last executing test programs: 15.641567152s ago: executing program 2 (id=3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480), 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340), &(0x7f0000000140), 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001540)}) r5 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 15.128303913s ago: executing program 0 (id=1): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) get_robust_list(0x0, 0x0, &(0x7f0000000440)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x1fc}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.125001504s ago: executing program 2 (id=8): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2a0471a, &(0x7f0000000300)={[{}]}, 0x82, 0x499, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101042, 0x15) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000980)=r2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000009c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000a00)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000a80)='\x00'/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000b00)={0x1, 0x1, &(0x7f0000000b40)='\x00'/246, &(0x7f0000000c40)='\x00'/87, &(0x7f0000000cc0)='\x00'/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000d40)={0x1, 0x0, [{0x0, 0x73, &(0x7f0000001540)='\x00'/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000015c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000001600)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') 13.405878586s ago: executing program 0 (id=12): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r1 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000019d80), 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000019e00)='./mnt\x00', &(0x7f0000019e40)={0x44a801, 0x48, 0x30}, 0x18) renameat2(r1, &(0x7f0000019dc0)='./mnt/fillfile\x00', r2, &(0x7f0000019e80)='mtd0\x00', 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000007c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000000880)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000019c00)='./mnt/fillfile\x00', 0x42, 0x9f) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, 0x0, &(0x7f000001a040)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000019cc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000019c80)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000019d00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xffffffff}, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, r6, 0x80000000}}, 0x48) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}, {&(0x7f0000000200)="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", 0x1c7}, {&(0x7f0000000400)="68fc845e992f9239429637c2a63d00cc68f5808c91c9fd392da7fe6dbd", 0x1d}], 0x3}, 0x4041) syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002835690aadb36020000402505a7a400010000000109024300020100c101090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705827ec935a015b7621f000200070503c8f2b4"], 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000540)={0x4, @sliced={0x204, [0x0, 0x9fb5, 0x3da7, 0x200, 0xa, 0x7, 0x2, 0x3, 0x229c, 0x4, 0x0, 0x8, 0x7, 0x83c5, 0xe7d5, 0x6, 0x727, 0x1, 0x7, 0x7ff, 0x2c, 0xef, 0x3, 0x400, 0x4, 0x5, 0x64, 0x33, 0x0, 0x0, 0x8, 0xfff8, 0x5, 0x8, 0x9, 0xc0, 0x401, 0xf, 0x5, 0x1, 0x8, 0x8000, 0xa4, 0x3, 0x534, 0x6, 0xc, 0x2], 0x4}}) 11.353548382s ago: executing program 2 (id=16): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r1 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000019d80), 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000019e00)='./mnt\x00', &(0x7f0000019e40)={0x44a801, 0x48, 0x30}, 0x18) renameat2(r1, &(0x7f0000019dc0)='./mnt/fillfile\x00', r2, &(0x7f0000019e80)='mtd0\x00', 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000007c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000000880)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000019c00)='./mnt/fillfile\x00', 0x42, 0x9f) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, 0x0, &(0x7f000001a040)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000019cc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000019c80)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000019d00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xffffffff}, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, r6, 0x80000000}}, 0x48) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}, {&(0x7f0000000200)="935deb19b2b890c21382bf1f79aa9b071cd87f9e1138bdfbd299b31d3dc39ecc3e082cef79cdfd2989378efef38637155f69adcfe37f52bb407119823b29f187276d334a38093d9f570c8ee4266429dd6f61b417133ba81447e03dc8d60d76f996251ff1a0e8469e39552f6d3600e187581381b2bffa02a7b446754d38f2b24cd194a315132440d5d7d6be32881e980e05685839e58ff4baf65c9a91fded8077382faba391f365da915b6004bd8128b26a7365a31c4f5f078fb3601508c08e88216735c3f5f4a6baef888c223473f4ad1b3b0574461062643e82635ca5ee9a921c6efba950054a2eae8e6ecf18b7c181a82de95dc91fea10bfa2cc1526b282a4f45ba428e995388d6817468532f7fbf933331b60ad471a008a9d11c537f916257b66d1494214eabc42253ca61ad61b6b66b0974aee3f4552980e96e8773190d24451bdc35415d315fcc083ff9d98805482cb7b79ac34ea92f3345ed5fe2ee7c4e7d32f918adf201cdee9dbb915762c1d185b94ebb7634b11e1e10c9768055daa116868cdea5d31c872654ce0242ca830d9b0dff32d712e5db15c21cc6e69b3bc3736ae7fdb5e13944c98438df74c1badef1bbe709832d5c90464d4ef8628e96f551e3f4e0a3dda", 0x1c7}, {&(0x7f0000000400)="68fc845e992f9239429637c2a63d00cc68f5808c91c9fd392da7fe6dbd", 0x1d}], 0x3}, 0x4041) syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002835690aadb36020000402505a7a400010000000109024300020100c101090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705827ec935a015b7621f000200070503c8f2b4"], 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000540)={0x4, @sliced={0x204, [0x0, 0x9fb5, 0x3da7, 0x200, 0xa, 0x7, 0x2, 0x3, 0x229c, 0x4, 0x0, 0x8, 0x7, 0x83c5, 0xe7d5, 0x6, 0x727, 0x1, 0x7, 0x7ff, 0x2c, 0xef, 0x3, 0x400, 0x4, 0x5, 0x64, 0x33, 0x0, 0x0, 0x8, 0xfff8, 0x5, 0x8, 0x9, 0xc0, 0x401, 0xf, 0x5, 0x1, 0x8, 0x8000, 0xa4, 0x3, 0x534, 0x6, 0xc, 0x2], 0x4}}) 11.06597776s ago: executing program 4 (id=17): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x7ff, 0x40080) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000480)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x4, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000004c0)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@rand_addr=0x64010100, 0x5000, 0x2000, 0x1}}, 0x44) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) 10.899397917s ago: executing program 4 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001940)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000019c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001b00)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c40), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc6, 0x9, 0x5}}}}]}, 0x44}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000001f00)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.537632604s ago: executing program 0 (id=22): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7d, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x7, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x1, @empty, 0x5}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.405894227s ago: executing program 3 (id=26): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) 7.248323393s ago: executing program 3 (id=27): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.209518977s ago: executing program 3 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.794008479s ago: executing program 2 (id=29): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x148282, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) syz_emit_vhci(0x0, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f00000006c0)='\x00', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000740)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0xfd, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x6, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/142, 0x8e}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffe00}], 0x2, 0x140, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000440)={0xf400, 0x1000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x0, 0x40002) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000540)) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f00000005c0)={0x0, {0x0, 0x0, @qam}}) 6.688953729s ago: executing program 0 (id=30): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x148282, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) syz_emit_vhci(0x0, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f00000006c0)='\x00', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000740)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0xfd, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x6, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/142, 0x8e}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffe00}], 0x2, 0x140, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000440)={0xf400, 0x1000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x0, 0x40002) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000540)) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f00000005c0)={0x0, {0x0, 0x0, @qam}}) 6.687546359s ago: executing program 4 (id=31): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 6.632043985s ago: executing program 4 (id=33): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2a0471a, &(0x7f0000000300)={[{}]}, 0x82, 0x499, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101042, 0x15) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000980)=r2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000009c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000a00)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000a80)='\x00'/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000b00)={0x1, 0x1, &(0x7f0000000b40)='\x00'/246, &(0x7f0000000c40)='\x00'/87, &(0x7f0000000cc0)='\x00'/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000d40)={0x1, 0x0, [{0x0, 0x73, &(0x7f0000001540)='\x00'/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000015c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000001600)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') 3.977884131s ago: executing program 2 (id=34): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r1 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000019d80), 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000019e00)='./mnt\x00', &(0x7f0000019e40)={0x44a801, 0x48, 0x30}, 0x18) renameat2(r1, &(0x7f0000019dc0)='./mnt/fillfile\x00', r2, &(0x7f0000019e80)='mtd0\x00', 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000007c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000000880)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000019c00)='./mnt/fillfile\x00', 0x42, 0x9f) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, 0x0, &(0x7f000001a040)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000019cc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000019c80)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000019d00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xffffffff}, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, r6, 0x80000000}}, 0x48) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}, {&(0x7f0000000200)="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", 0x1c7}, {&(0x7f0000000400)="68fc845e992f9239429637c2a63d00cc68f5808c91c9fd392da7fe6dbd", 0x1d}], 0x3}, 0x4041) syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002835690aadb36020000402505a7a400010000000109024300020100c101090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705827ec935a015b7621f000200070503c8f2b4"], 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000500), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000540)={0x4, @sliced={0x204, [0x0, 0x9fb5, 0x3da7, 0x200, 0xa, 0x7, 0x2, 0x3, 0x229c, 0x4, 0x0, 0x8, 0x7, 0x83c5, 0xe7d5, 0x6, 0x727, 0x1, 0x7, 0x7ff, 0x2c, 0xef, 0x3, 0x400, 0x4, 0x5, 0x64, 0x33, 0x0, 0x0, 0x8, 0xfff8, 0x5, 0x8, 0x9, 0xc0, 0x401, 0xf, 0x5, 0x1, 0x8, 0x8000, 0xa4, 0x3, 0x534, 0x6, 0xc, 0x2], 0x4}}) 3.940870685s ago: executing program 0 (id=35): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) 3.805079579s ago: executing program 3 (id=36): r0 = openat$sysctl(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc96, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000780)={&(0x7f00000007c0), 0xc, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x158}}, 0x0) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) 2.928164807s ago: executing program 0 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fchdir(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001540)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000001580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001600), 0x0, 0x0) read$msr(r5, &(0x7f0000001640)=""/102392, 0x18ff8) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) 2.667267633s ago: executing program 1 (id=39): r0 = openat$sysctl(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r2 = openat$tun(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc96, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x1}}, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x158}}, 0x0) write$tun(r1, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r2, &(0x7f0000000a00)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e21, 0x4e20, 0xc, 0x0, @opaque='EFGH'}}}, 0x20) write$tun(r1, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) 2.478520692s ago: executing program 4 (id=40): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7d, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x7, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x1, @empty, 0x5}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.424187097s ago: executing program 3 (id=41): syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000100)) io_submit(r1, 0x2, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000000c0), 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x4, r0, 0x0, 0x0, 0x1}]) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r2, &(0x7f0000000240), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000004280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332abd7000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="13003180"], 0x38}}, 0x24000000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000042c0)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004300)={0x2020}, 0x2020) pread64(r5, &(0x7f0000006340)=""/208, 0xd0, 0x8d35) read$FUSE(r5, &(0x7f0000006440)={0x2020}, 0x2020) r6 = inotify_init1(0x800) r7 = memfd_create(&(0x7f0000008480)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf9\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xccd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4hi\v\x00\x00\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xeb\x05\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x\x004]PZ\x9e\xd5Y\xf0L\xa4\xbc\x86\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x01\x04\x00\x00\x00\x00\x00\x00h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2\x05\x00\x00\x00\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\xbc\x8d\xed\xf3\x98\x96\x84\xd7\xc2\x88\b\xcc6\xa44\xd7\xed\xc1\x8f\xa7K\xc9KeEk\xd1\xb7\xfb\x88\x12\xd0i\xef(\xddUP\xee;Dk\x84\xfcD\xf0\xd6\xe9\x96B!\x8c\xb8\xc6\'~\x99\x1d2\xdb\xfd=\xa7\x86\x06\x03\xc6Y\xc6\x87\xd13\xd0Y\x90\xe9*~$jQ\xb9\x84\xec\xe9{\xa8%}/\xcaP\xb1a\xa6\xd9\xb2\xe9\xa7\x1b\x00\xb8\x9d\xb0\x01\x04Y6\xcb\xaa\xa9\vE\xd0Q\xcd/#%J\x0f\x97\x96\xa0\xeeb\xe2R\xf5\x16\x1f\xe554q\xbdp\x0f)\x99\xec\xe4\xf9~\x91\x00[B$p\x92\x03i\x7f\x1c\xaf\x06\t\xda\xff\xb8\xf1\xc9\xd7\xc3\xfaN\xeel 40XJ\xe1\xe4Hv=\x81\xdaZ\xd6\aT\x86\xf5\x13+\xa9\x14x\xe7\x19?\xa9#2\xba\x7f1\xf2\xb8$\xa2\xb5*\xef\xd3\x8d\xe4Q\xe6C\xb3AU\xcb\xae\xdcN\xb7Mp\xc8\x04]\x84\x7f\x19\xd3#\x8b@\x9d\x1a\xc5\xc8n^e\xeak\xea9\x15\x9b\x1d\xb7\xe8\xca\xac;\n\\\xa9{B&uO\xb6\xd8\xa6\xb8\xfaA\x1f\xfb\xdcm)}q\x17\x7f\x86b\x1bq\xcb\x81\r\xc2\bb\xd9\xc7t\x88Y\f/\x0f_\x0e\xae\x92\x91\xf8B{\x16\x8a\xa7\xed\x01\x8c\xe9%', 0x7) execveat(r7, &(0x7f0000008780)='\x00', 0x0, 0x0, 0x1000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000087c0)={0xa, 0x4e22}, 0x1c) inotify_add_watch(r6, &(0x7f0000008800)='.