last executing test programs: 24.167850405s ago: executing program 2 (id=82): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 23.010619382s ago: executing program 2 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="1dcd6b81cb60bf4c1193d2bfe5e2310fe3be279bfa9722c8f58e3bddf6cc16731269fd3eb8ffde8075b3331554a0e2dfec79b9727de427817c32f1fb1bae2d68fd531cfbc52f1c5ea26ebe57ccb6", 0x4e, 0x40000, &(0x7f0000000400)={0xa, 0x4e22, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0xa0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x78, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1d}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0xf, 0x20000, 0x2, 0xcbc, 0x1, 0x8}) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x1010, r0, 0x2d6000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0022057441a05a05410487a8ea0001000700000000e405e5a9d14a8a48216b502d2da417ef260d6f211f8435a83dcc0de73b7d4285b7f651d57be1f739b3e21bcb24a3d3b72865533ab2b93a5de90d97b03e8baf4fb716f639437bfe3c94a10cf72b36a815ca93dd078f4e5135ce27296ac9"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffcfe, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x800}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x46ad6aaf}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x12c) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) 22.672728307s ago: executing program 2 (id=91): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=']) 22.566604809s ago: executing program 2 (id=94): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket(0x40000000015, 0x5, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x2, 0x3, 0x3}, {{}, 0x16, 0x3, 0xf}, {{0x0, 0xea60}, 0x3, 0x7, 0x4c}, {{0x77359400}, 0x17, 0x2, 0x7}], 0x60) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x1, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@typed={0x9, 0x5d, 0x0, 0x0, @str='ceph\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 21.135226241s ago: executing program 2 (id=98): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 16.468710381s ago: executing program 2 (id=114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4000400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, &(0x7f0000000140)) timerfd_create(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d) read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/201, 0xc9) request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffffff070000", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) fchdir(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0xa) socket$nl_generic(0x10, 0x3, 0x10) 13.572216404s ago: executing program 0 (id=124): msgrcv(0x0, &(0x7f0000000000)={0x0, ""/63}, 0x43, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x8, 0x800) 13.354784998s ago: executing program 0 (id=128): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xf6, 0x10cf, 0x5, 0x5, 0x3, 0x1, 'syz0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x20000880) shutdown(r0, 0x1) 12.156791576s ago: executing program 0 (id=131): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb", 0x19, 0x800, 0x0, 0x0) 11.440412257s ago: executing program 0 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'vlan0\x00', {'vcan0\x00'}, 0x4}) 11.348504358s ago: executing program 0 (id=135): syz_open_procfs$userns(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$midi(0x0, 0x4f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000404104484240000102030109023d00010105800409040000030103000009050f03000202060b05250101b409050e03ff030352080525"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 9.084804863s ago: executing program 0 (id=137): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) 7.100769692s ago: executing program 1 (id=143): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="bb"], 0x0) 6.296899515s ago: executing program 1 (id=144): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 6.142650137s ago: executing program 1 (id=147): syz_open_procfs$userns(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$midi(0x0, 0x4f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000404104484240000102030109023d00010105800409040000030103000009050f03000202060b05250101b409050e03ff030352080525"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 5.240979921s ago: executing program 4 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x3f, 0x186) 5.024651674s ago: executing program 3 (id=149): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x26, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x7, 0x77}, {@rand_addr=0x64010100, 0x4e20, 0x3, 0xcd}}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0xf, 0x8, {{0xd, 0x4, 0x0, 0x38, 0x34, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, {[@generic={0x83, 0x5, "8ddaba"}, @end, @rr={0x7, 0x13, 0x78, [@loopback, @rand_addr=0x64010102, @multicast2, @local]}, @ssrr={0x89, 0x7, 0xcd, [@rand_addr=0x64010102]}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) getcwd(&(0x7f0000000140)=""/178, 0xb2) 4.853146056s ago: executing program 4 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) 4.804442477s ago: executing program 1 (id=151): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x20, 0x12, 0x1c, "4083c8cee8b448d79051ab8fa3120cd19cb2f85e0bcba4b367491935"}, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580)={0x20, 0x3, 0x1, 0x6}}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) 3.802767422s ago: executing program 3 (id=152): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) write(r1, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) write$P9_RVERSION(r1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004014}, 0x24040005) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.777240253s ago: executing program 4 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000100)={0xf, 0x20000, 0x2, 0xcbc, 0x1, 0x8}) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x1010, r0, 0x2d6000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0022057441a05a05410487a8ea0001000700000000e405e5a9d14a8a48216b502d2da417ef260d6f211f8435a83dcc0de73b7d4285b7f651d57be1f739b3e21bcb24a3d3b72865533ab2b93a5de90d97b03e8baf4fb716f639437bfe3c94a10cf72b36a815ca93dd078f4e5135ce27296ac9"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffcfe, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x800}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x46ad6aaf}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x12c) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) 3.641058574s ago: executing program 4 (id=154): mount$9p_fd(0x0, 0x0, 0x0, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x7, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.540671416s ago: executing program 3 (id=155): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xf6, 0x10cf, 0x5, 0x5, 0x3, 0x1, 'syz0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x20000880) shutdown(r0, 0x1) 3.450345157s ago: executing program 4 (id=156): syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b2c, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r4, &(0x7f0000000240)=""/157, 0x9d) 3.30222029s ago: executing program 3 (id=157): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 3.24872264s ago: executing program 3 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/142, 0x3e, 0x8e, 0x0, 0xfffff000, 0x10000, @value=r1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) bind$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffbfffff}) r5 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r5, 0x0, 0x20004f) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000040)=0x200) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, 0x0) 240.138866ms ago: executing program 32 (id=114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4000400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, &(0x7f0000000140)) timerfd_create(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d) read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/201, 