last executing test programs: 12.947070091s ago: executing program 3 (id=48): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000004200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) 9.973496918s ago: executing program 3 (id=55): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)={0x28, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x11, 0x0, 0x0, @uid}, @nested={0xd, 0x125, 0x0, 0x1, [@generic="97086a603200000000"]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf1ff}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x20000000) write$binfmt_elf32(r1, &(0x7f0000000a40)=ANY=[], 0x358) 8.341616514s ago: executing program 3 (id=60): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) 6.714226951s ago: executing program 1 (id=71): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0xfefc, 0x1000}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 6.677518223s ago: executing program 1 (id=72): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x6d8, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x668, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x584, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x80, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.944550497s ago: executing program 1 (id=74): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 5.570553079s ago: executing program 2 (id=76): setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x1, 0x1e, 0xf, 0x1, 0x3, 0xa}}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000020, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 4.683539962s ago: executing program 2 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x4, 0xc, 0x43, @private1, @private2, 0x40, 0x1, 0x9, 0x94}}) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 4.301604444s ago: executing program 0 (id=80): creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 4.191725491s ago: executing program 0 (id=81): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 3.761267287s ago: executing program 2 (id=83): r0 = socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 3.714677959s ago: executing program 4 (id=84): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod(0x0, 0x1000, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 3.671903852s ago: executing program 0 (id=85): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) 3.637453514s ago: executing program 2 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.528196941s ago: executing program 2 (id=87): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000200)=[{0x6, 0x6000, 0x1, &(0x7f0000000900)='\n'}, {0x6, 0x2a00, 0x0, 0x0}], 0x2}) 3.526571221s ago: executing program 1 (id=88): setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x1, 0x1e, 0xf, 0x1, 0x3, 0xa}}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000020, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000005, 0x9c50, 0x8658, 0x100, 0x5, 0x6000000000, 0x1, 0x1}, 0x0) ioprio_get$pid(0x3, 0x0) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 2.554521489s ago: executing program 1 (id=89): socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xdd3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001700)=[{&(0x7f0000000380)="58000000140019234017908a840da2560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffee09000000fff5f20000000800030006010000418e01400004fce3", 0x58}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x72) 2.53267468s ago: executing program 3 (id=90): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.370900969s ago: executing program 4 (id=91): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b) 1.973910313s ago: executing program 3 (id=92): creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 1.803951563s ago: executing program 4 (id=93): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x4, 0xc, 0x43, @private1, @private2, 0x40, 0x1, 0x9, 0x94}}) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 1.680253861s ago: executing program 3 (id=94): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 1.128719053s ago: executing program 0 (id=95): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000a40)=ANY=[], 0x358) 1.042919458s ago: executing program 0 (id=96): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 822.691971ms ago: executing program 4 (id=97): r0 = socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 714.306457ms ago: executing program 4 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 327.102741ms ago: executing program 1 (id=99): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 149.172881ms ago: executing program 2 (id=100): setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x1, 0x1e, 0xf, 0x1, 0x3, 0xa}}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000020, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000005, 0x9c50, 0x8658, 0x100, 0x5, 0x6000000000, 0x1, 0x1}, 0x0) ioprio_get$pid(0x3, 0x0) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 113.245543ms ago: executing program 4 (id=101): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=102): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 65.117889][ T4172] cgroup: Unknown subsys name 'net' [ 65.259092][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.799539][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.766436][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.828349][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.853773][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.940435][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.966614][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.981860][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.989104][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.998620][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.033916][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.041323][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.049370][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.122460][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.135222][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.180837][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.189142][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.198121][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.205738][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.213138][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.221489][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.256102][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.264203][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.273124][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.280924][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.288783][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.300563][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.316373][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.325122][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.334379][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.352534][ T4184] team0: Port device team_slave_0 added [ 69.372832][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.380130][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.392515][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.400111][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.407579][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.416147][ T4193] device bridge_slave_0 entered promiscuous mode [ 69.426321][ T4184] team0: Port device team_slave_1 added [ 69.450584][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.467413][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.474835][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.483933][ T4193] device bridge_slave_1 entered promiscuous mode [ 