, 0xffe, 0x9, 0xe1e, 0x3, 0x800005, 0xaba5, 0x800ffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) creat(0x0, 0x0) 10.319928367s ago: executing program 5 (id=595): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x699, &(0x7f00000001c0)={0x0, 0x4fbe, 0x100, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffed5, 0x0, 0x0, 0x0, 0x50}, 0x0, 0xd39e1957f51befff, 0x1}) io_uring_enter(r1, 0x415d, 0x35eb, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)=',\x00\x8c\xf4\xa7d+$z\xd27\x1d\x84kZfG\xc2\x0f\x80\xeej\xd4\xe4\xf9\xa4\xbb\x94\xd6K\xc07\xf4\xa79\xe9\x14\x91S}T\x80\x04\x96gW\x13\x8d\x84\n\xf6vx\x0e\xa1^~\xbe\x1f_\xc7q\xc7\xa9~\xd45\xf3|B~4\x1d\xd9\xec\xf6_\xb6i\x06\xd0\xc7B(\xb7]\xd2\xdb\x81f\xe7X\x12\"\xb4\x9cV\x83\x8a\x00', 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 8.468445946s ago: executing program 4 (id=600): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r5, 0x0, 0x10040800) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$zero(0xffffffffffffff9c, 0x0, 0x660bbb32c8e0e6fb, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) 8.467693636s ago: executing program 3 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c005) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r4, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 7.180429435s ago: executing program 3 (id=601): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x10000000, 0x0, &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 6.729774709s ago: executing program 4 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000000)="2200000809809a85", 0x8) 6.282576914s ago: executing program 0 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r5, 0xfffffffffffffffe, 0x39) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000002c0)='./file0/file0\x00', 0x98427d7363e5173a, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) 6.068503955s ago: executing program 1 (id=604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfa", 0x7e}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {0x0}, {&(0x7f0000000780)}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e", 0xdf}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{0x0}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.998613648s ago: executing program 3 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c005) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r4, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 5.644131467s ago: executing program 1 (id=606): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x86) renameat2(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000003200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x2f00, 0x5, 0xd09a, 0x0, 0x3, 0xd47c, 0x20000004, 0x6, 0xffe, 0x9, 0xe1e, 0x3, 0x800005, 0xaba5, 0x800ffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) creat(0x0, 0x0) 5.433505759s ago: executing program 0 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 5.374024222s ago: executing program 4 (id=608): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) 3.753446139s ago: executing program 3 (id=610): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0", 0x9}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.750858839s ago: executing program 4 (id=612): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000640)=0x1, 0x4) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05002abd7000000000002e000000", @ANYRES32=r10, @ANYBLOB="0a00340001010101010100001800490009ac0f0038d4bfbe8842cedcb80dac0f0004ac0f"], 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r7, r7], 0x2, r5, r6, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040)=0x7b, 0x4) r11 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r11, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) recvfrom$rxrpc(r11, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) 3.675799493s ago: executing program 1 (id=613): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x10000000, 0x0, &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58) r3 = getpgrp(r2) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$media(0x0, 0x2, 0x129081) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 2.095410308s ago: executing program 1 (id=614): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 2.086157388s ago: executing program 0 (id=615): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), 0x0}, 0x20) 2.035227201s ago: executing program 3 (id=616): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000440)={r5, &(0x7f0000000100)='\x00', 0x402040, &(0x7f00000002c0)={@_ha_fsid={[0x4, 0x10000]}, {0x1e, 0x6, 0x9e7, 0x8}}, 0x2, &(0x7f0000000300), &(0x7f0000000400)=0x1}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 1.802900293s ago: executing program 4 (id=617): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x10000000, 0x0, &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58) r3 = getpgrp(r2) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$media(0x0, 0x2, 0x129081) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 1.339935788s ago: executing program 3 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 390.500809ms ago: executing program 0 (id=619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfa", 0x7e}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {0x0}, {&(0x7f0000000780)}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e", 0xdf}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 362.50073ms ago: executing program 5 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000000)="2200000809809a85", 0x8) 59.564017ms ago: executing program 4 (id=621): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000440)={r5, &(0x7f0000000100)='\x00', 0x402040, &(0x7f00000002c0)={@_ha_fsid={[0x4, 0x10000]}, {0x1e, 0x6, 0x9e7, 0x8}}, 0x2, &(0x7f0000000300), &(0x7f0000000400)=0x1}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 58.505087ms ago: executing program 0 (id=631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfa", 0x7e}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {0x0}, {&(0x7f0000000780)}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e", 0xdf}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=622): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_clone3(&(0x7f0000000480)={0x10000000, 0x0, &(0x7f00000002c0), 0x0, {0x31}, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0x0, 0x0, {r0}}, 0x58) r3 = getpgrp(r2) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$media(0x0, 0x2, 0x129081) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 57.805559][ T4172] cgroup: Unknown subsys name 'net' [ 57.939708][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.185406][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.838959][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.924122][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.989908][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 61.010077][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.018078][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.026770][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.046712][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.053964][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.062237][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.096078][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.106146][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.133264][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.146534][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.153868][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.162791][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.186227][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.198529][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.206577][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.214389][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.260731][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.288921][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.298254][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.305984][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.313631][ T4196] device bridge_slave_0 entered promiscuous mode [ 61.333646][ T4185] team0: Port device team_slave_0 added [ 61.346006][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.353100][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.361058][ T4196] device bridge_slave_1 entered promiscuous mode [ 61.379252][ T4185] team0: Port device team_slave_1 added [ 61.397135][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.404281][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.412573][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.438627][ T4184] team0: Port device team_slave_0 added [ 61.451527][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.458774][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.467925][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.486605][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.493700][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.502071][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.510818][ T4184] team0: Port device team_slave_1 added [ 61.518380][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.534610][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.544277][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.552189][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.578385][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.590032][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.597311][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.605441][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.631521][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.643032][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.654014][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.661155][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.687628][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.717590][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.724901][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.752065][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.770785][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.777836][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.804231][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.822281][ T4196] team0: Port device team_slave_0 added [ 61.829956][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.847208][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.870109][ T4196] team0: Port device team_slave_1 added [ 61.877650][ T4189] team0: Port device team_slave_0 added [ 61.909317][ T4189] team0: Port device team_slave_1 added [ 61.927867][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.935040][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.968833][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.989313][ T4193] team0: Port device team_slave_0 added [ 62.007567][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.014836][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.041331][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.062517][ T4193] team0: Port device team_slave_1 added [ 62.069190][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.076344][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.102285][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.117920][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.124972][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.135340][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.141935][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.148674][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.157059][ T4185] Cannot create hsr debugfs directory [ 62.180169][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.187491][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.213623][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.237051][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.244031][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.270559][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.296255][ T4196] device hsr_slave_0 entered promiscuous mode [ 62.303112][ T4196] device hsr_slave_1 entered promiscuous mode [ 62.309930][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.317576][ T4196] Cannot create hsr debugfs directory [ 62.338275][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.345537][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.371704][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.405026][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.412270][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.419708][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.427599][ T4189] Cannot create hsr debugfs directory [ 62.540817][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.547854][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.554356][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.562327][ T4193] Cannot create hsr debugfs directory [ 62.665695][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 62.672522][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 62.675078][ T1334] Bluetooth: hci0: command 0x0409 tx timeout [ 62.685738][ T1334] Bluetooth: hci2: command 0x0409 tx timeout [ 62.692193][ T1334] Bluetooth: hci1: command 0x0409 tx timeout [ 62.765635][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.777923][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.788668][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.798911][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.856814][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.874452][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.884916][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.893510][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.942647][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.952393][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.974310][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.983707][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.030495][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.082456][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.102021][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.116276][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.126654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.136536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.166547][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.178516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.192982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.203073][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.210434][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.219338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.228877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.238096][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.245340][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.262642][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.269848][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.282125][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.291357][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.302972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.312377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.322033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.331178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.342080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.350782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.372008][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.381988][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.391553][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.402895][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.412302][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.420843][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.429844][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.438453][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.452481][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.465717][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.488482][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.497744][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.506867][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.516451][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.524119][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.532896][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.541635][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.549232][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.557826][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.571985][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.583508][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.596772][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.606972][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.615611][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.622658][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.631236][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.641604][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.650168][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.657256][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.665595][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.693741][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.708598][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.721329][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.730333][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.737462][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.746072][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.780716][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.793868][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.806235][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.815989][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.834785][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.842811][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.852843][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.862469][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.872412][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.881298][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.889931][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.906954][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.923978][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.933941][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.942718][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.952484][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.961599][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.970383][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.982184][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.004642][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.020577][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.033578][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.045851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.053551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.073703][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.095614][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.136913][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.146727][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.155205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.179686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.203557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.218171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.243004][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.252573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.266984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.278416][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.285672][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.295704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.305391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.313783][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.320881][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.329433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.337292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.345861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.355189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.374146][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.399249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.413336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.423465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.433617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.442781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.453679][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.460803][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.469827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.479167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.488378][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.495674][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.503753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.515886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.525447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.533900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.542272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.550034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.558939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.568040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.576629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.595169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.603875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.615103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.623649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.632112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.641046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.650571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.659756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.676609][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.688933][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.717667][ T4189] device veth0_vlan entered promiscuous mode [ 64.727534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.744081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.752472][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 64.759122][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 64.763708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.773751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.774199][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 