last executing test programs: 19.613076645s ago: executing program 1 (id=11): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x3, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 18.354958514s ago: executing program 1 (id=12): connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, 0x0, 0x0) 14.427586667s ago: executing program 2 (id=24): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) io_setup(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 13.563921644s ago: executing program 3 (id=25): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$video4linux(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0xfffffdc9, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13.38842079s ago: executing program 2 (id=26): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x2a08200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x552355c2) ioprio_get$pid(0x2, r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="796100000000fedbdf377e0000000c0099000700000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket(0x2, 0x805, 0x0) 11.911133186s ago: executing program 0 (id=29): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x2a08200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x0) ptrace$pokeuser(0x6, r6, 0x388, 0x552355c2) ioprio_get$pid(0x2, r2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000fedbdf377e0000000c0099000700000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socket(0x2, 0x805, 0x0) 11.15613049s ago: executing program 0 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) 10.493249161s ago: executing program 1 (id=31): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x10, 0x8, 0x7fff, 0x409, 0x10, 0x5d, 0x8, 0x3f0870f6, 0x83, 0x1000, 0xe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x2843a3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) wait4(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) 9.982917357s ago: executing program 0 (id=32): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.793765463s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) pread64(r0, &(0x7f00000017c0)=""/4096, 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ptrace$pokeuser(0x6, 0x0, 0x38d, 0x583ed254) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={r5, 0x41, "fff901c01c9a2e4f12baace0e175661140e4634fef6c937a170cbcb947c26312b7006a901b49b46323bb801db900752fe67c0b95547a7eaf75ccac90921743664c"}, &(0x7f00000001c0)=0x49) 9.487251272s ago: executing program 3 (id=35): r0 = socket$inet6(0xa, 0x3, 0xff) dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) io_setup(0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.838049203s ago: executing program 0 (id=36): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) io_setup(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 8.793915914s ago: executing program 1 (id=37): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) 7.398813528s ago: executing program 4 (id=38): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x3, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 7.398042648s ago: executing program 0 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x2004000, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 7.217722703s ago: executing program 1 (id=40): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x2a08200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x0) ptrace$pokeuser(0x6, r6, 0x388, 0x552355c2) ioprio_get$pid(0x2, r2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x20, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000fedbdf377e0000000c0099000700000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) write$UHID_CREATE2(r0, 0x0, 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socket(0x2, 0x805, 0x0) 5.042420462s ago: executing program 1 (id=41): connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, 0x0, 0x0) 4.889707107s ago: executing program 4 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.626501205s ago: executing program 3 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) 3.761618752s ago: executing program 4 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 2.751545703s ago: executing program 3 (id=45): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$video4linux(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0xfffffdc9, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.689815106s ago: executing program 2 (id=46): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.468818792s ago: executing program 2 (id=47): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x10, 0x8, 0x7fff, 0x409, 0x10, 0x5d, 0x8, 0x3f0870f6, 0x83, 0x1000, 0xe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x2843a3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) wait4(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) 2.023696006s ago: executing program 4 (id=48): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x7fffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400cc04}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000000) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, "b8"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 1.60426725s ago: executing program 3 (id=49): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) io_setup(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 1.60143238s ago: executing program 2 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) pread64(r0, &(0x7f00000017c0)=""/4096, 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ptrace$pokeuser(0x6, 0x0, 0x38d, 0x583ed254) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={r5, 0x41, "fff901c01c9a2e4f12baace0e175661140e4634fef6c937a170cbcb947c26312b7006a901b49b46323bb801db900752fe67c0b95547a7eaf75ccac90921743664c"}, &(0x7f00000001c0)=0x49) 793.682115ms ago: executing program 4 (id=51): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x2a08200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x0) ptrace$pokeuser(0x6, r6, 0x388, 0x552355c2) ioprio_get$pid(0x2, r2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x20, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000fedbdf377e0000000c0099000700000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) write$UHID_CREATE2(r0, 0x0, 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socket(0x2, 0x805, 0x0) 16.06556ms ago: executing program 3 (id=52): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x3, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 15.30208ms ago: executing program 2 (id=53): r0 = socket$inet6(0xa, 0x3, 0xff) dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) io_setup(0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 4 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 65.373062][ T4177] cgroup: Unknown subsys name 'net' [ 