\x00', 0x60000526) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008840)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f00000088c0)="b9ae", 0x0, 0xe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x4c) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000008900), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x4001af84, &(0x7f0000008940)) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) r10 = creat(&(0x7f00000089c0)='./file0\x00', 0x6a) write$binfmt_elf32(r10, &(0x7f0000008a00)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r10) 2.127295257s ago: executing program 1 (id=42): write$sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1001}) r1 = openat$tun(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@setlink={0x20, 0x13, 0x5, 0x70bc95, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x20, 0x13, 0x5, 0x70bc97, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f00000006c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newaddr={0x28, 0x14, 0x405, 0x70bc98, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000009c0)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='ABCD'}}}, 0x20) write$tun(r0, &(0x7f0000000a40)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {0x4e20, 0x4e21, 0xc, 0x0, @opaque='IJKL'}}}, 0x20) 1.89907593s ago: executing program 3 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fchdir(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001540)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000001580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001600), 0x0, 0x0) read$msr(r5, &(0x7f0000001640)=""/102392, 0x18ff8) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) 1.628042727s ago: executing program 1 (id=44): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600), 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)='\x00'/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)='\x00'/4096}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2330000000000000000bbff02000000000000000000000000000186009078000002001100000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18020001ffffffffffffff80260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649f"], 0x0) 605.714849ms ago: executing program 1 (id=45): syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) 603.13227ms ago: executing program 2 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 538.767176ms ago: executing program 4 (id=47): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) r5 = fcntl$dupfd(r0, 0x406, r3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00003fe000/0x1000)=nil, 0x1000) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='\x00'/189, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000380)={0x0, r4}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) ustat(0x801, &(0x7f0000000240)) 530.320787ms ago: executing program 1 (id=48): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) 0s ago: executing program 1 (id=49): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x148282, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) syz_emit_vhci(0x0, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f00000006c0)='\x00', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000740)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0xfd, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x6, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/142, 0x8e}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffe00}], 0x2, 0x140, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000440)={0xf400, 0x1000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x0, 0x40002) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000540)) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f00000005c0)={0x0, {0x0, 0x0, @qam}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 47.234769][ T4175] cgroup: Unknown subsys name 'net' [ 47.341924][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.495657][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.102534][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.113236][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 50.119672][ T4197] rdma_rxe: rxe_register_device failed with error -23 [ 50.126721][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 50.133354][ T4197] rdma_rxe: failed to add rxe_eth0 [ 50.137850][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 50.147331][ T4189] rdma_rxe: failed to add rxe_eth0 [ 50.155919][ T4188] rdma_rxe: failed to add rxe_eth0 [ 50.162511][ T4187] rdma_rxe: failed to add rxe_eth0 [ 50.194007][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.222508][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.359087][ T1326] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.358525][ T4190] infiniband rxe0: set active [ 50.379708][ T4190] infiniband rxe0: added rxe_eth0 [ 50.456447][ T4190] RDS/IB: rxe0: added [ 50.460859][ T4190] smc: adding ib device rxe0 with port count 1 [ 50.488151][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 50.501178][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 50.504923][ T4190] smc: ib device rxe0 port 1 has pnetid [ 50.523254][ T1326] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.532333][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.544340][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.562912][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.688601][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.768802][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.784960][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.798758][ T4187] device bridge_slave_0 entered promiscuous mode [ 50.815713][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.822786][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.831913][ T4197] device bridge_slave_0 entered promiscuous mode [ 50.840383][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.848663][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.857859][ T4197] device bridge_slave_1 entered promiscuous mode [ 50.887007][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.894119][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.894176][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.908785][ T4187] device bridge_slave_1 entered promiscuous mode [ 50.922492][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.929886][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.937981][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.954204][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.961925][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.974308][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.997472][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.004544][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.012286][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.021559][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.033655][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.042913][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.050039][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.058574][ T4189] device bridge_slave_1 entered promiscuous mode [ 51.071280][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.072726][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.089862][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.131650][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.144298][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.166299][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.184381][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.206747][ T4197] team0: Port device team_slave_0 added [ 51.214183][ T4187] team0: Port device team_slave_0 added [ 51.238086][ T4197] team0: Port device team_slave_1 added [ 51.246216][ T4188] team0: Port device team_slave_0 added [ 51.253226][ T4188] team0: Port device team_slave_1 added [ 51.272551][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.273575][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.285935][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.316450][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.331720][ T4187] team0: Port device team_slave_1 added [ 51.346006][ T4189] team0: Port device team_slave_0 added [ 51.353333][ T4189] team0: Port device team_slave_1 added [ 51.364135][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.371181][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.397093][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.433133][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.440283][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.466339][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.487683][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.494885][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.521082][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.533467][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.540949][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.566941][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.589167][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.596181][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.625732][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.647403][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.654347][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.680242][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.694929][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.701870][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.727905][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.760896][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.770090][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.837507][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.844162][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.850894][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.859574][ T4189] Cannot create hsr debugfs directory [ 51.867906][ T4187] device hsr_slave_0 entered promiscuous mode [ 51.874379][ T4187] device hsr_slave_1 entered promiscuous mode [ 51.880986][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.888558][ T4187] Cannot create hsr debugfs directory [ 51.897409][ T4197] device hsr_slave_0 entered promiscuous mode [ 51.903962][ T4197] device hsr_slave_1 entered promiscuous mode [ 51.910521][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.918344][ T4197] Cannot create hsr debugfs directory [ 52.095569][ T1326] Bluetooth: hci2: command 0x0409 tx timeout [ 52.105005][ T4191] Bluetooth: hci0: command 0x0409 tx timeout [ 52.111029][ T4191] Bluetooth: hci1: command 0x0409 tx timeout [ 52.130211][ T4191] Bluetooth: hci3: command 0x0409 tx timeout [ 52.161558][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 52.184651][ T1326] Bluetooth: hci4: command 0x0409 tx timeout [ 52.243121][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.250964][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.258787][ T4190] device bridge_slave_0 entered promiscuous mode [ 52.267211][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.274253][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.282157][ T4190] device bridge_slave_1 entered promiscuous mode [ 52.307083][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.318098][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.340405][ T4190] team0: Port device team_slave_0 added [ 52.347984][ T4190] team0: Port device team_slave_1 added [ 52.369549][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.381730][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.388905][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.414865][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.432258][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.441090][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.448075][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.474059][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.493944][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.521097][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.530287][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.550030][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.556807][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.563321][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.571016][ T4190] Cannot create hsr debugfs directory [ 52.587313][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.599677][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.621092][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.696348][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.715392][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.730430][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.739249][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.817462][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.829118][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.865587][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.876429][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.889090][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.908874][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.917897][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.927357][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.960912][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.970330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.980135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.992727][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.001269][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.010228][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.022124][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.031761][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.046895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.056518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.066158][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.073370][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.082164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.091873][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.100643][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.107729][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.145622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.154145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.163203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.173351][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.180472][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.189366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.198190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.206930][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.213953][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.221654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.231011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.239951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.262796][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.271807][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.283151][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.295154][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.319384][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.328593][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.339164][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.348167][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.358153][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.366509][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.374073][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.382943][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.391528][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.402844][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.414173][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.427467][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.439704][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.451951][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.461583][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.471814][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.480872][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.489321][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.498271][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.505972][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.524691][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.533370][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.549903][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.557009][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.572482][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.581386][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.589876][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.596966][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.605291][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.613759][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.622744][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.629817][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.637519][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.646199][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.654487][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.661569][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.703539][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.721810][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.731444][