69.500113][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.511865][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.543929][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.550958][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.578095][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.592319][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.604675][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.643550][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.650773][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.677536][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.691743][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.708294][ T4185] team0: Port device team_slave_0 added [ 69.718063][ T4192] team0: Port device team_slave_0 added [ 69.727059][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.739758][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.773670][ T4185] team0: Port device team_slave_1 added [ 69.782803][ T4194] team0: Port device team_slave_0 added [ 69.789958][ T4192] team0: Port device team_slave_1 added [ 69.834520][ T4194] team0: Port device team_slave_1 added [ 69.842175][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.849183][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.876005][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.897925][ T4193] team0: Port device team_slave_0 added [ 69.906832][ T4193] team0: Port device team_slave_1 added [ 69.929421][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.940954][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.968462][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.981435][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.988440][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.014999][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.054344][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.061823][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.089230][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.112333][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.119549][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.127763][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.135601][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.162436][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.175957][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.183313][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.210016][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.227499][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.234996][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.262213][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.295610][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.303076][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.329719][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.384802][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.392397][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.399968][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.405104][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 70.410642][ T2239] Bluetooth: hci0: command 0x0409 tx timeout [ 70.422422][ T4185] Cannot create hsr debugfs directory [ 70.439179][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.446838][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.453632][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.461639][ T4192] Cannot create hsr debugfs directory [ 70.481160][ T4186] Bluetooth: hci3: command 0x0409 tx timeout [ 70.491490][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.505753][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.514680][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.522228][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.530422][ T4194] Cannot create hsr debugfs directory [ 70.561322][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 70.598624][ T4193] device hsr_slave_0 entered promiscuous mode [ 70.606870][ T4193] device hsr_slave_1 entered promiscuous mode [ 70.614648][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.623020][ T4193] Cannot create hsr debugfs directory [ 70.966540][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.993455][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.003737][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.017142][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.081623][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.113846][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.144963][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.159325][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.175814][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.194339][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.227393][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.252946][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.325001][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.333180][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.359466][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.381475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.393320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.406860][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.414628][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.442469][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.450510][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.458427][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.516134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.528224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.538610][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.546101][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.563588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.588776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.599235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.608607][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.615949][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.626248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.662077][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.674024][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.692328][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.707213][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.718237][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.731585][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.739904][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.751453][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.777370][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.784587][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.799534][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.819181][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.837176][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.845982][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.860524][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.873320][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.903838][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.913978][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.926045][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.936899][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.945579][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.954815][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.964214][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.977037][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.989063][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.998870][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.015544][ T1270] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.023094][ T1270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.037514][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.066548][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.085336][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.102522][ T1270] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.109662][ T1270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.124893][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.136647][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.151730][ T1270] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.158935][ T1270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.183321][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.195217][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.209753][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.220507][ T1270] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.227741][ T1270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.237192][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.246554][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.277404][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.293713][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.305778][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.316242][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.348636][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.366787][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.380595][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.392457][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.403313][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.412730][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.423271][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.447888][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.460743][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.472486][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.481725][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 72.489915][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.492655][ T2239] Bluetooth: hci0: command 0x041b tx timeout [ 72.509452][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.521602][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.539382][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.549120][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.560151][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.568586][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 72.575079][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 72.582580][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.591609][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.600027][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.610194][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.619066][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.628973][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.641982][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 72.649164][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.659109][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.671971][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.705583][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.733943][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.762461][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.792156][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.799306][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.831529][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.851503][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.862386][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.869513][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.881618][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.904108][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.916154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.945272][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.981420][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.998998][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.036357][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.069632][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.092628][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.129276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.143386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.158561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.169747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.182388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.189988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.216125][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.227370][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.247095][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.255393][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.264210][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.273552][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.306374][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.315778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.325281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.334461][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.341638][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.349688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.359838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.370457][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.377814][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.386084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.395473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.425712][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.439214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.459136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.469727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.507553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.524049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.539601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.550469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.578635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.587875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.600585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.655176][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.666222][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.675804][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.687000][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.699350][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.708789][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.719262][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.728086][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.737881][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.747232][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.759793][ T4185] device veth0_vlan entered promiscuous mode [ 73.772298][ T4184] device veth0_vlan entered promiscuous mode [ 73.794683][ T4192] device veth0_vlan entered promiscuous mode [ 73.803205][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.815063][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.824044][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.834091][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.844536][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.854037][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.864231][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.874366][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.889070][ T4184] device veth1_vlan entered promiscuous mode [ 73.910195][ T4185] device veth1_vlan entered promiscuous mode [ 73.926004][ T4192] device