last executing test programs: 13.968822078s ago: executing program 0 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xffffffff80000002, 0x12) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.787972116s ago: executing program 1 (id=170): socket$nl_rdma(0x10, 0x3, 0x14) getpid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e0000300000100"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.078797812s ago: executing program 3 (id=171): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) poll(&(0x7f0000000140)=[{r4, 0x44}], 0x1, 0xe6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 10.329146959s ago: executing program 1 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000400"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x7, 0x1, r0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 9.128136816s ago: executing program 1 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/131, 0x83}], 0x1, 0x98ca, 0x108000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f00000003c0)) 8.49321964s ago: executing program 2 (id=175): getpid() socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x23, 0x5, 0x0) epoll_create1(0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 7.58757999s ago: executing program 2 (id=176): syz_emit_ethernet(0x4a, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x6, 0x34, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x6, 0x2}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)}], 0x2}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.539366971s ago: executing program 3 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="fd", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r4, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r5, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r5, &(0x7f00000006c0), 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) 7.521111392s ago: executing program 4 (id=178): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x800448d5, 0x0) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) 6.532210704s ago: executing program 4 (id=179): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xae642, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000003200)=[{&(0x7f0000003240)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f) 6.24241662s ago: executing program 4 (id=180): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) times(0xfffffffffffffffe) 6.056064995s ago: executing program 0 (id=181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\a'], 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000280), &(0x7f0000000440)=0x30) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x24004c41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001800000008000a"], 0x24}}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x100, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x480}, 0x0) 5.129640225s ago: executing program 0 (id=182): socket$nl_rdma(0x10, 0x3, 0x14) getpid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e0000300000100"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.876895801s ago: executing program 2 (id=183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.751814524s ago: executing program 0 (id=184): getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x600, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) tgkill(0x0, 0x0, 0x11) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1) 4.668682155s ago: executing program 3 (id=185): syz_emit_ethernet(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x44000172) socket$nl_audit(0x10, 0x3, 0x9) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='coda\x00', 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) syz_open_dev$vim2m(0x0, 0xa, 0x2) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x38, r3, 0x1, 0xfffffffd, 0xfffffffd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r7) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r9, 0xeb923771a6a8c729, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x200840c4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) lseek(r0, 0x0, 0x4) 4.47608009s ago: executing program 2 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x4, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x44800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a300000000008000540000000010900020073797a310000000000000c4000000004aeffffff0c0a010100000000000000000a0000060900020073797a310000000009000100737d7a310000000014000380100000800c00018002000100d1000000140000001100010000000000000000000100000a"], 0xa4}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000000)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 3.466900622s ago: executing program 1 (id=187): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) dup3(r1, r0, 0x80000) 3.442892322s ago: executing program 3 (id=188): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) 3.204076678s ago: executing program 1 (id=189): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x28) 3.1161588s ago: executing program 4 (id=190): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x4, 0x6, &(0x7f0000000700)={0x1d, "fd5844512b7e1b0020ed2abb4301002700"}}) 2.185993891s ago: executing program 1 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000040)}, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xffffffff80000002, 0x12) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.993180325s ago: executing program 4 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\a'], 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000280), &(0x7f0000000440)=0x30) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x24004c41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001800000008000a"], 0x24}}, 0x1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x100, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x480}, 0x0) 1.754853931s ago: executing program 3 (id=193): syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x6, 0x3c, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0xf, 0x2, [{0x0, 0x6, "00479c0f"}, {0x7, 0x3, "91"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)}], 0x2}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 960.032758ms ago: executing program 4 (id=194): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r4, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@broadcast, @random="1704b45adbde", @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x402}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x3, 0x24, 0x67, 0x0, 0x86, 0x21, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, "192436", 0xc, "5c12c4"}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 930.239709ms ago: executing program 0 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet(0x2, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r5], 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) 162.024516ms ago: executing program 2 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a000100000000040000000081008000000000eaffffff00140002"], 0x30}}, 0x0) 49.407809ms ago: executing program 3 (id=197): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/131, 0x83}], 0x1, 0x98ca, 0x108000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f00000003c0)) 304.96µs ago: executing program 0 (id=198): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) pwrite64(r0, &(0x7f0000000040)="46f4b58982ede3e19e", 0x9, 0x4) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) 0s ago: executing program 2 (id=199): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 65.064106][ T4174] cgroup: Unknown subsys name 'net' [ 