0xc9) request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffffff070000", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) fchdir(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0xa) socket$nl_generic(0x10, 0x3, 0x10) 216.383577ms ago: executing program 1 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x3f, 0x186) 216.102826ms ago: executing program 3 (id=161): syz_open_procfs$userns(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$midi(0x0, 0x4f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000404104484240000102030109023d00010105800409040000030103000009050f03000202060b05250101b409050e03ff030352080525"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 215.888246ms ago: executing program 4 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0) read(r0, &(0x7f00000000c0)=""/163, 0xd0140f23) 0s ago: executing program 1 (id=163): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x26, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x7, 0x77}, {@rand_addr=0x64010100, 0x4e20, 0x3, 0xcd}}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0xf, 0x8, {{0xd, 0x4, 0x0, 0x38, 0x34, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, {[@generic={0x83, 0x5, "8ddaba"}, @end, @rr={0x7, 0x13, 0x78, [@loopback, @rand_addr=0x64010102, @multicast2, @local]}, @ssrr={0x89, 0x7, 0xcd, [@rand_addr=0x64010102]}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) getcwd(&(0x7f0000000140)=""/178, 0xb2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 50.115773][ T4175] cgroup: Unknown subsys name 'net' [ 50.273655][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.463725][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.722754][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 52.811259][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 52.849714][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.859443][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.874740][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.904131][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.911347][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.919766][ T4190] device bridge_slave_0 entered promiscuous mode [ 52.934890][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.941983][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.950416][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.011349][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.018426][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.026818][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.045933][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.059767][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.066836][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.075420][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.089109][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.151753][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.158959][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.166607][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.174442][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.181626][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.190553][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.199344][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.208456][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.216307][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.224083][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.231244][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.238292][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.246387][ T4189] device bridge_slave_0 entered promiscuous mode [ 53.256335][ T4190] team0: Port device team_slave_0 added [ 53.262698][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.269886][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.277506][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.287032][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.302589][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.309754][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.317460][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.326404][ T4190] team0: Port device team_slave_1 added [ 53.365679][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.382096][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.404191][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.415242][ T4187] team0: Port device team_slave_0 added [ 53.422616][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.433604][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.443628][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.450664][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.476757][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.494675][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.501661][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.527753][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.539901][ T4187] team0: Port device team_slave_1 added [ 53.555461][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.597258][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.604267][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.630339][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.650572][ T4189] team0: Port device team_slave_0 added [ 53.658420][ T4191] team0: Port device team_slave_0 added [ 53.672296][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.679551][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.705636][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.719125][ T4188] team0: Port device team_slave_0 added [ 53.726050][ T4189] team0: Port device team_slave_1 added [ 53.739459][ T4191] team0: Port device team_slave_1 added [ 53.756484][ T4188] team0: Port device team_slave_1 added [ 53.775754][ T4190] device hsr_slave_0 entered promiscuous mode [ 53.782975][ T4190] device hsr_slave_1 entered promiscuous mode [ 53.822649][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.829852][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.855908][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.872837][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.879873][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.905895][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.917465][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.924835][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.950806][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.969571][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.976512][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.002521][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.014221][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.021676][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.047863][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.063223][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.070422][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.096445][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.109526][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.116400][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.123459][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.131252][ T4187] Cannot create hsr debugfs directory [ 54.216826][ T4189] device hsr_slave_0 entered promiscuous mode [ 54.224172][ T4189] device hsr_slave_1 entered promiscuous mode [ 54.231799][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.239603][ T4189] Cannot create hsr debugfs directory [ 54.248442][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.255578][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.262208][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.270177][ T4191] Cannot create hsr debugfs directory [ 