veth1_vlan entered promiscuous mode [ 73.938365][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.947919][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.972431][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.000468][ T4184] device veth0_macvtap entered promiscuous mode [ 74.034263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.052961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.063556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.072926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.083539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.096927][ T4185] device veth0_macvtap entered promiscuous mode [ 74.119935][ T4185] device veth1_macvtap entered promiscuous mode [ 74.136701][ T4184] device veth1_macvtap entered promiscuous mode [ 74.169217][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.197828][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.206883][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.217044][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.225681][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.235111][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.246787][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.256539][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.270453][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.290704][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.307755][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.318816][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.333216][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.340859][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.352592][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.365847][ T4192] device veth0_macvtap entered promiscuous mode [ 74.391521][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.403302][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.412974][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.424270][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.434168][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.444153][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.454597][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.463227][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.470955][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.479508][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.490630][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.504545][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.516030][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.530556][ T4192] device veth1_macvtap entered promiscuous mode [ 74.546105][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.556198][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.566646][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 74.567480][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.574555][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 74.582663][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.596688][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.608426][ T4193] device veth0_vlan entered promiscuous mode [ 74.616850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.627730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.638208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.647940][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 74.660754][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 74.670921][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.683354][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.695433][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.704796][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.722354][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 74.736739][ T4193] device veth1_vlan entered promiscuous mode [ 74.805212][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.818472][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.830869][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.841697][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.854848][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.865348][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.876508][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.888113][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.898874][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.912514][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.922239][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.930555][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.940211][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.949240][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.958644][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.968995][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.978415][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.987959][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.029799][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.041676][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.050435][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.059844][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.090726][ T4193] device veth0_macvtap entered promiscuous mode [ 75.100817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.110186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.119178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.135327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.145612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.154633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.162914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.190086][ T4194] device veth0_vlan entered promiscuous mode [ 75.201700][ T4193] device veth1_macvtap entered promiscuous mode [ 75.243861][ T3094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.255507][ T4194] device veth1_vlan entered promiscuous mode [ 75.261806][ T3094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.299844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.310272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.318527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.343300][ T3094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.351958][ T3094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.367219][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.379768][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.390600][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.401513][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.412760][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.423856][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.436113][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.458709][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.469021][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.478815][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.488350][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.507090][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.518029][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.528575][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.539143][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.547339][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.562260][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.572467][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.583537][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.595285][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.613656][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.624956][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.635806][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.644965][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.655411][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.673439][ T4194] device veth0_macvtap entered promiscuous mode [ 75.690928][ T3094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.698427][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.708833][ T3094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.718088][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.727569][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.740232][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.766855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.777428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.790565][ T4194] device veth1_macvtap entered promiscuous mode [ 75.804881][ T1270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.826957][ T1270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.869666][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.882764][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.894970][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.905879][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.916050][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.928259][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.938465][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.949354][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.969592][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.980726][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.989521][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.999028][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.008998][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.052284][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.089689][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.107062][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.119635][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.135379][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.147676][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.147714][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.147732][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.149816][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.159553][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.159589][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.159616][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.159643][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.221244][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.222020][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.222912][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.222952][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.224265][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.348449][ T1270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.348472][ T1270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.348705][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.438925][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.438949][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.439179][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.541474][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.541498][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.545813][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.547964][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.547988][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.548346][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.641982][ T4186] Bluetooth: hci1: command 0x0419 tx timeout [ 76.642116][ T4186] Bluetooth: hci0: command 0x0419 tx timeout [ 76.731326][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 76.743417][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 76.807713][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 77.011252][ T4186] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.042051][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 77.073426][ T4320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.182438][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.401510][ T4186] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.419334][ T4186] usb 3-1: config 0 has no interface number 0 [ 77.591836][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 77.602795][ T4186] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 77.618799][ T4186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.627141][ T4233] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.637511][ T4233] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.645445][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.646869][ T4334] device ip6gretap0 entered promiscuous mode [ 77.665335][ T4186] usb 3-1: Product: syz [ 77.683833][ T4186] usb 3-1: Manufacturer: syz [ 77.712080][ T4186] usb 3-1: SerialNumber: syz [ 77.739154][ T4186] usb 3-1: config 0 descriptor?? [ 77.761819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.852294][ T4233] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.871416][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.884888][ T4233] usb 4-1: Product: syz [ 77.890151][ T4233] usb 4-1: Manufacturer: syz [ 77.900457][ T4233] usb 4-1: SerialNumber: syz [ 77.908128][ T4335] syz.0.11 (4335) used greatest stack depth: 19544 bytes left [ 77.922654][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 77.951979][ T4233] usb 4-1: config 0 descriptor?? [ 78.011337][ T4186] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 78.011889][ T4233] usb 4-1: selecting invalid altsetting 0 [ 78.041912][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.061988][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.100384][ T4186] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 78.141736][ T4186] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 78.151111][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 78.164207][ T4186] usb 3-1: media controller created [ 78.225959][ T21] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 78.277077][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.311491][ T21] usb 2-1: config 0 descriptor?? [ 78.346589][ T2239] usb 4-1: USB disconnect, device number 2 [ 78.359761][ T4186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.564265][ T4186] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 78.696307][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.730253][ T4186] usb 3-1: USB disconnect, device number 2 [ 78.741204][ T4240] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.991144][ T4240] usb 1-1: Using ep0 maxpacket: 16 [ 79.141437][ T4240] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.173588][ T4346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.211175][ T4240] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.532039][ T4240] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 79.559368][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.598746][ T4240] usb 1-1: Product: syz [ 79.607984][ T4240] usb 1-1: Manufacturer: syz [ 79.647595][ T4240] usb 1-1: SerialNumber: syz [ 79.756002][ T4240] usb 1-1: config 0 descriptor?? [ 80.008670][ T4240] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 80.321461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 80.651450][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.661217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.670167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.062033][ T1153] usb 1-1: Failed to submit usb control message: -110 [ 81.079478][ T1153] usb 1-1: unable to send the bmi data to the device: -110 [ 81.103732][ T1153] usb 1-1: unable to get target info from device [ 81.130537][ T1153] usb 1-1: could not get target info (-110) [ 81.150614][ T1153] usb 1-1: could not probe fw (-110) [ 81.180419][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 