65.168132][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.648750][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.029760][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.176446][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.207978][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.216187][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.225084][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.250241][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.257639][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.266349][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.274201][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.331664][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 68.343725][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.385624][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.442914][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.450193][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.458679][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.482071][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.489391][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.497839][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.526630][ T4186] team0: Port device team_slave_0 added [ 68.540711][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.547981][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.556935][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.571555][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.578792][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.587207][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.594234][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.605907][ T4186] team0: Port device team_slave_1 added [ 68.616954][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.624111][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.632617][ T4197] device bridge_slave_0 entered promiscuous mode [ 68.642096][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.660417][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.688801][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.696178][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.704380][ T4197] device bridge_slave_1 entered promiscuous mode [ 68.744327][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.770949][ T4187] team0: Port device team_slave_0 added [ 68.783261][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.790573][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.817008][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.830773][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.841727][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.852452][ T4187] team0: Port device team_slave_1 added [ 68.863567][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.870974][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.897371][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.927854][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.953316][ T4188] team0: Port device team_slave_0 added [ 69.004863][ T4188] team0: Port device team_slave_1 added [ 69.011127][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.018384][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.044751][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.066226][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.073214][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.099455][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.111343][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.119641][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.127985][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.141266][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.149065][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.164858][ T4197] team0: Port device team_slave_0 added [ 69.182926][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.190145][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.199450][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.208629][ T4197] team0: Port device team_slave_1 added [ 69.221348][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.228856][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.255381][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.268398][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.276052][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.302276][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.383176][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.396462][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.406727][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.413817][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.441128][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.465241][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.472532][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.479411][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.487684][ T4187] Cannot create hsr debugfs directory [ 69.506732][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.513726][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.540797][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.568650][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.575762][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.582755][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.593885][ T4188] Cannot create hsr debugfs directory [ 69.613834][ T4191] team0: Port device team_slave_0 added [ 69.623897][ T4191] team0: Port device team_slave_1 added [ 69.692014][ T4197] device hsr_slave_0 entered promiscuous mode [ 69.699524][ T4197] device hsr_slave_1 entered promiscuous mode [ 69.706444][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.714043][ T4197] Cannot create hsr debugfs directory [ 69.755141][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.762125][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.788522][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.833353][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.842077][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 69.845603][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 69.850236][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 69.856111][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 69.864162][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.874978][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 69.903378][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.068198][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.075709][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.082816][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.090815][ T4191] Cannot create hsr debugfs directory [ 