last executing test programs: 28.603859089s ago: executing program 0 (id=132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="00070400000800000000000000"], 0x40) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 25.69314501s ago: executing program 0 (id=136): r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x59, "19fe140814adc0a3a9635947204fba5aeed88bd7f5061c101c1a9ee54d5974f415829d866b630a1db248692ede45d828a88548d56538c6fe74b21ed694e80914917da2cd909b005c1478b1cc483d56ab12a5c86483ee752743"}, &(0x7f0000000180)=0x61) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) fchdir(r1) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x800000, 0x0) setfsuid(0x0) r7 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') socket$inet6_udp(0xa, 0x2, 0x0) pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 19.46642759s ago: executing program 0 (id=140): pwrite64(0xffffffffffffffff, &(0x7f0000000040)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262", 0x48, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000400)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000500)='./file1\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f00000007c0)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000001980), 0x2, 0x141102) writev(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a40), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x2000481c) r5 = syz_open_procfs(0x0, &(0x7f0000001c80)='numa_maps\x00') read$FUSE(r5, &(0x7f0000001f80)={0x2020}, 0x2020) socket$rds(0x15, 0x5, 0x0) 19.322031964s ago: executing program 1 (id=142): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000007c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000800)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000840)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$kcm(0x21, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x8, 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="360f01c266b843000f00d066ba430066b8000066eff2f7ecd1e8c4c25592b49f39000000f20f069a794aa1959a000f009906000000b9ae080000b800600000ba000000000f30", 0x46}], 0x1, 0x9, 0x0, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xfdef) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x4a102) writev(r3, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f0000000640)={0x3ff, 0x30e3, 0x4, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') mlockall(0x7) mlockall(0x7) ioctl$int_in(r4, 0x5422, 0x0) write$khugepaged_scan(r2, &(0x7f00000006c0), 0x8) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000700)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@getchain={0x17, 0x66, 0xfcd66a900070b359}, 0x24}}, 0x0) 16.934860011s ago: executing program 3 (id=146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="00070400000800000000000000"], 0x40) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 16.085191092s ago: executing program 0 (id=147): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r4, &(0x7f0000002d40)=""/102392, 0x18ff8) r5 = openat(r0, &(0x7f000001bd40)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f000001bd80)=' f 127.0.0.1 2 000\\00 : l\\calhost\n', 0x24) 16.070334572s ago: executing program 1 (id=148): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) pwritev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="86", 0x1}], 0x1, 0x403, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x6, 0x100008b}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x189802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) lgetxattr(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000b80)=@known='system.posix_acl_default\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000d00)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x6, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0xe, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0xfe, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000a80)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000ac0)='fd/3\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x9) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000b40)="040000000000000000000000380100"/28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfe45) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 13.884902185s ago: executing program 0 (id=150): r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x59, "19fe140814adc0a3a9635947204fba5aeed88bd7f5061c101c1a9ee54d5974f415829d866b630a1db248692ede45d828a88548d56538c6fe74b21ed694e80914917da2cd909b005c1478b1cc483d56ab12a5c86483ee752743"}, &(0x7f0000000180)=0x61) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x0, 0x0}, &(0x7f0000000340)=0x10) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800000, 0x0) setfsuid(0x0) r7 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') socket$inet6_udp(0xa, 0x2, 0x0) pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 13.800539307s ago: executing program 4 (id=151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000b40)={0x6, [[0x1, 0x1797, 0x15e, 0x9fc, 0x0, 0x1], [0x1ffffffe, 0x3, 0x2, 0x10, 0x0, 0xfffbffff, 0xfffffffd], [0x3, 0x3, 0x40000000, 0x4, 0x0, 0x3bc9, 0x2, 0x1]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x1fb, 0x0, 0x0, 0x1}, {0x4000000, 0x4000b}, {0x5, 0x6}, {0x2000000, 0x6}, {}, {}, {}, {0x8, 0x7}, {0x0, 0x400}, {0xfffffffc}], '\x00', 0x1}) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d00", @ANYRES8=r2, @ANYBLOB="7ba9"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) mount(0x0, &(0x7f0000000580)='./sys_mnt\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000dc0)={0x20071026}, &(0x7f0000000e00)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x15, 0xf, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000001000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) write(0xffffffffffffffff, &(0x7f0000000640)='T', 0x1) r4 = syz_open_dev$audion(0x0, 0x3, 0x1) openat$vhost_vsock(0xffffff9c, &(0x7f0000000a80), 0x2, 0x0) syz_usb_connect$midi(0x4, 0xc6, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x1, 0x1, 0x5, 0x10, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x0, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0xe0, 0x7, [{0x40, 0xc}, {0x47, 0xc2}, {0x5, 0x5b}, {}, {0xff, 0xe9}, {0x9, 0xd}, {0x5, 0xe0}], 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x2e, 0x3, [{0x3, 0x9}, {0x3, 0x8e}, {0x4, 0x2}], 0x3}], [{{0x9, 0x5, 0x6, 0x4, 0x10, 0xa, 0x81, 0xd5, {0xf, 0x25, 0x1, 0xb, "1d756cf41ea9640520c581"}}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x5, 0x9, {0xe, 0x25, 0x1, 0xa, "d77834688f365de2a7c1"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x5, 0x59, {0x6, 0x25, 0x1, 0x2, "28d4"}}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x1, 0x87, 0xb0, {0x14, 0x25, 0x1, 0x10, "989c9b566ebfa85b6b52e0ea6fbad904"}}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x1, 0xd, 0x1, {0x8, 0x25, 0x1, 0x4, "5d97c064"}}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x2, 0x83, 0x4, {0xb, 0x25, 0x1, 0x7, "d28de986fc6ade"}}}]}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x0, 0x5, 0xb, 0x8, 0x3}, 0x98, &(0x7f0000000840)={0x5, 0xf, 0x98, 0x4, [@generic={0x58, 0x10, 0x3, "710e754d29f710b8902834364299067af7d3e85c62705c108fdedc4881b6e542803286a2c4c08bf30362d1f79d2bad1391f507bf91d231ad9ea890203c51d3ab12fb8308f89e05feeb665cb3c2a25ff01eec21ed36"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x6, 0xf, 0xc7f4, [0xff0000]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x4, 0xf00, 0x400, [0xffc0c0, 0xc00f, 0x3f, 0x8, 0x3f00, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xa, 0x9, 0x5}]}, 0x1, [{0xdc, &(0x7f0000000900)=@string={0xdc, 0x3, "f9884783a33a58329f545f287b06361770564f22121c4c4845b1505b0717c01c6683adc57eb6df32d43c85ba7a0896c804026ea86b84089432d88612e242a70b76b5c100192c06f20200812e1443d3852488087da6d1fe5db71f447a196756b6d8872ed509978f911aadfc498ef16cc0d45c120aca523ce568876ab2b2c4affb090cc4fd2b06a7f422fcbd65c861fcb6e2043f82dde022cdfb0aa66c20484a54225207699c7a42df0f573f76fdb534c820813ae111be5279089b2eb42a8eb7600a2d17ae674d968cecdf87072c2113fbd982fdf941b2f6471aa3"}}]}) write$P9_RVERSION(r4, &(0x7f0000002200)=ANY=[], 0xfffffcd9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4104aec6, &(0x7f00000003c0)={0x1, [{0x3, 0x18, 0x7f, &(0x7f0000000500)="e8bfff"}, {0x2, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0xc9a, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x0, 0xa09, 0x0}, {0x1, 0x0, 0xc0, 0x0}]}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000a40)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x8000, 0x16d) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000680), &(0x7f00000006c0)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 13.708794059s ago: executing program 3 (id=152): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) clock_settime(0x1ed5d7404, 0x0) 13.505722114s ago: executing program 2 (id=153): pwrite64(0xffffffffffffffff, &(0x7f0000000040)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262", 0x48, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000400)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000500)='./file1\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f00000007c0)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001980), 0x2, 0x141102) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a40), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, 0x0, 0x2000481c) r4 = syz_open_procfs(0x0, &(0x7f0000001c80)='numa_maps\x00') read$FUSE(r4, &(0x7f0000001f80)={0x2020}, 0x2020) socket$rds(0x15, 0x5, 0x0) 13.422538716s ago: executing program 3 (id=154): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000014) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x29) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x28000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000080)=0xff) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) 11.015153385s ago: executing program 3 (id=155): openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$MEMREADOOB(r1, 0xc00c4d04, &(0x7f0000000640)={0x5, 0x82, &(0x7f0000000400)="4504abc72f8b931be088bf611468ec80998d7b1b40aeec7927e20b8853f9e1d2b0519a7696b7791c64b9809826e4f6e0eec541aaf64fa9433e9925d839251da52166083e2bbaff69ef7afe53a48c7fcde1a402832a85cf6183b07c6ab4a3fd155c77aabd092e6aadaae4c41b9f50755104c89656c1c02137066b9c23f2e1761f7555"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="58010000100005000100000000000000ff0200000000000000000000000000010000000000ff000000000000000000014e200000000001000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000a000000100000000000000048000100686d6163287368613129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170001000000000000000000000000000000000000002000000040000000"], 0x158}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="fc000000130005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff000000000000000000000100000000000000440005f7b15e856115ac2c0f702c3cee0a09b9000000000000000000000000000000000100001234330000000a0000000000000000000000000000000000000100000000"], 0xfc}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='A', 0x1}], 0x1}}], 0x1, 0x4000801) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10b23eb60300"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20048004) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000ffedbdf250a450069706d69620000a554000100"/36], 0x24}}, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f92"], 0x50) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 10.914809076s ago: executing program 2 (id=156): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000194c0)=0x410000002) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 10.861833618s ago: executing program 1 (id=157): pwrite64(0xffffffffffffffff, &(0x7f0000000040)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262", 0x48, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000400)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000500)='./file1\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f00000007c0)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000001980), 0x2, 0x141102) writev(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a40), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x2000481c) r5 = syz_open_procfs(0x0, &(0x7f0000001c80)='numa_maps\x00') read$FUSE(r5, &(0x7f0000001f80)={0x2020}, 0x2020) socket$rds(0x15, 0x5, 0x0) 9.903093501s ago: executing program 4 (id=158): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000007c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000800)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000840)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$kcm(0x21, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x8, 