last executing test programs: 21.661700397s ago: executing program 3 (id=43): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r5, 0xffffffffffffffff, 0x6, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21.586548371s ago: executing program 1 (id=44): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0202949da00009050402000000000009058802"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='smaps\x00') timer_create(0xb, 0x0, 0x0) pread64(r2, &(0x7f0000032680)=""/102400, 0x19000, 0x1000000300) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r3, 0x0, 0xc010) sendmsg$inet(r0, 0x0, 0x0) 18.7467269s ago: executing program 3 (id=50): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18.609523876s ago: executing program 0 (id=51): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 15.64397824s ago: executing program 1 (id=52): epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, &(0x7f00000002c0)=""/66, 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x4000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 15.210669351s ago: executing program 0 (id=53): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newsa={0x180, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x4}, {@in6=@remote, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xfffc, 0x8251c, 0x4, 0x5}, {0x6, 0x0, 0x1f, 0x1ff}, {0xffffffff, 0xfffffffc}, 0x70bd2e, 0x34ff, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x90, 0x3, {{'deflate\x00'}, 0x240, "7dcbeed3ed3574de8f66050d53cc21661586fd7a9f80005e95106253c5652badf9ffadba52f1133825260627617bcee0e4db0be423cfe67ae014b7eef4d9b9381325fd51cbcd6780"}}]}, 0x180}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) 15.081230977s ago: executing program 2 (id=54): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000024c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a000000"], 0x24}}, 0x400040c0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) preadv(0xffffffffffffffff, &(0x7f0000001240), 0x0, 0x0, 0x3) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0xffffffffffffffb1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={0x0}}, 0x0) 13.652649107s ago: executing program 3 (id=55): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000ec00000004000400"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240600000000f4ff0100ffffffff010000bb75087abceb0300000000b71d90a486"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x11, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000100000011000300686173683a6e65742c6e6574000000000c0007800800124000000002050005000a000000"], 0x58}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_io_uring_setup(0x79dc, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 11.982154948s ago: executing program 1 (id=57): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x161800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0706000000000000000027000000050031000400", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) 11.978112608s ago: executing program 2 (id=58): r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 10.337786048s ago: executing program 1 (id=60): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r5, 0xffffffffffffffff, 0x6, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.690430437s ago: executing program 3 (id=62): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0202949da00009050402000000000009058802"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='smaps\x00') timer_create(0xb, 0x0, 0x0) pread64(r2, &(0x7f0000032680)=""/102400, 0x19000, 0x1000000300) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r3, 0x0, 0xc010) sendmsg$inet(r0, 0x0, 0x0) 7.447226618s ago: executing program 4 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7.111539704s ago: executing program 4 (id=64): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="380100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000a00009b0000210100000000000000009201000000000010a311fb170f6482041e04a4c689b30b9b000c57516325ff0df88a6c0000000000ff0ed820d943bcff0000000000001c250800000000000500000000000000fcffffffff05ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c41918a543fb2b0140080eb68870819f8b8e177bf3e7c31de05c7ccfcf702e5f15d92347803476e026a6faf079aa91ab71e22d90960edcc10fddcd2526e11dd0ca40cda29f76351185d462d43290e0ea32b8e907489101377cdcbd2f8f15c92947d43764b701ac5d01941a948501000000000000007b6844dabf6948f57da7cd9bc21f8136a32c973380ccb47285ddab1353764d879a476651d6e39094d6469ded6dbc9aa79afcd47bdb9451f2cdda4a2fc4da5b7bf4f291950d9151625690c3a80838b20259004927755748fb77cd8edf02e9b6385ef9b3e2169f5ca1aeeed1b5130b3f37bac64145247363877bbc3a2c964a60182dfe9d620d90b7bde57fac701e5f04afe8f906778f0e13a14913478e"], 0x138}}, 0x844) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000007030000000000"], 0x20}}, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3a00000002200000", @ANYRES32, @ANYRES32, @ANYBLOB="d9b67e73ce011e84050adb1a20c16742c1c9a7e9e266f51c638966e4a5c8d78fdae184b44cbe2217d5754a6bcbc93fb144c81ba3e0dbafc5e67c7ee44d7eab892a945a39a2101125c966d04ad95c38831fba408ee3a873d274825f7f343edcfe738e6f7a5404848504aea8cda701105e5a5333461255be93a041f98f883536ce0dc0905a444bf4531b630f592a693148a197884143d7f0172b6b7b5c5f6b69d18a6cdc88a504c3b79d6a26f91925752f7fa7423339ba8a8c9f634687b5c213216db5", @ANYRES64=0x0], 0x20) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) 6.856919927s ago: executing program 0 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019400)=ANY=[], &(0x7f0000000280)={0x1, 0x3, [0xbb6, 0x3f, 0x4b3, 