81.271198][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 81.282030][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 81.374363][ T21] usb 2-1: USB disconnect, device number 2 [ 81.573668][ T4240] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.653445][ T4240] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.783430][ T4372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 83.550450][ T2239] usb 1-1: USB disconnect, device number 2 [ 83.793781][ T4390] process 'syz.3.20' launched './file0' with NULL argv: empty string added [ 84.013239][ T4394] loop5: detected capacity change from 0 to 7 [ 84.053922][ T4296] Dev loop5: unable to read RDB block 7 [ 84.059640][ T4296] loop5: unable to read partition table [ 84.081866][ T4296] loop5: partition table beyond EOD, truncated [ 84.189746][ T4394] Dev loop5: unable to read RDB block 7 [ 84.215940][ T4394] loop5: unable to read partition table [ 84.256153][ T4394] loop5: partition table beyond EOD, truncated [ 84.265766][ T4394] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.428931][ T4389] ODEBUG: Out of memory. ODEBUG disabled [ 85.619321][ T26] audit: type=1326 audit(1770665484.613:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90036ef79 code=0x7ffc0000 [ 85.702104][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 85.755117][ T26] audit: type=1326 audit(1770665484.653:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90036ef79 code=0x7ffc0000 [ 86.237230][ T4431] device syzkaller0 entered promiscuous mode [ 86.814563][ T23] cfg80211: failed to load regulatory.db [ 86.898754][ T4443] Zero length message leads to an empty skb [ 87.817180][ T4459] sctp: failed to load transform for md5: -2 [ 88.079983][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 88.201152][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.531196][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 88.651543][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 88.701238][ T13] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.721930][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.767223][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.825702][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.861125][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.906846][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.950221][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.082164][ T13] usbtmc 1-1:16.0: bulk endpoints not found [ 89.241377][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.271197][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 89.441313][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 89.480580][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.506033][ T23] usb 5-1: SerialNumber: syz [ 89.536191][ T2239] usb 1-1: USB disconnect, device number 3 [ 89.599099][ T23] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 89.621855][ T23] usb-storage 5-1:1.0: USB Mass Storage device detected [ 89.687231][ T23] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 91.271124][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.561197][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 91.600139][ T4538] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.681372][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 91.705446][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.805750][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 91.824659][ T23] pvrusb2: ********** [ 91.840860][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 91.879665][ T23] pvrusb2: Important functionality might not be entirely working. [ 91.906564][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 91.971446][ T23] pvrusb2: ********** [ 92.036495][ T2425] pvrusb2: Invalid write control endpoint [ 92.270590][ T21] usb 3-1: USB disconnect, device number 3 [ 92.327374][ T2425] pvrusb2: Invalid write control endpoint [ 92.370516][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 92.395337][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 92.417248][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 92.461899][ T2425] pvrusb2: Device being rendered inoperable [ 92.476987][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 92.495974][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 92.538246][ T2425] pvrusb2: Attached sub-driver cx25840 [ 92.571941][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 92.622865][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 92.720944][ T4256] usb 5-1: USB disconnect, device number 2 [ 92.853614][ T4556] loop4: detected capacity change from 0 to 512 [ 93.012839][ T4556] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nodelalloc,quota,,errors=continue. Quota mode: writeback. [ 93.081684][ T4556] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.653343][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.924342][ T4568] loop3: detected capacity change from 0 to 32768 [ 93.987099][ T4568] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.48 (4568) [ 94.041255][ T21] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.060088][ T21] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.108715][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.150210][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 94.195434][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 94.279091][ T4568] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 94.358307][ T21] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.370099][ T4568] BTRFS info (device loop3): setting nodatacow, compression disabled [ 94.377846][ T21] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.410774][ T21] usb 5-1: Product: syz [ 94.420956][ T4568] BTRFS info (device loop3): enabling auto defrag [ 94.427533][ T4568] BTRFS info (device loop3): max_inline at 0 [ 94.441950][ T21] usb 5-1: Manufacturer: syz [ 94.502530][ T4568] BTRFS info (device loop3): using free space tree [ 94.509156][ T4568] BTRFS info (device loop3): has skinny extents [ 94.532301][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 94.547744][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 94.587173][ T4573] device syzkaller0 entered promiscuous mode [ 94.607098][ T21] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 94.643016][ T4573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.50'. [ 94.652069][ T21] cdc_wdm 5-1:1.0: Unknown control protocol [ 94.800536][ T2239] usb 5-1: USB disconnect, device number 3 [ 94.817320][ T4563] loop2: detected capacity change from 0 to 65536 [ 94.824121][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 94.824380][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 94.824402][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 94.847252][ T4570] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 94.997826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 95.861580][ T4563] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 96.201061][ T1107] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.606577][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 96.645573][ T1107] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 96.659738][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.718898][ T1107] usb 2-1: config 0 has no interfaces? [ 96.729052][ T1107] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 96.749329][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.887645][ T1107] usb 2-1: config 0 descriptor?? [ 97.618224][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 97.871527][ T4256] usb 2-1: USB disconnect, device number 3 [ 97.931126][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.012631][ T4643] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 98.141134][ T4186] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.823956][ T4646] device