last executing test programs: 18.304573661s ago: executing program 1 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.62448654s ago: executing program 1 (id=353): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}], 0xd8}}], 0x1, 0x48090) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC], 0x101) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x140}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.333293553s ago: executing program 1 (id=367): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', 0x0}) syz_usb_connect(0x3, 0x49, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 9.934373661s ago: executing program 2 (id=375): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x235, &(0x7f0000000700)="$eJzs209PE0EYx/Hf7ralIgpi/BMSExMT40WqQEJ6Ul6AF48mHggW0ljUiBcIifImvHv15Esg0ffh0Qs9eDMh6ZrZnabd7trdxW2r5ftJ6A6deWaeLcx0ZykCcG49Dh4dOaoGJd/339+W9OyJpB9LwXO3JpohgFHx7bHj93jdOgBTzuucNfJ5+joxd4llBPhntTfMu31Vx470/efh1on9qsauFEqJ1w/tDTcsONJJX/yFnNchSyUt9MfPSrqYIQf/kxMc76o7vsn8cGsu47jtozB+VtH8tTDQ8NS+YLH48Pzv3VFZffGXJc1LQTdXJC1KuirNmLbX5MqNjF+x3/Xib4ZPHGU8DQAAAAAAhjK7z+W/ipaWUzvwZLe+MWYfvN1sNR7kG7i7fVbZxj/8U4MUFRu/MqzR4KY/IX410+BOr1gODzM2/tR/3XqRMWegKG6++R+7LWh+o49TOginw2JinReb/+Xs2dg7gtvNj7liAIT29g9ebrZajbdFFh4NayPl7dCsCAVnmFz4bAr6Fd7oH/FYaQU3ocostmftsPsHmaJT/aD0Nn6GNtNUKBX7On+VMzhPS5FJ9MX+bHP0/DSpqqLIPI3wxrwwARi52rvdN7W9/YP7zd3NncZO49Xaer2+vra6Uq8Fl+Xm0Z+fdJYARqH37p9QmfdDPAAAAAAAAAAAAAAAYCKuS7oRlL51coTxyQAAAADgPzSOf4qa9DkCAAAAAAAAAAAAADDtfgcAAP//mg0zKQ==") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 9.86827681s ago: executing program 0 (id=376): ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4010) 9.7496061s ago: executing program 2 (id=377): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}], 0xd8}}], 0x1, 0x48090) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC], 0x101) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x140}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.74922814s ago: executing program 0 (id=378): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) r3 = socket(0x2, 0x80805, 0x0) flistxattr(r3, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.445450523s ago: executing program 0 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) utimensat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x2, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r7 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) 7.657729672s ago: executing program 1 (id=384): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) 7.507672547s ago: executing program 3 (id=386): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) 7.488439504s ago: executing program 2 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.421641223s ago: executing program 3 (id=388): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x301, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40006) 7.367503254s ago: executing program 4 (id=389): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x44004) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.964776617s ago: executing program 3 (id=390): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250100010008000100030004000800020002"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 6.916727149s ago: executing program 2 (id=391): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = eventfd(0x401) write$eventfd(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000180)) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb9, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 6.910597728s ago: executing program 0 (id=392): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) r3 = socket(0x2, 0x80805, 0x0) flistxattr(r3, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.757664653s ago: executing program 3 (id=393): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 4.065347885s ago: executing program 2 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.91537204s ago: executing program 1 (id=395): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0xd2, 0x8}]}) write$ppp(r0, &(0x7f0000000480)='\x00\x00', 0x2) 3.667343069s ago: executing program 0 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) accept(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b4, 0x800, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e8, 0x2, 0x3, 0x10f, 0x0, r4}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) 3.536004447s ago: executing program 4 (id=397): syz_mount_image$fuse(0x0, 0x0, 0x400a8, 0x0, 0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) syz_open_procfs(0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180), &(0x7f0000000640)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001300)=""/4068, 0xfe4}, {&(0x7f00000001c0)=""/168, 0xa8}, {0x0}, {&(0x7f0000000680)=""/152, 0x98}], 0x4}, 0x12100) 1.937551382s ago: executing program 0 (id=398): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}], 0xd8}}], 0x1, 0x48090) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC], 0x101) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x140}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.937163681s ago: executing program 4 (id=399): r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) syz_clone3(&(0x7f0000000300)={0x100000400, &(0x7f0000000040), 0x0, 0x0, {0x11}, &(0x7f00000005c0)=""/199, 0xc7, &(0x7f00000006c0)=""/235, &(0x7f0000000240)=[0x0], 0x1, {r0}}, 0x58) 1.936816731s ago: executing program 2 (id=400): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x0, 0x301, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40006) 1.813720651s ago: executing program 4 (id=401): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) 1.780481116s ago: executing program 4 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.756798031s ago: executing program 3 (id=403): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="190f0000000000000077b57f1bd2c0af2d0ba3929d11056951f2470aaa91512256e00f27c202f495be730b63b8fd4a00867f45cd91dccd7503abd200aee7276e2f3518e9add2d417f20f3be87ec8", 0x4e) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x7, 0x1002, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r5, 0x80000001, 0x4) 1.261510069s ago: executing program 4 (id=404): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x36, 0x1000, 0x3a, 0x3ff, 0x3, 0x5}, 0x1c) socket$inet(0x2, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x1d, 0x8e, 0x1}, 0x28) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xb}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) 55.302689ms ago: executing program 1 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) utimensat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x2, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r7 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) 0s ago: executing program 3 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x4000c474, 0x1, @qam={0xffffffff, 0x14, 0x13}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f00000000c0)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) kcmp(r1, r5, 0x2bec7f44dd5c01a, r3, r2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0xc4}}, 0x8044) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x2001, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 55.353655][ T4173] cgroup: Unknown subsys name 'net' [ 55.488778][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.962200][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.971398][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.035244][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 59.059701][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.077656][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.129746][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.144624][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.152069][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.160437][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.188151][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.195504][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.204068][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.288714][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.295981][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.304475][ T4188] device bridge_slave_0 entered promiscuous mode [ 59.314253][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.332191][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.354167][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.361258][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.369870][ T4188] device bridge_slave_1 entered promiscuous mode [ 59.382331][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.389827][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.397741][ T4187] device bridge_slave_0 entered promiscuous mode [ 59.410557][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.418356][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.426602][ T4191] device bridge_slave_0 entered promiscuous mode [ 59.447153][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.454324][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.462256][ T4187] device bridge_slave_1 entered promiscuous mode [ 59.488452][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.495781][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.504493][ T4191] device bridge_slave_1 entered promiscuous mode [ 59.520153][ T4185] team0: Port device team_slave_0 added [ 59.535255][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.553489][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.565063][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.575401][ T4185] team0: Port device team_slave_1 added [ 59.582496][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.592584][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.599918][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.607973][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.622645][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.630071][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.637870][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.664273][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.676252][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.724253][ T4187] team0: Port device team_slave_0 added [ 59.732427][ T4188] team0: Port device team_slave_0 added [ 59.739795][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.747060][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.773644][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.794990][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.806119][ T4187] team0: Port device team_slave_1 added [ 59.813565][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.824045][ T4188] team0: Port device team_slave_1 added [ 59.837181][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.844177][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.870546][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.884252][ T4191] team0: Port device team_slave_0 added [ 59.919376][ T4191] team0: Port device team_slave_1 added [ 59.939940][ T4186] team0: Port device team_slave_0 added [ 59.946209][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.953480][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.979733][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.997351][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.004434][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.030745][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.043456][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.050419][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.076963][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.090008][ T4186] team0: Port device team_slave_1 added [ 60.104978][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.111937][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.138221][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.161159][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.168235][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.194588][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.216001][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.223163][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.249454][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.272279][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.279783][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.322640][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.330064][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.356342][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.377499][ T4191] device hsr_slave_0 entered promiscuous mode [ 60.384496][ T4191] device hsr_slave_1 entered promiscuous mode [ 60.391654][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.399744][ T4191] Cannot create hsr debugfs directory [ 60.416613][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.423929][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.450137][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.483062][ T4187] device hsr_slave_0 entered promiscuous mode [ 60.489954][ T4187] device hsr_slave_1 entered promiscuous mode [ 60.496928][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.504598][ T4187] Cannot create hsr debugfs directory [ 60.519381][ T4188] device hsr_slave_0 entered promiscuous mode [ 60.526228][ T4188] device hsr_slave_1 entered promiscuous mode [ 60.532820][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.540796][ T4188] Cannot create hsr debugfs directory [ 60.629155][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.637514][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.644298][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.651867][ T4186] Cannot create hsr debugfs directory [ 60.694037][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 60.700767][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 60.703072][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 60.713227][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 60.723229][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 60.922610][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.934749][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.944173][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.959094][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.000689][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.010054][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.021864][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.031583][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.101145][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.127550][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.139693][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.149959][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.199797][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.224296][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.234448][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.246784][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.265686][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.278114][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.291774][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.313316][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.322771][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.332571][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.339927][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.348243][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.359171][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.368381][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.375533][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.384054][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.392594][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.401619][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.410290][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.427777][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.448133][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.457079][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.468549][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.477660][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.486618][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.495502][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.520584][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.535288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.546059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.563654][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.594474][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.608223][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.618357][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.626990][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.636215][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.645407][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.652469][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.668007][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.679836][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.713980][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.725041][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.733798][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.740972][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.750795][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.787477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.797223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.807080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.817125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.825862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.836959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.845826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.855915][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.868172][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.884736][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.895287][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.903840][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.912222][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.932331][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.952322][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.990847][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.009557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.026577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.048701][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.072225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.082206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.098981][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.106145][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.120751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.129038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.138176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.160338][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.169868][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.179652][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.186840][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.195356][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.219287][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.228932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.246322][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.266943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.275952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.283803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.291708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.300978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.309701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.318549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.328466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.336907][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.344003][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.357889][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.383714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.391901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.401422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.411655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.420984][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.428430][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.436483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.445633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.457715][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.467137][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.498599][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.507776][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.519126][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.528487][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.537337][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.559542][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.571404][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.591912][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.601059][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.617104][ T4187] device veth0_vlan entered promiscuous mode [ 62.650702][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.662509][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.672126][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.681559][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.691864][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.700986][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.710690][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.720563][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.729903][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.738931][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.747781][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.756625][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.765496][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.773401][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 62.774370][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 62.780427][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.790943][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 62.793503][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 62.799958][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.805210][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 62.818980][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.827660][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.836759][ T4185] device veth0_vlan entered promiscuous mode [ 62.847937][ T4187] device veth1_vlan entered promiscuous mode [ 62.860574][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.872582][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.894101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.902407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.912470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.955191][ T4185] device veth1_vlan entered promiscuous mode [ 62.989903][ T4187] device veth0_macvtap entered promiscuous mode [ 63.006550][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.015675][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.024835][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.033644][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.041870][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.051079][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.059965][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.068740][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.086319][ T4187] device veth1_macvtap entered promiscuous mode [ 63.107061][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.115924][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.131549][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.140773][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.154062][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.161246][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.169152][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.190158][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.207101][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.228868][ T4185] device veth0_macvtap entered promiscuous mode [ 63.238397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.247226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.255542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.267519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.277468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.287247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.296261][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.303518][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.311460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.320801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.330744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.358592][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.371155][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.390480][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.408545][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.422432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.432725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.442503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.450014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.457839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.466795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.475503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.486130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.495434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.504384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.512776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.521914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.530261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.539100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.548330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.556284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.565624][ T4185] device veth1_macvtap entered promiscuous mode [ 63.578178][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.587126][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.596605][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.605564][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.673106][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.702969][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.722279][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.741553][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.767241][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.804732][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.818702][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.829813][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.838035][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.847309][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.857023][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.866111][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.915899][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.928550][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.937837][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.947128][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.969164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.978465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.009228][ T4188] device veth0_vlan entered promiscuous mode [ 64.025294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.038531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.047399][ T419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.048120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.065221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.068810][ T419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.079759][ T4191] device veth0_vlan entered promiscuous mode [ 64.089468][ T4188] device veth1_vlan entered promiscuous mode [ 64.110094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.118393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.126881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.135987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.145201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.153193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.184609][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.211605][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.220852][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.229556][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.245116][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.247357][ T4191] device veth1_vlan entered promiscuous mode [ 64.269171][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.274605][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.285482][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.293936][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.302381][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.321796][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.331143][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.358028][ T4188] device veth0_macvtap entered promiscuous mode [ 64.394475][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.402339][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.422373][ T4186] device veth0_vlan entered promiscuous mode [ 64.439778][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.448715][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.458406][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.467384][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.479178][ T4188] device veth1_macvtap entered promiscuous mode [ 64.500316][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.502692][ T4191] device veth0_macvtap entered promiscuous mode [ 64.515229][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.520194][ T4191] device veth1_macvtap entered promiscuous mode [ 64.535986][ T4186] device veth1_vlan entered promiscuous mode [ 64.543385][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.551625][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.568422][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.586702][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.600833][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.623230][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.631738][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.640217][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.676673][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.687644][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.698745][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.709745][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.722205][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.744425][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.755463][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.768972][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.779800][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.790249][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.801083][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.814557][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.837414][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.846058][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.855427][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 64.861419][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.862018][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 64.873562][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.877576][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 64.885587][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.896665][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 64.907489][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.917801][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 64.931311][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.952600][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.963355][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.976163][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.987387][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.997495][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.007093][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.023963][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.038124][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.049484][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.063946][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.078198][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.091079][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.104235][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.114439][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 65.114509][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.134208][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.145734][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.156552][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.167897][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.185798][ T4186] device veth0_macvtap entered promiscuous mode [ 65.195128][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.204499][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.213743][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.225920][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.235841][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.244955][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.256906][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.285598][ T4186] device veth1_macvtap entered promiscuous mode [ 65.301470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.330577][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.352506][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.362717][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.374748][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.385091][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.396312][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.406707][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.418337][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.425693][ T4263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.430121][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.522704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.541058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.566482][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.596099][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.615999][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.626856][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.638467][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.649385][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.660530][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.671556][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.684497][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.716285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.726905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.223404][ T2290] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.655878][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.672116][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.681484][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.698049][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.813218][ T2290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.826126][ T2290] usb 3-1: config 0 has no interfaces? [ 66.831652][ T2290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.854781][ T2290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.877478][ T2290] usb 3-1: config 0 descriptor?? [ 66.886335][ T419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.903419][ T419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.908285][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.929163][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.939040][ T2290] Bluetooth: hci3: command 0x0419 tx timeout [ 66.947861][ T2290] Bluetooth: hci0: command 0x0419 tx timeout [ 66.955227][ T2290] Bluetooth: hci2: command 0x0419 tx timeout [ 66.966422][ T2290] Bluetooth: hci1: command 0x0419 tx timeout [ 66.972611][ T2290] Bluetooth: hci4: command 0x0419 tx timeout [ 66.972981][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.034703][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.059229][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.067772][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.076917][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.077161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.095476][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.134071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.137089][ T419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.163517][ T419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.183332][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.223274][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.231232][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.267221][ T23] usb 3-1: USB disconnect, device number 2 [ 67.267863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.323073][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 67.333547][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.342952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 68.281740][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.674269][ T4287] loop1: detected capacity change from 0 to 32768 [ 69.100971][ T4287] XFS (loop1): Mounting V5 Filesystem [ 69.261617][ T4287] XFS (loop1): Ending clean mount [ 69.277284][ T4287] XFS (loop1): Quotacheck