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="360f01c266b843000f00d066ba430066b8000066eff2f7ecd1e8c4c25592b49f39000000f20f069a794aa1959a000f009906000000b9ae080000b800600000ba000000000f30", 0x46}], 0x1, 0x9, 0x0, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESDEC], 0xfdef) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x4a102) writev(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f0000000640)={0x3ff, 0x30e3, 0x4, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') mlockall(0x7) mlockall(0x7) ioctl$int_in(r5, 0x5422, 0x0) write$khugepaged_scan(r2, &(0x7f00000006c0), 0x8) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000700)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@getchain={0x17, 0x66, 0xfcd66a900070b359}, 0x24}}, 0x0) 9.740277625s ago: executing program 1 (id=159): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) 9.53623069s ago: executing program 2 (id=160): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r4, &(0x7f0000002d40)=""/102392, 0x18ff8) r5 = openat(r0, &(0x7f000001bd40)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f000001bd80)=' f 127.0.0.1 2 000\\00 : l\\calhost\n', 0x24) 8.550548534s ago: executing program 4 (id=161): pwrite64(0xffffffffffffffff, &(0x7f0000000040)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262", 0x48, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000400)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000500)='./file1\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f00000007c0)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000001980), 0x2, 0x141102) writev(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x2000481c) r5 = syz_open_procfs(0x0, &(0x7f0000001c80)='numa_maps\x00') read$FUSE(r5, &(0x7f0000001f80)={0x2020}, 0x2020) socket$rds(0x15, 0x5, 0x0) 7.373591832s ago: executing program 2 (id=162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="00070400000800000000000000"], 0x40) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 5.650646794s ago: executing program 3 (id=163): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x804) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000380)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) sendmmsg(r1, &(0x7f000001d640)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 3.717972781s ago: executing program 3 (id=164): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000f40)=ANY=[]) 3.062148086s ago: executing program 4 (id=165): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x129200, 0x100) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x143102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x64, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) close(0x3) 3.060584346s ago: executing program 1 (id=166): pwrite64(0xffffffffffffffff, &(0x7f0000000040)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262", 0x48, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000400)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000500)='./file1\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f00000007c0)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001980), 0x2, 0x141102) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a40), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, 0x0, 0x2000481c) r4 = syz_open_procfs(0x0, &(0x7f0000001c80)='numa_maps\x00') read$FUSE(r4, &(0x7f0000001f80)={0x2020}, 0x2020) socket$rds(0x15, 0x5, 0x0) 2.780128533s ago: executing program 4 (id=167): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) pwritev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="86", 0x1}], 0x1, 0x403, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x6, 0x100008b}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x189802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) lgetxattr(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000b80)=@known='system.posix_acl_default\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000d00)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x6, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0xe, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0xfe, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000a80)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000ac0)='fd/3\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x9) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000b40)="040000000000000000000000380100"/28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfe45) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.239476771s ago: executing program 1 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000b40)={0x6, [[0x1, 0x1797, 0x15e, 0x9fc, 0x0, 0x1], [0x1ffffffe, 0x3, 0x2, 0x10, 0x0, 0xfffbffff, 0xfffffffd], [0x3, 0x3, 0x40000000, 0x4, 0x0, 0x3bc9, 0x2, 0x1]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x1fb, 0x0, 0x0, 0x1}, {0x4000000, 0x4000b}, {0x5, 0x6}, {0x2000000, 0x6}, {}, {}, {}, {0x8, 0x7}, {0x0, 0x400}, {0xfffffffc}], '\x00', 0x1}) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d00", @ANYRES8=r2, @ANYBLOB="7ba9"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) mount(0x0, &(0x7f0000000580)='./sys_mnt\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000dc0)={0x20071026}, &(0x7f0000000e00)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x15, 0xf, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000001000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) write(0xffffffffffffffff, &(0x7f0000000640)='T', 0x1) r4 = syz_open_dev$audion(0x0, 0x3, 0x1) openat$vhost_vsock(0xffffff9c, &(0x7f0000000a80), 0x2, 0x0) syz_usb_connect$midi(0x4, 0xc6, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x1, 0x1, 0x5, 0x10, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x0, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0xe0, 0x7, [{0x40, 0xc}, {0x47, 0xc2}, {0x5, 0x5b}, {}, {0xff, 0xe9}, {0x9, 0xd}, {0x5, 0xe0}], 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x2e, 0x3, [{0x3, 0x9}, {0x3, 0x8e}, {0x4, 0x2}], 0x3}], [{{0x9, 0x5, 0x6, 0x4, 0x10, 0xa, 0x81, 0xd5, {0xf, 0x25, 0x1, 0xb, "1d756cf41ea9640520c581"}}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x5, 0x9, {0xe, 0x25, 0x1, 0xa, "d77834688f365de2a7c1"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x5, 0x59, {0x6, 0x25, 0x1, 0x2, "28d4"}}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x1, 0x87, 0xb0, {0x14, 0x25, 0x1, 0x10, "989c9b566ebfa85b6b52e0ea6fbad904"}}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x1, 0xd, 0x1, {0x8, 0x25, 0x1, 0x4, "5d97c064"}}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x2, 0x83, 0x4, {0xb, 0x25, 0x1, 0x7, "d28de986fc6ade"}}}]}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x0, 0x5, 0xb, 0x8, 0x3}, 0x98, &(0x7f0000000840)={0x5, 0xf, 0x98, 0x4, [@generic={0x58, 0x10, 0x3, "710e754d29f710b8902834364299067af7d3e85c62705c108fdedc4881b6e542803286a2c4c08bf30362d1f79d2bad1391f507bf91d231ad9ea890203c51d3ab12fb8308f89e05feeb665cb3c2a25ff01eec21ed36"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x6, 0xf, 0xc7f4, [0xff0000]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x4, 0xf00, 0x400, [0xffc0c0, 0xc00f, 0x3f, 0x8, 0x3f00, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xa, 0x9, 0x5}]}, 0x1, [{0xdc, &(0x7f0000000900)=@string={0xdc, 0x3, "f9884783a33a58329f545f287b06361770564f22121c4c4845b1505b0717c01c6683adc57eb6df32d43c85ba7a0896c804026ea86b84089432d88612e242a70b76b5c100192c06f20200812e1443d3852488087da6d1fe5db71f447a196756b6d8872ed509978f911aadfc498ef16cc0d45c120aca523ce568876ab2b2c4affb090cc4fd2b06a7f422fcbd65c861fcb6e2043f82dde022cdfb0aa66c20484a54225207699c7a42df0f573f76fdb534c820813ae111be5279089b2eb42a8eb7600a2d17ae674d968cecdf87072c2113fbd982fdf941b2f6471aa3"}}]}) write$P9_RVERSION(r4, &(0x7f0000002200)=ANY=[], 0xfffffcd9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4104aec6, &(0x7f00000003c0)={0x1, [{0x3, 0x18, 0x7f, &(0x7f0000000500)="e8bfff"}, {0x2, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0xc9a, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x0, 0xa09, 0x0}, {0x1, 0x0, 0xc0, 0x0}]}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000a40)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x8000, 0x16d) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000680), &(0x7f00000006c0)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.022175375s ago: executing program 0 (id=169): pwrite64(0xffffffffffffffff, &(0x7f0000000040)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262", 0x48, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000400)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000500)='./file1\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f00000007c0)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000001980), 0x2, 0x141102) writev(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a40), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x2000481c) r5 = syz_open_procfs(0x0, &(0x7f0000001c80)='numa_maps\x00') read$FUSE(r5, &(0x7f0000001f80)={0x2020}, 0x2020) socket$rds(0x15, 0x5, 0x0) 968.981047ms ago: executing program 2 (id=170): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000194c0)=0x410000002) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 906.295969ms ago: executing program 4 (id=171): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000007c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000800)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000840)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$kcm(0x21, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x8, 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="360f01c266b843000f00d066ba430066b8000066eff2f7ecd1e8c4c25592b49f39000000f20f069a794aa1959a000f009906000000b9ae080000b800600000ba000000000f30", 0x46}], 0x1, 0x9, 0x0, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESDEC], 0xfdef) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x4a102) writev(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f0000000640)={0x3ff, 0x30e3, 0x4, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') mlockall(0x7) mlockall(0x7) ioctl$int_in(r5, 0x5422, 0x0) write$khugepaged_scan(r2, &(0x7f00000006c0), 0x8) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000700)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@getchain={0x17, 0x66, 0xfcd66a900070b359}, 0x24}}, 0x0) 0s ago: executing program 2 (id=172): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r4, &(0x7f0000002d40)=""/102392, 0x18ff8) r5 = openat(r0, &(0x7f000001bd40)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f000001bd80)=' f 127.0.0.1 2 000\\00 : l\\calhost\n', 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 78.144197][ T4260] cgroup: Unknown subsys name 'net' [ 78.251060][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.750951][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.906055][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.922141][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.929612][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.939053][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.947514][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.955706][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.963785][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.971514][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.979347][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.986836][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.994462][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.001796][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.006945][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.010355][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.023061][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.025253][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.032619][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.039240][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.045952][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.051788][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.059756][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.073184][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.074351][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.091404][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.098962][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.106160][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.113299][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.164184][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.172655][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.180526][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.285921][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.297165][ T4283] rdma_rxe: rxe_register_device failed with error -23 [ 82.305577][ T4272] rdma_rxe: rxe_register_device failed with error -23 [ 82.312938][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.319713][ T4273] rdma_rxe: rxe_register_device failed with error -23 [ 82.327776][ T4283] rdma_rxe: failed to add rxe_eth0 [ 82.330372][ T4272] rdma_rxe: failed to add rxe_eth0 [ 82.338741][ T4280] rdma_rxe: rxe_register_device failed with error -23 [ 82.345673][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.354303][ T4273] rdma_rxe: failed to add rxe_eth0 [ 82.364912][ T4280] rdma_rxe: failed to add rxe_eth0 [ 82.562400][ T4285] infiniband rxe0: set active [ 82.569932][ T33] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.586710][ T4285] infiniband rxe0: added rxe_eth0 [ 82.643386][ T4285] RDS/IB: rxe0: added [ 82.648306][ T4285] smc: adding ib device rxe0 with port count 1 [ 82.660481][ T4285] smc: ib device rxe0 port 1 has pnetid [ 82.681618][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.694050][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.863151][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.990684][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 83.089076][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 83.129679][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 83.147145][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 83.189063][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.282384][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.303633][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.312282][ T4273] device bridge_slave_0 entered promiscuous mode [ 83.380814][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.392582][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.400986][ T4273] device bridge_slave_1 entered promiscuous mode [ 83.423083][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.547136][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.589060][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.613649][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.622110][ T4283] device bridge_slave_0 entered promiscuous mode [ 83.641706][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.660090][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.668271][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.677472][ T4280] device bridge_slave_0 entered promiscuous mode [ 83.691183][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.698817][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.713733][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.721824][ T4283] device bridge_slave_1 entered promiscuous mode [ 83.742897][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.750454][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.758883][ T4272] device bridge_slave_0 entered promiscuous mode [ 83.767863][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.775819][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.784474][ T4280] device bridge_slave_1 entered promiscuous mode [ 83.819697][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.832485][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.841024][ T4272] device bridge_slave_1 entered promiscuous mode [ 83.869712][ T4273] team0: Port device team_slave_0 added [ 83.879205][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.910659][ T4273] team0: Port device team_slave_1 added [ 83.928639][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.939679][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.977902][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.996283][ T4280] team0: Port device team_slave_0 added [ 84.005365][ T4280] team0: Port device team_slave_1 added [ 84.013224][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.023172][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.031347][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.057791][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.093323][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.103170][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.111491][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.142729][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.197235][ T4283] team0: Port device team_slave_0 added [ 84.211876][ T4272] team0: Port device team_slave_0 added [ 84.219014][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 84.225667][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 84.231879][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 84.238169][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 84.238190][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 84.251102][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.258694][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.285025][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.298397][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.305802][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.332867][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.358752][ T4272] team0: Port device team_slave_1 added [ 84.366646][ T4283] team0: Port device team_slave_1 added [ 84.425330][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.432338][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.458771][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.490871][ T4280] device hsr_slave_0 entered promiscuous mode [ 84.497718][ T4280] device hsr_slave_1 entered promiscuous mode [ 84.514708][ T4273] device hsr_slave_0 entered promiscuous mode [ 84.524545][ T4273] device hsr_slave_1 entered promiscuous mode [ 84.531465][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.539559][ T4273] Cannot create hsr debugfs directory [ 84.549236][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.556798][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.583313][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.608055][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.615365][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.641410][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.654003][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.660989][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.687230][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.896125][ T4283] device hsr_slave_0 entered promiscuous mode [ 84.915070][ T4283] device hsr_slave_1 entered promiscuous mode [ 84.934462][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.942106][ T4283] Cannot create hsr debugfs directory [ 84.963859][ T4272] device hsr_slave_0 entered promiscuous mode [ 84.971974][ T4272] device hsr_slave_1 entered promiscuous mode [ 84.979759][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.987441][ T4272] Cannot create hsr debugfs directory [ 84.997256][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 85.407392][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.424874][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.432033][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.445500][ T4285] device bridge_slave_0 entered promiscuous mode [ 85.465015][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.488003][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.499859][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.508527][ T4285] device bridge_slave_1 entered promiscuous mode [ 85.522096][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.534588][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.613380][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.626737][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.651485][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.668545][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.705579][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.751329][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.766330][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.782305][ T4285] team0: Port device team_slave_0 added [ 85.800827][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.820473][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.844528][ T4285] team0: Port device team_slave_1 added [ 85.851915][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.948837][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.956301][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.984133][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.997607][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.005060][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.031595][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.049610][ T3934] infiniband rxe0: set active [ 86.067521][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.087414][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.106963][ T127] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.117545][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.137698][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.252218][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.273276][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.286458][ T4285] device hsr_slave_0 entered promiscuous mode [ 86.293678][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 86.299736][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 86.303585][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 86.310837][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 86.311929][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 86.331508][ T4285] device hsr_slave_1 entered promiscuous mode [ 86.338971][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.346820][ T4285] Cannot create hsr debugfs directory [ 86.387941][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.399550][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.410922][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.440091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.448127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.457246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.466537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.476569][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.484031][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.499740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.509429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.518580][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.525775][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.537500][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.562238][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.569660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.607756][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.621198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.630564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.639637][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.646855][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.661872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.674863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.683366][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.690568][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.699565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.746718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.760113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.769112][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.780465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.789871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.798766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.807731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.818972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.827964][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.837938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.846217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.914063][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.922734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.944411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.952525][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.969888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.980012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.994991][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.004451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.018576][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.031459][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.043187][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.071810][