54.310542][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.317199][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.324046][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.331666][ T4188] Cannot create hsr debugfs directory [ 54.469589][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 54.476206][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 54.478742][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 54.499186][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 54.504021][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 54.607868][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.617650][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.637141][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.645885][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.685952][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.694926][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.711376][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.720937][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.768280][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.802286][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.816959][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.826051][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.867153][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.892393][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.908964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.919451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.934051][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.946221][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.961949][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.981487][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.993756][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.003375][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.012450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.021794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.048523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.057748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.067096][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.074344][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.083122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.093097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.102091][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.109200][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.117043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.125672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.134007][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.141105][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.167897][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.176626][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.187684][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.199969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.207901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.217983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.226685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.235527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.245186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.253942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.262977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.272092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.291197][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.308515][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.315726][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.325252][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.334439][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.343415][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.352117][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.359212][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.367578][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.383530][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.395145][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.419687][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.427347][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.436554][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.446468][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.455436][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.463458][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.473643][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.482624][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.521140][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.535507][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.545390][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.554797][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.561921][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.570511][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.579251][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.587579][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.594680][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.602909][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.611925][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.620671][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.630070][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.669365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.689608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.705117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.715231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.724485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.733303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.741883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.750800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.765833][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.776741][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.795976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.806331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.815561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.826375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.835310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.843855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.852593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.884163][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.917780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.926314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.941938][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.958066][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.974249][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.005862][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.030129][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.049620][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.058165][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.065299][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.079393][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.088364][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.097761][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.104877][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.113504][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.122932][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.139218][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.163564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.199257][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.214755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.228369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.239776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.248475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.257648