needed: Please wait. [ 69.443433][ T4322] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 69.717804][ T4287] XFS (loop1): Quotacheck: Done. [ 70.177012][ T4185] XFS (loop1): Unmounting Filesystem [ 70.803180][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.822977][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.832011][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.841157][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.850176][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.859188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.868309][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.600369][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.614161][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.980666][ T4363] loop5: detected capacity change from 0 to 4095 [ 75.059105][ T4363] loop9: detected capacity change from 0 to 4094 [ 75.080027][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 75.095809][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.106908][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.118289][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.129661][ C1] Buffer I/O error on dev loop5, logical block 480, async page read [ 75.133062][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.148945][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.210485][ T4365] tipc: Started in network mode [ 75.221511][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.226974][ T4365] tipc: Node identity b26ec6bd09ca, cluster identity 4711 [ 75.232683][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.248007][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.259263][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.287703][ T4349] loop0: detected capacity change from 0 to 32768 [ 75.288243][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.305250][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.326918][ T4365] tipc: Enabled bearer , priority 0 [ 75.336466][ T4366] device syzkaller0 entered promiscuous mode [ 75.344284][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.355235][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.364101][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.375046][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.386502][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.397458][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.407359][ T4349] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.19 (4349) [ 75.411917][ T4177] ldm_validate_partition_table(): Disk read failed. [ 75.450936][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.463954][ T4177] Dev loop9: unable to read RDB block 0 [ 75.482889][ T4177] loop9: unable to read partition table [ 75.483977][ T4365] tipc: Resetting bearer [ 75.516540][ T4363] ldm_validate_partition_table(): Disk read failed. [ 75.522288][ T4349] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 75.532724][ T4349] BTRFS info (device loop0): enabling ssd optimizations [ 75.539982][ T4349] BTRFS info (device loop0): using spread ssd allocation scheme [ 75.547945][ T4349] BTRFS info (device loop0): use no compression [ 75.560869][ T4363] Dev loop9: unable to read RDB block 0 [ 75.565238][ T4349] BTRFS info (device loop0): turning on sync discard [ 75.577900][ T4369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 75.587060][ T4349] BTRFS error (device loop0): unrecognized commit_interval value 0x0000000080000000 [ 75.590083][ T4363] loop9: unable to read partition table [ 75.619629][ T4349] BTRFS error (device loop0): open_ctree failed: -22 [ 75.653085][ T4363] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 75.653085][ T4363] ) failed (rc=-5) [ 75.687104][ T4175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4175) [ 75.701190][ T4369] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 75.731265][ T4369] team0: Port device team_slave_0 removed [ 75.770444][ T4364] tipc: Resetting bearer [ 75.832728][ T4364] tipc: Disabling bearer [ 76.220889][ T4385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.520631][ T4403] loop0: detected capacity change from 0 to 256 [ 77.204989][ T4411] loop0: detected capacity change from 0 to 2048 [ 77.226664][ T4413] Zero length message leads to an empty skb [ 77.282155][ T4411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.374900][ T4427] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 82.825788][ T13] cfg80211: failed to load regulatory.db [ 84.332368][ T4465] loop2: detected capacity change from 0 to 512 [ 84.463968][ T4465] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.533073][ T4465] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.643435][ T4465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.786166][ T4465] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.856996][ T4484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'. [ 84.952260][ T4465] EXT4-fs (loop2): 1 truncate cleaned up [ 85.023150][ T4465] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 85.102555][ T4486] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.117993][ T4486] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 85.748443][ T4498] loop0: detected capacity change from 0 to 64 [ 85.849467][ T26] audit: type=1800 audit(1772092262.895:2): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.63" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 86.127801][ T4502] loop0: detected capacity change from 0 to 40427 [ 86.151598][ T4502] F2FS-fs (loop0): invalid crc value [ 86.186946][ T4502] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.217358][ T4502] F2FS-fs (loop0): Start checkpoint disabled! [ 86.248990][ T4502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 86.503269][ T26] audit: type=1800 audit(1772092263.545:3): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.66" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 88.045943][ T26] audit: type=1800 audit(1772092264.625:4): pid=4512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.66" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 88.200382][ T4239] attempt to access beyond end of device [ 88.200382][ T4239] loop0: rw=2049, want=40976, limit=40427 [ 89.196655][ T4539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 90.362928][ C1] sched: RT throttling activated [ 90.552828][ T4523] loop2: detected capacity change from 0 to 32768 [ 90.730054][ T4523] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.71 (4523) [ 90.760053][ T4523] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 91.742628][ T4523] BTRFS info (device loop2): enabling auto defrag [ 91.758398][ T4523] BTRFS info (device loop2): use no compression [ 91.964885][ T4523] BTRFS info (device loop2): force clearing of disk cache [ 92.036034][ T4523] BTRFS info (device loop2): max_inline at 4096 [ 92.042370][ T4523] BTRFS info (device loop2): disabling free space tree [ 92.164572][ T4523] BTRFS info (device loop2): has skinny extents [ 93.006444][ T4523] BTRFS error (device loop2): open_ctree failed: -12 [ 93.143845][ T4626] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 93.166216][ T4628] fuse: Unknown parameter 'user_i00000000000000000000' [ 93.301186][ T4635] tipc: Enabling of bearer rejected, failed to enable media [ 94.343124][ T4232] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.433065][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.364522][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 96.503173][ T4232] usb 4-1: string descriptor 0 read error: -71 [ 96.509855][ T4232] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 96.534448][ T23] usb 1-1: device descriptor read/all, error -71 [ 96.562422][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 96.752982][ T4232] usb 4-1: config 0 descriptor?? [ 96.956638][ T4232] usb 4-1: can't set config #0, error -71 [ 97.258816][ T4232] usb 4-1: USB disconnect, device number 2 [ 97.476484][ T4673] fuse: Unknown parameter 'user_i00000000000000000000' [ 97.510329][ T4672] tipc: Enabled bearer , priority 0 [ 97.519827][ T4672] device syzkaller0 entered promiscuous mode [ 97.614112][ T4672] tipc: Resetting bearer [ 97.661821][ T4670] tipc: Resetting bearer [ 97.744836][ T4670] tipc: Disabling bearer [ 98.286090][ T4681] device syzkaller0 entered promiscuous mode [ 99.743835][ T4703] netlink: 224 bytes leftover after parsing attributes in process `syz.3.108'. [ 100.327348][ T4701] netlink: 44 bytes leftover after parsing attributes in process `syz.0.109'. [ 100.524925][ T4713] fuse: Unknown parameter 'user_id00000000000000000000' [ 100.643172][ T4719] tipc: Started in network mode [ 100.648105][ T4719] tipc: Node identity 3642286071d, cluster identity 4711 [ 100.656140][ T4719] tipc: Enabled bearer , priority 0 [ 100.663719][ T4719] device syzkaller0 entered promiscuous mode [ 100.686006][ T4719] tipc: Resetting bearer [ 100.696453][ T4718] tipc: Resetting bearer [ 100.715740][ T4718] tipc: Disabling bearer [ 100.843176][ T13] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 101.889516][ T4274] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.039413][ T4752] netlink: 224 bytes leftover after parsing attributes in process `syz.3.123'. [ 102.454258][ T4274] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 102.479160][ T4274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.529579][ T4274] usb 1-1: Product: syz [ 102.559186][ T4274] usb 1-1: Manufacturer: syz [ 102.587186][ T4274] usb 1-1: SerialNumber: syz [ 103.733505][ T4274] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 103.793904][ T13] usb 3-1: device descriptor read/all, error -71 [ 103.843671][ T4761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.126'. [ 103.874055][ T4761] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.884105][ T4761] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.893219][ T4761] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.901975][ T4761] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.925255][ T4761] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.934375][ T4761] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.943343][ T4761] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.952230][ T4761] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.298348][ T4762] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.307349][ T4762] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.316203][ T4762] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.325037][ T4762] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.343089][ T4762] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.352183][ T4762] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.361281][ T4762] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.370316][ T4762] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.423235][ T4274] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 105.463126][ T4274] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 105.487113][ T4274] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 105.494489][ T4770] tipc: Enabled bearer , priority 0 [ 105.498686][ T4274] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.514127][ T4274] lan78xx: probe of 1-1:1.0 failed with error -71 [ 105.537753][ T4274] usb 1-1: USB disconnect, device number 4 [ 105.558057][ T4774] device syzkaller0 entered promiscuous mode [ 105.596595][ T4770] tipc: Resetting bearer [ 105.630271][ T4769] tipc: Resetting bearer [ 105.649290][ T4769] tipc: Disabling bearer [ 106.518627][ T4791] loop2: detected capacity change from 0 to 512 [ 106.572354][ T4275] libceph: connect (1)[c::]:6789 error -101 [ 106.580695][ T4275] libceph: mon0 (1)[c::]:6789 connect error [ 106.710950][ T4794] loop3: detected capacity change from 0 to 32768 [ 106.736090][ T4791] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 106.760732][ T4275] libceph: connect (1)[c::]:6789 error -101 [ 106.769735][ T4794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.139 (4794) [ 106.812742][ T4275] libceph: mon0 (1)[c::]:6789 connect error [ 106.857842][ T4794] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 106.866568][ T4794] BTRFS info (device loop3): using free space tree [ 106.873128][ T4794] BTRFS info (device loop3): has skinny extents [ 106.928278][ T4788] ceph: No mds server is up or the cluster is laggy [ 106.951202][ T4791] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 107.019527][ T4791] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.114825][ T13] libceph: connect (1)[c::]:6789 error -101 [ 107.121114][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 108.110266][ T4794] BTRFS info (device loop3): enabling ssd optimizations [ 108.863191][ T4835] netlink: 44 bytes leftover after parsing attributes in process `syz.4.144'. [ 108.879217][ T4835] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.888088][ T4835] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.897199][ T4835] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.906305][ T4835] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.925671][ T4835] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.934809][ T4835] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.943903][ T4835] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.952845][ T4835] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.006508][ T4836] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.015635][ T4836] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.024483][ T4836] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.033383][ T4836] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.098337][ T4836] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.108068][ T4836] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.117361][ T4836] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.126318][ T4836] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.505301][ T4850] netlink: 56 bytes leftover after parsing attributes in process `syz.4.151'. [ 109.699386][ T4854] loop2: detected capacity change from 0 to 8 [ 109.744637][ T4854] ======================================================= [ 109.744637][ T4854] WARNING: The mand mount option has been deprecated and [ 109.744637][ T4854] and is ignored by this kernel. Remove the mand [ 109.744637][ T4854] option from the mount to silence this warning. [ 109.744637][ T4854] ======================================================= [ 109.779606][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.442480][ T4852] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 110.719964][ T4865] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 110.987150][ T4868] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.998628][ T4868] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 111.033179][ T4869] tipc: Started in network mode [ 111.051521][ T4869] tipc: Node identity 127515fbd8ed, cluster identity 4711 [ 111.062015][ T4869] tipc: Enabled bearer , priority 0 [ 111.098888][ T4872] bond1: (slave gretap1): making interface the new active one [ 111.124418][ T4872] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 111.139235][ T4873] device syzkaller0 entered promiscuous mode [ 111.179825][ T4877] device macvlan2 entered promiscuous mode [ 111.214508][ T4877] device bond1 entered promiscuous mode [ 111.220938][ T4877] device gretap1 entered promiscuous mode [ 111.223194][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.232848][ T4877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.260719][ T4877] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 111.276520][ T4877] device bond1 left promiscuous mode [ 111.281851][ T4877] device gretap1 left promiscuous mode [ 111.313590][ T4869] tipc: Resetting bearer [ 111.332128][ T4864] tipc: Resetting bearer [ 111.347930][ T4864] tipc: Disabling bearer [ 112.574572][ T4872] syz.4.153 (4872) used greatest stack depth: 20304 bytes left [ 112.582995][ T4877] syz.4.153 (4877) used greatest stack depth: 19480 bytes left [ 112.612669][ T4892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.158'. [ 112.677957][ T4893] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.687167][ T4893] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.697487][ T4893] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.706505][ T4893] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.823260][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 112.842711][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.885360][ T4893] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.895387][ T4893] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.904712][ T4893] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.913800][ T4893] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.943012][ T23] usb 3-1: Product: syz [ 112.952456][ T23] usb 3-1: Manufacturer: syz [ 112.973212][ T23] usb 3-1: SerialNumber: syz [ 113.303831][ T4912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.165'. [ 113.483076][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 114.133187][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 114.478378][ T4907] loop0: detected capacity change from 0 to 32768 [ 114.523575][ T4907] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.164 (4907) [ 114.589849][ T4907] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 114.611171][ T4907] BTRFS info (device loop0): setting nodatacow, compression disabled [ 114.637877][ T4907] BTRFS info (device loop0): setting datasum, datacow enabled [ 114.651748][ T4907] BTRFS info (device loop0): force clearing of disk cache [ 114.661438][ T4907] BTRFS info (device loop0): enabling ssd optimizations [ 114.675412][ T4907] BTRFS info (device loop0): using spread ssd allocation scheme [ 114.686909][ T4907] BTRFS info (device loop0): turning on sync discard [ 114.696237][ T4907] BTRFS info (device loop0): turning off barriers [ 114.703279][ T4907] BTRFS info (device loop0): enabling auto defrag [ 114.722164][ T4907] BTRFS info (device loop0): not using ssd optimizations [ 114.743186][ T4907] BTRFS info (device loop0): not using spread ssd allocation scheme [ 114.763121][ T4907] BTRFS info (device loop0): using free space tree [ 114.781859][ T4907] BTRFS info (device loop0): has skinny extents [ 114.993202][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 115.014970][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 115.032028][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 115.038859][ T4907] BTRFS info (device loop0): clearing free space tree [ 115.061672][ T4907] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.078534][ T23] lan78xx: probe of 3-1:1.0 failed with error -71 [ 115.080903][ T4907] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.136252][ T23] usb 3-1: USB disconnect, device number 5 [ 115.151508][ T4907] BTRFS info (device loop0): creating free space tree [ 115.163260][ T4907] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.182966][ T4907] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.696422][ T4946] device syzkaller0 entered promiscuous mode [ 115.737759][ T4959] netlink: 44 bytes leftover after parsing attributes in process `syz.4.174'. [ 115.764202][ T4959] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.773195][ T4959] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.782671][ T4959] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.791481][ T4959] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.926137][ T4959] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.935248][ T4959] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.944174][ T4959] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.953136][ T4959] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.113003][ T4953] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.339142][ T4991] netlink: 56 bytes leftover after parsing attributes in process `syz.4.185'. [ 118.423121][ T4953] usb 1-1: Using ep0 maxpacket: 16 [ 118.579302][ T4953] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.599972][ T4953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.603270][ T4953] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.614554][ T4953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.622579][ T4953] usb 1-1: Product: syz [ 119.627213][ T4953] usb 1-1: Manufacturer: syz [ 119.631804][ T4953] usb 1-1: SerialNumber: syz [ 119.937110][ T5007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.190'. [ 119.946961][ T5007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.190'. [ 119.957837][ T4953] usb 1-1: 0:2 : does not exist [ 119.963328][ T5007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.190'. [ 120.267731][ T5010] netlink: 224 bytes leftover after parsing attributes in process `syz.2.191'. [ 120.975710][ T4953] usb 1-1: USB disconnect, device number 5 [ 121.262175][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.371782][ T5029] loop3: detected capacity change from 0 to 32768 [ 122.483568][ T5029] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.199 (5029) [ 122.559144][ T5029] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 122.611282][ T5029] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.651449][ T5029] BTRFS info (device loop3): use zstd compression, level 3 [ 122.661587][ T5029] BTRFS info (device loop3): using free space tree [ 122.682396][ T5029] BTRFS info (device loop3): has skinny extents [ 123.598370][ T5029] BTRFS info (device loop3): enabling ssd optimizations [ 123.840099][ T5074] capability: warning: `syz.4.208' uses deprecated v2 capabilities in a way that may be insecure [ 124.352003][ T5049] netlink: 144 bytes leftover after parsing attributes in process `syz.0.204'. [ 124.421133][ T26] audit: type=1326 audit(1772092301.465:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335ae56629 code=0x7ffc0000 [ 124.479746][ T26] audit: type=1326 audit(1772092301.465:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f335ae56629 code=0x7ffc0000 [ 124.501685][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.653280][ T26] audit: type=1326 audit(1772092301.465:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335ae56629 code=0x7ffc0000 [ 125.633795][ T26] audit: type=1326 audit(1772092301.465:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f335ae56629 code=0x7ffc0000 [ 126.009495][ T26] audit: type=1326 audit(1772092301.465:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335ae56629 code=0x7ffc0000 [ 126.110842][ T26] audit: type=1326 audit(1772092301.495:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f335ae16ece code=0x7ffc0000 [ 126.375103][ T26] audit: type=1326 audit(1772092301.665:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5092 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f335ae56629 code=0x7ffc0000 [ 126.397277][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.647213][ T5134] netlink: 144 bytes leftover after parsing attributes in process `syz.4.224'. [ 129.677953][ T26] audit: type=1326 audit(1772092306.725:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 129.700366][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.792809][ T26] audit: type=1326 audit(1772092306.765:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 129.814892][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.832503][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.898978][ T26] audit: type=1326 audit(1772092306.785:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 130.215466][ T26] audit: type=1326 audit(1772092306.785:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 130.244748][ T4232] usb 4-1: config 118 interface 0 has no altsetting 0 [ 130.325172][ T26] audit: type=1326 audit(1772092306.785:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 130.419664][ T26] audit: type=1326 audit(1772092306.785:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d403edece code=0x7ffc0000 [ 130.454275][ T4232] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 130.474442][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.494816][ T4232] usb 4-1: Product: syz [ 130.499093][ T4232] usb 4-1: Manufacturer: syz [ 131.804078][ T26] audit: type=1326 audit(1772092306.935:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 131.997203][ T4232] usb 4-1: SerialNumber: syz [ 132.039701][ T26] audit: type=1804 audit(1772092309.085:19): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.233" name="/newroot/48/file1" dev="fuse" ino=1 res=1 errno=0 [ 132.414748][ T4232] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 132.745300][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.838855][ T4232] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 132.901094][ T4232] usb 4-1: media controller created [ 133.025777][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032275][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.042756][ T5169] device syzkaller0 entered promiscuous mode [ 133.106652][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.963233][ T4232] DVB: Unable to find symbol mt352_attach() [ 133.969297][ T4232] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 134.061355][ T4232] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 134.124745][ T4232] dvb-usb: schedule remote query interval to 100 msecs. [ 134.131918][ T4232] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 134.200877][ T4232] dvb_usb_m920x: probe of 4-1:118.0 failed with error -71 [ 134.245374][ T4232] usb 4-1: USB disconnect, device number 3 [ 134.342861][ T4231] m920x_read = error: -19 [ 134.347788][ T4231] dvb-usb: error while querying for an remote control event. [ 134.517817][ T4231] m920x_read = error: -19 [ 134.617769][ T4231] dvb-usb: error while querying for an