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.085855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.095811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.109395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.119228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.152450][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.188589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.211770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.221980][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.229170][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.238679][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.247640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.281078][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.288398][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.325860][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.382669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.406516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.427106][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.446696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.465083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.501845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.525649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.554258][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.561432][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.584475][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.599081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.619512][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.626976][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.654254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.669601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.679277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.689341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.698817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.709559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.719425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.728083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.773814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.782477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.819597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.850419][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.870216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.895864][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.910613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.920264][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.938139][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.963704][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.972406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.992507][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.027588][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.052769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.104409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.129682][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.168846][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.201101][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.229364][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.243826][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.256004][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.334274][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.341830][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.387202][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.390838][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 88.400177][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 88.411861][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 88.411882][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 88.420294][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 88.530440][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.545460][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.654430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.670458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.711419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.720945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.738157][ T4280] device veth0_vlan entered promiscuous mode [ 88.759417][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.799732][ T4280] device veth1_vlan entered promiscuous mode [ 88.830517][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.853131][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.883283][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.901705][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.912418][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.927381][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.939123][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.957977][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.968354][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.980650][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.996867][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.004094][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.028786][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.062547][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.104384][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.112032][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.125314][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.134536][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.143391][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.152768][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.162084][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.169269][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.178002][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.187390][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.239540][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.252525][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.268465][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.283269][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.296636][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.310846][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.320540][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.329472][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.338886][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.350150][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.362226][ T4273] device veth0_vlan entered promiscuous mode [ 89.372560][ T4280] device veth0_macvtap entered promiscuous mode [ 89.393149][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.402912][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.412106][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.430331][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.438700][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.449128][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.476810][ T4280] device veth1_macvtap entered promiscuous mode [ 89.491623][ T4273] device veth1_vlan entered promiscuous mode [ 89.499104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.509182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.518743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.528030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.538099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.546777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.558380][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.583269][ T4283] device veth0_vlan entered promiscuous mode [ 89.608278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.617214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.633156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.642465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.652494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.675878][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.699594][ T4283] device veth1_vlan entered promiscuous mode [ 89.712544][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.721478][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.730594][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.746338][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.756503][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.770655][ T4272] device veth0_vlan entered promiscuous mode [ 89.779705][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.792128][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.801485][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.810969][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.823071][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.842126][ T4273] device veth0_macvtap entered promiscuous mode [ 89.859687][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.869863][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.886616][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.902945][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.913211][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.956511][ T4273] device veth1_macvtap entered promiscuous mode [ 89.967822][ T4272] device veth1_vlan entered promiscuous mode [ 89.989560][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.999038][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.008280][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.021663][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.029876][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.091378][ T4283] device veth0_macvtap entered promiscuous mode [ 90.121299][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.143518][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.164091][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.173180][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.182329][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.192441][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.201925][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.216677][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.254912][ T4283] device veth1_macvtap entered promiscuous mode [ 90.267423][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.293491][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.315771][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.324681][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.333000][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.348139][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.361574][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.370882][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.380690][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.400434][ T4272] device veth0_macvtap entered promiscuous mode [ 90.415656][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.425490][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.435055][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.443933][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.461674][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 90.461707][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 90.468522][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 90.475009][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 90.484713][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 90.503175][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.518032][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.528301][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.539527][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.555486][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.576451][ T4272] device veth1_macvtap entered promiscuous mode [ 