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.266333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.275952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.283737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.293333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.301774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.309596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.321837][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.335187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.350814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.366181][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.385522][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.400741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.410134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.418592][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.425743][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.433796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.442636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.451395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.498917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.508005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.520358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.533656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.542368][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.549452][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.557110][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 56.557398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.568981][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 56.571718][ T4238] Bluetooth: hci1: command 0x041b tx timeout [ 56.577654][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 56.591097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.591238][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 56.605388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.637095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.648431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.664669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.675126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.687900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.697003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.707311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.715964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.730742][ T4189] device veth0_vlan entered promiscuous mode [ 56.746531][ T4189] device veth1_vlan entered promiscuous mode [ 56.765094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.773264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.783142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.792135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.802300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.810909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.820430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.829135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.837457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.845940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.857834][ T4190] device veth0_vlan entered promiscuous mode [ 56.871394][ T4187] device veth0_vlan entered promiscuous mode [ 56.890017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.898344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.906593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.914870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.924147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.933435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.942071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.950437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.964452][ T4190] device veth1_vlan entered promiscuous mode [ 56.973827][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.982106][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.994174][ T4187] device veth1_vlan entered promiscuous mode [ 57.014022][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.030432][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.058821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.066851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.077752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.088289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.098166][ T4189] device veth0_macvtap entered promiscuous mode [ 57.126520][ T4190] device veth0_macvtap entered promiscuous mode [ 57.135896][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.152131][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.163775][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.172934][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.183581][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.192722][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.202211][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.211301][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.231343][ T4187] device veth0_macvtap entered promiscuous mode [ 57.239784][ T4190] device veth1_macvtap entered promiscuous mode [ 57.258347][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.270948][ T4189] device veth1_macvtap entered promiscuous mode [ 57.282090][ T4187] device veth1_macvtap entered promiscuous mode [ 57.291325][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.300726][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.308564][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.316819][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.324812][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.332771][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.340462][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.348539][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.357138][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.364942][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.384469][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.404642][ T4191] device veth0_vlan entered promiscuous mode [ 57.413642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.422426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.436847][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.445416][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.454357][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.463557][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.474702][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.487048][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.496947][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.507733][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.519886][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.527468][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.538046][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.547943][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.558466][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.570023][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.580421][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.591277][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.601750][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.612320][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.624368][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.631942][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.640815][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.649599][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.658014][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.666614][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.676084][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.685212][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.693733][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.705896][ T4191] device veth1_vlan entered promiscuous mode [ 57.715219][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.725098][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.734250][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.744824][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.758580][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.767913][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.776911][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.785892][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.821780][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.833039][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.843725][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.852773][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.880520][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.889623][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.897703][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.907298][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.917647][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.926118][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.935074][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.943594][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.988148][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.002628][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.021998][ T4188] device veth0_vlan entered promiscuous mode [ 58.046145][ T4191] device veth0_macvtap entered promiscuous mode [ 58.061212][ T4188] device veth1_vlan entered promiscuous mode [ 58.092576][ T4191] device veth1_macvtap entered promiscuous mode [ 58.103536][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.113485][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.146144][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.155313][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.164137][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.200634][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.209847][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.222984][ T421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.225128][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.240368][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.246810][ T421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.260913][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.272139][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.282315][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.293001][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.302852][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.313865][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.324941][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.334798][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.343599][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.351440][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.360229][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.376839][ T4188] device veth0_macvtap entered promiscuous mode [ 58.395350][ T4188] device veth1_macvtap entered promiscuous mode [ 58.405473][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.416967][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.427490][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.440566][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.450834][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.462108][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.474527][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.493526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.503061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.511923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.521778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.541622][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.551131][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.562472][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.573411][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.604626][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.629399][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 58.634288][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.635620][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 58.676083][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.691466][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.697024][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 58.702396][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.719340][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.719364][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 58.729794][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.746086][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.753038][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 58.767587][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.785296][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.799701][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.848841][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.874946][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.884339][ T4275] Zero length message leads to an empty skb [ 58.956813][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.311622][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.343487][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.364431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.377067][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.396887][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.407023][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.417553][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.430762][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.443538][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.453659][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.469847][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.485703][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.496625][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.505675][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.518953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.527655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.547101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.558113][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.572852][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.582922][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.597731][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.678998][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.686835][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.727853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.846139][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.855088][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.864525][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.865434][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.914032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.945825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.990971][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.008691][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.049799][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.861907][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 61.455814][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 61.462014][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 61.468054][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 61.499622][ T4285] sctp: failed to load transform for md5: -2 [ 61.705090][ T4310] process 'syz.0.12' launched '/dev/fd/7' with NULL argv: empty string added [ 64.155001][ T1092] block nbd2: Attempted send on invalid socket [ 