64.787815][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 64.793919][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 64.800285][ T4189] device veth1_vlan entered promiscuous mode [ 64.809756][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.818736][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.828874][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.850036][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.862327][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.888115][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.902578][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.913190][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.929878][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.940385][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.952473][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.961619][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.983890][ T4184] device veth0_vlan entered promiscuous mode [ 65.000943][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.016111][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.034315][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.049708][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.059369][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.085811][ T4184] device veth1_vlan entered promiscuous mode [ 65.110851][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.120490][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.144256][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.160740][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.174258][ T4189] device veth0_macvtap entered promiscuous mode [ 65.209430][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.219339][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.228979][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.248238][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.257377][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.269032][ T4189] device veth1_macvtap entered promiscuous mode [ 65.281665][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.293935][ T4185] device veth0_vlan entered promiscuous mode [ 65.301072][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.309553][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.318328][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.326498][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.335835][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.346919][ T4184] device veth0_macvtap entered promiscuous mode [ 65.365804][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.374031][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.382162][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.396519][ T4184] device veth1_macvtap entered promiscuous mode [ 65.409647][ T4185] device veth1_vlan entered promiscuous mode [ 65.425791][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.444092][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.455205][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.470990][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.480950][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.488383][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.497652][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.506178][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.515981][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.525801][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.534418][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.543253][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.552196][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.567985][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.588106][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.599739][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.611757][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.622428][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.630809][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.639948][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.649104][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.658083][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.668167][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.677487][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.689332][ T4193] device veth0_vlan entered promiscuous mode [ 65.700168][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.711046][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.720902][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.730105][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.745435][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.753297][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.777512][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.788403][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.799319][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.808766][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.822994][ T4193] device veth1_vlan entered promiscuous mode [ 65.835118][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.843217][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.853710][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.918145][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.936585][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.952735][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.966906][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.976380][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.987302][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.995429][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.010697][ T4185] device veth0_macvtap entered promiscuous mode [ 66.028279][ T4196] device veth0_vlan entered promiscuous mode [ 66.040146][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.054064][ T4193] device veth0_macvtap entered promiscuous mode [ 66.072463][ T4185] device veth1_macvtap entered promiscuous mode [ 66.089475][ T4196] device veth1_vlan entered promiscuous mode [ 66.097972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.106995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.116632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.128957][ T4193] device veth1_macvtap entered promiscuous mode [ 66.169845][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.180657][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.194120][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.204956][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.216556][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.226985][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.237900][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.248814][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.259506][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.271700][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.282262][ T1481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.295358][ T1481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.300065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.311206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.319237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.328517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.338451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.347430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.356717][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.364800][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.380987][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.390005][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.399414][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.408726][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.423533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.433137][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.443985][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.456994][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.467530][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.477575][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.488304][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.499744][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.511118][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.523137][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.533233][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.543958][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.554040][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.565453][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.576430][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.611347][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.621469][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.630801][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.640448][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.649400][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.658005][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.669497][ T4196] device veth0_macvtap entered promiscuous mode [ 66.688678][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.698842][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.708185][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.717318][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.731531][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.734951][ T4196] device veth1_macvtap entered promiscuous mode [ 66.749388][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.768158][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.787941][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.807682][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.818750][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.821127][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.828107][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 66.838957][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.849948][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 66.854275][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.867661][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 66.872200][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.882998][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 66.886905][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.892475][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 66.903098][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.922017][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.930337][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.939988][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.948123][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.956315][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.964136][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.973599][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.026976][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.039975][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.055984][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.072037][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.083291][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.094312][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.105223][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.115773][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.127270][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.138124][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.148623][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.157831][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.168850][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.195044][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.204175][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.214391][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.235793][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.877545][ T4273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.999974][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.068875][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.078269][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.090715][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.108934][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.123323][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.186562][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.199094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.229171][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.244398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.308239][ T4279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 68.509183][ T4284] loop0: detected capacity change from 0 to 256 [ 68.722440][ T4289] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.564678][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.599823][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.614247][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 69.622160][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 69.649934][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 69.665752][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 69.697481][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 69.823608][ T4284] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 70.875053][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.906651][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.951356][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.223231][ T4306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.897434][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.904124][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.978344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.244951][ T4284] sched: RT throttling activated [ 72.828138][ T4313] loop0: detected capacity change from 0 to 256 [ 72.862374][ T4313] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 72.920607][ T4315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.732916][ T4317] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.742419][ T4317] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.751243][ T4317] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.759997][ T4317] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.525587][ T4325] binder: 4320:4325 ioctl c0306201 0 returned -14 [ 75.674161][ T4333] Malformed UNC in devname [ 75.674161][ T4333] [ 75.681291][ T4333] CIFS: VFS: Malformed UNC in devname [ 75.741480][ T4333] process 'syz.0.16' launched './file1' with NULL argv: empty string added [ 76.704535][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.768111][ T4340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.944484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 77.964534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 78.429993][ T4349] loop3: detected capacity change from 0 to 40427 [ 78.490074][ T4349] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 78.497991][ T4349] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.509320][ T4349] F2FS-fs (loop3): invalid crc value [ 78.561159][ T4349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.597355][ T4349] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.604977][ T4349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.622711][ T4357] loop0: detected capacity change from 0 to 256 [ 78.796109][ T4357] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 80.157117][ T4365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.214234][ T4375] loop3: detected capacity change from 0 to 256 [ 81.223861][ T4374] loop1: detected capacity change from 0 to 256 [ 81.318800][ T4375] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 81.376493][ T4377] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.662679][ T4374] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 81.918826][ T1110] cfg80211: failed to load regulatory.db [ 82.436533][ T4386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.607466][ T4403] loop0: detected capacity change from 0 to 256 [ 85.687456][ T4409] binder: 4408:4409 ioctl c0306201 0 returned -14 [ 85.736569][ T4403] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 86.231894][ T4424] 9pnet: Insufficient options for proto=fd [ 86.248587][ T4419] Malformed UNC in devname [ 86.248587][ T4419] [ 86.255992][ T4419] CIFS: VFS: Malformed UNC in devname [ 87.087948][ T4430] loop0: detected capacity change from 0 to 256 [ 87.350254][ T4433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.623436][ T4430] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 88.944615][ T1334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.214636][ T1334] usb 5-1: Using ep0 maxpacket: 8 [ 89.334808][ T1334] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 89.388158][ T1334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.579520][ T1334] pvrusb2: Hardware description: Terratec Grabster AV400 [ 89.615225][ T1334] pvrusb2: ********** [ 89.658360][ T4432] chnl_net:caif_netlink_parms(): no params data found [ 89.682781][ T1334] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 89.740793][ T1334] pvrusb2: Important functionality might not be entirely working. [ 89.807225][ T1334] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 89.853408][ T1334] pvrusb2: ********** [ 89.902406][ T4426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.923584][ T2426] pvrusb2: Invalid write control endpoint [ 90.024608][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 90.043403][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.086060][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.111240][ T4432] device bridge_slave_0 entered promiscuous mode [ 90.113170][ T2426] pvrusb2: Invalid write control endpoint [ 90.124551][ T4437] netlink: 'syz.4.41': attribute type 79 has an invalid length. [ 90.131017][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 90.159181][ T4426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.164744][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 90.179980][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.189858][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.203405][ T4471] udc-core: couldn't find an available UDC or it's busy [ 90.217431][ T4432] device bridge_slave_1 entered promiscuous mode [ 90.226327][ T4471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.235067][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 90.266917][ T4426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.288859][ T2426] pvrusb2: Device being rendered inoperable [ 90.331242][ T4432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.340886][ T4437] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 90.393776][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 90.417092][ T4277] usb 5-1: USB disconnect, device number 2 [ 90.427468][ T4426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.890601][ T4432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.900435][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 90.950995][ T2426] pvrusb2: Attached sub-driver cx25840 [ 90.976775][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 90.991267][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 91.007880][ T4432] team0: Port device team_slave_0 added [ 91.252689][ T4475] loop1: detected capacity change from 0 to 40427 [ 91.272739][ T4432] team0: Port device team_slave_1 added [ 91.339328][ T4475] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 91.347176][ T4475] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 91.356971][ T4475] F2FS-fs (loop1): invalid crc value [ 91.440306][ T4475] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.480854][ T4432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.490113][ T4475] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 91.497369][ T4475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.675419][ T4432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.691872][ T4484] loop3: detected capacity change from 0 to 256 [ 92.299501][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 92.422176][ T4484] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 92.554951][ T4432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.571024][ T4432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.578448][ T4432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.605917][ T4432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.412869][ T4432] device hsr_slave_0 entered promiscuous mode [ 93.482521][ T4432] device hsr_slave_1 entered promiscuous mode [ 93.555453][ T4432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.602935][ T4432] Cannot create hsr debugfs directory [ 93.622008][ T4495] loop4: detected capacity change from 0 to 256 [ 93.727708][ T4495] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 94.393447][ T1334] Bluetooth: hci5: command 0x040f tx timeout [ 95.292284][ T4432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.318040][ T4432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.523813][ T4432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.553461][ T4432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.144629][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.369865][ T4533] loop4: detected capacity change from 0 to 40427 [ 96.494819][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 96.505459][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 96.615790][ T13] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 96.717497][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.067949][ T4533] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 97.075773][ T4533] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.091211][ T4533] F2FS-fs (loop4): invalid crc value [ 97.098154][ T13] pvrusb2: Hardware description: Terratec Grabster AV400 [ 97.105378][ T13] pvrusb2: ********** [ 97.109542][ T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 97.119965][ T13] pvrusb2: Important functionality might not be entirely working. [ 97.129671][ T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 97.139610][ T4533] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.141077][ T13] pvrusb2: ********** [ 97.181897][ T4533] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.189115][ T4533] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.354965][ T4432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.427267][ T2426] pvrusb2: Invalid write control endpoint [ 98.353580][ T4548] netlink: 'syz.0.59': attribute type 79 has an invalid length. [ 98.428637][ T4548] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 98.439348][ T4548] udc-core: couldn't find an available UDC or it's busy [ 98.449707][ T4548] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.548423][ T4233] usb 1-1: USB disconnect, device number 2 [ 98.557780][ T4432] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.609567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.618087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.667950][ T2426] pvrusb2: Invalid write control endpoint [ 98.680230][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 98.686350][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.730183][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.739421][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 98.759007][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 98.780980][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.788433][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.833406][ T2426] pvrusb2: Device being rendered inoperable [ 98.877372][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.889462][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 98.889751][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.910367][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.917486][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.924514][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 98.938146][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.956115][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 98.968544][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.990884][ T2426] pvrusb2: Attached sub-driver cx25840 [ 99.002469][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.010903][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 99.028932][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.044790][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.076383][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.130143][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.242778][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.257487][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.293504][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.342884][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.378267][ T4432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.448027][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.482943][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.510076][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.611921][ T4426] device hsr_slave_0 left promiscuous mode [ 99.649649][ T4426] device hsr_slave_1 left promiscuous mode [ 99.693302][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.730675][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.762468][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.783952][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.812860][ T4426] device bridge_slave_1 left promiscuous mode [ 99.829893][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.878086][ T4426] device bridge_slave_0 left promiscuous mode [ 99.884435][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.940004][ T4426] device veth1_macvtap left promiscuous mode [ 99.953226][ T4426] device veth0_macvtap left promiscuous mode [ 99.960154][ T4426] device veth1_vlan left promiscuous mode [ 99.973899][ T4426] device veth0_vlan left promiscuous mode [ 101.288474][ T4589] loop1: detected capacity change from 0 to 256 [ 101.348162][ T4589] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 101.378992][ T4426] team0 (unregistering): Port device team_slave_1 removed [ 101.509345][ T4426] team0 (unregistering): Port device team_slave_0 removed [ 101.536986][ T4426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.010461][ T4426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.566400][ T4426] bond0 (unregistering): Released all slaves [ 103.195528][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 103.463806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.480217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.574641][ T1334] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.631233][ T4432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.155072][ T1334] usb 4-1: Using ep0 maxpacket: 8 [ 104.276354][ T1334] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 104.365792][ T1334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.667826][ T1334] pvrusb2: Hardware description: Terratec Grabster AV400 [ 104.679962][ T4651] device syzkaller0 entered promiscuous mode [ 104.686312][ T1334] pvrusb2: ********** [ 104.690379][ T1334] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 104.842644][ T1334] pvrusb2: Important functionality might not be entirely working. [ 104.858826][ T1334] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 104.883116][ T1334] pvrusb2: ********** [ 105.137326][ T4619] netlink: 'syz.3.77': attribute type 79 has an invalid length. [ 105.151500][ T2426] pvrusb2: Invalid write control endpoint [ 105.273313][ T4619] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 105.394972][ T4668] udc-core: couldn't find an available UDC or it's busy [ 105.484530][ T4668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.495875][ T2426] pvrusb2: Invalid write control endpoint [ 105.501673][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 105.533317][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.540619][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 105.547159][ T2304] usb 4-1: USB disconnect, device number 2 [ 105.572185][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 105.576198][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.592500][ T2426] pvrusb2: Device being rendered inoperable [ 105.598929][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 105.617992][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 105.649302][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.679960][ T2426] pvrusb2: Attached sub-driver cx25840 [ 105.691928][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.711721][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 105.733689][ T4432] device veth0_vlan entered promiscuous mode [ 105.751636][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.759817][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 105.774278][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.974452][ T4432] device veth1_vlan entered promiscuous mode [ 107.644115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.750814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.089448][ T4432] device veth0_macvtap entered promiscuous mode [ 108.535059][ T4432] device veth1_macvtap entered promiscuous mode [ 108.774387][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.214016][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.114519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 111.124526][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 111.134505][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 111.144501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 111.154497][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 111.164512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 113.164700][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.304315][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.616070][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.740226][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.873466][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.996212][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.311970][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.411417][ T4432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.470628][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.520251][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.591919][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.649526][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.702614][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.713229][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.723107][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.739001][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.765850][ T4432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.796782][ T4432] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.830888][ T4432] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.943208][ T4432] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.026751][ T4432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.066206][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.089445][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.178363][ T4736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.311276][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.375445][ T4277] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.469389][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.695024][ T4277] usb 2-1: Using ep0 maxpacket: 8 [ 117.961165][ T4277] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 117.996713][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.092557][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.103216][ T4277] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.124011][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.135280][ T4277] pvrusb2: ********** [ 118.149428][ T4277] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 118.170810][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.208244][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.220734][ T4277] pvrusb2: Important functionality might not be entirely working. [ 118.232573][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.254422][ T4277] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 118.267536][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.297355][ T4277] pvrusb2: ********** [ 118.447197][ T2426] pvrusb2: Invalid write control endpoint [ 118.568308][ T4754] hpfs: Bad magic ... probably not HPFS [ 119.150326][ T4735] netlink: 'syz.1.100': attribute type 79 has an invalid length. [ 119.198024][ T4735] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 119.210047][ T4757] loop4: detected capacity change from 0 to 256 [ 119.223624][ T2426] pvrusb2: Invalid write control endpoint [ 119.235056][ T4735] udc-core: couldn't find an available UDC or it's busy [ 119.235889][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.242033][ T4735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.277356][ T4308] usb 2-1: USB disconnect, device number 2 [ 119.316067][ T4757] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.333266][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.370580][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.418876][ T2426] pvrusb2: Device being rendered inoperable [ 119.449322][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.479866][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 119.516136][ T2426] pvrusb2: Attached sub-driver cx25840 [ 119.528872][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 119.575066][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 120.524703][ T4784] loop4: detected capacity change from 0 to 256 [ 120.617556][ T4776] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 120.713941][ T4784] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 122.729412][ T4795] hpfs: Bad magic ... probably not HPFS [ 123.901395][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 127.842207][ T4833] binder: 4823:4833 ioctl c0306201 0 returned -14 [ 128.069622][ T4274] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.401780][ T4855] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.411263][ T4855] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.420352][ T4855] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.429212][ T4855] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.159124][ T4274] usb 6-1: Using ep0 maxpacket: 8 [ 130.404795][ T4274] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 130.414748][ T4867] hpfs: Bad magic ... probably not HPFS [ 130.804766][ T4274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.882563][ T4873] hpfs: Bad magic ... probably not HPFS [ 130.910769][ T4875] hpfs: Bad magic ... probably not HPFS [ 131.084712][ T4274] usb 6-1: can't set config #252, error -71 [ 131.106363][ T4274] usb 6-1: USB disconnect, device number 2 [ 131.301966][ T4883] tipc: Started in network mode [ 131.328315][ T4883] tipc: Node identity bbbbbb01, cluster identity 4711 [ 131.413091][ T4883] tipc: Enabled bearer , priority 10 [ 132.407321][ T4233] tipc: Node number set to 3149642497 [ 132.879041][ T4910] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.887875][ T4910] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.896645][ T4910] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.905432][ T4910] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.919147][ T4910] 9pnet: Insufficient options for proto=fd [ 134.412948][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.420658][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.709714][ T4912] hpfs: Bad magic ... probably not HPFS [ 137.833791][ T4277] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.325603][ T4934] tipc: Enabling of bearer rejected, already enabled [ 140.680176][ T4957] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.689049][ T4957] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.698276][ T4957] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.707176][ T4957] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.739611][ T4957] 9pnet: Insufficient options for proto=fd [ 142.054908][ T4277] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.078762][ T4991] hpfs: Bad magic ... probably not HPFS [ 144.263042][ T4277] usb 5-1: Using ep0 maxpacket: 8 [ 144.469602][ T4277] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 144.524655][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.347056][ T4277] usb 5-1: can't set config #252, error -71 [ 145.365388][ T4277] usb 5-1: USB disconnect, device number 3 [ 145.454068][ T5010] 9pnet: Insufficient options for proto=fd [ 145.545278][ T5008] loop4: detected capacity change from 0 to 256 [ 146.330329][ T5012] hpfs: Bad magic ... probably not HPFS [ 146.995827][ T5008] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 149.992969][ T5049] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.129601][ T5053] loop3: detected capacity change from 0 to 256 [ 152.814871][ T5060] binder: 5036:5060 ioctl c0306201 0 returned -14 [ 152.953201][ T5053] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 153.123909][ T4277] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.854668][ T4277] usb 2-1: Using ep0 maxpacket: 8 [ 154.105418][ T4277] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.356803][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.517587][ T5079] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.259012][ T5081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.314633][ T4277] usb 2-1: can't set config #252, error -71 [ 155.324244][ T4277] usb 2-1: USB disconnect, device number 3 [ 159.140660][ T5121] loop3: detected capacity change from 0 to 256 [ 159.560613][ T5131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.525439][ T5121] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 160.931640][ T5150] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.409200][ T4230] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.674647][ T4230] usb 2-1: Using ep0 maxpacket: 8 [ 161.815066][ T4230] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 161.830277][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.035556][ T4230] pvrusb2: Hardware description: Terratec Grabster AV400 [ 162.042626][ T4230] pvrusb2: ********** [ 162.047030][ T4230] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 162.057422][ T4230] pvrusb2: Important functionality might not be entirely working. [ 162.065587][ T4230] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 162.077635][ T4230] pvrusb2: ********** [ 162.175748][ T2426] pvrusb2: Invalid write control endpoint [ 162.276422][ T2426] pvrusb2: Invalid write control endpoint [ 162.285262][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 162.314001][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 162.338531][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 162.372666][ T2426] pvrusb2: Device being rendered inoperable [ 162.385948][ T5146] netlink: 'syz.1.189': attribute type 79 has an invalid length. [ 162.403265][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 162.420447][ T5146] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 162.442624][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 162.453682][ T5146] udc-core: couldn't find an available UDC or it's busy [ 162.466776][ T2426] pvrusb2: Attached sub-driver cx25840 [ 162.479386][ T5146] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.488011][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 162.527436][ T4308] usb 2-1: USB disconnect, device number 4 [ 162.536753][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 163.651525][ T5181] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.660606][ T5181] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.669414][ T5181] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.678227][ T5181] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.689075][ T5190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.200'. [ 168.397877][ T5210] tipc: Enabling of bearer rejected, already enabled [ 171.403221][ T5229] hpfs: Bad magic ... probably not HPFS [ 171.640406][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 172.300223][ T5242] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.534703][ T23] usb 4-1: device not accepting address 3, error -71 [ 174.288526][ T5294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.299859][ T5301] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 175.610335][ T5314] loop5: detected capacity change from 0 to 256 [ 175.698435][ T5314] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 175.775673][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.990710][ T5322] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.874543][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 176.991406][ T5333] hpfs: Bad magic ... probably not HPFS [ 177.234903][ T23] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 177.333881][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.620217][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 177.638585][ T23] pvrusb2: ********** [ 177.642720][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 177.671095][ T23] pvrusb2: Important functionality might not be entirely working. [ 177.689678][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 177.711702][ T23] pvrusb2: ********** [ 177.834745][ T2426] pvrusb2: Invalid write control endpoint [ 177.902538][ T2426] pvrusb2: Invalid write control endpoint [ 177.911923][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 177.941901][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 177.960161][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 177.986726][ T2426] pvrusb2: Device being rendered inoperable [ 178.000160][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 178.019905][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 178.040408][ T5309] netlink: 'syz.4.224': attribute type 79 has an invalid length. [ 178.053753][ T2426] pvrusb2: Attached sub-driver cx25840 [ 178.071628][ T5309] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 178.084608][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 178.101943][ T5309] udc-core: couldn't find an available UDC or it's busy [ 178.109595][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 178.130706][ T5309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.153664][ T23] usb 5-1: USB disconnect, device number 4 [ 178.498063][ T5363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.215228][ T5367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.481030][ T5386] loop1: detected capacity change from 0 to 256 [ 180.514398][ T5386] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 182.054843][ T5413] Malformed UNC in devname [ 182.054843][ T5413] [ 182.061871][ T5413] CIFS: VFS: Malformed UNC in devname [ 183.373784][ T5422] binder: 5415:5422 ioctl c0306201 0 returned -14 [ 183.475839][ T5423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.506317][ T5432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.388354][ T5192] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.944529][ T5192] usb 6-1: Using ep0 maxpacket: 8 [ 188.004640][ T5192] usb 6-1: device descriptor read/all, error -71 [ 188.104240][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 188.124579][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 188.130797][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 188.143768][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 189.077456][ T5463] loop3: detected capacity change from 0 to 256 [ 189.203393][ T5463] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 190.450070][ T5484] ODEBUG: Out of memory. ODEBUG disabled [ 191.860608][ T5192] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 192.104737][ T5192] usb 6-1: Using ep0 maxpacket: 8 [ 193.159864][ T5510] loop1: detected capacity change from 0 to 256 [ 193.184739][ T5192] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 193.198588][ T5192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.552534][ T5510] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 193.882277][ T5192] pvrusb2: Hardware description: Terratec Grabster AV400 [ 193.899651][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 194.269657][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.277110][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.307421][ T5192] pvrusb2: ********** [ 195.068573][ T5524] netlink: 'syz.5.262': attribute type 79 has an invalid length. [ 195.134708][ T5192] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 195.146932][ T5192] pvrusb2: Important functionality might not be entirely working. [ 195.158677][ T5192] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 195.173587][ T5192] pvrusb2: ********** [ 195.215044][ T2426] pvrusb2: Invalid write control endpoint [ 195.401983][ T2426] pvrusb2: Invalid write control endpoint [ 195.408794][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 195.418883][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 195.427108][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 195.438288][ T2426] pvrusb2: Device being rendered inoperable [ 195.647835][ T5495] udc-core: couldn't find an available UDC or it's busy [ 195.667801][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 195.725049][ T5495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.733971][ T4274] usb 6-1: USB disconnect, device number 5 [ 195.741548][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 195.761835][ T2426] pvrusb2: Attached sub-driver cx25840 [ 195.767427][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 195.778639][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 