90.585529][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.595445][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.604265][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.613174][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.625682][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.636882][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.648783][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.658887][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.669994][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.681724][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.693392][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.705536][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.715089][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.726999][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.759900][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.767966][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.781115][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.790512][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.798518][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.815557][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.847376][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.862594][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.873123][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.885739][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.895673][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.906329][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.918967][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.949118][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.961661][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.964629][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.981563][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.990670][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.000997][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.014394][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.024720][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.035290][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.045377][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.055896][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.067522][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.098281][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.109918][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.120126][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.129284][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.196174][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.212285][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.227546][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.238055][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.273179][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.289942][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.301580][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.309974][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.325858][ T4285] device veth0_vlan entered promiscuous mode [ 91.369462][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.378462][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.387850][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.431533][ T4285] device veth1_vlan entered promiscuous mode [ 91.437036][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.455021][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.666760][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.807898][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.855685][ T4356] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.073078][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.098286][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.113644][ T4356] usb 1-1: Using ep0 maxpacket: 32 [ 92.127299][ T4356] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 92.248090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.256628][ T22] cfg80211: failed to load regulatory.db [ 92.263054][ T4356] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.277344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.298525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.306825][ T4356] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.314211][ T4356] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 92.345927][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.406301][ T4356] usb 1-1: config 0 descriptor?? [ 92.412600][ T4285] device veth0_macvtap entered promiscuous mode [ 92.425140][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.435951][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.469990][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.506090][ T4285] device veth1_macvtap entered promiscuous mode [ 92.520241][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.545173][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.595925][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.672233][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.694578][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.704665][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.716239][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.733695][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.765030][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.788054][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.808792][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.843914][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.859935][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.872431][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.883198][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.894089][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.904460][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.918042][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.928527][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.940033][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.956836][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.967048][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.975476][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.986968][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.996757][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.007999][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.018529][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.028399][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.048108][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.058061][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.068302][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.077772][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.313721][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.331613][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.370385][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.401915][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.422471][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.445553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.443020][ T4356] usbhid 1-1:0.0: can't add hid device: -71 [ 94.509172][ T4356] usbhid: probe of 1-1:0.0 failed with error -71 [ 95.113555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.443494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.453461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.463473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.473462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.483457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.493456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.503458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.513464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 95.523463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 96.206423][ T4356] usb 1-1: USB disconnect, device number 2 [ 96.525441][ T4356] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.035512][ T4356] Process accounting resumed [ 101.035143][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.055232][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 101.084904][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 101.098151][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 101.110916][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 101.123035][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 101.136457][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 102.584923][ T4454] Zero length message leads to an empty skb [ 102.694634][ T4451] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.189288][ T4467] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 103.456478][ T4474] syz.1.17 (4474): /proc/4469/oom_adj is deprecated, please use /proc/4469/oom_score_adj instead. [ 103.989973][ T4473] can: request_module (can-proto-0) failed. [ 106.849988][ T4497] FAULT_INJECTION: forcing a failure. [ 106.849988][ T4497] name failslab, interval 1, probability 0, space 0, times 1 [ 106.863502][ T4497] CPU: 0 PID: 4497 Comm: syz.4.21 Not tainted syzkaller #0 [ 106.870761][ T4497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.880883][ T4497] Call Trace: [ 106.884205][ T4497] [ 106.887181][ T4497] dump_stack_lvl+0x188/0x24e [ 106.891941][ T4497] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.898152][ T4497] ? show_regs_print_info+0x12/0x12 [ 106.903407][ T4497] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.909632][ T4497] should_fail_ex+0x390/0x4c0 [ 106.914380][ T4497] should_failslab+0x5/0x20 [ 106.918926][ T4497] slab_pre_alloc_hook+0x59/0x300 [ 106.924000][ T4497] ? rcu_is_watching+0x11/0xa0 [ 106.928822][ T4497] kmem_cache_alloc+0x56/0x2f0 [ 106.933633][ T4497] ? getname_flags+0xb7/0x500 [ 106.938362][ T4497] getname_flags+0xb7/0x500 [ 106.942917][ T4497] do_sys_openat2+0xdd/0x4f0 [ 106.947561][ T4497] ? do_sys_open+0xe0/0xe0 [ 106.952036][ T4497] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.958071][ T4497] ? lock_chain_count+0x20/0x20 [ 106.962977][ T4497] __x64_sys_openat+0x135/0x160 [ 106.967895][ T4497] do_syscall_64+0x4c/0xa0 [ 106.972363][ T4497] ? clear_bhb_loop+0x60/0xb0 [ 106.977094][ T4497] ? clear_bhb_loop+0x60/0xb0 [ 106.981822][ T4497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.987769][ T4497] RIP: 0033:0x7f51b419e559 [ 106.992225][ T4497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.011886][ T4497] RSP: 002b:00007f51b23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.020380][ T4497] RAX: ffffffffffffffda RBX: 00007f51b4426090 RCX: 00007f51b419e559 [ 107.028405][ T4497] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 107.036423][ T4497] RBP: 00007f51b42358b0 R08: 0000000000000000 R09: 0000000000000000 [ 107.044439][ T4497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.052462][ T4497] R13: 00007f51b4426128 R14: 00007f51b4426090 R15: 00007fff51604f28 [ 107.060499][ T4497] [ 107.943533][ T22] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 108.314372][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.338715][ T22] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.364182][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.462748][ T4505] process 'syz.0.24' launched './file0' with NULL argv: empty string added [ 109.127648][ T4506] capability: warning: `syz.2.22' uses deprecated v2 capabilities in a way that may be insecure [ 109.366167][ T22] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.401227][ T22] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.453829][ T22] usb 3-1: Product: syz [ 109.458543][ T22] usb 3-1: Manufacturer: syz [ 109.463202][ T22] usb 3-1: SerialNumber: syz [ 110.079371][ T22] usb 3-1: config 0 descriptor?? [ 110.202584][ T22] usb 3-1: can't set config #0, error -71 [ 110.304539][ T22] usb 3-1: USB disconnect, device number 2 [ 110.465006][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.482391][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 110.501733][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 110.529175][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 110.545081][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 110.559685][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 110.606840][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 114.002976][ T4536] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 114.475685][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.494756][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 114.517671][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 114.543860][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 114.563041][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 114.577181][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 114.629224][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 115.675766][ T4554] FAULT_INJECTION: forcing a failure. [ 115.675766][ T4554] name failslab, interval 1, probability 0, space 0, times 0 [ 115.689547][ T4554] CPU: 0 PID: 4554 Comm: syz.2.33 Not tainted syzkaller #0 [ 115.696817][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.706948][ T4554] Call Trace: [ 115.710270][ T4554] [ 115.713247][ T4554] dump_stack_lvl+0x188/0x24e [ 115.718005][ T4554] ? asm_sysvec_call_function_single+0x16/0x20 [ 115.724213][ T4554] ? show_regs_print_info+0x12/0x12 [ 115.729460][ T4554] ? asm_sysvec_call_function_single+0x16/0x20 [ 115.735692][ T4554] should_fail_ex+0x390/0x4c0 [ 115.740451][ T4554] should_failslab+0x5/0x20 [ 115.744996][ T4554] slab_pre_alloc_hook+0x59/0x300 [ 115.750064][ T4554] ? lockdep_hardirqs_on+0x94/0x140 [ 115.755331][ T4554] kmem_cache_alloc+0x56/0x2f0 [ 115.760158][ T4554] ? getname_flags+0xb7/0x500 [ 115.764885][ T4554] getname_flags+0xb7/0x500 [ 115.769436][ T4554] do_sys_openat2+0xdd/0x4f0 [ 115.774089][ T4554] ? do_sys_open+0xe0/0xe0 [ 115.778562][ T4554] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.784605][ T4554] ? lock_chain_count+0x20/0x20 [ 115.789550][ T4554] __x64_sys_openat+0x135/0x160 [ 115.794466][ T4554] do_syscall_64+0x4c/0xa0 [ 115.798936][ T4554] ? clear_bhb_loop+0x60/0xb0 [ 115.803666][ T4554] ? clear_bhb_loop+0x60/0xb0 [ 115.808400][ T4554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.814373][ T4554] RIP: 0033:0x7f2470d9e559 [ 115.818852][ T4554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.838527][ T4554] RSP: 002b:00007f2471bad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.847007][ T4554] RAX: ffffffffffffffda RBX: 00007f2471026090 RCX: 00007f2470d9e559 [ 115.855026][ T4554] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 115.863042][ T4554] RBP: 00007f2470e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 115.871063][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.879087][ T4554] R13: 00007f2471026128 R14: 00007f2471026090 R15: 00007fff4c0a1d38 [ 115.887127][ T4554] [ 117.976541][ T4563] tmpfs: Unknown parameter 'quota' [ 120.690701][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.710106][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 120.728666][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 120.754237][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 120.768108][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 120.782551][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 120.830097][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 122.420865][ T4392] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 123.309671][ T4392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.361083][ T4392] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.513679][ T4392] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.536511][ T4392] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.614293][ T4392] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.698694][ T4392] usb 1-1: Product: syz [ 123.703000][ T4392] usb 1-1: Manufacturer: syz [ 123.736626][ T4392] usb 1-1: SerialNumber: syz [ 123.745009][ T4392] usb 1-1: config 0 descriptor?? [ 123.933615][ T4392] usb 1-1: can't set config #0, error -71 [ 124.055936][ T4392] usb 1-1: USB disconnect, device number 3 [ 124.390581][ T4625] FAULT_INJECTION: forcing a failure. [ 124.390581][ T4625] name failslab, interval 1, probability 0, space 0, times 0 [ 124.403292][ T4625] CPU: 0 PID: 4625 Comm: syz.1.45 Not tainted syzkaller #0 [ 124.410511][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.420574][ T4625] Call Trace: [ 124.423863][ T4625] [ 124.426804][ T4625] dump_stack_lvl+0x188/0x24e [ 124.431502][ T4625] ? show_regs_print_info+0x12/0x12 [ 124.436710][ T4625] ? load_image+0x410/0x410 [ 124.441223][ T4625] ? __might_sleep+0xd0/0xd0 [ 124.445836][ T4625] ? __lock_acquire+0x7ea0/0x7ea0 [ 124.450880][ T4625] should_fail_ex+0x390/0x4c0 [ 124.455578][ T4625] should_failslab+0x5/0x20 [ 124.460103][ T4625] slab_pre_alloc_hook+0x59/0x300 [ 124.465146][ T4625] ? vfs_write+0x777/0x9a0 [ 124.469579][ T4625] kmem_cache_alloc+0x56/0x2f0 [ 124.474355][ T4625] ? getname_flags+0xb7/0x500 [ 124.479040][ T4625] getname_flags+0xb7/0x500 [ 124.483572][ T4625] do_sys_openat2+0xdd/0x4f0 [ 124.488199][ T4625] ? do_sys_open+0xe0/0xe0 [ 124.492649][ T4625] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.498645][ T4625] ? lock_chain_count+0x20/0x20 [ 124.503527][ T4625] __x64_sys_openat+0x135/0x160 [ 124.508407][ T4625] do_syscall_64+0x4c/0xa0 [ 124.512832][ T4625] ? clear_bhb_loop+0x60/0xb0 [ 124.517526][ T4625] ? clear_bhb_loop+0x60/0xb0 [ 124.522228][ T4625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.528146][ T4625] RIP: 0033:0x7f01d5b9e559 [ 124.532581][ T4625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.552225][ T4625] RSP: 002b:00007f01d6989028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.560651][ T4625] RAX: ffffffffffffffda RBX: 00007f01d5e26180 RCX: 00007f01d5b9e559 [ 124.568646][ T4625] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 124.576637][ T4625] RBP: 00007f01d5c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 124.584614][ T4625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.592600][ T4625] R13: 00007f01d5e26218 R14: 00007f01d5e26180 R15: 00007ffd31b3d808 [ 124.600597][ T4625] [ 127.394650][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 127.408271][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 127.416926][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 127.425154][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 127.433215][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 127.442230][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 127.462355][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 131.141465][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 131.153362][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 131.161388][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 131.182697][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 131.191338][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 131.210896][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 131.219332][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 132.938793][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.945611][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.823638][ T4445] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 136.038463][ T4445] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.662269][ T4445] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.765392][ T4445] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.828405][ T4445] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 136.865066][ T4445] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 136.900327][ T4445] usb 4-1: Product: syz [ 136.910482][ T4445] usb 4-1: Manufacturer: syz [ 136.923504][ T4445] usb 4-1: SerialNumber: syz [ 136.946240][ T4445] usb 4-1: config 0 descriptor?? [ 138.417850][ T4445] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 138.447288][ T4665] udevd[4665]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.598305][ T33] usb 4-1: USB disconnect, device number 2 [ 140.229492][ T4691] FAULT_INJECTION: forcing a failure. [ 140.229492][ T4691] name failslab, interval 1, probability 0, space 0, times 0 [ 140.243421][ T4691] CPU: 0 PID: 4691 Comm: syz.3.62 Not tainted syzkaller #0 [ 140.250683][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.260786][ T4691] Call Trace: [ 140.264105][ T4691] [ 140.267075][ T4691] dump_stack_lvl+0x188/0x24e [ 140.271819][ T4691] ? show_regs_print_info+0x12/0x12 [ 140.277091][ T4691] ? load_image+0x410/0x410 [ 140.281647][ T4691] ? __might_sleep+0xd0/0xd0 [ 140.286290][ T4691] ? __lock_acquire+0x7ea0/0x7ea0 [ 140.291384][ T4691] should_fail_ex+0x390/0x4c0 [ 140.296133][ T4691] should_failslab+0x5/0x20 [ 140.300692][ T4691] slab_pre_alloc_hook+0x59/0x300 [ 140.305766][ T4691] ? vfs_write+0x777/0x9a0 [ 140.310241][ T4691] kmem_cache_alloc+0x56/0x2f0 [ 140.315055][ T4691] ? getname_flags+0xb7/0x500 [ 140.319784][ T4691] getname_flags+0xb7/0x500 [ 140.324355][ T4691] do_sys_openat2+0xdd/0x4f0 [ 140.329023][ T4691] ? do_sys_open+0xe0/0xe0 [ 140.333508][ T4691] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.339549][ T4691] ? lock_chain_count+0x20/0x20 [ 140.344458][ T4691] __x64_sys_openat+0x135/0x160 [ 140.349366][ T4691] do_syscall_64+0x4c/0xa0 [ 140.353834][ T4691] ? clear_bhb_loop+0x60/0xb0 [ 140.358557][ T4691] ? clear_bhb_loop+0x60/0xb0 [ 140.363305][ T4691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.369255][ T4691] RIP: 0033:0x7fdf2a99e559 [ 140.373720][ T4691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.393408][ T4691] RSP: 002b:00007fdf2b829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.401869][ T4691] RAX: ffffffffffffffda RBX: 00007fdf2ac26090 RCX: 00007fdf2a99e559 [ 140.409887][ T4691] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 140.417903][ T4691] RBP: 00007fdf2aa358b0 R08: 0000000000000000 R09: 0000000000000000 [ 140.425923][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.434023][ T4691] R13: 00007fdf2ac26128 R14: 00007fdf2ac26090 R15: 00007ffdad491498 [ 140.442064][ T4691] [ 143.120157][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 143.132124][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 143.140507][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 143.148540][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 143.156888][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 143.165125][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 143.184248][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 144.139729][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 144.157047][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 144.175712][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 144.208104][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 144.230831][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 144.246784][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 144.261117][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 148.625624][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.637573][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 148.646047][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 148.655308][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 148.663623][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 148.672086][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 148.712049][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 148.812632][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.825180][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.837168][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.848917][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.869205][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.880885][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.892459][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.904302][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.915821][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.927387][ T4727] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.783608][ T4445] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 150.975411][ T4445] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.985966][ T4445] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.013856][ T4445] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.042844][ T4445] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.062409][ T4445] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.694618][ T4748] FAULT_INJECTION: forcing a failure. [ 151.694618][ T4748] name failslab, interval 1, probability 0, space 0, times 0 [ 151.707697][ T4748] CPU: 0 PID: 4748 Comm: syz.0.74 Not tainted syzkaller #0 [ 151.714954][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.725081][ T4748] Call Trace: [ 151.728399][ T4748] [ 151.731458][ T4748] dump_stack_lvl+0x188/0x24e [ 151.736210][ T4748] ? show_regs_print_info+0x12/0x12 [ 151.741460][ T4748] ? load_image+0x410/0x410 [ 151.746012][ T4748] ? __might_sleep+0xd0/0xd0 [ 151.750645][ T4748] ? __lock_acquire+0x7ea0/0x7ea0 [ 151.755729][ T4748] should_fail_ex+0x390/0x4c0 [ 151.760474][ T4748] should_failslab+0x5/0x20 [ 151.765020][ T4748] slab_pre_alloc_hook+0x59/0x300 [ 151.770100][ T4748] ? vfs_write+0x777/0x9a0 [ 151.774584][ T4748] kmem_cache_alloc+0x56/0x2f0 [ 151.779397][ T4748] ? getname_flags+0xb7/0x500 [ 151.784123][ T4748] getname_flags+0xb7/0x500 [ 151.788680][ T4748] do_sys_openat2+0xdd/0x4f0 [ 151.793322][ T4748] ? do_sys_open+0xe0/0xe0 [ 151.797800][ T4748] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.803839][ T4748] ? lock_chain_count+0x20/0x20 [ 151.808752][ T4748] __x64_sys_openat+0x135/0x160 [ 151.813668][ T4748] do_syscall_64+0x4c/0xa0 [ 151.818136][ T4748] ? clear_bhb_loop+0x60/0xb0 [ 151.822857][ T4748] ? clear_bhb_loop+0x60/0xb0 [ 151.827589][ T4748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.833537][ T4748] RIP: 0033:0x7f165919e559 [ 151.838018][ T4748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.857690][ T4748] RSP: 002b:00007f1659fc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.866157][ T4748] RAX: ffffffffffffffda RBX: 00007f1659426090 RCX: 00007f165919e559 [ 151.874173][ T4748] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 151.882195][ T4748] RBP: 00007f16592358b0 R08: 0000000000000000 R09: 0000000000000000 [ 151.890232][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.898250][ T4748] R13: 00007f1659426128 R14: 00007f1659426090 R15: 00007ffc16bef418 [ 151.906295][ T4748] [ 152.666849][ T4445] usb 5-1: Product: syz [ 152.671111][ T4445] usb 5-1: Manufacturer: syz [ 152.676113][ T4445] usb 5-1: SerialNumber: syz [ 152.697059][ T4445] usb 5-1: config 0 descriptor?? [ 153.092307][ T4445] usb 5-1: can't set config #0, error -71 [ 153.150679][ T4445] usb 5-1: USB disconnect, device number 2 [ 162.095581][ T4795] FAULT_INJECTION: forcing a failure. [ 162.095581][ T4795] name failslab, interval 1, probability 0, space 0, times 0 [ 162.108548][ T4795] CPU: 0 PID: 4795 Comm: syz.3.87 Not tainted syzkaller #0 [ 162.115812][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.125916][ T4795] Call Trace: [ 162.129243][ T4795] [ 162.132209][ T4795] dump_stack_lvl+0x188/0x24e [ 162.136951][ T4795] ? show_regs_print_info+0x12/0x12 [ 162.142206][ T4795] ? load_image+0x410/0x410 [ 162.146760][ T4795] ? __might_sleep+0xd0/0xd0 [ 162.151401][ T4795] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.156492][ T4795] should_fail_ex+0x390/0x4c0 [ 162.161245][ T4795] should_failslab+0x5/0x20 [ 162.165795][ T4795] slab_pre_alloc_hook+0x59/0x300 [ 162.170873][ T4795] ? lockdep_hardirqs_on+0x94/0x140 [ 162.176144][ T4795] kmem_cache_alloc+0x56/0x2f0 [ 162.180963][ T4795] ? getname_flags+0xb7/0x500 [ 162.185740][ T4795] getname_flags+0xb7/0x500 [ 162.190294][ T4795] do_sys_openat2+0xdd/0x4f0 [ 162.194953][ T4795] ? do_sys_open+0xe0/0xe0 [ 162.199498][ T4795] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.205546][ T4795] ? lock_chain_count+0x20/0x20 [ 162.210457][ T4795] __x64_sys_openat+0x135/0x160 [ 162.215367][ T4795] do_syscall_64+0x4c/0xa0 [ 162.219833][ T4795] ? clear_bhb_loop+0x60/0xb0 [ 162.224567][ T4795] ? clear_bhb_loop+0x60/0xb0 [ 162.229296][ T4795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.235240][ T4795] RIP: 0033:0x7fdf2a99e559 [ 162.239718][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.259398][ T4795] RSP: 002b:00007fdf2b829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.267873][ T4795] RAX: ffffffffffffffda RBX: 00007fdf2ac26090 RCX: 00007fdf2a99e559 [ 162.275897][ T4795] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 162.283944][ T4795] RBP: 00007fdf2aa358b0 R08: 0000000000000000 R09: 0000000000000000 [ 162.291965][ T4795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.299979][ T4795] R13: 00007fdf2ac26128 R14: 00007fdf2ac26090 R15: 00007ffdad491498 [ 162.308012][ T4795] [ 163.223583][ T4445] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 163.432564][ T4445] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.509063][ T4445] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.701283][ T4445] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.832353][ T4445] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.960989][ T4445] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 164.090220][ T4445] usb 1-1: Product: syz [ 164.154818][ T4445] usb 1-1: Manufacturer: syz [ 164.224847][ T4445] usb 1-1: SerialNumber: syz [ 164.385934][ T4445] usb 1-1: config 0 descriptor?? [ 164.666500][ T4445] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 164.772708][ T4791] udevd[4791]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.834765][ T4356] usb 1-1: USB disconnect, device number 4 [ 167.599314][ T4821] tmpfs: Unknown parameter 'quota' [ 171.701487][ T4842] FAULT_INJECTION: forcing a failure. [ 171.701487][ T4842] name failslab, interval 1, probability 0, space 0, times 0 [ 171.714502][ T4842] CPU: 0 PID: 4842 Comm: syz.4.99 Not tainted syzkaller #0 [ 171.721758][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.731867][ T4842] Call Trace: [ 171.735192][ T4842] [ 171.738161][ T4842] dump_stack_lvl+0x188/0x24e [ 171.742895][ T4842] ? show_regs_print_info+0x12/0x12 [ 171.748152][ T4842] ? load_image+0x410/0x410 [ 171.752709][ T4842] ? __might_sleep+0xd0/0xd0 [ 171.757349][ T4842] ? __lock_acquire+0x7ea0/0x7ea0 [ 171.762433][ T4842] should_fail_ex+0x390/0x4c0 [ 171.767181][ T4842] should_failslab+0x5/0x20 [ 171.771776][ T4842] slab_pre_alloc_hook+0x59/0x300 [ 171.776898][ T4842] kmem_cache_alloc+0x56/0x2f0 [ 171.781742][ T4842] ? getname_flags+0xb7/0x500 [ 171.786476][ T4842] getname_flags+0xb7/0x500 [ 171.791035][ T4842] do_sys_openat2+0xdd/0x4f0 [ 171.795687][ T4842] ? do_sys_open+0xe0/0xe0 [ 171.800173][ T4842] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 171.806211][ T4842] ? lock_chain_count+0x20/0x20 [ 171.811131][ T4842] __x64_sys_openat+0x135/0x160 [ 171.816045][ T4842] do_syscall_64+0x4c/0xa0 [ 171.820519][ T4842] ? clear_bhb_loop+0x60/0xb0 [ 171.825254][ T4842] ? clear_bhb_loop+0x60/0xb0 [ 171.829992][ T4842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.835940][ T4842] RIP: 0033:0x7f51b419e559 [ 171.840401][ T4842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.860058][ T4842] RSP: 002b:00007f51b23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.868545][ T4842] RAX: ffffffffffffffda RBX: 00007f51b4426090 RCX: 00007f51b419e559 [ 171.876572][ T4842] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 171.884596][ T4842] RBP: 00007f51b42358b0 R08: 0000000000000000 R09: 0000000000000000 [ 171.892620][ T4842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.900643][ T4842] R13: 00007f51b4426128 R14: 00007f51b4426090 R15: 00007fff51604f28 [ 171.908737][ T4842] [ 175.209182][ T4356] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 176.960385][ T4356] usb 4-1: device descriptor read/all, error -71 [ 177.234718][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 177.246609][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 177.254884][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 177.262892][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 177.271112][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 177.279399][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 177.327542][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 177.402427][ T4878] sctp_transport_update_pmtu: 49 callbacks suppressed [ 177.402483][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.420963][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.433286][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.445008][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.463857][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.475151][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.486652][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.498161][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.509798][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.521289][ T4878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 181.424866][ T4886] ceph: No mds server is up or the cluster is laggy [ 181.634546][ T4445] libceph: connect (1)[c::]:6789 error -101 [ 181.672814][ T4445] libceph: mon0 (1)[c::]:6789 connect error [ 183.039587][ T4402] libceph: connect (1)[c::]:6789 error -101 [ 183.169778][ T4402] libceph: mon0 (1)[c::]:6789 connect error [ 185.533631][ T4402] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 185.916111][ T4402] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.933452][ T4402] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.026681][ T4402] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.172085][ T4402] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.181749][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 186.893239][ T4402] usb 5-1: Product: syz [ 186.897806][ T4402] usb 5-1: Manufacturer: syz [ 186.910255][ T4402] usb 5-1: SerialNumber: syz [ 186.926009][ T4402] usb 5-1: config 0 descriptor?? [ 187.005375][ T4277] Bluetooth: Wrong link type (-22) [ 189.636001][ T4402] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 189.649092][ T4892] udevd[4892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.290536][ T4939] usb 5-1: USB disconnect, device number 3 [ 190.789212][ T22] Process accounting resumed [ 190.946002][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 190.961496][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 190.969896][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 190.978667][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 190.987039][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 191.035545][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 191.044351][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 191.116469][ T4955] sctp_transport_update_pmtu: 48 callbacks suppressed [ 191.116549][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.135468][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.150592][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.160794][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.176518][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.188044][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.199710][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.211275][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.222817][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.234577][ T4955] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 191.590952][ T4956] jffs2: notice: (4956) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.384077][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393320][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.083701][ T4369] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 197.106605][ T4277] Bluetooth: Wrong link type (-22) [ 199.085004][ T4369] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.170242][ T4369] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.350606][ T4369] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.597348][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 202.613777][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 202.623181][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 202.631290][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 202.639806][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 202.658292][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 202.667189][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 202.682544][ T5014] sctp_transport_update_pmtu: 49 callbacks suppressed [ 202.682602][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.702853][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.718544][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.732922][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.754734][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.766976][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.779320][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.791634][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.803633][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 202.816164][ T5014] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 203.134220][ T4369] usb 4-1: string descriptor 0 read error: -71 [ 203.140568][ T4369] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.195269][ T4369] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 203.225777][ T4369] usb 4-1: config 0 descriptor?? [ 203.275184][ T4369] usb 4-1: can't set config #0, error -71 [ 203.322886][ T4369] usb 4-1: USB disconnect, device number 5 [ 206.609541][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 206.622600][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 206.630943][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 206.643725][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 206.652144][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 206.660547][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 206.669794][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 206.693534][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 206.694925][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 206.700012][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 206.705682][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 206.705710][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 209.213650][ T14] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 209.428258][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.058768][ T14] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.154942][ T4346] Process accounting resumed [ 211.123475][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 211.142229][ T14] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 211.151750][ T14] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 211.160063][ T14] usb 5-1: Product: syz [ 211.164381][ T14] usb 5-1: Manufacturer: syz [ 211.169027][ T14] usb 5-1: SerialNumber: syz [ 211.177776][ T14] usb 5-1: config 0 descriptor?? [ 211.212033][ T14] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 211.268223][ T5060] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 211.689297][ T5051] udevd[5051]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.780774][ T14] usb 5-1: USB disconnect, device number 4 [ 215.362244][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 215.375549][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 215.383789][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 215.391794][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 215.399889][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 215.408126][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 215.421150][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 219.542233][ T4289] Bluetooth: Wrong link type (-22) [ 219.833446][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 220.797564][ T14] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.813979][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.829471][ T14] usb 4-1: Product: syz [ 220.834876][ T14] usb 4-1: Manufacturer: syz [ 220.840216][ T14] usb 4-1: SerialNumber: syz [ 221.420530][ T14] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 222.576604][ T4369] usb 4-1: USB disconnect, device number 6 [ 222.621462][ T4402] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 222.629213][ T14] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 222.637804][ T14] ath9k_htc: Failed to initialize the device [ 222.652571][ T4369] usb 4-1: ath9k_htc: USB layer deinitialized [ 222.923999][ T4402] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.457781][ T5136] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 223.563894][ T5139] ================================================================== [ 223.572012][ T5139] BUG: KASAN: use-after-free in dvb_frontend_release+0x3f5/0x490 [ 223.579771][ T5139] Read of size 4 at addr ffff88802a89643c by task syz.4.171/5139 [ 223.587536][ T5139] [ 223.589935][ T5139] CPU: 1 PID: 5139 Comm: syz.4.171 Not tainted syzkaller #0 [ 223.597263][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.597271][ T4402] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.607335][ T5139] Call Trace: [ 223.607346][ T5139] [ 223.607355][ T5139] dump_stack_lvl+0x188/0x24e [ 223.607384][ T5139] ? __lock_acquire+0x7ea0/0x7ea0 [ 223.607414][ T5139] ? show_regs_print_info+0x12/0x12 [ 223.607439][ T5139] ? load_image+0x410/0x410 [ 223.607458][ T5139] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 223.607480][ T5139] ? __virt_addr_valid+0x188/0x540 [ 223.607509][ T5139] ? __virt_addr_valid+0x467/0x540 [ 223.607538][ T5139] ? dvb_frontend_release+0x3f5/0x490 [ 223.607564][ T5139] print_report+0xa8/0x210 [ 223.607584][ T5139] kasan_report+0x10b/0x140 [ 223.607629][ T5139] ? dvb_frontend_release+0x3f5/0x490 [ 223.607659][ T5139] dvb_frontend_release+0x3f5/0x490 [ 223.607685][ T5139] ? dvb_frontend_open+0x12d0/0x12d0 [ 223.607710][ T5139] __fput+0x20a/0x8b0 [ 223.607735][ T5139] task_work_run+0x1d0/0x260 [ 223.607763][ T5139] ? task_work_cancel+0x220/0x220 [ 223.607797][ T5139] ? __stack_depot_save+0x35/0x480 [ 223.607830][ T5139] get_signal+0x118d/0x1340 [ 223.607861][ T5139] ? __kasan_record_aux_stack+0xb2/0xc0 [ 223.607882][ T5139] ? task_work_add+0x7f/0x330 [ 223.607906][ T5139] ? fput+0xd9/0x1a0 [ 223.607926][ T5139] ? do_syscall_64+0x4c/0xa0 [ 223.607949][ T5139] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.607980][ T5139] arch_do_signal_or_restart+0xc4/0x1310 [ 223.608015][ T5139] ? get_sigframe_size+0x10/0x10 [ 223.608051][ T5139] ? exit_to_user_mode_loop+0x3b/0x110 [ 223.608083][ T5139] exit_to_user_mode_loop+0x70/0x110 [ 223.608112][ T5139] exit_to_user_mode_prepare+0xee/0x180 [ 223.768112][ T5139] syscall_exit_to_user_mode+0x16/0x40 [ 223.773654][ T5139] do_syscall_64+0x58/0xa0 [ 223.778133][ T5139] ? clear_bhb_loop+0x60/0xb0 [ 223.782869][ T5139] ? clear_bhb_loop+0x60/0xb0 [ 223.787606][ T5139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.793591][ T5139] RIP: 0033:0x7f51b419e559 [ 223.798055][ T5139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.817720][ T5139] RSP: 002b:00007f51b23d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.826201][ T5139] RAX: 0000000000000000 RBX: 00007f51b4426180 RCX: 00007f51b419e559 [ 223.834222][ T5139] RDX: 0000200000000700 RSI: 0000000080a86f3d RDI: 0000000000000003 [ 223.842240][ T5139] RBP: 00007f51b42358b0 R08: 0000000000000000 R09: 0000000000000000 [ 223.850267][ T5139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.858466][ T5139] R13: 00007f51b4426218 R14: 00007f51b4426180 R15: 00007fff51604f28 [ 223.866507][ T5139] [ 223.869568][ T5139] [ 223.871967][ T5139] Allocated by task 1: [ 223.876066][ T5139] kasan_set_track+0x4b/0x70 [ 223.880823][ T5139] __kasan_kmalloc+0x8e/0xa0 [ 223.885480][ T5139] dvb_register_device+0x305/0x1dc0 [ 223.891175][ T5139] dvb_register_frontend+0x629/0x900 [ 223.896518][ T5139] vidtv_bridge_probe+0x9cf/0xf50 [ 223.901575][ T5139] platform_probe+0x137/0x1c0 [ 223.906298][ T5139] really_probe+0x24a/0xb40 [ 223.910849][ T5139] __driver_probe_device+0x1f5/0x390 [ 223.916174][ T5139] driver_probe_device+0x4f/0x420 [ 223.921229][ T5139] __driver_attach+0x43d/0x6c0 [ 223.926023][ T5139] bus_for_each_dev+0x182/0x1f0 [ 223.930890][ T5139] bus_add_driver+0x324/0x5d0 [ 223.935586][ T5139] driver_register+0x32d/0x430 [ 223.940396][ T5139] vidtv_bridge_init+0x45/0x73 [ 223.945186][ T5139] do_one_initcall+0x257/0x800 [ 223.950000][ T5139] do_initcall_level+0x13d/0x1ed [ 223.954969][ T5139] do_initcalls+0x4b/0x8a [ 223.959341][ T5139] kernel_init_freeable+0x401/0x5ab [ 223.964570][ T5139] kernel_init+0x19/0x1b0 [ 223.968916][ T5139] ret_from_fork+0x1f/0x30 [ 223.973373][ T5139] [ 223.975731][ T5139] Freed by task 5139: [ 223.979727][ T5139] kasan_set_track+0x4b/0x70 [ 223.984347][ T5139] kasan_save_free_info+0x27/0x40 [ 223.989389][ T5139] ____kasan_slab_free+0x126/0x1f0 [ 223.994549][ T5139] slab_free_freelist_hook+0x133/0x1b0 [ 224.000035][ T5139] __kmem_cache_free+0xb6/0x200 [ 224.004905][ T5139] dvb_generic_release+0x11c/0x1b0 [ 224.010063][ T5139] dvb_frontend_release+0x131/0x490 [ 224.015297][ T5139] __fput+0x20a/0x8b0 [ 224.019317][ T5139] task_work_run+0x1d0/0x260 [ 224.023931][ T5139] get_signal+0x118d/0x1340 [ 224.028465][ T5139] arch_do_signal_or_restart+0xc4/0x1310 [ 224.034138][ T5139] exit_to_user_mode_loop+0x70/0x110 [ 224.039459][ T5139] exit_to_user_mode_prepare+0xee/0x180 [ 224.045053][ T5139] syscall_exit_to_user_mode+0x16/0x40 [ 224.050539][ T5139] do_syscall_64+0x58/0xa0 [ 224.054978][ T5139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.060896][ T5139] [ 224.063249][ T5139] The buggy address belongs to the object at ffff88802a896400 [ 224.063249][ T5139] which belongs to the cache kmalloc-256 of size 256 [ 224.077319][ T5139] The buggy address is located 60 bytes inside of [ 224.077319][ T5139] 256-byte region [ffff88802a896400, ffff88802a896500) [ 224.090523][ T5139] [ 224.092870][ T5139] The buggy address belongs to the physical page: [ 224.099329][ T5139] page:ffffea0000aa2580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a896 [ 224.109496][ T5139] head:ffffea0000aa2580 order:1 compound_mapcount:0 compound_pincount:0 [ 224.117842][ T5139] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 224.125920][ T5139] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888018441b40 [ 224.134518][ T5139] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 224.143117][ T5139] page dumped because: kasan: bad access detected [ 224.149563][ T5139] page_owner tracks the page as allocated [ 224.155320][ T5139] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18788449328, free_ts 0 [ 224.175074][ T5139] post_alloc_hook+0x173/0x1a0 [ 224.179869][ T5139] get_page_from_freelist+0x206b/0x2180 [ 224.185443][ T5139] __alloc_pages+0x1ec/0x4f0 [ 224.190060][ T5139] alloc_page_interleave+0x24/0x1e0 [ 224.195295][ T5139] alloc_slab_page+0x5d/0x180 [ 224.199993][ T5139] new_slab+0x87/0x2d0 [ 224.204082][ T5139] ___slab_alloc+0xbc5/0x1240 [ 224.208811][ T5139] __kmem_cache_alloc_node+0x126/0x270 [ 224.214305][ T5139] kmalloc_trace+0x26/0xe0 [ 224.218758][ T5139] bus_add_driver+0xdc/0x5d0 [ 224.223387][ T5139] driver_register+0x32d/0x430 [ 224.228223][ T5139] i2c_register_driver+0xb6/0x160 [ 224.233275][ T5139] do_one_initcall+0x257/0x800 [ 224.238060][ T5139] do_initcall_level+0x13d/0x1ed [ 224.243023][ T5139] do_initcalls+0x4b/0x8a [ 224.247382][ T5139] kernel_init_freeable+0x401/0x5ab [ 224.252617][ T5139] page_owner free stack trace missing [ 224.257996][ T5139] [ 224.260332][ T5139] Memory state around the buggy address: [ 224.265969][ T5139] ffff88802a896300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.274052][ T5139] ffff88802a896380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.282149][ T5139] >ffff88802a896400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.290225][ T5139] ^ [ 224.296164][ T5139] ffff88802a896480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.304289][ T5139] ffff88802a896500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.312396][ T5139] ================================================================== [ 224.357917][ T4402] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.376554][ T5139] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.383813][ T5139] CPU: 0 PID: 5139 Comm: syz.4.171 Not tainted syzkaller #0 [ 224.391146][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.401255][ T5139] Call Trace: [ 224.404577][ T5139] [ 224.407551][ T5139] dump_stack_lvl+0x188/0x24e [ 224.412276][ T5139] ? memcpy+0x3c/0x60 [ 224.416301][ T5139] ? show_regs_print_info+0x12/0x12 [ 224.421571][ T5139] ? load_image+0x410/0x410 [ 224.426119][ T5139] panic+0x2d3/0x710 [ 224.430082][ T5139] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 224.436289][ T5139] ? bpf_jit_dump+0xd0/0xd0 [ 224.440815][ T5139] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 224.446823][ T5139] ? _raw_spin_unlock+0x40/0x40 [ 224.451688][ T5139] check_panic_on_warn+0x80/0xa0 [ 224.456657][ T5139] ? dvb_frontend_release+0x3f5/0x490 [ 224.462068][ T5139] end_report+0x66/0x110 [ 224.466333][ T5139] kasan_report+0x118/0x140 [ 224.470859][ T5139] ? dvb_frontend_release+0x3f5/0x490 [ 224.476250][ T5139] dvb_frontend_release+0x3f5/0x490 [ 224.481476][ T5139] ? dvb_frontend_open+0x12d0/0x12d0 [ 224.486779][ T5139] __fput+0x20a/0x8b0 [ 224.490780][ T5139] task_work_run+0x1d0/0x260 [ 224.495388][ T5139] ? task_work_cancel+0x220/0x220 [ 224.500434][ T5139] ? __stack_depot_save+0x35/0x480 [ 224.505585][ T5139] get_signal+0x118d/0x1340 [ 224.510127][ T5139] ? __kasan_record_aux_stack+0xb2/0xc0 [ 224.515695][ T5139] ? task_work_add+0x7f/0x330 [ 224.520392][ T5139] ? fput+0xd9/0x1a0 [ 224.524309][ T5139] ? do_syscall_64+0x4c/0xa0 [ 224.528934][ T5139] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.535071][ T5139] arch_do_signal_or_restart+0xc4/0x1310 [ 224.540728][ T5139] ? get_sigframe_size+0x10/0x10 [ 224.545689][ T5139] ? exit_to_user_mode_loop+0x3b/0x110 [ 224.551165][ T5139] exit_to_user_mode_loop+0x70/0x110 [ 224.556476][ T5139] exit_to_user_mode_prepare+0xee/0x180 [ 224.562037][ T5139] syscall_exit_to_user_mode+0x16/0x40 [ 224.567532][ T5139] do_syscall_64+0x58/0xa0 [ 224.571966][ T5139] ? clear_bhb_loop+0x60/0xb0 [ 224.576657][ T5139] ? clear_bhb_loop+0x60/0xb0 [ 224.581364][ T5139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.587274][ T5139] RIP: 0033:0x7f51b419e559 [ 224.591712][ T5139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.611333][ T5139] RSP: 002b:00007f51b23d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.619778][ T5139] RAX: 0000000000000000 RBX: 00007f51b4426180 RCX: 00007f51b419e559 [ 224.627878][ T5139] RDX: 0000200000000700 RSI: 0000000080a86f3d RDI: 0000000000000003 [ 224.635868][ T5139] RBP: 00007f51b42358b0 R08: 0000000000000000 R09: 0000000000000000 [ 224.643853][ T5139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.651837][ T5139] R13: 00007f51b4426218 R14: 00007f51b4426180 R15: 00007fff51604f28 [ 224.659829][ T5139] [ 224.663472][ T5139] Kernel Offset: disabled [ 224.667825][ T5139] Rebooting in 86400 seconds..