65.510326][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.013056][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.387912][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.511939][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.520948][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.529771][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.544459][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.561682][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.577779][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.585960][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.593721][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.669189][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 68.681002][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.715198][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.724924][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.780578][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.787859][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.796217][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.810305][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.817703][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.826058][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.848607][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.855944][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.863972][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.880723][ T4189] team0: Port device team_slave_0 added [ 68.901943][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.916106][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.923294][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.931485][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.940606][ T4189] team0: Port device team_slave_1 added [ 68.948389][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.024545][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.031535][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.058011][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.072710][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.098012][ T4190] team0: Port device team_slave_0 added [ 69.105008][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.112012][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.138055][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.153767][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.163023][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.173996][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.181782][ T4197] device bridge_slave_0 entered promiscuous mode [ 69.189364][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.196520][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.204778][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.213029][ T4190] team0: Port device team_slave_1 added [ 69.241107][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.248445][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.256584][ T4197] device bridge_slave_1 entered promiscuous mode [ 69.263443][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.270813][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.279217][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.316147][ T4191] team0: Port device team_slave_0 added [ 69.342157][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.349256][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.379066][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.391859][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.402614][ T4191] team0: Port device team_slave_1 added [ 69.413531][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.420410][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.429071][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.439186][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.446326][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.472416][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.494490][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.518919][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.545562][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.552689][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.578920][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.614391][ T4192] team0: Port device team_slave_0 added [ 69.626251][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.633249][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.660150][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.681563][ T4197] team0: Port device team_slave_0 added [ 69.695697][ T4192] team0: Port device team_slave_1 added [ 69.718022][ T4197] team0: Port device team_slave_1 added [ 69.745717][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.752591][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.759381][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.767403][ T4190] Cannot create hsr debugfs directory [ 69.798552][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.805756][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.832592][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.851763][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.859061][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.885129][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.897042][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.904215][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.930194][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.970814][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.977891][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.004590][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.024506][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.031302][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.038035][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.045771][ T4191] Cannot create hsr debugfs directory [ 70.110966][ T4197] device hsr_slave_0 entered promiscuous mode [ 70.117786][ T4197] device hsr_slave_1 entered promiscuous mode [ 70.125257][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 70.131807][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.133468][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 70.145906][ T4197] Cannot create hsr debugfs directory [ 70.156353][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.163007][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.169727][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.177449][ T4192] Cannot create hsr debugfs directory [ 70.204414][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 70.205018][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 70.210755][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 