196.493598][ T5577] ubi31: attaching mtd0 [ 196.507467][ T5577] ubi31: scanning is finished [ 196.512351][ T5577] ubi31: empty MTD device detected [ 196.836979][ T5578] hpfs: Bad magic ... probably not HPFS [ 198.152531][ T5577] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 198.161055][ T5577] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 198.169008][ T5577] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 198.181014][ T5577] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 198.189067][ T5577] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 198.198574][ T5577] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 198.209081][ T5577] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 457939341 [ 198.221509][ T5577] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 198.233733][ T5592] ubi31: background thread "ubi_bgt31d" started, PID 5592 [ 199.072855][ T5610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.430501][ T5618] hpfs: Bad magic ... probably not HPFS [ 200.917020][ T5626] hpfs: Bad magic ... probably not HPFS [ 201.657790][ T5625] netlink: 'syz.3.284': attribute type 79 has an invalid length. [ 204.104646][ T4274] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 204.205926][ T5638] hpfs: Bad magic ... probably not HPFS [ 204.308140][ T5642] loop4: detected capacity change from 0 to 256 [ 204.467015][ T5642] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 204.601408][ T5650] hpfs: Bad magic ... probably not HPFS [ 206.267505][ T5666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.564442][ T5677] hpfs: Bad magic ... probably not HPFS [ 208.686735][ T5684] netlink: 'syz.1.305': attribute type 79 has an invalid length. [ 208.994671][ T4229] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 209.244590][ T4229] usb 2-1: Invalid ep0 maxpacket: 64 [ 209.394610][ T4229] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 209.634624][ T4229] usb 2-1: Invalid ep0 maxpacket: 64 [ 209.642217][ T4229] usb usb2-port1: attempt power cycle [ 210.214706][ T4229] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 210.307212][ T4229] usb 2-1: Invalid ep0 maxpacket: 64 [ 210.464608][ T4229] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 210.503864][ T5717] netlink: 44 bytes leftover after parsing attributes in process `syz.5.315'. [ 210.584835][ T4229] usb 2-1: Invalid ep0 maxpacket: 64 [ 210.604257][ T4229] usb usb2-port1: unable to enumerate USB device [ 210.992859][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 211.704584][ T4229] Bluetooth: hci5: command 0x0406 tx timeout [ 217.285591][ T5722] hpfs: Bad magic ... probably not HPFS [ 217.426498][ T5741] netlink: 'syz.1.329': attribute type 79 has an invalid length. [ 219.740767][ T1110] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 219.750532][ T5757] hpfs: Bad magic ... probably not HPFS [ 220.265410][ T5770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.328'. [ 220.741069][ T5780] netlink: 'syz.1.341': attribute type 79 has an invalid length. [ 226.566528][ T5790] loop5: detected capacity change from 0 to 256 [ 226.686553][ T5790] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 228.277189][ T5810] hpfs: Bad magic ... probably not HPFS [ 229.269754][ T4308] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 235.219417][ T5844] netlink: 44 bytes leftover after parsing attributes in process `syz.4.349'. [ 237.498791][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 237.830671][ T5838] usb 5-1: device descriptor read/64, error -71 [ 240.960199][ T5901] loop1: detected capacity change from 0 to 256 [ 241.049561][ T5901] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 241.709520][ T5905] netlink: 44 bytes leftover after parsing attributes in process `syz.4.365'. [ 242.836296][ T5912] loop5: detected capacity change from 0 to 256 [ 243.173201][ T5912] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 245.574801][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 247.314628][ T13] usb 4-1: device descriptor read/64, error -71 [ 247.370594][ T5951] device syzkaller0 entered promiscuous mode [ 247.432668][ T5953] netlink: 44 bytes leftover after parsing attributes in process `syz.0.377'. [ 247.681811][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 250.247222][ T5990] loop5: detected capacity change from 0 to 256 [ 250.488608][ T5990] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 251.604634][ T4232] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 251.832682][ T6000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.393'. [ 251.842352][ T4232] usb 4-1: device descriptor read/64, error -71 [ 252.134617][ T4232] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 252.884604][ T4232] usb 4-1: device descriptor read/64, error -71 [ 253.121419][ T4232] usb usb4-port1: attempt power cycle [ 253.594808][ T4232] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 253.765108][ T4232] usb 4-1: device descriptor read/8, error -71 [ 255.707205][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713833][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.213086][ T1110] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 256.430080][ T6038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.454650][ T1110] usb 1-1: device descriptor read/64, error -71 [ 257.495471][ T6048] loop5: detected capacity change from 0 to 256 [ 257.599650][ T6054] loop4: detected capacity change from 0 to 256 [ 257.615934][ T6050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.409'. [ 257.697209][ T6054] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 257.727657][ T6048] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 258.048199][ T6056] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.606576][ T6082] ubi31: detaching mtd0 [ 260.291301][ T6082] ubi31: mtd0 is detached [ 262.118633][ T6112] netlink: 44 bytes leftover after parsing attributes in process `syz.3.429'. [ 262.272177][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 262.884573][ T21] usb 2-1: device descriptor read/64, error -71 [ 263.178798][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 263.995204][ T21] usb 2-1: device descriptor read/64, error -71 [ 264.124800][ T21] usb usb2-port1: attempt power cycle [ 264.972740][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 265.074699][ T21] usb 2-1: device descriptor read/8, error -71 [ 265.261774][ T6166] netlink: 44 bytes leftover after parsing attributes in process `syz.3.448'. [ 267.774535][ T1110] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 267.964622][ T1110] usb 5-1: device descriptor read/64, error -71 [ 268.043721][ T6218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.468'. [ 268.254545][ T1110] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 268.454585][ T1110] usb 5-1: device descriptor read/64, error -71 [ 269.298725][ T1110] usb usb5-port1: attempt power cycle [ 269.735172][ T6239] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 269.892823][ T1110] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 270.076004][ T6247] hpfs: Bad magic ... probably not HPFS [ 271.246977][ T1110] usb 5-1: device descriptor read/8, error -71 [ 271.344805][ T6260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.483'. [ 271.581141][ T6269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.114435][ T4308] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 273.189663][ T6292] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 273.614615][ T4308] usb 2-1: Using ep0 maxpacket: 8 [ 273.659965][ T4308] usb 2-1: no configurations [ 273.668098][ T4308] usb 2-1: can't read configurations, error -22 [ 273.864662][ T4308] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 274.041187][ T6312] netlink: 44 bytes leftover after parsing attributes in process `syz.5.499'. [ 274.154854][ T4308] usb 2-1: Using ep0 maxpacket: 8 [ 274.195255][ T4308] usb 2-1: no configurations [ 274.200501][ T4308] usb 2-1: can't read configurations, error -22 [ 274.229618][ T4308] usb usb2-port1: attempt power cycle [ 274.707009][ T4308] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 274.855169][ T4308] usb 2-1: Using ep0 maxpacket: 8 [ 274.906547][ T4308] usb 2-1: no configurations [ 274.921101][ T4308] usb 2-1: can't read configurations, error -22 [ 275.233456][ T6325] hpfs: Bad magic ... probably not HPFS [ 277.603025][ T4308] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 277.684600][ T4308] usb 2-1: device descriptor read/8, error -71 [ 279.660658][ T4308] usb usb2-port1: unable to enumerate USB device [ 280.052207][ T6362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.516'. [ 281.624649][ T5838] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 282.415207][ T6387] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.148254][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 284.276588][ T6404] hpfs: Bad magic ... probably not HPFS [ 284.295967][ T5838] usb 4-1: device descriptor read/all, error -71 [ 286.573207][ T6414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.530'. [ 289.769687][ T6450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.858980][ T6480] ubi31: attaching mtd0 [ 294.878163][ T6480] ubi31: scanning is finished [ 295.505375][ T6480] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 296.224180][ T6494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.461341][ T6504] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 297.795284][ T6514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.583874][ T6521] tipc: Enabling of bearer rejected, already enabled [ 303.254638][ T6542] ubi31: attaching mtd0 [ 303.260312][ T6542] ubi31: scanning is finished [ 303.382230][ T6542] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 305.734327][ T6583] ubi31: attaching mtd0 [ 305.744755][ T6583] ubi31: scanning is finished [ 306.386628][ T6583] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 306.544679][ T6591] Zero length message leads to an empty skb [ 306.612859][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 313.196068][ T6626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.394686][ T6628] hpfs: Bad magic ... probably not HPFS [ 313.616282][ T6641] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 315.392979][ T6654] ubi31: attaching mtd0 [ 315.438168][ T6654] ubi31: scanning is finished [ 316.892840][ T6654] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 317.310212][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.317228][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.091267][ T6686] ubi31: attaching mtd0 [ 320.105528][ T6686] ubi31: scanning is finished [ 320.560245][ T6686] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 320.754831][ T6686] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 320.762285][ T6686] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 320.784677][ T6686] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 320.924548][ T6686] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 320.931465][ T6686] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 320.954541][ T6686] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 457939341 [ 320.983863][ T6686] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 321.040227][ T6689] ubi31: background thread "ubi_bgt31d" started, PID 6689 [ 321.258805][ T6698] binder: 6692:6698 ioctl c0306201 0 returned -14 [ 323.302325][ T6710] hpfs: Bad magic ... probably not HPFS [ 324.043580][ T6722] ubi: mtd0 is already attached to ubi31 [ 