70.214744][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.237353][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.248053][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.262830][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.305692][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.318644][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.343408][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.372860][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.396376][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.423606][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.435517][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.453612][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.462064][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.483686][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.496661][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.509954][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.518826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.528394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.537777][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.545196][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.553816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.595738][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.608063][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.616962][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.624068][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.650132][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.663931][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.674147][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.710564][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.722223][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.734268][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.746653][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.756118][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.774231][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.785338][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.814828][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.828013][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.838153][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.847504][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.857731][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.867417][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.876141][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.889772][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.904916][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.934898][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.955398][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.985807][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.015966][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.040763][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.058733][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.070352][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.087580][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.122168][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.134012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.143262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.172845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.182524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.191535][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.198791][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.208397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.223489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.232473][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.239801][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.249761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.259022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.267777][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.274942][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.283022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.292565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.301537][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.308670][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.323519][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.332340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.341402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.350085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.361124][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.367563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.376356][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.412166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.421914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.433556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.470302][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.482303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.493335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.503490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.514153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.524419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.533736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.542535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.552079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.561591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.571052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.581220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.609835][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.621781][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.634832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.643496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.652830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.662051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.674028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.684706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.694014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.704168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.713544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.722979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.732078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.740725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.761610][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.782469][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.828559][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.846119][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.862389][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.872098][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.889056][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.896328][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.908105][ T4186] device veth0_vlan entered promiscuous mode [ 71.914787][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 71.926275][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.926821][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 71.938786][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.949166][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.957067][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 71.963242][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 71.969850][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.990103][ T4186] device veth1_vlan entered promiscuous mode [ 72.002330][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.010394][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 72.036817][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.049834][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.064380][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.071563][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.093156][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.135326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.143297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.153526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.174245][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.212126][ T4186] device veth0_macvtap entered promiscuous mode [ 