70.471276][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.486985][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.496894][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.506970][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.556657][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.573421][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.590211][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.600938][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.633274][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.642288][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.656597][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.685123][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.769899][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.792701][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.801701][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.841775][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.853453][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.877663][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.895518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.907188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.929236][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.939869][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.951974][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.960531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.969103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.981245][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.991016][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.002938][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.020202][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.035151][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.048670][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.056665][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.066294][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.076879][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.086558][ T496] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.093823][ T496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.105537][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.113510][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.122553][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.131601][ T496] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.138730][ T496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.151326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.160558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.169582][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.176725][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.187517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.211707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.225978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.236418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.247537][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.251110][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.254654][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.261115][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.280149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.289463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.298168][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.305304][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.328402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.336896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.347723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.357911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.367904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.377892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.386904][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.394011][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.402379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.449438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.461586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.470736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.479734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.489745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.499234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.508797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.518487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.527863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.536734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.545700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.554610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.588745][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.600733][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.612986][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.623708][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.636652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.645043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.653137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.662309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.671691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.680421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.690099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.699523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.708093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.717644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.727612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.752294][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.788609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.800331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.812123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.820867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.836049][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.856632][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.878779][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.892359][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.905633][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.921379][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.936797][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.946761][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.989033][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.001542][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.012197][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.026327][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.040153][ T247] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.047384][ T247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.081025][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.101779][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.116840][ T247] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.124161][ T247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.140428][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.171163][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.179986][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.196074][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.204681][ T4194] Bluetooth: hci1: command 0x041b tx timeout [ 72.210734][ T4194] Bluetooth: hci2: command 0x041b tx timeout [ 72.225575][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.233105][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.241667][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.251254][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.260655][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.284236][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 