325.082555][ T6719] netlink: 44 bytes leftover after parsing attributes in process `syz.4.612'. [ 325.346487][ T6730] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 326.722646][ T6738] ubi: mtd0 is already attached to ubi31 [ 327.386453][ C1] ================================================================== [ 327.394861][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 327.402414][ C1] Read of size 2 at addr ffff88805fb46c2a by task swapper/1/0 [ 327.409880][ C1] [ 327.412228][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 327.419261][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 327.429337][ C1] Call Trace: [ 327.432630][ C1] [ 327.435480][ C1] dump_stack_lvl+0x188/0x250 [ 327.440182][ C1] ? show_regs_print_info+0x20/0x20 [ 327.445392][ C1] ? _printk+0xda/0x130 [ 327.449553][ C1] ? rose_timer_expiry+0x470/0x490 [ 327.454685][ C1] ? load_image+0x400/0x400 [ 327.459206][ C1] print_address_description+0x60/0x2d0 [ 327.464767][ C1] ? rose_timer_expiry+0x470/0x490 [ 327.469900][ C1] kasan_report+0xdf/0x130 [ 327.474413][ C1] ? rose_timer_expiry+0x470/0x490 [ 327.479545][ C1] rose_timer_expiry+0x470/0x490 [ 327.484493][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 327.489536][ C1] call_timer_fn+0x17b/0x540 [ 327.494140][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 327.499176][ C1] ? __run_timers+0x800/0x800 [ 327.503873][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 327.509081][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 327.514296][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 327.519345][ C1] __run_timers+0x53e/0x800 [ 327.523960][ C1] ? detach_timer+0x2b0/0x2b0 [ 327.528647][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 327.534779][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 327.539746][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 327.545052][ C1] run_timer_softirq+0x63/0xf0 [ 327.549834][ C1] handle_softirqs+0x339/0x830 [ 327.554614][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 327.559480][ C1] ? do_softirq+0x210/0x210 [ 327.564008][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 327.569428][ C1] __irq_exit_rcu+0x13b/0x230 [ 327.574121][ C1] ? irq_exit_rcu+0x20/0x20 [ 327.578786][ C1] irq_exit_rcu+0x5/0x20 [ 327.583045][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 327.588691][ C1] [ 327.591632][ C1] [ 327.594566][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 327.600570][ C1] RIP: 0010:default_idle+0xb/0x10 [ 327.605611][ C1] Code: b7 48 89 df e8 76 29 f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 a5 5f 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 327.625245][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 327.631357][ C1] RAX: a71168b838de8600 RBX: ffff888016e98000 RCX: a71168b838de8600 [ 327.639377][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe40 [ 327.647457][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 327.655446][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 327.663432][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 327.671445][ C1] default_idle_call+0x81/0xc0 [ 327.676230][ C1] do_idle+0x3a1/0x650 [ 327.680321][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 327.685538][ C1] ? schedule_idle+0x57/0x90 [ 327.690140][ C1] ? do_idle+0x63a/0x650 [ 327.694492][ C1] cpu_startup_entry+0x14/0x20 [ 327.699271][ C1] start_secondary+0x330/0x430 [ 327.704055][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 327.709454][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 327.715376][ C1] [ 327.718501][ C1] [ 327.720824][ C1] Allocated by task 4636: [ 327.725150][ C1] __kasan_kmalloc+0xb5/0xf0 [ 327.729749][ C1] rose_add_node+0x227/0xdb0 [ 327.734346][ C1] rose_rt_ioctl+0xa2b/0xe70 [ 327.739023][ C1] rose_ioctl+0x2a7/0x7d0 [ 327.743351][ C1] sock_do_ioctl+0xfb/0x320 [ 327.747854][ C1] sock_ioctl+0x4d2/0x710 [ 327.752274][ C1] __se_sys_ioctl+0xfa/0x170 [ 327.756864][ C1] do_syscall_64+0x4c/0xa0 [ 327.761287][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.767184][ C1] [ 327.769508][ C1] Freed by task 6730: [ 327.773486][ C1] kasan_set_track+0x4b/0x70 [ 327.778093][ C1] kasan_set_free_info+0x1f/0x40 [ 327.783042][ C1] ____kasan_slab_free+0xd5/0x110 [ 327.788079][ C1] slab_free_freelist_hook+0xea/0x170 [ 327.793475][ C1] kfree+0xef/0x2a0 [ 327.797442][ C1] rose_rt_device_down+0x4e2/0x530 [ 327.802566][ C1] rose_device_event+0x606/0x6c0 [ 327.807512][ C1] raw_notifier_call_chain+0xcb/0x160 [ 327.812901][ C1] __dev_notify_flags+0x158/0x300 [ 327.818025][ C1] dev_change_flags+0xe3/0x1a0 [ 327.822808][ C1] dev_ifsioc+0x130/0xd50 [ 327.827160][ C1] dev_ioctl+0x545/0xe30 [ 327.831428][ C1] sock_do_ioctl+0x245/0x320 [ 327.836032][ C1] sock_ioctl+0x4d2/0x710 [ 327.840379][ C1] __se_sys_ioctl+0xfa/0x170 [ 327.845081][ C1] do_syscall_64+0x4c/0xa0 [ 327.849738][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 327.855646][ C1] [ 327.857984][ C1] The buggy address belongs to the object at ffff88805fb46c00 [ 327.857984][ C1] which belongs to the cache kmalloc-512 of size 512 [ 327.872044][ C1] The buggy address is located 42 bytes inside of [ 327.872044][ C1] 512-byte region [ffff88805fb46c00, ffff88805fb46e00) [ 327.885337][ C1] The buggy address belongs to the page: [ 327.890989][ C1] page:ffffea00017ed100 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805fb45800 pfn:0x5fb44 [ 327.902459][ C1] head:ffffea00017ed100 order:2 compound_mapcount:0 compound_pincount:0 [ 327.910797][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 327.918837][ C1] raw: 00fff00000010200 ffffea0001e75408 ffffea000184ec08 ffff888016c41c80 [ 327.927441][ C1] raw: ffff88805fb45800 0000000000100003 00000001ffffffff 0000000000000000 [ 327.936040][ C1] page dumped because: kasan: bad access detected [ 327.942634][ C1] page_owner tracks the page as allocated [ 327.948354][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4193, ts 64000978751, free_ts 20035871870 [ 327.967478][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 327.973042][ C1] __alloc_pages+0x1ee/0x480 [ 327.977665][ C1] new_slab+0xc0/0x4b0 [ 327.981747][ C1] ___slab_alloc+0x80a/0xdd0 [ 327.986348][ C1] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 327.991822][ C1] rtnl_newlink+0x183/0x1a50 [ 327.996432][ C1] rtnetlink_rcv_msg+0x844/0xf30 [ 328.001504][ C1] netlink_rcv_skb+0x1f5/0x440 [ 328.006275][ C1] netlink_unicast+0x774/0x920 [ 328.011044][ C1] netlink_sendmsg+0x8ba/0xbe0 [ 328.015815][ C1] __sys_sendto+0x46d/0x620 [ 328.020326][ C1] __x64_sys_sendto+0xda/0xf0 [ 328.025014][ C1] do_syscall_64+0x4c/0xa0 [ 328.029545][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 328.035449][ C1] page last free stack trace: [ 328.040124][ C1] free_unref_page_prepare+0x637/0x6c0 [ 328.045593][ C1] free_unref_page+0x8f/0x2a0 [ 328.050293][ C1] free_contig_range+0x96/0xf0 [ 328.055071][ C1] destroy_args+0xf0/0xa00 [ 328.059500][ C1] debug_vm_pgtable+0x321/0x380 [ 328.064563][ C1] do_one_initcall+0x272/0x730 [ 328.069340][ C1] do_initcall_level+0x137/0x1f0 [ 328.074283][ C1] do_initcalls+0x4b/0x90 [ 328.078703][ C1] kernel_init_freeable+0x3e9/0x570 [ 328.083923][ C1] kernel_init+0x19/0x1b0 [ 328.088262][ C1] ret_from_fork+0x1f/0x30 [ 328.092695][ C1] [ 328.095023][ C1] Memory state around the buggy address: [ 328.100655][ C1] ffff88805fb46b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 328.108713][ C1] ffff88805fb46b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 328.116787][ C1] >ffff88805fb46c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.124851][ C1] ^ [ 328.130229][ C1] ffff88805fb46c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.138344][ C1] ffff88805fb46d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 328.145218][ T6754] ubi: mtd0 is already attached to ubi31 [ 328.146401][ C1] ================================================================== [ 328.160139][ C1] Disabling lock debugging due to kernel taint [ 328.166328][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 328.173675][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0 [ 328.182065][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 328.192116][ C1] Call Trace: [ 328.195512][ C1] [ 328.198434][ C1] dump_stack_lvl+0x188/0x250 [ 328.203106][ C1] ? show_regs_print_info+0x20/0x20 [ 328.208328][ C1] ? load_image+0x400/0x400 [ 328.212837][ C1] panic+0x2e5/0x810 [ 328.216720][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 328.221377][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 328.227259][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 328.233143][ C1] ? _raw_spin_unlock+0x40/0x40 [ 328.237977][ C1] ? print_memory_metadata+0x314/0x400 [ 328.243423][ C1] ? rose_timer_expiry+0x470/0x490 [ 328.248526][ C1] check_panic_on_warn+0x80/0xa0 [ 328.253462][ C1] ? rose_timer_expiry+0x470/0x490 [ 328.258756][ C1] end_report+0x6d/0xf0 [ 328.262897][ C1] kasan_report+0x102/0x130 [ 328.267387][ C1] ? rose_timer_expiry+0x470/0x490 [ 328.272476][ C1] rose_timer_expiry+0x470/0x490 [ 328.277390][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 328.282390][ C1] call_timer_fn+0x17b/0x540 [ 328.286957][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 328.291957][ C1] ? __run_timers+0x800/0x800 [ 328.296612][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 328.301783][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 328.306956][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 328.312049][ C1] __run_timers+0x53e/0x800 [ 328.316538][ C1] ? detach_timer+0x2b0/0x2b0 [ 328.321191][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 328.327159][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 328.332001][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 328.337322][ C1] run_timer_softirq+0x63/0xf0 [ 328.342164][ C1] handle_softirqs+0x339/0x830 [ 328.347097][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 328.351925][ C1] ? do_softirq+0x210/0x210 [ 328.356498][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 328.361673][ C1] __irq_exit_rcu+0x13b/0x230 [ 328.366446][ C1] ? irq_exit_rcu+0x20/0x20 [ 328.370929][ C1] irq_exit_rcu+0x5/0x20 [ 328.375145][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 328.380877][ C1] [ 328.383801][ C1] [ 328.386712][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 328.392774][ C1] RIP: 0010:default_idle+0xb/0x10 [ 328.397790][ C1] Code: b7 48 89 df e8 76 29 f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 a5 5f 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 328.417927][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 328.424045][ C1] RAX: a71168b838de8600 RBX: ffff888016e98000 RCX: a71168b838de8600 [ 328.432115][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2800 RDI: ffffffff8a79fe40 [ 328.440066][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 328.448117][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 328.456065][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 328.464038][ C1] default_idle_call+0x81/0xc0 [ 328.468788][ C1] do_idle+0x3a1/0x650 [ 328.472950][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 328.478228][ C1] ? schedule_idle+0x57/0x90 [ 328.482810][ C1] ? do_idle+0x63a/0x650 [ 328.487041][ C1] cpu_startup_entry+0x14/0x20 [ 328.491873][ C1] start_secondary+0x330/0x430 [ 328.496617][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 328.501995][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 328.507872][ C1] [ 328.511243][ C1] Kernel Offset: disabled [ 328.515659][ C1] Rebooting in 86400 seconds..