syzkaller0 entered promiscuous mode [ 98.876652][ T4646] netlink: 44 bytes leftover after parsing attributes in process `syz.0.65'. [ 99.031988][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 99.064802][ T4654] fuse: Unknown parameter 'group_i00000000000000000000' [ 99.171714][ T4186] usb 3-1: config 0 has no interfaces? [ 99.243340][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 99.345179][ T1107] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.354391][ T4186] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 99.364278][ T4186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.372517][ T4295] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 99.380114][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.389031][ T4186] usb 3-1: Product: syz [ 99.393556][ T1107] usb 4-1: Product: syz [ 99.397763][ T1107] usb 4-1: Manufacturer: syz [ 99.402583][ T4186] usb 3-1: Manufacturer: syz [ 99.407223][ T4186] usb 3-1: SerialNumber: syz [ 99.412290][ T1107] usb 4-1: SerialNumber: syz [ 99.420764][ T4186] usb 3-1: config 0 descriptor?? [ 99.427700][ T1107] usb 4-1: config 0 descriptor?? [ 99.561074][ T4295] usb 5-1: device descriptor read/64, error -71 [ 99.692737][ T1107] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 99.732123][ T4256] usb 3-1: USB disconnect, device number 4 [ 99.851285][ T4295] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 100.061124][ T4295] usb 5-1: device descriptor read/64, error -71 [ 100.181620][ T4295] usb usb5-port1: attempt power cycle [ 100.391109][ T4256] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 100.591139][ T4295] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 101.239438][ T4678] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 101.331231][ T4295] usb 5-1: device descriptor read/8, error -71 [ 101.358484][ T4685] device syzkaller0 entered promiscuous mode [ 101.375363][ T4685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.78'. [ 101.601671][ T4256] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 101.610267][ T4295] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 101.619601][ T4256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.631579][ T4256] usb 2-1: config 0 has no interfaces? [ 101.637251][ T4256] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 101.647681][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.665354][ T4256] usb 2-1: config 0 descriptor?? [ 101.718259][ T4691] fuse: Unknown parameter 'group_i00000000000000000000' [ 101.725709][ T4295] usb 5-1: device descriptor read/8, error -71 [ 101.851376][ T4295] usb usb5-port1: unable to enumerate USB device [ 101.908516][ T4295] usb 2-1: USB disconnect, device number 4 [ 102.131221][ T1107] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 102.173779][ T1107] usb 4-1: USB disconnect, device number 3 [ 102.811079][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.365572][ T4711] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 103.604555][ T4718] tipc: Started in network mode [ 103.650723][ T4718] tipc: Node identity deb16166c0a8, cluster identity 4711 [ 103.692296][ T4718] tipc: Enabled bearer , priority 0 [ 103.721884][ T4718] netlink: 44 bytes leftover after parsing attributes in process `syz.3.90'. [ 103.731263][ T1107] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.739280][ T1107] usb 3-1: config 0 has no interface number 0 [ 103.774113][ T4721] tipc: Resetting bearer [ 103.853518][ T4716] tipc: Disabling bearer [ 103.931384][ T1107] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.940500][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.051165][ T1107] usb 3-1: Product: syz [ 104.075639][ T4729] fuse: Unknown parameter 'group_i00000000000000000000' [ 104.113711][ T1107] usb 3-1: Manufacturer: syz [ 104.118368][ T1107] usb 3-1: SerialNumber: syz [ 104.152915][ T1107] usb 3-1: config 0 descriptor?? [ 104.451203][ T1107] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 104.480003][ T1107] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.542491][ T1107] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 104.579955][ T1107] usb 3-1: media controller created [ 104.601103][ T4256] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 104.662674][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.821084][ T4256] usb 4-1: device descriptor read/64, error -71 [ 105.091089][ T4256] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 105.293344][ T4256] usb 4-1: device descriptor read/64, error -71 [ 105.431314][ T4256] usb usb4-port1: attempt power cycle [ 105.474040][ T4744] tipc: Started in network mode [ 105.490271][ T4744] tipc: Node identity da60f1f0814e, cluster identity 4711 [ 105.518037][ T4744] tipc: Enabled bearer , priority 0 [ 105.546340][ T4745] device syzkaller0 entered promiscuous mode [ 105.594882][ T4744] tipc: Resetting bearer [ 105.640291][ T4743] tipc: Resetting bearer [ 105.692357][ T4743] tipc: Disabling bearer [ 105.831913][ T1107] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 105.841167][ T4256] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 105.912418][ T1107] usb 3-1: USB disconnect, device number 5 [ 105.951271][ T4256] usb 4-1: device descriptor read/8, error -71 [ 106.017065][ T4757] ================================================================== [ 106.025540][ T4757] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 106.032817][ T4757] Read of size 8 at addr ffff88814b31b418 by task syz.2.100/4757 [ 106.040578][ T4757] [ 106.042957][ T4757] CPU: 0 PID: 4757 Comm: syz.2.100 Not tainted syzkaller #0 [ 106.050286][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 106.060392][ T4757] Call Trace: [ 106.063721][ T4757] [ 106.066690][ T4757] dump_stack_lvl+0x188/0x250 [ 106.071433][ T4757] ? show_regs_print_info+0x20/0x20 [ 106.076693][ T4757] ? _printk+0xda/0x130 [ 106.080905][ T4757] ? dvb_device_open+0xc6/0x370 [ 106.085806][ T4757] ? load_image+0x400/0x400 [ 106.090356][ T4757] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 106.095864][ T4757] print_address_description+0x60/0x2d0 [ 106.101458][ T4757] ? dvb_device_open+0xc6/0x370 [ 106.106358][ T4757] kasan_report+0xdf/0x130 [ 106.110829][ T4757] ? dvb_device_open+0xc6/0x370 [ 106.115871][ T4757] dvb_device_open+0xc6/0x370 [ 106.116547][ T4618] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 106.120603][ T4757] ? do_raw_spin_unlock+0x11d/0x230 [ 106.120663][ T4757] chrdev_open+0x5c5/0x6a0 [ 106.137833][ T4757] ? cd_forget+0x160/0x160 [ 106.142311][ T4757] ? fsnotify_perm+0x3a7/0x560 [ 106.147135][ T4757] ? cd_forget+0x160/0x160 [ 106.151711][ T4757] do_dentry_open+0x7ff/0xf80 [ 106.156450][ T4757] path_openat+0x26f5/0x2fa0 [ 106.161103][ T4757] ? verify_lock_unused+0x140/0x140 [ 106.166357][ T4757] ? slab_post_alloc_hook+0x4c/0x380 [ 106.171696][ T4757] ? do_filp_open+0x410/0x410 [ 106.176433][ T4757] do_filp_open+0x1e2/0x410 [ 106.180978][ T4757] ? vfs_tmpfile+0x300/0x300 [ 106.185635][ T4757] ? _raw_spin_unlock+0x24/0x40 [ 106.190719][ T4757] ? alloc_fd+0x598/0x630 [ 106.195106][ T4757] do_sys_openat2+0x150/0x4b0 [ 106.199829][ T4757] ? __lock_acquire+0x7d10/0x7d10 [ 106.204915][ T4757] ? do_sys_open+0xe0/0xe0 [ 106.209379][ T4757] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 106.215422][ T4757] ? lock_chain_count+0x20/0x20 [ 106.220316][ T4757] ? vtime_user_exit+0x2c8/0x3e0 [ 106.225301][ T4757] __x64_sys_openat+0x135/0x160 [ 106.230207][ T4757] do_syscall_64+0x4c/0xa0 [ 106.234659][ T4757] ? clear_bhb_loop+0x30/0x80 [ 106.239369][ T4757] ? clear_bhb_loop+0x30/0x80 [ 106.244086][ T4757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.250039][ T4757] RIP: 0033:0x7fa90032f84e [ 106.254501][ T4757] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.274161][ T4757] RSP: 002b:00007fa8fe5a8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.282621][ T4757] RAX: ffffffffffffffda RBX: 00007fa8fe5a96c0 RCX: 00007fa90032f84e [ 106.290646][ T4757] RDX: 0000000000040002 RSI: 00007fa8fe5a8c00 RDI: ffffffffffffff9c [ 106.298665][ T4757] RBP: 00007fa8fe5a8c00 R08: 0000000000000000 R09: 0000000000000000 [ 106.306675][ T4757] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 106.314687][ T4757] R13: 00007fa9005ea128 R14: 00007fa9005ea090 R15: 00007ffce9379558 [ 106.322727][ T4757] [ 106.325777][ T4757] [ 106.328128][ T4757] Allocated by task 1: [ 106.332225][ T4757] __kasan_kmalloc+0xb5/0xf0 [ 106.336858][ T4757] dvb_register_device+0x311/0x2170 [ 106.342095][ T4757] dvb_register_frontend+0x645/0x920 [ 106.347474][ T4757] vidtv_bridge_probe+0x9a1/0xf70 [ 106.352558][ T4757] platform_probe+0x137/0x1c0 [ 106.357271][ T4757] really_probe+0x284/0xc80 [ 106.361807][ T4757] __driver_probe_device+0x18c/0x330 [ 106.367135][ T4757] driver_probe_device+0x4f/0x420 [ 106.372210][ T4757] __driver_attach+0x46b/0x670 [ 106.377010][ T4757] bus_for_each_dev+0x182/0x1f0 [ 106.381897][ T4757] bus_add_driver+0x30a/0x5a0 [ 106.386616][ T4757] driver_register+0x32d/0x430 [ 106.391422][ T4757] vidtv_bridge_init+0x39/0x70 [ 106.396229][ T4757] do_one_initcall+0x272/0x730 [ 106.401034][ T4757] do_initcall_level+0x137/0x1f0 [ 106.406007][ T4757] do_initcalls+0x4b/0x90 [ 106.410469][ T4757] kernel_init_freeable+0x3e9/0x570 [ 106.415795][ T4757] kernel_init+0x19/0x1b0 [ 106.420170][ T4757] ret_from_fork+0x1f/0x30 [ 106.424643][ T4757] [ 106.426999][ T4757] Freed by task 4711: [ 106.431010][ T4757] kasan_set_track+0x4b/0x70 [ 106.435645][ T4757] kasan_set_free_info+0x1f/0x40 [ 106.440635][ T4757] ____kasan_slab_free+0xd5/0x110 [ 106.445792][ T4757] slab_free_freelist_hook+0xea/0x170 [ 106.451210][ T4757] kfree+0xef/0x2a0 [ 106.455056][ T4757] dvb_device_open+0x2e7/0x370 [ 106.459864][ T4757] chrdev_open+0x5c5/0x6a0 [ 106.464322][ T4757] do_dentry_open+0x7ff/0xf80 [ 106.469095][ T4757] path_openat+0x26f5/0x2fa0 [ 106.473724][ T4757] do_filp_open+0x1e2/0x410 [ 106.478266][ T4757] do_sys_openat2+0x150/0x4b0 [ 106.482973][ T4757] __x64_sys_openat+0x135/0x160 [ 106.487865][ T4757] do_syscall_64+0x4c/0xa0 [ 106.492329][ T4757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.498260][ T4757] [ 106.500610][ T4757] The buggy address belongs to the object at ffff88814b31b400 [ 106.500610][ T4757] which belongs to the cache kmalloc-256 of size 256 [ 106.514697][ T4757] The buggy address is located 24 bytes inside of [ 106.514697][ T4757] 256-byte region [ffff88814b31b400, ffff88814b31b500) [ 106.527925][ T4757] The buggy address belongs to the page: [ 106.533598][ T4757] page:ffffea00052cc680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14b31a [ 106.543879][ T4757] head:ffffea00052cc680 order:1 compound_mapcount:0 [ 106.550614][ T4757] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 106.558754][ T4757] raw: 057ff00000010200 0000000000000000 0000000900000001 ffff888016c41b40 [ 106.567376][ T4757] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 106.575991][ T4757] page dumped because: kasan: bad access detected [ 106.582527][ T4757] page_owner tracks the page as allocated [ 106.588270][ T4757] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 19507872532, free_ts 0 [ 106.606281][ T4757] get_page_from_freelist+0x1bbd/0x1ca0 [ 106.611878][ T4757] __alloc_pages+0x1ee/0x480 [ 106.616503][ T4757] alloc_page_interleave+0x24/0x1e0 [ 106.621735][ T4757] new_slab+0xc0/0x4b0 [ 106.625833][ T4757] ___slab_alloc+0x80a/0xdd0 [ 106.630455][ T4757] __kmalloc_node+0x200/0x3b0 [ 106.635164][ T4757] kvmalloc_node+0x84/0x130 [ 106.639698][ T4757] v4l2_ctrl_new+0x70f/0x1310 [ 106.644415][ T4757] v4l2_ctrl_new_std+0x247/0x300 [ 106.649416][ T4757] handler_new_ref+0x14a/0x950 [ 106.654216][ T4757] v4l2_ctrl_add_handler+0x197/0x280 [ 106.659754][ T4757] vivid_create_controls+0x2720/0x3460 [ 106.665272][ T4757] vivid_probe+0x3c47/0x67a0 [ 106.669916][ T4757] platform_probe+0x137/0x1c0 [ 106.674636][ T4757] really_probe+0x284/0xc80 [ 106.679178][ T4757] __driver_probe_device+0x18c/0x330 [ 106.684543][ T4757] page_owner free stack trace missing [ 106.689943][ T4757] [ 106.692296][ T4757] Memory state around the buggy address: [ 106.697959][ T4757] ffff88814b31b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.706056][ T4757] ffff88814b31b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.714152][ T4757] >ffff88814b31b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.722273][ T4757] ^ [ 106.727159][ T4757] ffff88814b31b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.735264][ T4757] ffff88814b31b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.743357][ T4757] ================================================================== [ 106.751455][ T4757] Disabling lock debugging due to kernel taint [ 106.762000][ T4757] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.769246][ T4757] CPU: 0 PID: 4757 Comm: syz.2.100 Tainted: G B syzkaller #0 [ 106.778098][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 106.788182][ T4757] Call Trace: [ 106.791487][ T4757] [ 106.794439][ T4757] dump_stack_lvl+0x188/0x250 [ 106.799157][ T4757] ? show_regs_print_info+0x20/0x20 [ 106.804392][ T4757] ? load_image+0x400/0x400 [ 106.808938][ T4757] panic+0x2e5/0x810 [ 106.812870][ T4757] ? bpf_jit_dump+0xd0/0xd0 [ 106.817587][ T4757] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 106.823287][ T4757] ? check_panic_on_warn+0x6c/0xa0 [ 106.828551][ T4757] ? dvb_device_open+0xc6/0x370 [ 106.833446][ T4757] check_panic_on_warn+0x80/0xa0 [ 106.838423][ T4757] ? dvb_device_open+0xc6/0x370 [ 106.843314][ T4757] end_report+0x6d/0xf0 [ 106.847505][ T4757] kasan_report+0x102/0x130 [ 106.852047][ T4757] ? dvb_device_open+0xc6/0x370 [ 106.856940][ T4757] dvb_device_open+0xc6/0x370 [ 106.861646][ T4757] ? do_raw_spin_unlock+0x11d/0x230 [ 106.866882][ T4757] chrdev_open+0x5c5/0x6a0 [ 106.871355][ T4757] ? cd_forget+0x160/0x160 [ 106.875805][ T4757] ? fsnotify_perm+0x3a7/0x560 [ 106.880601][ T4757] ? cd_forget+0x160/0x160 [ 106.885057][ T4757] do_dentry_open+0x7ff/0xf80 [ 106.889779][ T4757] path_openat+0x26f5/0x2fa0 [ 106.894418][ T4757] ? verify_lock_unused+0x140/0x140 [ 106.899808][ T4757] ? slab_post_alloc_hook+0x4c/0x380 [ 106.905144][ T4757] ? do_filp_open+0x410/0x410 [ 106.909886][ T4757] do_filp_open+0x1e2/0x410 [ 106.914428][ T4757] ? vfs_tmpfile+0x300/0x300 [ 106.919066][ T4757] ? _raw_spin_unlock+0x24/0x40 [ 106.923951][ T4757] ? alloc_fd+0x598/0x630 [ 106.928315][ T4757] do_sys_openat2+0x150/0x4b0 [ 106.933026][ T4757] ? __lock_acquire+0x7d10/0x7d10 [ 106.938090][ T4757] ? do_sys_open+0xe0/0xe0 [ 106.942543][ T4757] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 106.948560][ T4757] ? lock_chain_count+0x20/0x20 [ 106.953443][ T4757] ? vtime_user_exit+0x2c8/0x3e0 [ 106.958456][ T4757] __x64_sys_openat+0x135/0x160 [ 106.963345][ T4757] do_syscall_64+0x4c/0xa0 [ 106.967795][ T4757] ? clear_bhb_loop+0x30/0x80 [ 106.972509][ T4757] ? clear_bhb_loop+0x30/0x80 [ 106.977224][ T4757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.983147][ T4757] RIP: 0033:0x7fa90032f84e [ 106.987591][ T4757] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.007228][ T4757] RSP: 002b:00007fa8fe5a8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.015682][ T4757] RAX: ffffffffffffffda RBX: 00007fa8fe5a96c0 RCX: 00007fa90032f84e [ 107.023682][ T4757] RDX: 0000000000040002 RSI: 00007fa8fe5a8c00 RDI: ffffffffffffff9c [ 107.031681][ T4757] RBP: 00007fa8fe5a8c00 R08: 0000000000000000 R09: 0000000000000000 [ 107.039686][ T4757] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 107.047690][ T4757] R13: 00007fa9005ea128 R14: 00007fa9005ea090 R15: 00007ffce9379558 [ 107.055812][ T4757] [ 107.058975][ T4757] Kernel Offset: disabled [ 107.063325][ T4757] Rebooting in 86400 seconds..