72.220546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.229023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.246614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.262355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.271550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.284917][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.292120][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.301467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.310749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.320144][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.327288][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.336588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.345623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.354451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.363932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.373859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.405837][ T4186] device veth1_macvtap entered promiscuous mode [ 72.422571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.434253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.445620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.454165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.463238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.473287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.483191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.493210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.507357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.516157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.527569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.538427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.578997][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.589487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.602286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.611399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.619329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.627464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.637460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.646391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.655571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.664317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.674038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.690385][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.702676][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.718187][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.731202][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.740342][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.753937][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.763063][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.772436][ T4187] device veth0_vlan entered promiscuous mode [ 72.789429][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.809576][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.821628][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.831258][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.842652][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.852989][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.861971][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.877834][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.893360][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.903797][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.919314][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.929096][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.958392][ T4187] device veth1_vlan entered promiscuous mode [ 72.977541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.992063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.014754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.107144][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.126706][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.137114][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.146021][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.154052][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.165271][ T4188] device veth0_vlan entered promiscuous mode [ 73.193110][ T4188] device veth1_vlan entered promiscuous mode [ 73.215177][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.222743][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.236452][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.290568][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.303517][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.314526][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.323443][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.352127][ T4187] device veth0_macvtap entered promiscuous mode [ 73.377385][ T4187] device veth1_macvtap entered promiscuous mode [ 73.393945][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.457006][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.476125][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.485843][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.494795][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.511179][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.523155][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.536096][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.555432][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.563685][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.601087][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.609328][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.610928][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.626189][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.635410][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.652878][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.663117][ T4188] device veth0_macvtap entered promiscuous mode [ 73.683421][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.696853][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.709449][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.740641][ T4188] device veth1_macvtap entered promiscuous mode [ 73.756905][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.772026][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.781903][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.797532][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.810780][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.820364][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.833371][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.843567][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.853646][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.863261][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.904025][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.913724][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.924326][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.934372][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.944243][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.953446][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.991011][ T4191] device veth0_vlan entered promiscuous mode [ 73.997520][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 74.003691][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 74.016900][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.033336][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 74.035447][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.049989][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.060897][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.072606][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.081793][ T4267] loop3: detected capacity change from 0 to 256 [ 74.087009][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.092159][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 74.098301][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.109370][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 74.113191][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.123489][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.138268][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.148004][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.165949][ T4267] ======================================================= [ 74.165949][ T4267] WARNING: The mand mount option has been deprecated and [ 74.165949][ T4267] and is ignored by this kernel. Remove the mand [ 74.165949][ T4267] option from the mount to silence this warning. [ 74.165949][ T4267] ======================================================= [ 74.178277][ T4197] device veth0_vlan entered promiscuous mode [ 74.222902][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.239250][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.252096][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.263793][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.282892][ T4267] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.291876][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.308149][ T4191] device veth1_vlan entered promiscuous mode [ 74.358048][ T4197] device veth1_vlan entered promiscuous mode [ 74.434042][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.450050][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.463975][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.477956][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.499101][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.511829][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.966293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.003787][ T4191] device veth0_macvtap entered promiscuous mode [ 75.040907][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.052178][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.070377][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.086952][ T4197] device veth0_macvtap entered promiscuous mode [ 75.110837][ T4191] device veth1_macvtap entered promiscuous mode [ 75.169382][ T4197] device veth1_macvtap entered promiscuous mode [ 75.197984][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.215473][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.224014][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.255114][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.299037][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.325722][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.337169][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.349545][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.361031][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.371346][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.382216][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.394059][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.418433][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.451681][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.482296][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.498287][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.511393][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.522844][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.533947][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.550178][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.561139][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.576886][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.590711][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.608450][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.627084][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.646462][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.666365][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.684176][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.696676][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.713236][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.723521][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.740267][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.753691][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.807727][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.818652][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.828127][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.839734][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.849103][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.954303][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.996955][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.052484][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.078335][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 76.115583][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.518111][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 76.524219][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 76.530943][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 76.538014][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 76.555438][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.585138][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.595125][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.605732][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.615953][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.629309][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.639940][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.650980][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.662867][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.673497][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.692712][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708198][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.718144][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.731771][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.750035][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.870550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.887721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.897714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.910731][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.949942][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.982774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.043651][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.080784][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.091634][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.091845][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.160137][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.209841][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.257915][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.278272][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.280973][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.305094][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.360802][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.379471][ T4288] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.443010][ T4291] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 77.451702][ T4291] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.624332][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.643878][ T4279] ALSA: mixer_oss: invalid OSS volume 'u' [ 77.907122][ T4299] futex_wake_op: syz.0.1 tries to shift op by 144; fix this program [ 79.036643][ T4302] Zero length message leads to an empty skb [ 80.053946][ T4313] loop1: detected capacity change from 0 to 256 [ 80.197679][ T4313] FAT-fs (loop1): Directory bread(block 64) failed [ 80.221032][ T4322] ip6t_srh: unknown srh match flags FF3F [ 80.232413][ T4313] FAT-fs (loop1): Directory bread(block 65) failed [ 80.254335][ T4313] FAT-fs (loop1): Directory bread(block 66) failed [ 80.360000][ T4313] FAT-fs (loop1): Directory bread(block 67) failed [ 80.527423][ T4313] FAT-fs (loop1): Directory bread(block 68) failed [ 80.647918][ T4313] FAT-fs (loop1): Directory bread(block 69) failed [ 80.769454][ T4313] FAT-fs (loop1): Directory bread(block 70) failed [ 80.887626][ T4313] FAT-fs (loop1): Directory bread(block 71) failed [ 81.011325][ T4313] FAT-fs (loop1): Directory bread(block 72) failed [ 81.057698][ T4313] FAT-fs (loop1): Directory bread(block 73) failed [ 83.206916][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.295330][ T4347] loop4: detected capacity change from 0 to 128 [ 83.356811][ T26] audit: type=1804 audit(1784131949.857:2): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.20" name="/newroot/4/file0/bus" dev="loop4" ino=1048591 res=1 errno=0 [ 83.475047][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 83.547205][ T4355] attempt to access beyond end of device [ 83.547205][ T4355] loop4: rw=2049, want=353, limit=128 [ 83.605846][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.683014][ T26] audit: type=1804 audit(1784131949.987:3): pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.20" name="/newroot/4/file0/bus" dev="loop4" ino=1048591 res=1 errno=0 [ 84.109087][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.152618][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.204883][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.214237][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.238704][ T21] usb 2-1: config 0 descriptor?? [ 84.955483][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 84.968197][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 85.004118][ T21] usb 2-1: USB disconnect, device number 2 [ 85.400858][ T4388] befs: (nullb0): invalid magic header [ 86.310270][ T4398] loop1: detected capacity change from 0 to 256 [ 86.428281][ T4398] FAT-fs (loop1): Directory bread(block 64) failed [ 86.474591][ T4398] FAT-fs (loop1): Directory bread(block 65) failed [ 86.474716][ T4398] FAT-fs (loop1): Directory bread(block 66) failed [ 86.534617][ T4398] FAT-fs (loop1): Directory bread(block 67) failed [ 86.541342][ T4398] FAT-fs (loop1): Directory bread(block 68) failed [ 86.620160][ T4398] FAT-fs (loop1): Directory bread(block 69) failed [ 86.646977][ T4398] FAT-fs (loop1): Directory bread(block 70) failed [ 86.690775][ T4398] FAT-fs (loop1): Directory bread(block 71) failed [ 86.714835][ T4398] FAT-fs (loop1): Directory bread(block 72) failed [ 86.730759][ T7] cfg80211: failed to load regulatory.db [ 86.749744][ T4398] FAT-fs (loop1): Directory bread(block 73) failed [ 88.301828][ T4405] ALSA: mixer_oss: invalid OSS volume 'u' [ 89.266189][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 89.820020][ T4455] loop0: detected capacity change from 0 to 256 [ 90.062539][ T4455] FAT-fs (loop0): Directory bread(block 64) failed [ 90.114608][ T4455] FAT-fs (loop0): Directory bread(block 65) failed [ 90.155889][ T4455] FAT-fs (loop0): Directory bread(block 66) failed [ 90.162504][ T4455] FAT-fs (loop0): Directory bread(block 67) failed [ 90.173007][ T4455] FAT-fs (loop0): Directory bread(block 68) failed [ 90.182162][ T4455] FAT-fs (loop0): Directory bread(block 69) failed [ 90.193152][ T4455] FAT-fs (loop0): Directory bread(block 70) failed [ 90.227112][ T4455] FAT-fs (loop0): Directory bread(block 71) failed [ 90.508693][ T4455] FAT-fs (loop0): Directory bread(block 72) failed [ 90.700976][ T4455] FAT-fs (loop0): Directory bread(block 73) failed [ 91.314500][ C0] sched: RT throttling activated [ 93.380327][ T4494] device ip6gre1 entered promiscuous mode [ 95.693375][ T4541] comedi comedi0: Minor 3 could not be opened [ 95.730357][ T4537] loop2: detected capacity change from 0 to 256 [ 95.786832][ T4544] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 96.457877][ T4537] FAT-fs (loop2): Directory bread(block 64) failed [ 96.539571][ T4537] FAT-fs (loop2): Directory bread(block 65) failed [ 96.546470][ T4537] FAT-fs (loop2): Directory bread(block 66) failed [ 96.553173][ T4537] FAT-fs (loop2): Directory bread(block 67) failed [ 96.559901][ T4537] FAT-fs (loop2): Directory bread(block 68) failed [ 96.566692][ T4537] FAT-fs (loop2): Directory bread(block 69) failed [ 96.573326][ T4537] FAT-fs (loop2): Directory bread(block 70) failed [ 96.580551][ T4537] FAT-fs (loop2): Directory bread(block 71) failed [ 96.587374][ T4537] FAT-fs (loop2): Directory bread(block 72) failed [ 96.594237][ T4537] FAT-fs (loop2): Directory bread(block 73) failed [ 98.064517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 98.084526][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 98.094516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 98.104533][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 98.114517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.124515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.134521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.144518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.154517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 98.164517][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 100.068272][ T4583] befs: (nullb0): invalid magic header [ 100.267224][ T4586] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.094767][ T4606] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 104.077284][ T4618] loop1: detected capacity change from 0 to 256 [ 104.195205][ T4620] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 104.203405][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 104.280736][ T4621] lo speed is unknown, defaulting to 1000 [ 104.287304][ T4621] lo speed is unknown, defaulting to 1000 [ 104.301167][ T4621] lo speed is unknown, defaulting to 1000 [ 104.323105][ T4621] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.470488][ T4621] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.508388][ T4618] FAT-fs (loop1): Directory bread(block 64) failed [ 104.576403][ T4618] FAT-fs (loop1): Directory bread(block 65) failed [ 104.583378][ T4618] FAT-fs (loop1): Directory bread(block 66) failed [ 104.682241][ T4621] lo speed is unknown, defaulting to 1000 [ 104.703535][ T4621] lo speed is unknown, defaulting to 1000 [ 104.714833][ T4618] FAT-fs (loop1): Directory bread(block 67) failed [ 104.721503][ T4618] FAT-fs (loop1): Directory bread(block 68) failed [ 104.753637][ T4621] lo speed is unknown, defaulting to 1000 [ 104.774356][ T4621] lo speed is unknown, defaulting to 1000 [ 104.821584][ T4621] lo speed is unknown, defaulting to 1000 [ 104.827877][ T4618] FAT-fs (loop1): Directory bread(block 69) failed [ 104.918128][ T4618] FAT-fs (loop1): Directory bread(block 70) failed [ 104.973281][ T4618] FAT-fs (loop1): Directory bread(block 71) failed [ 104.994017][ T4618] FAT-fs (loop1): Directory bread(block 72) failed [ 105.013826][ T4618] FAT-fs (loop1): Directory bread(block 73) failed [ 107.548226][ T4234] Bluetooth: hci4: command 0x0405 tx timeout [ 109.517877][ T4658] befs: (nullb0): invalid magic