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.746616][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.755769][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.763990][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.773055][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.781968][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.791931][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.800611][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.809456][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.819045][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.828330][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.845301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.855773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.863881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.876247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.893909][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.905724][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.925803][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.937697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.946102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.954497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.963217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.971804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.980567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.989307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.996917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.005477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.013560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.022461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.032241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.042774][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.064165][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.078881][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.093679][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.115112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.124151][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.134410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.145321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.166121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.175284][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 54.181573][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 54.188317][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 54.188460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.194361][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 54.222681][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.246936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.255457][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 54.261799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.280941][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.306743][ T4188] device veth0_vlan entered promiscuous mode [ 54.326753][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.341616][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.351191][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.360189][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.376230][ T4188] device veth1_vlan entered promiscuous mode [ 54.398435][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.413359][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.424198][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.433441][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.440550][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.448416][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.458184][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.466922][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.473951][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.486743][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.495069][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.509556][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.537623][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.553065][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 54.562643][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 54.571032][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.580146][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.589808][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.597489][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.605686][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.614146][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.622777][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.632257][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.640835][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.649178][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.657562][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.679177][ T4188] device veth0_macvtap entered promiscuous mode [ 54.691671][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.708267][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.719903][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.733394][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.751112][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.760081][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.768952][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.777411][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.786085][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.794425][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.803133][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.813329][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.822636][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.830990][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.839005][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.868954][ T4188] device veth1_macvtap entered promiscuous mode [ 54.890278][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.902705][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.922626][ T4189] device veth0_vlan entered promiscuous mode [ 54.953354][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.962079][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.971011][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.979335][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.988044][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.996700][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.006015][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.021693][ T4189] device veth1_vlan entered promiscuous mode [ 55.039722][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.052983][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.063100][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.073309][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.083832][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.097423][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.115827][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.126154][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.137273][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.150946][ T4197] device veth0_vlan entered promiscuous mode [ 55.177265][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 55.187592][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 55.196165][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.204351][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.236718][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.246823][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.256350][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.266719][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.275588][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.282979][ T1498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.295870][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.307986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.316674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.326149][ T4197] device veth1_vlan entered promiscuous mode [ 55.343861][ T4189] device veth0_macvtap entered promiscuous mode [ 55.381402][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.390205][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.398610][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.407483][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.423764][ T4189] device veth1_macvtap entered promiscuous mode [ 55.453271][ T4187] device veth0_vlan entered promiscuous mode [ 55.487257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 55.487551][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.501366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 55.506309][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.515558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.526234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.534028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.542535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.551045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.559498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.568056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.577368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.585282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.592987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.600847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.610625][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.622550][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.633431][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.655180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.663792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.672501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.681066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.691182][ T4190] device veth0_vlan entered promiscuous mode [ 55.699072][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.709694][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.720569][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.732081][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.740975][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.749837][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.758727][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.770329][ T4187] device veth1_vlan entered promiscuous mode [ 55.786875][ T4197] device veth0_macvtap entered promiscuous mode [ 55.796192][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.804116][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.812727][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.821392][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.833394][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.836516][ T4190] device veth1_vlan entered promiscuous mode [ 55.847480][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.867021][ T4197] device veth1_macvtap entered promiscuous mode [ 55.891422][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.912103][ T4187] device veth0_macvtap entered promiscuous mode [ 55.932641][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.941796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.978223][ T4187] device veth1_macvtap entered promiscuous mode [ 55.990447][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.000015][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.008580][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.021341][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.057607][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.069806][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.079755][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.090431][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.102289][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.120776][ T4190] device veth0_macvtap entered promiscuous mode [ 56.133340][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.150308][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.151952][ T4289] loop1: detected capacity change from 0 to 512 [ 56.160731][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.177699][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.190257][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.201224][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.212736][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.222743][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.232277][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.248525][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.259084][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 56.259376][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.268901][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 56.278548][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.284496][ T4289] EXT4-fs (loop1): 1 truncate cleaned up [ 56.294215][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 56.302479][ T4289] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 56.303175][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.319006][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 56.325847][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.341411][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.352022][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.363308][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 56.363845][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.379650][ T4190] device veth1_macvtap entered promiscuous mode [ 56.405927][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.413766][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.416031][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.426037][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.434486][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.452855][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.463535][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.465964][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.473992][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.491868][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.504228][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.512864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.529964][ T4292] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm vhost-4289: bg 0: block 465: padding at end of block bitmap is not set [ 56.531787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.564030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.573094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.581886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.590000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.599046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.612468][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.625769][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.634510][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.643556][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.673295][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.708078][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.719408][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.721919][ T4295] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 56.730377][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.767516][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.778192][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.788250][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.799685][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.812067][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.828857][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.851833][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.860918][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.869698][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.896729][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.917419][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.933743][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.946154][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.956047][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.966656][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.978982][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.989830][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.999719][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.010995][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.022210][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.033129][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.042253][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.051032][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.077238][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.110831][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.153373][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.175172][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.292277][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.326958][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.353295][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.374211][ T4220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.388560][ T4220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.425269][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.434838][ T808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.443413][ T808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.450897][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.471897][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.494082][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.509821][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.532104][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.541685][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.550124][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.564703][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.572214][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.590618][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.369799][ T1326] Bluetooth: hci1: command 0x0419 tx timeout [ 58.423213][ T1326] Bluetooth: hci0: command 0x0419 tx timeout [ 58.504296][ T1326] Bluetooth: hci2: command 0x0419 tx timeout [ 58.602379][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 58.612328][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 58.831450][ T4332] usb usb7: usbfs: process 4332 (syz.3.9) did not claim interface 0 before use [ 58.852653][ T4330] loop2: detected capacity change from 0 to 512 [ 58.989083][ T4330] EXT4-fs (loop2): 1 truncate cleaned up [ 59.071701][ T4330] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 59.755991][ T4328] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.8: bg 0: block 465: padding at end of block bitmap is not set [ 60.011947][ T4348] jffs2: notice: (4348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 60.794606][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.854599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.094637][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 61.129595][ T25] audit: type=1326 audit(1794309529.216:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.164620][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 61.173716][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.174637][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 61.194624][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 61.204622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 61.296933][ T4361] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 61.314625][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 61.338414][ T25] audit: type=1326 audit(1794309529.216:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.364229][ T25] audit: type=1326 audit(1794309529.246:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.390762][ T25] audit: type=1326 audit(1794309529.246:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.415091][ T25] audit: type=1326 audit(1794309529.246:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.440937][ T25] audit: type=1326 audit(1794309529.246:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.466735][ T25] audit: type=1326 audit(1794309529.246:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.490827][ T25] audit: type=1326 audit(1794309529.246:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.515218][ T25] audit: type=1326 audit(1794309529.246:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 61.541264][ T26] usb 1-1: device descriptor read/64, error -71 [ 61.567130][ T25] audit: type=1326 audit(1794309529.246:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ff4fc874e code=0x7ffc0000 [ 61.829104][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.836113][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 62.084648][ T26] usb 1-1: device descriptor read/64, error -71 [ 62.305305][ T26] usb usb1-port1: attempt power cycle [ 64.169875][ T4379] jffs2: notice: (4379) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 64.241428][ T4388] device syzkaller0 entered promiscuous mode [ 65.064739][ T1109] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.264799][ T1109] usb 3-1: device descriptor read/64, error -71 [ 65.548757][ T1109] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 65.748705][ T1109] usb 3-1: device descriptor read/64, error -71 [ 65.876764][ T1109] usb usb3-port1: attempt power cycle [ 66.174597][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 66.233786][ T25] kauditd_printk_skb: 29 callbacks suppressed [ 66.233825][ T25] audit: type=1326 audit(1794309534.316:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 67.489840][ T25] audit: type=1326 audit(1794309534.356:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 67.504112][ T4439] loop4: detected capacity change from 0 to 512 [ 67.514460][ T25] audit: type=1326 audit(1794309534.356:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 67.543928][ T25] audit: type=1326 audit(1794309534.356:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 67.664624][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.430194][ T25] audit: type=1326 audit(1794309534.356:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 68.565141][ T4445] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 68.596836][ T25] audit: type=1326 audit(1794309534.366:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 68.623557][ T25] audit: type=1326 audit(1794309534.366:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 68.650142][ T25] audit: type=1326 audit(1794309534.366:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 68.678133][ T25] audit: type=1326 audit(1794309534.366:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 68.707041][ T25] audit: type=1326 audit(1794309534.366:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c050e3f19 code=0x7ffc0000 [ 68.769442][ T4439] EXT4-fs (loop4): 1 truncate cleaned up [ 68.806802][ T4439] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 68.889280][ T4459] jffs2: notice: (4459) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 69.615011][ T4451] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 69.772311][ T4437] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.33: bg 0: block 465: padding at end of block bitmap is not set [ 70.184986][ T4255] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.413415][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 70.423906][ T4255] usb 3-1: device descriptor read/64, error -71 [ 70.476466][ T4480] process 'syz.3.41' launched '/dev/fd/8' with NULL argv: empty string added [ 70.814840][ T4255] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 71.119340][ T4255] usb 3-1: device descriptor read/64, error -71 [ 71.138578][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.165076][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.557284][ T4255] usb usb3-port1: attempt power cycle [ 72.214724][ T4514] syz.4.47 uses obsolete (PF_INET,SOCK_PACKET) [ 73.299481][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 73.299562][ T25] audit: type=1326 audit(1794309541.386:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.1.