remote control event. [ 134.984616][ T4231] m920x_read = error: -19 [ 135.025015][ T4231] dvb-usb: error while querying for an remote control event. [ 135.360456][ T4232] m920x_read = error: -19 [ 135.372941][ T4232] dvb-usb: error while querying for an remote control event. [ 135.494132][ T4231] m920x_read = error: -19 [ 135.498602][ T4231] dvb-usb: error while querying for an remote control event. [ 135.552695][ T5192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 135.562072][ T5192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 135.624439][ T4231] m920x_read = error: -19 [ 135.631848][ T4231] dvb-usb: error while querying for an remote control event. [ 135.675170][ T5176] loop3: detected capacity change from 0 to 32768 [ 135.863721][ T4231] m920x_read = error: -19 [ 135.925188][ T4231] dvb-usb: error while querying for an remote control event. [ 136.344864][ T4231] m920x_read = error: -19 [ 136.381319][ T4231] dvb-usb: error while querying for an remote control event. [ 136.502366][ T5176] XFS (loop3): Mounting V5 Filesystem [ 136.549113][ T5178] netlink: 144 bytes leftover after parsing attributes in process `syz.4.238'. [ 136.566043][ T4232] m920x_read = error: -19 [ 136.570435][ T4232] dvb-usb: error while querying for an remote control event. [ 136.591868][ T26] audit: type=1326 audit(1772092313.635:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 136.622418][ T26] audit: type=1326 audit(1772092313.665:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 136.644985][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.693900][ T4232] m920x_read = error: -19 [ 136.698288][ T4232] dvb-usb: error while querying for an remote control event. [ 136.780925][ T5176] XFS (loop3): Ending clean mount [ 136.783645][ T26] audit: type=1326 audit(1772092313.695:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 136.791935][ T5176] XFS (loop3): Quotacheck needed: Please wait. [ 136.845431][ T4232] m920x_read = error: -19 [ 136.849816][ T4232] dvb-usb: error while querying for an remote control event. [ 136.926390][ T5176] XFS (loop3): Quotacheck: Done. [ 136.932820][ T26] audit: type=1326 audit(1772092313.705:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 136.984600][ T4231] m920x_read = error: -19 [ 136.990616][ T4231] dvb-usb: error while querying for an remote control event. [ 137.015172][ T26] audit: type=1326 audit(1772092313.705:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 137.041779][ T4188] XFS (loop3): Unmounting Filesystem [ 137.099401][ T26] audit: type=1326 audit(1772092313.715:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 137.128485][ T26] audit: type=1326 audit(1772092313.715:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 137.153724][ T4231] m920x_read = error: -19 [ 137.164969][ T4231] dvb-usb: error while querying for an remote control event. [ 137.270359][ T26] audit: type=1326 audit(1772092313.755:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5212 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d403edece code=0x7ffc0000 [ 137.292549][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.375604][ T4232] m920x_read = error: -19 [ 137.390052][ T4232] dvb-usb: error while querying for an remote control event. [ 137.413436][ T26] audit: type=1326 audit(1772092313.905:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5212 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8d4042d629 code=0x7ffc0000 [ 137.577294][ T23] m920x_read = error: -19 [ 137.581977][ T23] dvb-usb: error while querying for an remote control event. [ 137.700041][ T4274] m920x_read = error: -19 [ 138.261041][ T4274] dvb-usb: error while querying for an remote control event. [ 138.404638][ T4232] m920x_read = error: -19 [ 138.413597][ T4232] dvb-usb: error while querying for an remote control event. [ 138.564261][ T4232] m920x_read = error: -19 [ 138.569327][ T4232] dvb-usb: error while querying for an remote control event. [ 138.785355][ T4232] m920x_read = error: -19 [ 138.790557][ T4232] dvb-usb: error while querying for an remote control event. [ 138.966165][ T4232] m920x_read = error: -19 [ 138.970568][ T4232] dvb-usb: error while querying for an remote control event. [ 139.225010][ T4232] m920x_read = error: -19 [ 139.238401][ T4232] dvb-usb: error while querying for an remote control event. [ 141.315319][ T4274] m920x_read = error: -19 [ 141.319711][ T4274] dvb-usb: error while querying for an remote control event. [ 141.574811][ T4232] m920x_read = error: -19 [ 141.579214][ T4232] dvb-usb: error while querying for an remote control event. [ 142.411774][ T4232] m920x_read = error: -19 [ 142.416255][ T4232] dvb-usb: error while querying for an remote control event. [ 142.533073][ T4232] m920x_read = error: -19 [ 142.537465][ T4232] dvb-usb: error while querying for an remote control event. [ 142.662999][ T4232] m920x_read = error: -19 [ 142.667499][ T4232] dvb-usb: error while querying for an remote control event. [ 142.803057][ T4232] m920x_read = error: -19 [ 142.807454][ T4232] dvb-usb: error while querying for an remote control event. [ 142.894583][ T5256] netlink: 144 bytes leftover after parsing attributes in process `syz.3.256'. [ 142.941988][ T26] audit: type=1326 audit(1772092319.985:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c688d1629 code=0x7ffc0000 [ 142.970460][ T26] audit: type=1326 audit(1772092320.005:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c688d1629 code=0x7ffc0000 [ 142.972968][ T4232] m920x_read = error: -19 [ 143.015278][ T26] audit: type=1326 audit(1772092320.045:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3c688d1629 code=0x7ffc0000 [ 143.043018][ T4232] dvb-usb: error while querying for an remote control event. [ 143.143942][ T26] audit: type=1326 audit(1772092320.045:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c688d1629 code=0x7ffc0000 [ 143.175636][ T4232] m920x_read = error: -19 [ 143.180032][ T4232] dvb-usb: error while querying for an remote control event. [ 143.221883][ T5268] loop0: detected capacity change from 0 to 32768 [ 143.259114][ T26] audit: type=1326 audit(1772092320.055:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c68891ece code=0x7ffc0000 [ 143.305600][ T5268] loop0: p9 p11 p16 [ 143.325499][ T26] audit: type=1326 audit(1772092320.085:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3c688d1629 code=0x7ffc0000 [ 143.349727][ T4202] Bluetooth: hci1: link tx timeout [ 143.353021][ T4232] m920x_read = error: -19 [ 143.355260][ T4202] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.359528][ T4232] dvb-usb: error while querying for an remote control event. [ 143.379055][ T4202] Bluetooth: hci1: link tx timeout [ 143.384597][ T4202] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.392344][ T4202] Bluetooth: hci1: link tx timeout [ 143.397833][ T4202] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.401757][ T26] audit: type=1326 audit(1772092320.095:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c688d1629 code=0x7ffc0000 [ 143.463229][ T23] m920x_read = error: -19 [ 143.467848][ T23] dvb-usb: error while querying for an remote control event. [ 143.614310][ T26] audit: type=1326 audit(1772092320.235:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3c688d1629 code=0x7ffc0000 [ 143.623087][ T4274] m920x_read = error: -19 [ 143.671940][ T4274] dvb-usb: error while querying for an remote control event. [ 143.981100][ T4232] m920x_read = error: -19 [ 144.412806][ T4232] dvb-usb: error while querying for an remote control event. [ 144.988581][ T5180] udevd[5180]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 145.011309][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 145.011847][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 145.076669][ T4274] m920x_read = error: -19 [ 145.081086][ T4274] dvb-usb: error while querying for an remote control event. [ 145.238892][ T23] m920x_read = error: -19 [ 145.252578][ T23] dvb-usb: error while querying for an remote control event. [ 146.022249][ T4274] m920x_read = error: -19 [ 146.028079][ T4274] dvb-usb: error while querying for an remote control event. [ 146.064520][ T1326] Bluetooth: hci1: command 0x0406 tx timeout [ 146.157426][ T4232] m920x_read = error: -19 [ 146.161829][ T4232] dvb-usb: error while querying for an remote control event. [ 146.344922][ T23] m920x_read = error: -19 [ 146.356243][ T23] dvb-usb: error while querying for an remote control event. [ 146.473989][ T4274] m920x_read = error: -19 [ 146.494459][ T4274] dvb-usb: error while querying for an remote control event. [ 146.716607][ T4274] m920x_read = error: -19 [ 146.721071][ T4274] dvb-usb: error while querying for an remote control event. [ 146.898395][ T4274] m920x_read = error: -19 [ 146.904033][ T4274] dvb-usb: error while querying for an remote control event. [ 147.073456][ T4274] m920x_read = error: -19 [ 147.078202][ T4274] dvb-usb: error while querying for an remote control event. [ 147.770771][ T4232] m920x_read = error: -19 [ 147.777111][ T4232] dvb-usb: error while querying for an remote control event. [ 147.903368][ T4232] m920x_read = error: -19 [ 147.908435][ T4232] dvb-usb: error while querying for an remote control event. [ 148.033471][ T4232] m920x_read = error: -19 [ 148.038060][ T4232] dvb-usb: error while querying for an remote control event. [ 148.673876][ T5320] loop3: detected capacity change from 0 to 32768 [ 148.738839][ T5320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.276 (5320) [ 148.881528][ T5320] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 148.933166][ T4232] m920x_read = error: -19 [ 148.939408][ T5320] BTRFS info (device loop3): using free space tree [ 148.946332][ T4232] dvb-usb: error while querying for an remote control event. [ 148.958603][ T5320] BTRFS info (device loop3): has skinny extents [ 149.094251][ T4232] m920x_read = error: -19 [ 149.104717][ T4232] dvb-usb: error while querying for an remote control event. [ 149.159151][ T5358] tipc: Enabled bearer , priority 0 [ 149.168202][ T5358] device syzkaller0 entered promiscuous mode [ 149.186058][ T5355] tipc: Resetting bearer [ 149.243150][ T23] m920x_read = error: -19 [ 149.247533][ T23] dvb-usb: error while querying for an remote control event. [ 149.287771][ T5320] BTRFS info (device loop3): enabling ssd optimizations [ 149.304929][ T5355] tipc: Disabling bearer [ 149.393110][ T23] m920x_read = error: -19 [ 149.397538][ T23] dvb-usb: error while querying for an remote control event. [ 149.642034][ T23] m920x_read = error: -19 [ 149.653017][ T23] dvb-usb: error while querying for an remote control event. [ 150.485227][ T5180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5180) [ 150.591390][ T5380] device syzkaller0 entered promiscuous mode [ 151.725134][ T21] m920x_read = error: -19 [ 151.729533][ T21] dvb-usb: error while querying for an remote control event. [ 153.953191][ T23] m920x_read = error: -19 [ 153.957596][ T23] dvb-usb: error while querying for an remote control event. [ 154.093083][ T23] m920x_read = error: -19 [ 154.097485][ T23] dvb-usb: error while querying for an remote control event. [ 154.253044][ T23] m920x_read = error: -19 [ 154.257584][ T23] dvb-usb: error while querying for an remote control event. [ 154.383270][ T23] m920x_read = error: -19 [ 154.394758][ T23] dvb-usb: error while querying for an remote control event. [ 154.594588][ T23] m920x_read = error: -19 [ 154.613954][ T23] dvb-usb: error while querying for an remote control event. [ 154.759028][ T23] m920x_read = error: -19 [ 154.777037][ T23] dvb-usb: error while querying for an remote control event. [ 154.854400][ T5409] tipc: Enabled bearer , priority 0 [ 154.890415][ T5409] device syzkaller0 entered promiscuous mode [ 154.903834][ T23] m920x_read = error: -19 [ 154.908217][ T23] dvb-usb: error while querying for an remote control event. [ 154.950785][ T5408] tipc: Resetting bearer [ 154.993439][ T5408] tipc: Disabling bearer [ 155.043709][ T21] m920x_read = error: -19 [ 155.048223][ T21] dvb-usb: error while querying for an remote control event. [ 155.184745][ T21] m920x_read = error: -19 [ 155.190373][ T21] dvb-usb: error while querying for an remote control event. [ 155.323097][ T21] m920x_read = error: -19 [ 155.327555][ T21] dvb-usb: error while querying for an remote control event. [ 155.473749][ T21] m920x_read = error: -19 [ 155.478269][ T21] dvb-usb: error while querying for an remote control event. [ 155.615180][ T21] m920x_read = error: -19 [ 155.619587][ T21] dvb-usb: error while querying for an remote control event. [ 155.829970][ T21] m920x_read = error: -19 [ 155.834446][ T21] dvb-usb: error while querying for an remote control event. [ 155.962067][ T21] m920x_read = error: -19 [ 155.966734][ T21] dvb-usb: error while querying for an remote control event. [ 156.114558][ T23] m920x_read = error: -19 [ 156.119216][ T23] dvb-usb: error while querying for an remote control event. [ 156.653372][ T23] m920x_read = error: -19 [ 156.657768][ T23] dvb-usb: error while querying for an remote control event. [ 156.854927][ T23] m920x_read = error: -19 [ 156.869884][ T23] dvb-usb: error while querying for an remote control event. [ 157.067322][ T23] m920x_read = error: -19 [ 157.134348][ T23] dvb-usb: error while querying for an remote control event. [ 157.475724][ T23] m920x_read = error: -19 [ 157.480316][ T23] dvb-usb: error while querying for an remote control event. [ 157.786427][ T23] m920x_read = error: -19 [ 157.843235][ T23] dvb-usb: error while querying for an remote control event. [ 157.880498][ T5446] device syzkaller0 entered promiscuous mode [ 158.014937][ T23] m920x_read = error: -19 [ 158.021125][ T23] dvb-usb: error while querying for an remote control event. [ 158.334732][ T23] m920x_read = error: -19 [ 158.366077][ T23] dvb-usb: error while querying for an remote control event. [ 158.571029][ T5452] tipc: Enabling of bearer rejected, failed to enable media [ 159.082943][ T1111] m920x_read = error: -19 [ 159.088239][ T1111] dvb-usb: error while querying for an remote control event. [ 159.203917][ T1111] m920x_read = error: -19 [ 159.208549][ T1111] dvb-usb: error while querying for an remote control event. [ 159.420858][ T1111] m920x_read = error: -19 [ 159.425332][ T1111] dvb-usb: error while querying for an remote control event. [ 159.564859][ T1111] m920x_read = error: -19 [ 159.569457][ T1111] dvb-usb: error while querying for an remote control event. [ 159.864280][ T1111] m920x_read = error: -19 [ 159.906018][ T1111] dvb-usb: error while querying for an remote control event. [ 160.390377][ T23] m920x_read = error: -19 [ 160.429789][ T23] dvb-usb: error while querying for an remote control event. [ 160.656425][ T23] m920x_read = error: -19 [ 160.661099][ T23] dvb-usb: error while querying for an remote control event. [ 160.820798][ T23] m920x_read = error: -19 [ 160.825988][ T23] dvb-usb: error while querying for an remote control event. [ 160.983254][ T23] m920x_read = error: -19 [ 160.987831][ T23] dvb-usb: error while querying for an remote control event. [ 161.141220][ T23] m920x_read = error: -19 [ 161.145722][ T23] dvb-usb: error while querying for an remote control event. [ 161.636999][ T21] m920x_read = error: -19 [ 161.641356][ T21] dvb-usb: error while querying for an remote control event. [ 161.688969][ T5493] tipc: Enabling of bearer rejected, failed to enable media [ 161.785514][ T21] m920x_read = error: -19 [ 161.796883][ T21] dvb-usb: error while querying for an remote control event. [ 161.923064][ T21] m920x_read = error: -19 [ 161.928132][ T21] dvb-usb: error while querying for an remote control event. [ 162.073069][ T21] m920x_read = error: -19 [ 162.077562][ T21] dvb-usb: error while querying for an remote control event. [ 162.213118][ T21] m920x_read = error: -19 [ 162.220018][ T21] dvb-usb: error while querying for an remote control event. [ 162.365269][ T21] m920x_read = error: -19 [ 162.378584][ T21] dvb-usb: error while querying for an remote control event. [ 162.623498][ T21] m920x_read = error: -19 [ 162.628219][ T21] dvb-usb: error while querying for an remote control event. [ 162.874337][ T5386] m920x_read = error: -19 [ 162.879092][ T5386] dvb-usb: error while querying for an remote control event. [ 163.023440][ T5386] m920x_read = error: -19 [ 163.027994][ T5386] dvb-usb: error while querying for an remote control event. [ 163.496178][ T1111] m920x_read = error: -19 [ 163.500675][ T1111] dvb-usb: error while querying for an remote control event. [ 163.644580][ T1111] m920x_read = error: -19 [ 163.648969][ T1111] dvb-usb: error while querying for an remote control event. [ 163.803126][ T5386] m920x_read = error: -19 [ 163.807527][ T5386] dvb-usb: error while querying for an remote control event. [ 163.917204][ T5532] tipc: Enabled bearer , priority 0 [ 163.943147][ T5386] m920x_read = error: -19 [ 163.947559][ T5386] dvb-usb: error while querying for an remote control event. [ 163.963491][ T5532] tipc: Resetting bearer [ 163.990362][ T5531] tipc: Disabling bearer [ 164.108652][ T5386] m920x_read = error: -19 [ 164.113557][ T5386] dvb-usb: error while querying for an remote control event. [ 164.982711][ T5386] m920x_read = error: -19 [ 164.990573][ T5386] dvb-usb: error while querying for an remote control event. [ 165.220868][ T23] m920x_read = error: -19 [ 165.227790][ T23] dvb-usb: error while querying for an remote control event. [ 166.132721][ T23] m920x_read = error: -19 [ 166.322009][ T23] dvb-usb: error while querying for an remote control event. [ 166.626063][ T1111] m920x_read = error: -19 [ 166.630655][ T1111] dvb-usb: error while querying for an remote control event. [ 166.744095][ T1111] m920x_read = error: -19 [ 166.748673][ T1111] dvb-usb: error while querying for an remote control event. [ 166.923342][ T1111] m920x_read = error: -19 [ 166.943137][ T1111] dvb-usb: error while querying for an remote control event. [ 167.245762][ T1111] m920x_read = error: -19 [ 167.250169][ T1111] dvb-usb: error while querying for an remote control event. [ 167.627259][ T1111] m920x_read = error: -19 [ 167.631660][ T1111] dvb-usb: error while querying for an remote control event. [ 167.780374][ T23] m920x_read = error: -19 [ 167.792854][ T23] dvb-usb: error while querying for an remote control event. [ 168.114437][ T23] m920x_read = error: -19 [ 168.158228][ T23] dvb-usb: error while querying for an remote control event. [ 168.743267][ T5386] m920x_read = error: -19 [ 168.874199][ T5386] dvb-usb: error while querying for an remote control event. [ 169.553512][ T5577] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 169.663235][ T5386] m920x_read = error: -19 [ 169.668544][ T5386] dvb-usb: error while querying for an remote control event. [ 169.783088][ T5386] m920x_read = error: -19 [ 169.787573][ T5386] dvb-usb: error while querying for an remote control event. [ 169.807796][ T5591] loop0: detected capacity change from 0 to 512 [ 169.934388][ T5386] m920x_read = error: -19 [ 169.945536][ T5386] dvb-usb: error while querying for an remote control event. [ 169.962656][ T5593] loop3: detected capacity change from 0 to 1024 [ 169.973061][ T5591] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 169.994465][ T5591] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.287436][ T5386] m920x_read = error: -19 [ 170.594886][ T5386] dvb-usb: error while querying for an remote control event. [ 171.067480][ T1111] m920x_read = error: -19 [ 171.075749][ T1111] dvb-usb: error while querying for an remote control event. [ 171.117455][ T5602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.352'. [ 171.174288][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.352'. [ 171.185257][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.352'. [ 171.214193][ T5604] loop2: detected capacity change from 0 to 512 [ 171.279892][ T5604] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.354: inode has both inline data and extents flags [ 171.460998][ T5604] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.354: couldn't read orphan inode 15 (err -117) [ 171.486152][ T5389] m920x_read = error: -19 [ 171.490203][ T4328] hfsplus: b-tree write err: -5, ino 4 [ 171.490655][ T5389] dvb-usb: error while querying for an remote control event. [ 171.505941][ T5604] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 171.549697][ T5604] IPv6: Can't replace route, no match found [ 171.668390][ T5389] m920x_read = error: -19 [ 171.673041][ T5389] dvb-usb: error while querying for an remote control event. [ 172.055024][ T154] wlan1: Trigger new scan to find an IBSS to join [ 172.505221][ T5613] loop0: detected capacity change from 0 to 40427 [ 172.512323][ T1111] m920x_read = error: -19 [ 172.517159][ T1111] dvb-usb: error while querying for an remote control event. [ 172.569245][ T5613] F2FS-fs (loop0): invalid crc value [ 172.583263][ T5613] F2FS-fs (loop0): Found nat_bits in checkpoint [ 172.626405][ T5613] F2FS-fs (loop0): Start checkpoint disabled! [ 172.637633][ T23] m920x_read = error: -19 [ 172.642020][ T23] dvb-usb: error while querying for an remote control event. [ 172.660244][ T5613] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 172.735652][ T26] audit: type=1800 audit(1772092349.785:37): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.356" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 172.756035][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.764977][ T23] m920x_read = error: -19 [ 172.769346][ T23] dvb-usb: error while querying for an remote control event. [ 172.978955][ T26] audit: type=1800 audit(1772092349.885:38): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.356" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 173.085025][ T23] m920x_read = error: -19 [ 173.092813][ T23] dvb-usb: error while querying for an remote control event. [ 173.253215][ T5389] m920x_read = error: -19 [ 173.257700][ T5389] dvb-usb: error while querying for an remote control event. [ 173.342791][ T4239] attempt to access beyond end of device [ 173.342791][ T4239] loop0: rw=2049, want=40976, limit=40427 [ 173.393037][ T23] m920x_read = error: -19 [ 173.397549][ T23] dvb-usb: error while querying for an remote control event. [ 173.549581][ T23] m920x_read = error: -19 [ 173.577518][ T23] dvb-usb: error while querying for an remote control event. [ 173.596358][ T5637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.365'. [ 173.648110][ T5638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'. [ 173.658753][ T5638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'. [ 173.805805][ T21] m920x_read = error: -19 [ 173.813249][ T21] dvb-usb: error while querying for an remote control event. [ 174.028426][ T21] m920x_read = error: -19 [ 174.080621][ T21] dvb-usb: error while querying for an remote control event. [ 174.368440][ T4274] m920x_read = error: -19 [ 174.380566][ T4274] dvb-usb: error while querying for an remote control event. [ 174.550919][ T4274] m920x_read = error: -19 [ 174.659238][ T4274] dvb-usb: error while querying for an remote control event. [ 174.790454][ T21] m920x_read = error: -19 [ 174.795048][ T21] dvb-usb: error while querying for an remote control event. [ 174.913388][ T21] m920x_read = error: -19 [ 174.934230][ T21] dvb-usb: error while querying for an remote control event. [ 175.554438][ T21] m920x_read = error: -19 [ 175.558926][ T21] dvb-usb: error while querying for an remote control event. [ 175.702991][ T21] m920x_read = error: -19 [ 175.711980][ T21] dvb-usb: error while querying for an remote control event. [ 175.819158][ T5664] loop2: detected capacity change from 0 to 64 [ 175.844356][ T21] m920x_read = error: -19 [ 175.862760][ T21] dvb-usb: error while querying for an remote control event. [ 176.013257][ T21] m920x_read = error: -19 [ 176.087317][ T5669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 176.140756][ T5670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 176.151620][ T5670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 176.383908][ T419] wlan1: Trigger new scan to find an IBSS to join [ 176.875842][ T21] dvb-usb: error while querying for an remote control event. [ 176.994292][ T21] m920x_read = error: -19 [ 176.998705][ T21] dvb-usb: error while querying for an remote control event. [ 177.220542][ T21] m920x_read = error: -19 [ 177.225118][ T21] dvb-usb: error while querying for an remote control event. [ 177.366872][ T21] m920x_read = error: -19 [ 177.371486][ T21] dvb-usb: error while querying for an remote control event. [ 177.513446][ T21] m920x_read = error: -19 [ 177.518466][ T21] dvb-usb: error while querying for an remote control event. [ 177.823392][ T21] m920x_read = error: -19 [ 177.840678][ T21] dvb-usb: error while querying for an remote control event. [ 178.141854][ T23] m920x_read = error: -19 [ 178.146568][ T23] dvb-usb: error while querying for an remote control event. [ 178.163695][ T4239] wlan1: Creating new IBSS network, BSSID 62:cc:79:65:51:7b [ 178.295146][ T23] m920x_read = error: -19 [ 178.299575][ T23] dvb-usb: error while querying for an remote control event. [ 178.321266][ T5698] tipc: Enabled bearer , priority 0 [ 178.330769][ T5698] device syzkaller0 entered promiscuous mode [ 178.354191][ T5698] tipc: Resetting bearer [ 178.365384][ T5696] tipc: Resetting bearer [ 178.381242][ T5696] tipc: Disabling bearer [ 178.503527][ T23] m920x_read = error: -19 [ 178.507930][ T23] dvb-usb: error while querying for an remote control event. [ 178.775678][ T23] m920x_read = error: -19 [ 178.780079][ T23] dvb-usb: error while querying for an remote control event. [ 178.962536][ T23] m920x_read = error: -19 [ 178.973682][ T23] dvb-usb: error while querying for an remote control event. [ 181.424619][ T5714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.392'. [ 181.478014][ T5716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 181.488723][ T5716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 181.644408][ T23] m920x_read = error: -19 [ 181.662939][ T23] dvb-usb: error while querying for an remote control event. [ 181.773017][ T5389] m920x_read = error: -19 [ 181.777662][ T5389] dvb-usb: error while querying for an remote control event. [ 181.903251][ T4274] m920x_read = error: -19 [ 181.919596][ T4274] dvb-usb: error while querying for an remote control event. [ 182.053269][ T4274] m920x_read = error: -19 [ 182.057784][ T4274] dvb-usb: error while querying for an remote control event. [ 182.183402][ T4274] m920x_read = error: -19 [ 182.188259][ T4274] dvb-usb: error while querying for an remote control event. [ 182.303302][ T4274] m920x_read = error: -19 [ 182.307828][ T4274] dvb-usb: error while querying for an remote control event. [ 182.474460][ T4274] m920x_read = error: -19 [ 182.479320][ T4274] dvb-usb: error while querying for an remote control event. [ 183.413270][ T1326] Bluetooth: hci3: command 0x0406 tx timeout [ 183.702587][ T4274] m920x_read = error: -19 [ 183.713027][ T4274] dvb-usb: error while querying for an remote control event. [ 183.713198][ T1326] Bluetooth: hci2: command 0x0406 tx timeout [ 183.729432][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 183.735738][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 183.823018][ T23] m920x_read = error: -19 [ 183.827686][ T23] dvb-usb: error while querying for an remote control event. [ 183.943055][ T23] m920x_read = error: -19 [ 183.947513][ T23] dvb-usb: error while querying for an remote control event. [ 184.043871][ T5748] tipc: Enabling of bearer rejected, failed to enable media [ 184.113333][ T23] m920x_read = error: -19 [ 184.117846][ T23] dvb-usb: error while querying for an remote control event. [ 184.255433][ T21] m920x_read = error: -19 [ 184.262497][ T21] dvb-usb: error while querying for an remote control event. [ 184.413060][ T23] m920x_read = error: -19 [ 184.417572][ T23] dvb-usb: error while querying for an remote control event. [ 185.382487][ T23] m920x_read = error: -19 [ 185.432149][ T23] dvb-usb: error while querying for an remote control event. [ 185.803220][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 186.703678][ T21] m920x_read = error: -19 [ 186.708467][ T21] dvb-usb: error while querying for an remote control event. [ 186.710573][ T5762] ================================================================== [ 186.724532][ T5762] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 186.731770][ T5762] Read of size 8 at addr ffff88802a189218 by task syz.3.406/5762 [ 186.739510][ T5762] [ 186.741875][ T5762] CPU: 0 PID: 5762 Comm: syz.3.406 Not tainted syzkaller #0 [ 186.749186][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.759263][ T5762] Call Trace: [ 186.762570][ T5762] [ 186.765520][ T5762] dump_stack_lvl+0x188/0x250 [ 186.770232][ T5762] ? show_regs_print_info+0x20/0x20 [ 186.775546][ T5762] ? _printk+0xda/0x130 [ 186.779730][ T5762] ? dvb_device_open+0xc6/0x370 [ 186.784609][ T5762] ? load_image+0x400/0x400 [ 186.789186][ T5762] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 186.794766][ T5762] print_address_description+0x60/0x2d0 [ 186.800424][ T5762] ? dvb_device_open+0xc6/0x370 [ 186.805297][ T5762] kasan_report+0xdf/0x130 [ 186.809753][ T5762] ? dvb_device_open+0xc6/0x370 [ 186.814722][ T5762] dvb_device_open+0xc6/0x370 [ 186.819428][ T5762] ? do_raw_spin_unlock+0x11d/0x230 [ 186.824659][ T5762] chrdev_open+0x5c5/0x6a0 [ 186.829114][ T5762] ? cd_forget+0x160/0x160 [ 186.833564][ T5762] ? fsnotify_perm+0x3a7/0x560 [ 186.838371][ T5762] ? cd_forget+0x160/0x160 [ 186.842829][ T5762] do_dentry_open+0x7ff/0xf80 [ 186.847556][ T5762] path_openat+0x26f5/0x2fa0 [ 186.852199][ T5762] ? verify_lock_unused+0x140/0x140 [ 186.857517][ T5762] ? slab_post_alloc_hook+0x4c/0x380 [ 186.862833][ T5762] ? do_filp_open+0x410/0x410 [ 186.867661][ T5762] do_filp_open+0x1e2/0x410 [ 186.872198][ T5762] ? vfs_tmpfile+0x300/0x300 [ 186.876885][ T5762] ? _raw_spin_unlock+0x24/0x40 [ 186.881757][ T5762] ? alloc_fd+0x598/0x630 [ 186.886117][ T5762] do_sys_openat2+0x150/0x4b0 [ 186.890819][ T5762] ? __lock_acquire+0x7d10/0x7d10 [ 186.895887][ T5762] ? do_sys_open+0xe0/0xe0 [ 186.900326][ T5762] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 186.906335][ T5762] ? lock_chain_count+0x20/0x20 [ 186.911245][ T5762] ? vtime_user_exit+0x2c8/0x3e0 [ 186.916214][ T5762] __x64_sys_openat+0x135/0x160 [ 186.921101][ T5762] do_syscall_64+0x4c/0xa0 [ 186.925627][ T5762] ? clear_bhb_loop+0x30/0x80 [ 186.930330][ T5762] ? clear_bhb_loop+0x30/0x80 [ 186.935032][ T5762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.940946][ T5762] RIP: 0033:0x7f3c68891ece [ 186.945388][ T5762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.965213][ T5762] RSP: 002b:00007f3c66b2ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.973785][ T5762] RAX: ffffffffffffffda RBX: 00007f3c66b2b6c0 RCX: 00007f3c68891ece [ 186.981798][ T5762] RDX: 0000000000040002 RSI: 00007f3c66b2ac00 RDI: ffffffffffffff9c [ 186.989889][ T5762] RBP: 00007f3c66b2ac00 R08: 0000000000000000 R09: 0000000000000000 [ 186.997885][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 187.005921][ T5762] R13: 00007f3c68b4b038 R14: 00007f3c68b4afa0 R15: 00007ffe567d5478 [ 187.013932][ T5762] [ 187.016964][ T5762] [ 187.019422][ T5762] Allocated by task 1: [ 187.023505][ T5762] __kasan_kmalloc+0xb5/0xf0 [ 187.028134][ T5762] dvb_register_device+0x311/0x2170 [ 187.033353][ T5762] dvb_register_frontend+0x645/0x920 [ 187.038752][ T5762] vidtv_bridge_probe+0x9a1/0xf70 [ 187.043481][ T21] m920x_read = error: -19 [ 187.043830][ T5762] platform_probe+0x137/0x1c0 [ 187.048167][ T21] dvb-usb: error while querying for an remote control event. [ 187.052878][ T5762] really_probe+0x284/0xc80 [ 187.052900][ T5762] __driver_probe_device+0x18c/0x330 [ 187.052915][ T5762] driver_probe_device+0x4f/0x420 [ 187.052930][ T5762] __driver_attach+0x46b/0x670 [ 187.080088][ T5762] bus_for_each_dev+0x182/0x1f0 [ 187.084957][ T5762] bus_add_driver+0x30a/0x5a0 [ 187.089863][ T5762] driver_register+0x32d/0x430 [ 187.094656][ T5762] vidtv_bridge_init+0x39/0x70 [ 187.099556][ T5762] do_one_initcall+0x272/0x730 [ 187.104329][ T5762] do_initcall_level+0x137/0x1f0 [ 187.109276][ T5762] do_initcalls+0x4b/0x90 [ 187.113613][ T5762] kernel_init_freeable+0x3e9/0x570 [ 187.118815][ T5762] kernel_init+0x19/0x1b0 [ 187.123148][ T5762] ret_from_fork+0x1f/0x30 [ 187.127564][ T5762] [ 187.129881][ T5762] Freed by task 5577: [ 187.133855][ T5762] kasan_set_track+0x4b/0x70 [ 187.138444][ T5762] kasan_set_free_info+0x1f/0x40 [ 187.143477][ T5762] ____kasan_slab_free+0xd5/0x110 [ 187.148499][ T5762] slab_free_freelist_hook+0xea/0x170 [ 187.153964][ T5762] kfree+0xef/0x2a0 [ 187.157769][ T5762] dvb_device_open+0x2e7/0x370 [ 187.163140][ T5762] chrdev_open+0x5c5/0x6a0 [ 187.167554][ T5762] do_dentry_open+0x7ff/0xf80 [ 187.172230][ T5762] path_openat+0x26f5/0x2fa0 [ 187.176814][ T5762] do_filp_open+0x1e2/0x410 [ 187.181317][ T5762] do_sys_openat2+0x150/0x4b0 [ 187.185992][ T5762] __x64_sys_openat+0x135/0x160 [ 187.190842][ T5762] do_syscall_64+0x4c/0xa0 [ 187.195252][ T5762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.201143][ T5762] [ 187.203465][ T5762] The buggy address belongs to the object at ffff88802a189200 [ 187.203465][ T5762] which belongs to the cache kmalloc-256 of size 256 [ 187.217548][ T5762] The buggy address is located 24 bytes inside of [ 187.217548][ T5762] 256-byte region [ffff88802a189200, ffff88802a189300) [ 187.230731][ T5762] The buggy address belongs to the page: [ 187.236353][ T5762] page:ffffea0000a86200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802a188600 pfn:0x2a188 [ 187.247801][ T5762] head:ffffea0000a86200 order:1 compound_mapcount:0 [ 187.254381][ T5762] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 187.262369][ T5762] raw: 00fff00000010200 ffffea0000b16108 ffffea0001e11c88 ffff888016c41b40 [ 187.270951][ T5762] raw: ffff88802a188600 000000000010000f 00000001ffffffff 0000000000000000 [ 187.279524][ T5762] page dumped because: kasan: bad access detected [ 187.285929][ T5762] page_owner tracks the page as allocated [ 187.291634][ T5762] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2822, ts 16315921067, free_ts 0 [ 187.309862][ T5762] get_page_from_freelist+0x1bbd/0x1ca0 [ 187.315413][ T5762] __alloc_pages+0x1ee/0x480 [ 187.320004][ T5762] new_slab+0xc0/0x4b0 [ 187.324076][ T5762] ___slab_alloc+0x80a/0xdd0 [ 187.328661][ T5762] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 187.334027][ T5762] kthread+0x10b/0x520 [ 187.338099][ T5762] ret_from_fork+0x1f/0x30 [ 187.342511][ T5762] page_owner free stack trace missing [ 187.347870][ T5762] [ 187.350187][ T5762] Memory state around the buggy address: [ 187.355815][ T5762] ffff88802a189100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 187.363959][ T5762] ffff88802a189180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 187.372016][ T5762] >ffff88802a189200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.380074][ T5762] ^ [ 187.384917][ T5762] ffff88802a189280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.392971][ T5762] ffff88802a189300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 187.401023][ T5762] ================================================================== [ 187.409083][ T5762] Disabling lock debugging due to kernel taint [ 187.417169][ T5762] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.417648][ T21] m920x_read = error: -19 [ 187.424383][ T5762] CPU: 0 PID: 5762 Comm: syz.3.406 Tainted: G B syzkaller #0 [ 187.424403][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.424413][ T5762] Call Trace: [ 187.424419][ T5762] [ 187.424426][ T5762] dump_stack_lvl+0x188/0x250 [ 187.458318][ T5762] ? show_regs_print_info+0x20/0x20 [ 187.463530][ T5762] ? load_image+0x400/0x400 [ 187.468038][ T5762] panic+0x2e5/0x810 [ 187.471935][ T5762] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 187.478089][ T5762] ? bpf_jit_dump+0xd0/0xd0 [ 187.482680][ T5762] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 187.488568][ T5762] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 187.494453][ T5762] ? _raw_spin_unlock+0x40/0x40 [ 187.499297][ T5762] ? dvb_device_open+0xc6/0x370 [ 187.504147][ T5762] check_panic_on_warn+0x80/0xa0 [ 187.509082][ T5762] ? dvb_device_open+0xc6/0x370 [ 187.513927][ T5762] end_report+0x6d/0xf0 [ 187.518179][ T5762] kasan_report+0x102/0x130 [ 187.522679][ T5762] ? dvb_device_open+0xc6/0x370 [ 187.527526][ T5762] dvb_device_open+0xc6/0x370 [ 187.532200][ T5762] ? do_raw_spin_unlock+0x11d/0x230 [ 187.537527][ T5762] chrdev_open+0x5c5/0x6a0 [ 187.541971][ T5762] ? cd_forget+0x160/0x160 [ 187.546389][ T5762] ? fsnotify_perm+0x3a7/0x560 [ 187.551162][ T5762] ? cd_forget+0x160/0x160 [ 187.555667][ T5762] do_dentry_open+0x7ff/0xf80 [ 187.560433][ T5762] path_openat+0x26f5/0x2fa0 [ 187.565027][ T5762] ? verify_lock_unused+0x140/0x140 [ 187.570235][ T5762] ? slab_post_alloc_hook+0x4c/0x380 [ 187.575608][ T5762] ? do_filp_open+0x410/0x410 [ 187.580284][ T5762] do_filp_open+0x1e2/0x410 [ 187.584784][ T5762] ? vfs_tmpfile+0x300/0x300 [ 187.589388][ T5762] ? _raw_spin_unlock+0x24/0x40 [ 187.594238][ T5762] ? alloc_fd+0x598/0x630 [ 187.598701][ T5762] do_sys_openat2+0x150/0x4b0 [ 187.603382][ T5762] ? __lock_acquire+0x7d10/0x7d10 [ 187.608424][ T5762] ? do_sys_open+0xe0/0xe0 [ 187.612939][ T5762] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 187.618938][ T5762] ? lock_chain_count+0x20/0x20 [ 187.623896][ T5762] ? vtime_user_exit+0x2c8/0x3e0 [ 187.628941][ T5762] __x64_sys_openat+0x135/0x160 [ 187.633801][ T5762] do_syscall_64+0x4c/0xa0 [ 187.638221][ T5762] ? clear_bhb_loop+0x30/0x80 [ 187.642893][ T5762] ? clear_bhb_loop+0x30/0x80 [ 187.647566][ T5762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.653454][ T5762] RIP: 0033:0x7f3c68891ece [ 187.657865][ T5762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.677466][ T5762] RSP: 002b:00007f3c66b2ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.685878][ T5762] RAX: ffffffffffffffda RBX: 00007f3c66b2b6c0 RCX: 00007f3c68891ece [ 187.693857][ T5762] RDX: 0000000000040002 RSI: 00007f3c66b2ac00 RDI: ffffffffffffff9c [ 187.701921][ T5762] RBP: 00007f3c66b2ac00 R08: 0000000000000000 R09: 0000000000000000 [ 187.709896][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 187.718128][ T5762] R13: 00007f3c68b4b038 R14: 00007f3c68b4afa0 R15: 00007ffe567d5478 [ 187.726100][ T5762] [ 187.729416][ T5762] Kernel Offset: disabled [ 187.733734][ T5762] Rebooting in 86400 seconds..