header [ 111.284558][ T4672] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 113.854801][ T4694] befs: (nullb0): invalid magic header [ 114.826393][ T4709] loop1: detected capacity change from 0 to 256 [ 116.406045][ T4709] FAT-fs (loop1): Directory bread(block 64) failed [ 116.444411][ T4709] FAT-fs (loop1): Directory bread(block 65) failed [ 116.475245][ T4709] FAT-fs (loop1): Directory bread(block 66) failed [ 116.505645][ T4709] FAT-fs (loop1): Directory bread(block 67) failed [ 116.559032][ T4724] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.660754][ T4709] FAT-fs (loop1): Directory bread(block 68) failed [ 116.833961][ T4709] FAT-fs (loop1): Directory bread(block 69) failed [ 117.010143][ T4709] FAT-fs (loop1): Directory bread(block 70) failed [ 117.104706][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.157646][ T4709] FAT-fs (loop1): Directory bread(block 71) failed [ 117.354895][ T4709] FAT-fs (loop1): Directory bread(block 72) failed [ 117.403965][ T4709] FAT-fs (loop1): Directory bread(block 73) failed [ 117.404832][ T4233] usb 3-1: Using ep0 maxpacket: 32 [ 117.557759][ T4233] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.584913][ T4233] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.614313][ T4233] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.635307][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.670449][ T4233] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.687783][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.747208][ T4233] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.776992][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.962131][ T4233] usb 3-1: config 0 descriptor?? [ 118.855275][ T4233] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.829142][ T4232] usb 3-1: USB disconnect, device number 2 [ 119.928336][ C0] usblp0: nonzero read bulk status received: -71 [ 119.944630][ T4723] usblp0: error -71 reading from printer [ 119.977175][ T4745] netlink: 52 bytes leftover after parsing attributes in process `syz.1.100'. [ 119.990533][ T4232] usblp0: removed [ 120.210616][ T4756] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 121.089552][ T4758] befs: (nullb0): invalid magic header [ 121.337483][ T4763] loop3: detected capacity change from 0 to 256 [ 121.356826][ T4763] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.394596][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.704711][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 122.304797][ T4233] usb 2-1: config index 0 descriptor too short (expected 15270, got 18) [ 122.480879][ T4233] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 123.312210][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.334657][ T4233] usb 2-1: Product: syz [ 123.342278][ T4233] usb 2-1: Manufacturer: syz [ 123.347428][ T4233] usb 2-1: SerialNumber: syz [ 123.360107][ T4233] usb 2-1: config 0 descriptor?? [ 123.424687][ T4233] usb 2-1: can't set config #0, error -71 [ 123.442233][ T4233] usb 2-1: USB disconnect, device number 3 [ 123.699189][ T4761] ALSA: mixer_oss: invalid OSS volume 'u' [ 124.389050][ T4784] ODEBUG: Out of memory. ODEBUG disabled [ 124.676715][ T4807] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 125.459321][ T4784] syz.3.109 (4784): drop_caches: 2 [ 125.633589][ T4815] befs: (nullb0): invalid magic header [ 125.653303][ T4814] loop4: detected capacity change from 0 to 256 [ 125.790972][ T4814] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.183609][ T4833] befs: (nullb0): invalid magic header [ 130.775608][ T4847] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 131.008797][ T4853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.128'. [ 131.400321][ T4857] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.432554][ T4859] loop4: detected capacity change from 0 to 256 [ 131.465659][ T4859] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.993847][ T4868] befs: (nullb0): invalid magic header [ 132.807450][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.813804][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.014030][ T4871] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 133.024743][ T4870] IPVS: stopping backup sync thread 4871 ... [ 134.059220][ T4889] syz.3.138 uses obsolete (PF_INET,SOCK_PACKET) [ 134.116375][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 134.516525][ T4882] ALSA: mixer_oss: invalid OSS volume 'u' [ 135.014506][ T4911] befs: (nullb0): invalid magic header [ 136.535552][ T4929] process 'syz.4.151' launched '/dev/fd/3' with NULL argv: empty string added [ 137.012053][ T4946] befs: (nullb0): invalid magic header [ 138.057633][ T4951] befs: (nullb0): invalid magic header [ 140.161206][ T4960] ALSA: mixer_oss: invalid OSS volume 'u' [ 140.946145][ T4975] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 141.017361][ T4984] siw: device registration error -23 [ 145.104221][ T5018] befs: (nullb0): invalid magic header [ 145.962371][ T5024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 148.307772][ T5024] team0 (unregistering): Port device team_slave_0 removed [ 148.413125][ T5024] team0 (unregistering): Port device team_slave_1 removed [ 149.014581][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.304551][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 149.434801][ T4233] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 149.443415][ T4233] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 149.562759][ T4233] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 149.594597][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.644324][ T4233] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.678323][ T4233] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.762980][ T4233] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 149.786580][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.826230][ T4233] usb 1-1: config 0 descriptor?? [ 149.985011][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 150.096398][ T4233] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 151.218486][ T5072] befs: (nullb0): invalid magic header [ 152.466194][ T4235] usb 1-1: USB disconnect, device number 2 [ 152.474211][ T4235] usblp0: removed [ 153.535843][ T4198] ================================================================== [ 153.544547][ T4198] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12cf/0x3ca0 [ 153.552514][ T4198] Read of size 1 at addr ffff888075160c0a by task kworker/u5:4/4198 [ 153.560534][ T4198] [ 153.562901][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 153.570572][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 153.580674][ T4198] Workqueue: hci2 hci_rx_work [ 153.585440][ T4198] Call Trace: [ 153.588755][ T4198] [ 153.591716][ T4198] dump_stack_lvl+0x188/0x250 [ 153.591865][ T5081] ALSA: mixer_oss: invalid OSS volume 'u' [ 153.596433][ T4198] ? show_regs_print_info+0x20/0x20 [ 153.596492][ T4198] ? load_image+0x410/0x410 [ 153.596514][ T4198] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 153.596549][ T4198] print_address_description+0x60/0x2d0 [ 153.623049][ T4198] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 153.628217][ T4198] kasan_report+0xdf/0x130 [ 153.632686][ T4198] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 153.637862][ T4198] hci_le_meta_evt+0x12cf/0x3ca0 [ 153.642891][ T4198] ? hci_event_packet+0x363/0x1310 [ 153.648085][ T4198] ? __lock_acquire+0x7b50/0x7b50 [ 153.653175][ T4198] ? hci_remote_host_features_evt+0x240/0x240 [ 153.659319][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 153.665009][ T4198] ? mark_lock+0x94/0x320 [ 153.669382][ T4198] ? mutex_unlock+0x10/0x10 [ 153.673934][ T4198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.680058][ T4198] ? lock_chain_count+0x20/0x20 [ 153.684958][ T4198] ? __rwlock_init+0x140/0x140 [ 153.689774][ T4198] hci_event_packet+0xe0b/0x1310 [ 153.694772][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 153.699681][ T4198] ? rcu_lock_release+0x20/0x20 [ 153.704582][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 153.709823][ T4198] hci_rx_work+0x255/0xa10 [ 153.714393][ T4198] process_one_work+0x867/0xff0 [ 153.719308][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 153.724987][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 153.730369][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 153.735442][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 153.741032][ T4198] ? wq_worker_running+0x97/0x170 [ 153.746102][ T4198] worker_thread+0xad7/0x12a0 [ 153.750855][ T4198] kthread+0x42e/0x520 [ 153.754993][ T4198] ? rcu_lock_release+0x20/0x20 [ 153.759889][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 153.764792][ T4198] ret_from_fork+0x1f/0x30 [ 153.769273][ T4198] [ 153.772323][ T4198] [ 153.774674][ T4198] Allocated by task 5099: [ 153.779028][ T4198] __kasan_kmalloc+0xaf/0xe0 [ 153.783663][ T4198] __alloc_skb+0x22c/0x750 [ 153.788135][ T4198] vhci_write+0xbd/0x440 [ 153.792449][ T4198] vfs_write+0x748/0xd70 [ 153.796735][ T4198] ksys_write+0x153/0x260 [ 153.801105][ T4198] do_syscall_64+0x4c/0xa0 [ 153.805591][ T4198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.811529][ T4198] [ 153.813884][ T4198] The buggy address belongs to the object at ffff888075160800 [ 153.813884][ T4198] which belongs to the cache kmalloc-1k of size 1024 [ 153.827961][ T4198] The buggy address is located 10 bytes to the right of [ 153.827961][ T4198] 1024-byte region [ffff888075160800, ffff888075160c00) [ 153.841873][ T4198] The buggy address belongs to the page: [ 153.847621][ T4198] page:ffffea0001d45800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75160 [ 153.857792][ T4198] head:ffffea0001d45800 order:3 compound_mapcount:0 compound_pincount:0 [ 153.866136][ T4198] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 153.874166][ T4198] raw: 00fff00000010200 ffffea0001d68e00 0000000a00000002 ffff888016c41dc0 [ 153.882853][ T4198] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 153.891461][ T4198] page dumped because: kasan: bad access detected [ 153.898003][ T4198] page_owner tracks the page as allocated [ 153.903730][ T4198] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4191, ts 70903745644, free_ts 70803368135 [ 153.922351][ T4198] get_page_from_freelist+0x24f6/0x2670 [ 153.927930][ T4198] __alloc_pages+0x1ee/0x480 [ 153.932549][ T4198] new_slab+0xc0/0x4b0 [ 153.936646][ T4198] ___slab_alloc+0x807/0xdd0 [ 153.941271][ T4198] __kmalloc_node_track_caller+0x13d/0x3a0 [ 153.947088][ T4198] __alloc_skb+0x22c/0x750 [ 153.951520][ T4198] inet6_rt_notify+0xe0/0x290 [ 153.956237][ T4198] fib6_add+0x1e9a/0x3ee0 [ 153.960594][ T4198] ip6_route_add+0x86/0x130 [ 153.965205][ T4198] addrconf_add_dev+0x295/0x3c0 [ 153.970075][ T4198] addrconf_init_auto_addrs+0x633/0xab0 [ 153.975632][ T4198] addrconf_notify+0xa6b/0xf20 [ 153.980422][ T4198] raw_notifier_call_chain+0xcb/0x160 [ 153.985816][ T4198] __dev_notify_flags+0x194/0x300 [ 153.990865][ T4198] dev_change_flags+0xda/0x1a0 [ 153.995643][ T4198] do_setlink+0xca4/0x29d0 [ 154.000082][ T4198] page last free stack trace: [ 154.004764][ T4198] free_unref_page_prepare+0x637/0x6c0 [ 154.010270][ T4198] free_unref_page+0x8f/0x2a0 [ 154.014965][ T4198] __unfreeze_partials+0x188/0x1e0 [ 154.020098][ T4198] put_cpu_partial+0x12d/0x190 [ 154.024881][ T4198] qlist_free_all+0x35/0x90 [ 154.029402][ T4198] kasan_quarantine_reduce+0x150/0x160 [ 154.034960][ T4198] __kasan_slab_alloc+0x2f/0xc0 [ 154.039918][ T4198] slab_post_alloc_hook+0x4c/0x380 [ 154.045144][ T4198] kmem_cache_alloc_trace+0x165/0x290 [ 154.050527][ T4198] netdevice_event+0x3ad/0x930 [ 154.055392][ T4198] raw_notifier_call_chain+0xcb/0x160 [ 154.060784][ T4198] register_netdevice+0x12a8/0x1720 [ 154.066005][ T4198] nsim_create+0x32d/0x3e0 [ 154.070436][ T4198] __nsim_dev_port_add+0x66e/0xa80 [ 154.075560][ T4198] nsim_dev_port_add_all+0x37/0x100 [ 154.080793][ T4198] nsim_dev_probe+0x75e/0x9d0 [ 154.085491][ T4198] [ 154.087838][ T4198] Memory state around the buggy address: [ 154.093486][ T4198] ffff888075160b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 154.101585][ T4198] ffff888075160b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 154.109691][ T4198] >ffff888075160c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.117792][ T4198] ^ [ 154.122149][ T4198] ffff888075160c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.130405][ T4198] ffff888075160d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.138510][ T4198] ================================================================== [ 154.146577][ T4198] Disabling lock debugging due to kernel taint [ 154.158692][ T4198] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.165964][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 154.174929][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 154.185020][ T4198] Workqueue: hci2 hci_rx_work [ 154.189875][ T4198] Call Trace: [ 154.193178][ T4198] [ 154.196174][ T4198] dump_stack_lvl+0x188/0x250 [ 154.200909][ T4198] ? show_regs_print_info+0x20/0x20 [ 154.206143][ T4198] ? load_image+0x410/0x410 [ 154.210680][ T4198] panic+0x2f8/0x850 [ 154.214605][ T4198] ? bpf_jit_dump+0xd0/0xd0 [ 154.219140][ T4198] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 154.225162][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 154.230144][ T4198] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 154.235323][ T4198] check_panic_on_warn+0x80/0xa0 [ 154.240303][ T4198] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 154.245454][ T4198] end_report+0x6d/0xf0 [ 154.249648][ T4198] kasan_report+0x102/0x130 [ 154.254237][ T4198] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 154.259451][ T4198] hci_le_meta_evt+0x12cf/0x3ca0 [ 154.264426][ T4198] ? hci_event_packet+0x363/0x1310 [ 154.269606][ T4198] ? __lock_acquire+0x7b50/0x7b50 [ 154.274680][ T4198] ? hci_remote_host_features_evt+0x240/0x240 [ 154.280794][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 154.286471][ T4198] ? mark_lock+0x94/0x320 [ 154.290836][ T4198] ? mutex_unlock+0x10/0x10 [ 154.295397][ T4198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.301414][ T4198] ? lock_chain_count+0x20/0x20 [ 154.306304][ T4198] ? __rwlock_init+0x140/0x140 [ 154.311111][ T4198] hci_event_packet+0xe0b/0x1310 [ 154.316095][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 154.320992][ T4198] ? rcu_lock_release+0x20/0x20 [ 154.325885][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 154.331121][ T4198] hci_rx_work+0x255/0xa10 [ 154.335583][ T4198] process_one_work+0x867/0xff0 [ 154.340922][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 154.346686][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 154.352020][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 154.357088][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 154.362671][ T4198] ? wq_worker_running+0x97/0x170 [ 154.367875][ T4198] worker_thread+0xad7/0x12a0 [ 154.372648][ T4198] kthread+0x42e/0x520 [ 154.376777][ T4198] ? rcu_lock_release+0x20/0x20 [ 154.381667][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 154.386296][ T4198] ret_from_fork+0x1f/0x30 [ 154.390762][ T4198] [ 154.394379][ T4198] Kernel Offset: disabled [ 154.398735][ T4198] Rebooting in 86400 seconds..