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5007f19 code=0x7ffc0000 [ 73.351278][ T4524] ================================================================== [ 73.359584][ T4524] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 73.366814][ T4524] Read of size 8 at addr ffff88802b46c418 by task syz.1.49/4524 [ 73.374452][ T4524] [ 73.376784][ T4524] CPU: 0 PID: 4524 Comm: syz.1.49 Not tainted syzkaller #0 [ 73.383987][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 73.394060][ T4524] Call Trace: [ 73.397340][ T4524] [ 73.400269][ T4524] dump_stack_lvl+0x188/0x250 [ 73.404960][ T4524] ? show_regs_print_info+0x20/0x20 [ 73.410174][ T4524] ? _printk+0xda/0x130 [ 73.414337][ T4524] ? dvb_device_open+0xc5/0x360 [ 73.419214][ T4524] ? load_image+0x410/0x410 [ 73.423735][ T4524] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 73.429206][ T4524] print_address_description+0x60/0x2d0 [ 73.434764][ T4524] ? dvb_device_open+0xc5/0x360 [ 73.439622][ T4524] kasan_report+0xdf/0x130 [ 73.444047][ T4524] ? dvb_device_open+0xc5/0x360 [ 73.448909][ T4524] dvb_device_open+0xc5/0x360 [ 73.453600][ T4524] chrdev_open+0x585/0x5f0 [ 73.458026][ T4524] ? cd_forget+0x160/0x160 [ 73.462455][ T4524] ? fsnotify_perm+0x3a7/0x560 [ 73.467224][ T4524] ? cd_forget+0x160/0x160 [ 73.471646][ T4524] do_dentry_open+0x7f7/0xf90 [ 73.476327][ T4524] ? vfs_open+0x2b/0x80 [ 73.480489][ T4524] path_openat+0x2718/0x2fb0 [ 73.485088][ T4524] ? preempt_schedule_irq+0xe6/0x160 [ 73.490415][ T4524] ? do_filp_open+0x400/0x400 [ 73.495104][ T4524] ? lock_release+0x5a4/0x8a0 [ 73.499800][ T4524] do_filp_open+0x1df/0x400 [ 73.504324][ T4524] ? vfs_tmpfile+0x300/0x300 [ 73.508941][ T4524] ? _raw_spin_unlock+0x24/0x40 [ 73.513796][ T4524] ? alloc_fd+0x59e/0x650 [ 73.518148][ T4524] do_sys_openat2+0x14b/0x500 [ 73.522831][ T4524] ? __lock_acquire+0x7d40/0x7d40 [ 73.527864][ T4524] ? do_sys_open+0xe0/0xe0 [ 73.532288][ T4524] ? lock_chain_count+0x20/0x20 [ 73.537150][ T4524] __x64_sys_openat+0x135/0x160 [ 73.542009][ T4524] do_syscall_64+0x4c/0xa0 [ 73.546427][ T4524] ? clear_bhb_loop+0x30/0x80 [ 73.551111][ T4524] ? clear_bhb_loop+0x30/0x80 [ 73.555792][ T4524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.561713][ T4524] RIP: 0033:0x7f2ff4fc874e [ 73.566138][ T4524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.585747][ T4524] RSP: 002b:00007f2ff3233b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.594190][ T4524] RAX: ffffffffffffffda RBX: 00007f2ff32346c0 RCX: 00007f2ff4fc874e [ 73.602168][ T4524] RDX: 0000000000040002 RSI: 00007f2ff3233c00 RDI: ffffffffffffff9c [ 73.610159][ T4524] RBP: 00007f2ff3233c00 R08: 0000000000000000 R09: 0000000000000000 [ 73.618136][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 73.626110][ T4524] R13: 00007f2ff5285128 R14: 00007f2ff5285090 R15: 00007ffec5b78328 [ 73.634100][ T4524] [ 73.637116][ T4524] [ 73.639435][ T4524] Allocated by task 1: [ 73.643493][ T4524] __kasan_kmalloc+0xaf/0xe0 [ 73.648088][ T4524] dvb_register_device+0x300/0x1dc0 [ 73.653292][ T4524] dvb_register_frontend+0x629/0x900 [ 73.658579][ T4524] vidtv_bridge_probe+0x9c1/0xf30 [ 73.663608][ T4524] platform_probe+0x137/0x1c0 [ 73.668288][ T4524] really_probe+0x276/0xc70 [ 73.672792][ T4524] __driver_probe_device+0x1f5/0x390 [ 73.678085][ T4524] driver_probe_device+0x4f/0x420 [ 73.683115][ T4524] __driver_attach+0x45d/0x660 [ 73.687881][ T4524] bus_for_each_dev+0x182/0x1f0 [ 73.692739][ T4524] bus_add_driver+0x324/0x5d0 [ 73.697422][ T4524] driver_register+0x32d/0x430 [ 73.702187][ T4524] vidtv_bridge_init+0x45/0x80 [ 73.706953][ T4524] do_one_initcall+0x272/0x730 [ 73.711722][ T4524] do_initcall_level+0x13d/0x1f0 [ 73.716661][ T4524] do_initcalls+0x4b/0x90 [ 73.720993][ T4524] kernel_init_freeable+0x3d5/0x560 [ 73.726194][ T4524] kernel_init+0x19/0x1b0 [ 73.730527][ T4524] ret_from_fork+0x1f/0x30 [ 73.734947][ T4524] [ 73.737269][ T4524] Freed by task 4445: [ 73.741241][ T4524] kasan_set_track+0x4b/0x70 [ 73.745834][ T4524] kasan_set_free_info+0x1f/0x40 [ 73.750773][ T4524] ____kasan_slab_free+0xd5/0x110 [ 73.755810][ T4524] slab_free_freelist_hook+0xec/0x170 [ 73.761184][ T4524] kfree+0xef/0x2a0 [ 73.764989][ T4524] dvb_device_open+0x2d2/0x360 [ 73.769759][ T4524] chrdev_open+0x585/0x5f0 [ 73.774186][ T4524] do_dentry_open+0x7f7/0xf90 [ 73.778862][ T4524] path_openat+0x2718/0x2fb0 [ 73.783455][ T4524] do_filp_open+0x1df/0x400 [ 73.787956][ T4524] do_sys_openat2+0x14b/0x500 [ 73.792631][ T4524] __x64_sys_openat+0x135/0x160 [ 73.797481][ T4524] do_syscall_64+0x4c/0xa0 [ 73.801898][ T4524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.807799][ T4524] [ 73.810121][ T4524] The buggy address belongs to the object at ffff88802b46c400 [ 73.810121][ T4524] which belongs to the cache kmalloc-256 of size 256 [ 73.824173][ T4524] The buggy address is located 24 bytes inside of [ 73.824173][ T4524] 256-byte region [ffff88802b46c400, ffff88802b46c500) [ 73.837364][ T4524] The buggy address belongs to the page: [ 73.843001][ T4524] page:ffffea0000ad1b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b46c [ 73.853150][ T4524] head:ffffea0000ad1b00 order:1 compound_mapcount:0 [ 73.859733][ T4524] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 73.867730][ T4524] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017841b40 [ 73.876310][ T4524] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 73.884891][ T4524] page dumped because: kasan: bad access detected [ 73.891304][ T4524] page_owner tracks the page as allocated [ 73.897030][ T4524] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2838, ts 10688392234, free_ts 0 [ 73.915267][ T4524] get_page_from_freelist+0x24f6/0x2670 [ 73.920836][ T4524] __alloc_pages+0x1ee/0x480 [ 73.925432][ T4524] new_slab+0xc0/0x4b0 [ 73.929502][ T4524] ___slab_alloc+0x807/0xdd0 [ 73.934096][ T4524] kmem_cache_alloc_trace+0xf9/0x290 [ 73.939382][ T4524] kthread+0x10a/0x520 [ 73.943451][ T4524] ret_from_fork+0x1f/0x30 [ 73.947873][ T4524] page_owner free stack trace missing [ 73.953233][ T4524] [ 73.955550][ T4524] Memory state around the buggy address: [ 73.961178][ T4524] ffff88802b46c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.969243][ T4524] ffff88802b46c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.977303][ T4524] >ffff88802b46c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.985368][ T4524] ^ [ 73.990212][ T4524] ffff88802b46c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.998271][ T4524] ffff88802b46c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.006337][ T4524] ================================================================== [ 74.014391][ T4524] Disabling lock debugging due to kernel taint [ 74.021464][ T4524] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.028659][ T4524] CPU: 0 PID: 4524 Comm: syz.1.49 Tainted: G B syzkaller #0 [ 74.037247][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 74.047303][ T4524] Call Trace: [ 74.050577][ T4524] [ 74.053504][ T4524] dump_stack_lvl+0x188/0x250 [ 74.058190][ T4524] ? show_regs_print_info+0x20/0x20 [ 74.063388][ T4524] ? load_image+0x410/0x410 [ 74.067900][ T4524] panic+0x2f8/0x850 [ 74.071796][ T4524] ? bpf_jit_dump+0xd0/0xd0 [ 74.076304][ T4524] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 74.081939][ T4524] ? check_panic_on_warn+0x6c/0xa0 [ 74.087049][ T4524] ? dvb_device_open+0xc5/0x360 [ 74.091901][ T4524] check_panic_on_warn+0x80/0xa0 [ 74.096843][ T4524] ? dvb_device_open+0xc5/0x360 [ 74.101691][ T4524] end_report+0x6d/0xf0 [ 74.105849][ T4524] kasan_report+0x102/0x130 [ 74.110354][ T4524] ? dvb_device_open+0xc5/0x360 [ 74.115209][ T4524] dvb_device_open+0xc5/0x360 [ 74.119888][ T4524] chrdev_open+0x585/0x5f0 [ 74.124308][ T4524] ? cd_forget+0x160/0x160 [ 74.128728][ T4524] ? fsnotify_perm+0x3a7/0x560 [ 74.133494][ T4524] ? cd_forget+0x160/0x160 [ 74.137908][ T4524] do_dentry_open+0x7f7/0xf90 [ 74.142584][ T4524] ? vfs_open+0x2b/0x80 [ 74.146742][ T4524] path_openat+0x2718/0x2fb0 [ 74.151341][ T4524] ? preempt_schedule_irq+0xe6/0x160 [ 74.156637][ T4524] ? do_filp_open+0x400/0x400 [ 74.161321][ T4524] ? lock_release+0x5a4/0x8a0 [ 74.166010][ T4524] do_filp_open+0x1df/0x400 [ 74.170513][ T4524] ? vfs_tmpfile+0x300/0x300 [ 74.175110][ T4524] ? _raw_spin_unlock+0x24/0x40 [ 74.179958][ T4524] ? alloc_fd+0x59e/0x650 [ 74.184291][ T4524] do_sys_openat2+0x14b/0x500 [ 74.188970][ T4524] ? __lock_acquire+0x7d40/0x7d40 [ 74.193996][ T4524] ? do_sys_open+0xe0/0xe0 [ 74.198449][ T4524] ? lock_chain_count+0x20/0x20 [ 74.203307][ T4524] __x64_sys_openat+0x135/0x160 [ 74.208156][ T4524] do_syscall_64+0x4c/0xa0 [ 74.212574][ T4524] ? clear_bhb_loop+0x30/0x80 [ 74.217251][ T4524] ? clear_bhb_loop+0x30/0x80 [ 74.221930][ T4524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.227825][ T4524] RIP: 0033:0x7f2ff4fc874e [ 74.232236][ T4524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.251840][ T4524] RSP: 002b:00007f2ff3233b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.260252][ T4524] RAX: ffffffffffffffda RBX: 00007f2ff32346c0 RCX: 00007f2ff4fc874e [ 74.268227][ T4524] RDX: 0000000000040002 RSI: 00007f2ff3233c00 RDI: ffffffffffffff9c [ 74.276198][ T4524] RBP: 00007f2ff3233c00 R08: 0000000000000000 R09: 0000000000000000 [ 74.284164][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 74.292130][ T4524] R13: 00007f2ff5285128 R14: 00007f2ff5285090 R15: 00007ffec5b78328 [ 74.300104][ T4524] [ 74.303237][ T4524] Kernel Offset: disabled [ 74.307561][ T4524] Rebooting in 86400 seconds..