64.162270][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.174288][ T4319] FAT-fs (nbd2): unable to read boot sector [ 64.878707][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.888693][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.898695][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.908695][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.918699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.928697][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.938690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.948688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.958697][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.368887][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.620220][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 65.739063][ T4234] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 65.773965][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.951315][ T4234] usb 5-1: config 0 descriptor?? [ 66.122305][ T4357] ======================================================= [ 66.122305][ T4357] WARNING: The mand mount option has been deprecated and [ 66.122305][ T4357] and is ignored by this kernel. Remove the mand [ 66.122305][ T4357] option from the mount to silence this warning. [ 66.122305][ T4357] ======================================================= [ 66.160103][ T4357] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.180721][ T4357] overlayfs: failed to look up (tracing) for ino (-66) [ 67.768665][ C1] sched: RT throttling activated [ 68.413873][ T4234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 68.438100][ T4234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.469452][ T4234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 68.484051][ T4234] usb 5-1: media controller created [ 68.509249][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.609345][ T4234] az6027: usb out operation failed. (-71) [ 68.646221][ T4234] az6027: usb out operation failed. (-71) [ 68.705184][ T4234] stb0899_attach: Driver disabled by Kconfig [ 68.717033][ T4234] az6027: no front-end attached [ 68.717033][ T4234] [ 69.038896][ T4234] az6027: usb out operation failed. (-71) [ 69.044661][ T4234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 69.137893][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.832033][ T4234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 69.846467][ T4234] dvb-usb: schedule remote query interval to 400 msecs. [ 69.853816][ T4234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 69.881248][ T4234] usb 5-1: USB disconnect, device number 2 [ 70.198623][ T4234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 70.389235][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 70.399301][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.407491][ T21] usb 1-1: Product: syz [ 70.423815][ T21] usb 1-1: Manufacturer: syz [ 70.429745][ T21] usb 1-1: SerialNumber: syz [ 70.598610][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 70.811734][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.745451][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.751923][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.773747][ T13] usb 1-1: USB disconnect, device number 2 [ 72.036099][ T4409] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.070705][ T21] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 72.151822][ T13] usb 1-1: ath9k_htc: USB layer deinitialized [ 72.779634][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.802886][ T1108] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.828542][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.885431][ T25] audit: type=1326 audit(1782358412.317:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 72.889543][ T1108] usb 4-1: config 0 descriptor?? [ 72.942381][ T25] audit: type=1326 audit(1782358412.317:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 72.977039][ T25] audit: type=1326 audit(1782358412.347:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 73.056382][ T25] audit: type=1326 audit(1782358412.347:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 73.081846][ T25] audit: type=1326 audit(1782358412.347:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 73.118179][ T25] audit: type=1326 audit(1782358412.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 73.399467][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 73.414375][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 73.738902][ T1108] usb 4-1: USB disconnect, device number 2 [ 73.803640][ T25] audit: type=1326 audit(1782358412.347:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 73.827631][ T25] audit: type=1326 audit(1782358412.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 73.857992][ T25] audit: type=1326 audit(1782358412.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 73.926093][ T25] audit: type=1326 audit(1782358412.347:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc559477e59 code=0x7ffc0000 [ 73.993911][ T4438] input: syz1 as /devices/virtual/input/input6 [ 74.062342][ T4444] netlink: 156 bytes leftover after parsing attributes in process `syz.2.47'. [ 74.796272][ T4445] futex_wake_op: syz.4.49 tries to shift op by 144; fix this program [ 75.238757][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.367353][ T4453] device wlan0 entered promiscuous mode [ 75.728925][ T1108] usb 4-1: device descriptor read/64, error -71 [ 76.009679][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.139106][ T25] kauditd_printk_skb: 47 callbacks suppressed [ 78.148780][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 78.243998][ T25] audit: type=1326 audit(1782358416.887:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.2.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8aab5e59 code=0x7ffc0000 [ 78.317633][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 78.588786][ T1108] usb 4-1: device descriptor read/all, error -71 [ 78.605808][ T1108] usb usb4-port1: attempt power cycle [ 79.858694][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 80.543024][ T150] block nbd1: Attempted send on invalid socket [ 80.549331][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.578779][ T4513] exFAT-fs (nbd1): unable to read boot sector [ 80.595982][ T4513] exFAT-fs (nbd1): failed to read boot sector [ 80.616161][ T4513] exFAT-fs (nbd1): failed to recognize exfat type [ 80.778759][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.028863][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 81.151349][ T1108] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 81.229900][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.460527][ T1346] cfg80211: failed to load regulatory.db [ 81.466379][ T1108] usb 3-1: config 0 has no interface number 0 [ 81.487936][ T4515] ALSA: mixer_oss: invalid OSS volume 'u' [ 81.637409][ T1108] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 81.665120][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.724986][ T1108] usb 3-1: Product: syz [ 81.746160][ T1108] usb 3-1: Manufacturer: syz [ 81.872936][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.880904][ T1108] usb 3-1: SerialNumber: syz [ 81.905521][ T1108] usb 3-1: config 0 descriptor?? [ 82.020765][ T1108] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 82.239349][ T4236] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.696563][ T4236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.728969][ T1108] usb 3-1: qt2_attach - failed to power on unit: -71 [ 82.742672][ T1108] quatech2: probe of 3-1:0.51 failed with error -71 [ 82.784429][ T1108] usb 3-1: USB disconnect, device number 2 [ 82.808415][ T4236] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.876073][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.936645][ T4236] usb 2-1: config 0 descriptor?? [ 83.025560][ T4236] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 84.203680][ T4607] fuse: Bad value for 