72.285224][ T4194] Bluetooth: hci4: command 0x041b tx timeout [ 72.301761][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.313463][ T4194] Bluetooth: hci3: command 0x041b tx timeout [ 72.323804][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.338755][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.354659][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.363498][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.372544][ T247] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.379705][ T247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.389247][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.398780][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.407734][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.417339][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.426452][ T247] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.433581][ T247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.441674][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.450760][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.459798][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.469514][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.478196][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.486351][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.493847][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.502405][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.525659][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.555002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.569054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.580197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.595296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.619327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.629445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.646206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.673552][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.686026][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.700299][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.709469][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.719767][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.729553][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.739576][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.748852][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.758759][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.769729][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.826952][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.855102][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.884169][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.899139][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.948556][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.956913][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.976033][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.991440][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.003632][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.023207][ T4190] device veth0_vlan entered promiscuous mode [ 73.036854][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.062256][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.071598][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.080803][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.107021][ T4197] device veth0_vlan entered promiscuous mode [ 73.116831][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.127859][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.143266][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.155517][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.172343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.181620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.193299][ T4190] device veth1_vlan entered promiscuous mode [ 73.209224][ T4197] device veth1_vlan entered promiscuous mode [ 73.242089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.250805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.260868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.271499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.280386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.288700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.296832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.306451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.327821][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.337742][ T4191] device veth0_vlan entered promiscuous mode [ 73.351476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.360201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.380338][ T4191] device veth1_vlan entered promiscuous mode [ 73.400673][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.409769][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.425756][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.435326][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.444494][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.453022][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.463093][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.484858][ T4190] device veth0_macvtap entered promiscuous mode [ 73.508569][ T4190] device veth1_macvtap entered promiscuous mode [ 73.521523][ T4197] device veth0_macvtap entered promiscuous mode [ 73.529075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.538654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.547367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.555762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.564768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.573327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.582043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.590864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.600377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.609130][ T4189] device veth0_vlan entered promiscuous mode [ 73.641774][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.652981][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.664945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.672723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.681428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.692514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.701668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.712329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.721349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.730762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.739684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.751234][ T4192] device veth0_vlan entered promiscuous mode [ 73.762373][ T4191] device veth0_macvtap entered promiscuous mode [ 73.775744][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.786813][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.796156][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.805379][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.818733][ T4197] device veth1_macvtap entered promiscuous mode [ 73.829414][ T4189] device veth1_vlan entered promiscuous mode [ 73.842584][ T4191] device veth1_macvtap entered promiscuous mode [ 73.860652][ T4192] device veth1_vlan entered promiscuous mode [ 73.911357][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.923600][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.937364][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.957011][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.969136][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.980773][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.991643][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.005328][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.016796][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.029625][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.038487][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.049187][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.058339][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.067493][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.077287][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.090206][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.100833][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.112204][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.121843][ T4189] device veth0_macvtap entered promiscuous mode [ 74.135949][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.145535][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.155832][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.166400][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.179740][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.191161][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.201291][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.212845][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.224150][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.239770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.249705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.258517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.268491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.277769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.286201][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 74.292378][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 74.307889][ T4189] device veth1_macvtap entered promiscuous mode [ 74.329055][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.339666][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.349210][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.358167][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.366217][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 74.374239][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 74.385548][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 74.405579][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.413580][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.437256][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.451948][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.460736][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.469674][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.501680][ T4192] device veth0_macvtap entered promiscuous mode [ 74.550164][ T4192] device veth1_macvtap entered promiscuous mode [ 74.559464][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.570337][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.581522][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.592029][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.601898][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.614077][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.625535][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.648109][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.656770][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.667690][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.676814][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.689694][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.697990][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.714411][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.731516][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.741796][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.752873][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.762870][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.774170][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.785668][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.806683][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.816150][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.826438][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.841686][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.854305][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.864792][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.875576][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.885874][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.896885][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.907303][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.917986][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.931653][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.945436][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.956497][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.966672][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.979204][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.989110][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.999869][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.010250][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.020860][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.032923][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.063710][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.081498][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.093647][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.112208][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.124861][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.134469][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143280][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.152332][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.173644][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.178715][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.191922][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.202027][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.211408][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.220337][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.234990][ T496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.242861][ T496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.302808][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.317973][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.500002][ T496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.508970][ T496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.543474][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.572664][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.598153][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.630436][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.653321][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.678217][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.707635][ T247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.719561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.726296][ T247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.741693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.794802][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.802670][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.828714][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.853367][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.884799][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.892396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.953055][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 76.213893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.233909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.243899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.263899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.273897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.284285][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.293894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.303891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.313901][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.323893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.408164][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 76.426985][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 76.477899][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 76.485385][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 76.494849][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 76.971931][ T4194] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.003195][ T4194] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.657190][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.936701][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.334798][ T4305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.810978][ T4235] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.830287][ T4235] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 83.273888][ C0] sched: RT throttling activated [ 83.589721][ T4370] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 86.585276][ T4238] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.608601][ T7] cfg80211: failed to load regulatory.db [ 86.664076][ T4238] hid-generic 0000:0000:0000.0003: hidraw2: HID v0.00 Device [syz1] on syz0 [ 87.951081][ T4238] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 88.900358][ T4238] hid-generic 0000:0000:0000.0004: hidraw3: HID v0.00 Device [syz1] on syz0 [ 91.003135][ T4432] fido_id[4432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.946931][ T4440] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 92.608547][ T4444] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 92.617840][ T4444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 92.627529][ T4444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.664206][ T4444] syz.1.40 (4444) used greatest stack depth: 20664 bytes left [ 92.671856][ T26] audit: type=1800 audit(1781559782.259:2): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 92.852036][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.140165][ T4450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.674476][ T4493] syz.4.51 (4493) used greatest stack depth: 17080 bytes left [ 98.000689][ T4505] ================================================================== [ 98.009036][ T4505] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 98.016294][ T4505] Read of size 8 at addr ffff88814c513a18 by task syz.3.52/4505 [ 98.023958][ T4505] [ 98.026342][ T4505] CPU: 0 PID: 4505 Comm: syz.3.52 Not tainted syzkaller #0 [ 98.033555][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.043727][ T4505] Call Trace: [ 98.047053][ T4505] [ 98.050004][ T4505] dump_stack_lvl+0x188/0x250 [ 98.054718][ T4505] ? show_regs_print_info+0x20/0x20 [ 98.059936][ T4505] ? _printk+0xda/0x130 [ 98.064132][ T4505] ? dvb_device_open+0xc6/0x370 [ 98.069010][ T4505] ? load_image+0x400/0x400 [ 98.073554][ T4505] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 98.079053][ T4505] print_address_description+0x60/0x2d0 [ 98.084631][ T4505] ? dvb_device_open+0xc6/0x370 [ 98.089501][ T4505] kasan_report+0xdf/0x130 [ 98.093937][ T4505] ? dvb_device_open+0xc6/0x370 [ 98.098815][ T4505] dvb_device_open+0xc6/0x370 [ 98.103522][ T4505] ? do_raw_spin_unlock+0x11d/0x230 [ 98.108759][ T4505] chrdev_open+0x5c5/0x6a0 [ 98.113209][ T4505] ? cd_forget+0x160/0x160 [ 98.117662][ T4505] ? fsnotify_perm+0x3a7/0x560 [ 98.122483][ T4505] ? cd_forget+0x160/0x160 [ 98.127114][ T4505] do_dentry_open+0x7ff/0xf80 [ 98.131850][ T4505] path_openat+0x26f5/0x2fa0 [ 98.136492][ T4505] ? verify_lock_unused+0x140/0x140 [ 98.141724][ T4505] ? slab_post_alloc_hook+0x4c/0x380 [ 98.147034][ T4505] ? do_filp_open+0x410/0x410 [ 98.151755][ T4505] do_filp_open+0x1e2/0x410 [ 98.156295][ T4505] ? vfs_tmpfile+0x300/0x300 [ 98.160944][ T4505] ? _raw_spin_unlock+0x24/0x40 [ 98.165822][ T4505] ? alloc_fd+0x598/0x630 [ 98.170191][ T4505] do_sys_openat2+0x150/0x4b0 [ 98.174884][ T4505] ? __lock_acquire+0x7d10/0x7d10 [ 98.179938][ T4505] ? do_sys_open+0xe0/0xe0 [ 98.184464][ T4505] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 98.190472][ T4505] ? lock_chain_count+0x20/0x20 [ 98.195348][ T4505] ? vtime_user_exit+0x2c8/0x3e0 [ 98.200332][ T4505] __x64_sys_openat+0x135/0x160 [ 98.205239][ T4505] do_syscall_64+0x4c/0xa0 [ 98.209683][ T4505] ? clear_bhb_loop+0x30/0x80 [ 98.214381][ T4505] ? clear_bhb_loop+0x30/0x80 [ 98.219082][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.225021][ T4505] RIP: 0033:0x7fb9b97b368e [ 98.229488][ T4505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.249114][ T4505] RSP: 002b:00007fb9b7a2ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.257558][ T4505] RAX: ffffffffffffffda RBX: 00007fb9b7a2b6c0 RCX: 00007fb9b97b368e [ 98.265556][ T4505] RDX: 0000000000000002 RSI: 00007fb9b7a2ac00 RDI: ffffffffffffff9c [ 98.273556][ T4505] RBP: 00007fb9b7a2ac00 R08: 0000000000000000 R09: 0000000000000000 [ 98.281571][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 98.289561][ T4505] R13: 00007fb9b9a6c128 R14: 00007fb9b9a6c090 R15: 00007ffc07630798 [ 98.297750][ T4505] [ 98.300788][ T4505] [ 98.303128][ T4505] Allocated by task 1: [ 98.307321][ T4505] __kasan_kmalloc+0xb5/0xf0 [ 98.311940][ T4505] dvb_register_device+0x311/0x2170 [ 98.317183][ T4505] dvb_register_frontend+0x645/0x920 [ 98.322495][ T4505] vidtv_bridge_probe+0x9a1/0xf70 [ 98.327558][ T4505] platform_probe+0x137/0x1c0 [ 98.332258][ T4505] really_probe+0x284/0xc80 [ 98.336775][ T4505] __driver_probe_device+0x1ef/0x390 [ 98.342101][ T4505] driver_probe_device+0x4f/0x420 [ 98.347142][ T4505] __driver_attach+0x46b/0x670 [ 98.351921][ T4505] bus_for_each_dev+0x182/0x1f0 [ 98.356796][ T4505] bus_add_driver+0x30a/0x5a0 [ 98.361517][ T4505] driver_register+0x32d/0x430 [ 98.366317][ T4505] vidtv_bridge_init+0x39/0x70 [ 98.371126][ T4505] do_one_initcall+0x272/0x730 [ 98.375926][ T4505] do_initcall_level+0x137/0x1f0 [ 98.380897][ T4505] do_initcalls+0x4b/0x90 [ 98.385262][ T4505] kernel_init_freeable+0x3e9/0x570 [ 98.390488][ T4505] kernel_init+0x19/0x1b0 [ 98.394842][ T4505] ret_from_fork+0x1f/0x30 [ 98.399287][ T4505] [ 98.401627][ T4505] Freed by task 4440: [ 98.405626][ T4505] kasan_set_track+0x4b/0x70 [ 98.410247][ T4505] kasan_set_free_info+0x1f/0x40 [ 98.415217][ T4505] ____kasan_slab_free+0xd5/0x110 [ 98.420357][ T4505] slab_free_freelist_hook+0xea/0x170 [ 98.425756][ T4505] kfree+0xef/0x2a0 [ 98.429590][ T4505] dvb_device_open+0x2e7/0x370 [ 98.434382][ T4505] chrdev_open+0x5c5/0x6a0 [ 98.438824][ T4505] do_dentry_open+0x7ff/0xf80 [ 98.443532][ T4505] path_openat+0x26f5/0x2fa0 [ 98.448157][ T4505] do_filp_open+0x1e2/0x410 [ 98.452687][ T4505] do_sys_openat2+0x150/0x4b0 [ 98.457383][ T4505] __x64_sys_openat+0x135/0x160 [ 98.462256][ T4505] do_syscall_64+0x4c/0xa0 [ 98.466695][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.472620][ T4505] [ 98.474965][ T4505] The buggy address belongs to the object at ffff88814c513a00 [ 98.474965][ T4505] which belongs to the cache kmalloc-256 of size 256 [ 98.489082][ T4505] The buggy address is located 24 bytes inside of [ 98.489082][ T4505] 256-byte region [ffff88814c513a00, ffff88814c513b00) [ 98.502298][ T4505] The buggy address belongs to the page: [ 98.508008][ T4505] page:ffffea0005314480 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814c513800 pfn:0x14c512 [ 98.519584][ T4505] head:ffffea0005314480 order:1 compound_mapcount:0 [ 98.526206][ T4505] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 98.534319][ T4505] raw: 057ff00000010200 ffffea00052c4108 ffff888140000708 ffff888016c41b40 [ 98.542928][ T4505] raw: ffff88814c513800 0000000000100003 00000001ffffffff 0000000000000000 [ 98.551542][ T4505] page dumped because: kasan: bad access detected [ 98.557973][ T4505] page_owner tracks the page as allocated [ 98.563704][ T4505] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 21150419662, free_ts 0 [ 98.581693][ T4505] get_page_from_freelist+0x1bbd/0x1ca0 [ 98.587272][ T4505] __alloc_pages+0x1ee/0x480 [ 98.591915][ T4505] alloc_page_interleave+0x24/0x1e0 [ 98.597133][ T4505] new_slab+0xc0/0x4b0 [ 98.601221][ T4505] ___slab_alloc+0x80a/0xdd0 [ 98.605829][ T4505] __kmalloc_node+0x200/0x3b0 [ 98.610534][ T4505] kvmalloc_node+0x84/0x130 [ 98.615066][ T4505] v4l2_ctrl_new+0x70f/0x1310 [ 98.619771][ T4505] v4l2_ctrl_new_custom+0x54d/0x7b0 [ 98.624997][ T4505] vivid_create_controls+0x2211/0x3460 [ 98.630495][ T4505] vivid_probe+0x3c47/0x67a0 [ 98.635131][ T4505] platform_probe+0x137/0x1c0 [ 98.639844][ T4505] really_probe+0x284/0xc80 [ 98.644368][ T4505] __driver_probe_device+0x1ef/0x390 [ 98.649686][ T4505] driver_probe_device+0x4f/0x420 [ 98.654737][ T4505] __driver_attach+0x46b/0x670 [ 98.659529][ T4505] page_owner free stack trace missing [ 98.664915][ T4505] [ 98.667256][ T4505] Memory state around the buggy address: [ 98.672902][ T4505] ffff88814c513900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.680985][ T4505] ffff88814c513980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.689074][ T4505] >ffff88814c513a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.697178][ T4505] ^ [ 98.702049][ T4505] ffff88814c513a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.710152][ T4505] ffff88814c513b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.718235][ T4505] ================================================================== [ 98.726318][ T4505] Disabling lock debugging due to kernel taint [ 98.823076][ T4505] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.830413][ T4505] CPU: 0 PID: 4505 Comm: syz.3.52 Tainted: G B syzkaller #0 [ 98.839029][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.849108][ T4505] Call Trace: [ 98.852404][ T4505] [ 98.855353][ T4505] dump_stack_lvl+0x188/0x250 [ 98.860060][ T4505] ? show_regs_print_info+0x20/0x20 [ 98.865287][ T4505] ? load_image+0x400/0x400 [ 98.869822][ T4505] panic+0x2e5/0x810 [ 98.873752][ T4505] ? bpf_jit_dump+0xd0/0xd0 [ 98.878289][ T4505] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 98.883982][ T4505] ? check_panic_on_warn+0x6c/0xa0 [ 98.889112][ T4505] ? dvb_device_open+0xc6/0x370 [ 98.893984][ T4505] check_panic_on_warn+0x80/0xa0 [ 98.898948][ T4505] ? dvb_device_open+0xc6/0x370 [ 98.903823][ T4505] end_report+0x6d/0xf0 [ 98.908002][ T4505] kasan_report+0x102/0x130 [ 98.912532][ T4505] ? dvb_device_open+0xc6/0x370 [ 98.917415][ T4505] dvb_device_open+0xc6/0x370 [ 98.922121][ T4505] ? do_raw_spin_unlock+0x11d/0x230 [ 98.927441][ T4505] chrdev_open+0x5c5/0x6a0 [ 98.931882][ T4505] ? cd_forget+0x160/0x160 [ 98.936331][ T4505] ? fsnotify_perm+0x3a7/0x560 [ 98.941120][ T4505] ? cd_forget+0x160/0x160 [ 98.945562][ T4505] do_dentry_open+0x7ff/0xf80 [ 98.950275][ T4505] path_openat+0x26f5/0x2fa0 [ 98.954893][ T4505] ? verify_lock_unused+0x140/0x140 [ 98.960119][ T4505] ? slab_post_alloc_hook+0x4c/0x380 [ 98.965428][ T4505] ? do_filp_open+0x410/0x410 [ 98.970171][ T4505] do_filp_open+0x1e2/0x410 [ 98.974698][ T4505] ? vfs_tmpfile+0x300/0x300 [ 98.979329][ T4505] ? _raw_spin_unlock+0x24/0x40 [ 98.984213][ T4505] ? alloc_fd+0x598/0x630 [ 98.988575][ T4505] do_sys_openat2+0x150/0x4b0 [ 98.993308][ T4505] ? __lock_acquire+0x7d10/0x7d10 [ 98.998450][ T4505] ? do_sys_open+0xe0/0xe0 [ 99.002894][ T4505] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 99.008900][ T4505] ? lock_chain_count+0x20/0x20 [ 99.013779][ T4505] ? vtime_user_exit+0x2c8/0x3e0 [ 99.018750][ T4505] __x64_sys_openat+0x135/0x160 [ 99.023625][ T4505] do_syscall_64+0x4c/0xa0 [ 99.028067][ T4505] ? clear_bhb_loop+0x30/0x80 [ 99.032771][ T4505] ? clear_bhb_loop+0x30/0x80 [ 99.037476][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.043391][ T4505] RIP: 0033:0x7fb9b97b368e [ 99.047829][ T4505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.067457][ T4505] RSP: 002b:00007fb9b7a2ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.075893][ T4505] RAX: ffffffffffffffda RBX: 00007fb9b7a2b6c0 RCX: 00007fb9b97b368e [ 99.083888][ T4505] RDX: 0000000000000002 RSI: 00007fb9b7a2ac00 RDI: ffffffffffffff9c [ 99.091872][ T4505] RBP: 00007fb9b7a2ac00 R08: 0000000000000000 R09: 0000000000000000 [ 99.099852][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 99.107949][ T4505] R13: 00007fb9b9a6c128 R14: 00007fb9b9a6c090 R15: 00007ffc07630798 [ 99.116040][ T4505] [ 99.119331][ T4505] Kernel Offset: disabled [ 99.123680][ T4505] Rebooting in 86400 seconds..