'fd' [ 84.352472][ T25] audit: type=1326 audit(1782358423.787:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17c56e59 code=0x7ffc0000 [ 85.688851][ T4266] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.749713][ T25] audit: type=1326 audit(1782358423.817:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa17c56e59 code=0x7ffc0000 [ 85.772090][ T21] usb 2-1: USB disconnect, device number 2 [ 85.784448][ T25] audit: type=1326 audit(1782358423.817:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17c56e59 code=0x7ffc0000 [ 87.180160][ T25] audit: type=1326 audit(1782358423.827:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffa17c56e59 code=0x7ffc0000 [ 87.235022][ T25] audit: type=1326 audit(1782358423.827:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17c56e59 code=0x7ffc0000 [ 87.274403][ T25] audit: type=1326 audit(1782358423.827:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17c56e59 code=0x7ffc0000 [ 87.289798][ T4639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 87.333115][ T4643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.99'. [ 87.399257][ T4266] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.564018][ T4266] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 88.239659][ T4266] usb 1-1: can't read configurations, error -71 [ 88.317255][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.379106][ T4662] tipc: Enabling of bearer rejected, failed to enable media [ 89.308745][ T4233] usb 3-1: Using ep0 maxpacket: 16 [ 90.418855][ T4233] usb 3-1: unable to read config index 0 descriptor/all [ 90.440992][ T4233] usb 3-1: can't read configurations, error -71 [ 90.550183][ T4702] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 90.595465][ T4702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.113'. [ 91.303508][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 91.433111][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 92.238751][ T1346] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.389834][ T4721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.117'. [ 92.759255][ T1346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.089541][ T1346] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.213343][ T1346] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.368935][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.438943][ T1346] usb 5-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 93.463800][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.524690][ T1346] usb 5-1: can't set config #1, error -71 [ 93.543878][ T1346] usb 5-1: USB disconnect, device number 3 [ 93.679436][ T4748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 93.767590][ T4753] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 94.250639][ T4748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'. [ 94.458830][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.256859][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.298249][ T4233] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.307724][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.334935][ T4233] usb 4-1: config 0 descriptor?? [ 95.408901][ T4233] usb 4-1: can't set config #0, error -71 [ 95.432475][ T4233] usb 4-1: USB disconnect, device number 6 [ 96.684858][ T4779] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 99.702230][ T4803] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 101.739521][ T4823] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 102.478938][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.728934][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 102.911226][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 103.128807][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.137860][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.182157][ T13] usb 2-1: Product: syz [ 103.186455][ T13] usb 2-1: Manufacturer: syz [ 103.191697][ T13] usb 2-1: SerialNumber: syz [ 103.216072][ T13] usb 2-1: config 0 descriptor?? [ 103.261439][ T13] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 103.279025][ T13] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 103.410366][ T4846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 103.457737][ T4849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.155'. [ 105.808830][ T13] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 105.959036][ T13] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.974277][ T13] em28xx 2-1:0.0: board has no eeprom [ 106.088845][ T13] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 106.102016][ T13] em28xx 2-1:0.0: dvb set to bulk mode. [ 106.139616][ T13] usb 2-1: USB disconnect, device number 3 [ 106.146106][ T13] em28xx 2-1:0.0: Disconnecting em28xx [ 106.176814][ T1346] em28xx 2-1:0.0: Binding DVB extension [ 106.223934][ T1346] em28xx 2-1:0.0: Registering input extension [ 106.238703][ T13] em28xx 2-1:0.0: Closing input extension [ 106.267051][ T13] em28xx 2-1:0.0: Freeing device [ 107.149989][ T4872] ================================================================== [ 107.158301][ T4872] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 107.165534][ T4872] Read of size 8 at addr ffff88814abcac18 by task syz.3.161/4872 [ 107.173257][ T4872] [ 107.175593][ T4872] CPU: 1 PID: 4872 Comm: syz.3.161 Not tainted syzkaller #0 [ 107.182873][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.192936][ T4872] Call Trace: [ 107.196218][ T4872] [ 107.199143][ T4872] dump_stack_lvl+0x188/0x250 [ 107.203831][ T4872] ? show_regs_print_info+0x20/0x20 [ 107.209026][ T4872] ? _printk+0xda/0x130 [ 107.213182][ T4872] ? dvb_device_open+0xc5/0x360 [ 107.218036][ T4872] ? load_image+0x410/0x410 [ 107.222532][ T4872] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 107.227995][ T4872] print_address_description+0x60/0x2d0 [ 107.233791][ T4872] ? dvb_device_open+0xc5/0x360 [ 107.238661][ T4872] kasan_report+0xdf/0x130 [ 107.243086][ T4872] ? dvb_device_open+0xc5/0x360 [ 107.248045][ T4872] dvb_device_open+0xc5/0x360 [ 107.252735][ T4872] chrdev_open+0x585/0x5f0 [ 107.257166][ T4872] ? cd_forget+0x160/0x160 [ 107.261599][ T4872] ? fsnotify_perm+0x3a7/0x560 [ 107.266383][ T4872] ? cd_forget+0x160/0x160 [ 107.270817][ T4872] do_dentry_open+0x7f7/0xf90 [ 107.275518][ T4872] ? vfs_open+0x2b/0x80 [ 107.279688][ T4872] path_openat+0x2718/0x2fb0 [ 107.284285][ T4872] ? finish_lock_switch+0x12d/0x290 [ 107.289503][ T4872] ? __schedule+0x11cb/0x4350 [ 107.294196][ T4872] ? do_filp_open+0x400/0x400 [ 107.298885][ T4872] ? lockdep_hardirqs_on+0x94/0x140 [ 107.304089][ T4872] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 107.309733][ T4872] do_filp_open+0x1df/0x400 [ 107.314244][ T4872] ? vfs_tmpfile+0x300/0x300 [ 107.318839][ T4872] ? preempt_schedule_common+0xa5/0xd0 [ 107.324325][ T4872] ? _raw_spin_unlock+0x36/0x40 [ 107.329172][ T4872] ? alloc_fd+0x59e/0x650 [ 107.333515][ T4872] do_sys_openat2+0x14b/0x500 [ 107.338189][ T4872] ? __lock_acquire+0x7b50/0x7b50 [ 107.343214][ T4872] ? do_sys_open+0xe0/0xe0 [ 107.347634][ T4872] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.353624][ T4872] ? lock_chain_count+0x20/0x20 [ 107.358494][ T4872] __x64_sys_openat+0x135/0x160 [ 107.363354][ T4872] do_syscall_64+0x4c/0xa0 [ 107.367769][ T4872] ? clear_bhb_loop+0x30/0x80 [ 107.372448][ T4872] ? clear_bhb_loop+0x30/0x80 [ 107.377124][ T4872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.383026][ T4872] RIP: 0033:0x7fe2ce84668e [ 107.387449][ T4872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.407055][ T4872] RSP: 002b:00007fe2cca9cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.415475][ T4872] RAX: ffffffffffffffda RBX: 00007fe2cca9d6c0 RCX: 00007fe2ce84668e [ 107.423448][ T4872] RDX: 0000000000000002 RSI: 00007fe2cca9cc00 RDI: ffffffffffffff9c [ 107.431424][ T4872] RBP: 00007fe2cca9cc00 R08: 0000000000000000 R09: 0000000000000000 [ 107.439405][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 107.447385][ T4872] R13: 00007fe2ceaff218 R14: 00007fe2ceaff180 R15: 00007ffe65c3f4f8 [ 107.455387][ T4872] [ 107.458414][ T4872] [ 107.460774][ T4872] Allocated by task 1: [ 107.464880][ T4872] __kasan_kmalloc+0xaf/0xe0 [ 107.469488][ T4872] dvb_register_device+0x300/0x1dc0 [ 107.474694][ T4872] dvb_register_frontend+0x629/0x900 [ 107.479989][ T4872] vidtv_bridge_probe+0x9c1/0xf30 [ 107.485020][ T4872] platform_probe+0x137/0x1c0 [ 107.489700][ T4872] really_probe+0x276/0xc70 [ 107.494204][ T4872] __driver_probe_device+0x1f5/0x390 [ 107.499490][ T4872] driver_probe_device+0x4f/0x420 [ 107.504524][ T4872] __driver_attach+0x45d/0x660 [ 107.509293][ T4872] bus_for_each_dev+0x182/0x1f0 [ 107.514154][ T4872] bus_add_driver+0x324/0x5d0 [ 107.518885][ T4872] driver_register+0x32d/0x430 [ 107.523661][ T4872] vidtv_bridge_init+0x39/0x70 [ 107.528436][ T4872] do_one_initcall+0x272/0x730 [ 107.533213][ T4872] do_initcall_level+0x13d/0x1f0 [ 107.538176][ T4872] do_initcalls+0x4b/0x90 [ 107.542517][ T4872] kernel_init_freeable+0x3d5/0x560 [ 107.547722][ T4872] kernel_init+0x19/0x1b0 [ 107.552064][ T4872] ret_from_fork+0x1f/0x30 [ 107.556486][ T4872] [ 107.558809][ T4872] Freed by task 4823: [ 107.562782][ T4872] kasan_set_track+0x4b/0x70 [ 107.567379][ T4872] kasan_set_free_info+0x1f/0x40 [ 107.572332][ T4872] ____kasan_slab_free+0xd5/0x110 [ 107.577367][ T4872] slab_free_freelist_hook+0xec/0x170 [ 107.582760][ T4872] kfree+0xef/0x2a0 [ 107.586582][ T4872] dvb_device_open+0x2d2/0x360 [ 107.591356][ T4872] chrdev_open+0x585/0x5f0 [ 107.595784][ T4872] do_dentry_open+0x7f7/0xf90 [ 107.600467][ T4872] path_openat+0x2718/0x2fb0 [ 107.605060][ T4872] do_filp_open+0x1df/0x400 [ 107.609569][ T4872] do_sys_openat2+0x14b/0x500 [ 107.614251][ T4872] __x64_sys_openat+0x135/0x160 [ 107.619108][ T4872] do_syscall_64+0x4c/0xa0 [ 107.623530][ T4872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.629433][ T4872] [ 107.631755][ T4872] The buggy address belongs to the object at ffff88814abcac00 [ 107.631755][ T4872] which belongs to the cache kmalloc-256 of size 256 [ 107.645810][ T4872] The buggy address is located 24 bytes inside of [ 107.645810][ T4872] 256-byte region [ffff88814abcac00, ffff88814abcad00) [ 107.659032][ T4872] The buggy address belongs to the page: [ 107.664681][ T4872] page:ffffea00052af280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14abca [ 107.674929][ T4872] head:ffffea00052af280 order:1 compound_mapcount:0 [ 107.681521][ T4872] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 107.689606][ T4872] raw: 057ff00000010200 ffffea0000916080 0000000800000008 ffff888016c41b40 [ 107.698198][ T4872] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 107.700972][ T4873] chnl_net:caif_netlink_parms(): no params data found [ 107.706780][ T4872] page dumped because: kasan: bad access detected [ 107.719951][ T4872] page_owner tracks the page as allocated [ 107.725683][ T4872] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 14673508645, free_ts 0 [ 107.743678][ T4872] get_page_from_freelist+0x24f6/0x2670 [ 107.749245][ T4872] __alloc_pages+0x1ee/0x480 [ 107.753843][ T4872] alloc_page_interleave+0x24/0x1e0 [ 107.759050][ T4872] new_slab+0xc0/0x4b0 [ 107.763125][ T4872] ___slab_alloc+0x807/0xdd0 [ 107.767719][ T4872] __kmalloc_node+0x142/0x3a0 [ 107.772403][ T4872] kvmalloc_node+0x84/0x130 [ 107.776920][ T4872] v4l2_ctrl_new+0x70f/0x1310 [ 107.781608][ T4872] v4l2_ctrl_new_std+0x247/0x300 [ 107.786557][ T4872] handler_new_ref+0x14f/0x8d0 [ 107.791325][ T4872] v4l2_ctrl_add_handler+0x197/0x280 [ 107.796615][ T4872] vivid_create_controls+0x27b0/0x3380 [ 107.800992][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.802080][ T4872] vivid_probe+0x39ff/0x6240 [ 107.813327][ T4873] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.813649][ T4872] platform_probe+0x137/0x1c0 [ 107.825318][ T4872] really_probe+0x276/0xc70 [ 107.825486][ T4873] device bridge_slave_0 entered promiscuous mode [ 107.829818][ T4872] __driver_probe_device+0x1f5/0x390 [ 107.829835][ T4872] page_owner free stack trace missing [ 107.829842][ T4872] [ 107.829846][ T4872] Memory state around the buggy address: [ 107.829854][ T4872] ffff88814abcab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.829864][ T4872] ffff88814abcab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.829875][ T4872] >ffff88814abcac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.829882][ T4872] ^ [ 107.829890][ T4872] ffff88814abcac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.829900][ T4872] ffff88814abcad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.829907][ T4872] ================================================================== [ 107.829913][ T4872] Disabling lock debugging due to kernel taint [ 107.830037][ T4872] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.921242][ T4872] CPU: 1 PID: 4872 Comm: syz.3.161 Tainted: G B syzkaller #0 [ 107.929915][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.939972][ T4872] Call Trace: [ 107.943248][ T4872] [ 107.946174][ T4872] dump_stack_lvl+0x188/0x250 [ 107.950850][ T4872] ? show_regs_print_info+0x20/0x20 [ 107.956043][ T4872] ? load_image+0x410/0x410 [ 107.960544][ T4872] panic+0x2f8/0x850 [ 107.964434][ T4872] ? asm_common_interrupt+0x22/0x40 [ 107.969630][ T4872] ? bpf_jit_dump+0xd0/0xd0 [ 107.974133][ T4872] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 107.980104][ T4872] ? _raw_spin_unlock+0x40/0x40 [ 107.984953][ T4872] ? dvb_device_open+0xc5/0x360 [ 107.989799][ T4872] check_panic_on_warn+0x80/0xa0 [ 107.994760][ T4872] ? dvb_device_open+0xc5/0x360 [ 107.999607][ T4872] end_report+0x6d/0xf0 [ 108.003762][ T4872] kasan_report+0x102/0x130 [ 108.008268][ T4872] ? dvb_device_open+0xc5/0x360 [ 108.013115][ T4872] dvb_device_open+0xc5/0x360 [ 108.017789][ T4872] chrdev_open+0x585/0x5f0 [ 108.022208][ T4872] ? cd_forget+0x160/0x160 [ 108.026626][ T4872] ? fsnotify_perm+0x3a7/0x560 [ 108.031387][ T4872] ? cd_forget+0x160/0x160 [ 108.035801][ T4872] do_dentry_open+0x7f7/0xf90 [ 108.040486][ T4872] ? vfs_open+0x2b/0x80 [ 108.044641][ T4872] path_openat+0x2718/0x2fb0 [ 108.049223][ T4872] ? finish_lock_switch+0x12d/0x290 [ 108.054424][ T4872] ? __schedule+0x11cb/0x4350 [ 108.059100][ T4872] ? do_filp_open+0x400/0x400 [ 108.063778][ T4872] ? lockdep_hardirqs_on+0x94/0x140 [ 108.068979][ T4872] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 108.074615][ T4872] do_filp_open+0x1df/0x400 [ 108.079118][ T4872] ? vfs_tmpfile+0x300/0x300 [ 108.083706][ T4872] ? preempt_schedule_common+0xa5/0xd0 [ 108.089180][ T4872] ? _raw_spin_unlock+0x36/0x40 [ 108.094022][ T4872] ? alloc_fd+0x59e/0x650 [ 108.098350][ T4872] do_sys_openat2+0x14b/0x500 [ 108.103022][ T4872] ? __lock_acquire+0x7b50/0x7b50 [ 108.108043][ T4872] ? do_sys_open+0xe0/0xe0 [ 108.112453][ T4872] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.118439][ T4872] ? lock_chain_count+0x20/0x20 [ 108.123286][ T4872] __x64_sys_openat+0x135/0x160 [ 108.128134][ T4872] do_syscall_64+0x4c/0xa0 [ 108.132542][ T4872] ? clear_bhb_loop+0x30/0x80 [ 108.137215][ T4872] ? clear_bhb_loop+0x30/0x80 [ 108.141884][ T4872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.147775][ T4872] RIP: 0033:0x7fe2ce84668e [ 108.152192][ T4872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.171801][ T4872] RSP: 002b:00007fe2cca9cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.180208][ T4872] RAX: ffffffffffffffda RBX: 00007fe2cca9d6c0 RCX: 00007fe2ce84668e [ 108.188263][ T4872] RDX: 0000000000000002 RSI: 00007fe2cca9cc00 RDI: ffffffffffffff9c [ 108.196225][ T4872] RBP: 00007fe2cca9cc00 R08: 0000000000000000 R09: 0000000000000000 [ 108.204190][ T4872] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 108.212155][ T4872] R13: 00007fe2ceaff218 R14: 00007fe2ceaff180 R15: 00007ffe65c3f4f8 [ 108.220126][ T4872] [ 108.223228][ T4872] Kernel Offset: disabled [ 108.227547][ T4872] Rebooting in 86400 seconds..