0xf5a]}) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084149, &(0x7f0000000080)) 5.921701832s ago: executing program 0 (id=66): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.845942616s ago: executing program 4 (id=67): pipe(&(0x7f0000000140)={0xffffffffffffffff}) epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/66, 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a0300000000000000"], 0x0, 0x56}, 0x28) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x4000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000020000103000000000000000002000400000000000000000008000b0009000000b5b5036ff90e72dba7e6fd991a3e1b4bec4405e12ee23bb6eb960b18069797ebfaf0a2802ed1bf2898a6e0431c9146f7e5303709778b407c6e97313ea0943f2572bb7e56ce3cd3986461e56ec6ff6b6ff930f30f2323b81909bb3f914fde7a9f32e3"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 5.531699611s ago: executing program 0 (id=68): epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, &(0x7f00000002c0)=""/66, 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x4000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 3.011329954s ago: executing program 3 (id=69): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 3.010399174s ago: executing program 2 (id=70): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x161800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0706000000000000000027000000050031000400", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) 2.931997097s ago: executing program 1 (id=71): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400010001100000"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 2.566672376s ago: executing program 4 (id=72): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000ec00000004000400"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240600000000f4ff0100ffffffff010000bb75087abceb0300000000b71d90a486"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x11, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000100000011000300686173683a6e65742c6e6574000000000c0007800800124000000002050005000a000000"], 0x58}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_io_uring_setup(0x79dc, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 2.446725031s ago: executing program 2 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09043, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vcsn(&(0x7f0000000280), 0x400000000008, 0x40301) 1.259744069s ago: executing program 2 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.143896674s ago: executing program 0 (id=75): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newsa={0x180, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x4}, {@in6=@remote, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xfffc, 0x8251c, 0x4, 0x5}, {0x6, 0x0, 0x1f, 0x1ff}, {0xffffffff, 0xfffffffc}, 0x70bd2e, 0x34ff, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x90, 0x3, {{'deflate\x00'}, 0x240, "7dcbeed3ed3574de8f66050d53cc21661586fd7a9f80005e95106253c5652badf9ffadba52f1133825260627617bcee0e4db0be423cfe67ae014b7eef4d9b9381325fd51cbcd6780"}}]}, 0x180}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) 1.043030609s ago: executing program 4 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019400)=ANY=[], &(0x7f0000000280)={0x1, 0x3, [0xbb6, 0x3f, 0x4b3, 0xf5a]}) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084149, &(0x7f0000000080)) 904.112366ms ago: executing program 3 (id=77): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 665.948558ms ago: executing program 2 (id=78): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x44e02) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) 51.345627ms ago: executing program 1 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="34000000000801010000000000c300000300000209000100730004"], 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001800010027bd050005fef50415000300030000200403000013f907000000000004000000"], 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8c200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a010200"], 0xe4}}, 0x0) io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x1000, 0x2, 0x2b}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0xffffffb2) syz_emit_ethernet(0x70, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x2, 0x5, 0x62, 0x67, 0x0, 0x2, 0x21, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0xf, 0xfe, [@loopback, @remote, @multicast1]}]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x9, 0x1, "5e82e6", 0x2, ':]k'}, "4fbac72fac5bf3bbecdb3044df360ef32e9fb7ec5d5a399aee4fc3c61c438aeeb00f417d676b814280430ded1d68"}}}}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x0, 0x0, 0x1a0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 0s ago: executing program 4 (id=80): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, 0x0, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100}, 0x0) connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800000, 0x31, r3, 0xffffc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000010500010007000000180007800c00018008000140fffffffe05000300080000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 80.840811][ T4257] cgroup: Unknown subsys name 'net' [ 80.951262][ T4257] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.678078][ T4257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.253026][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.268708][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.277273][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.286004][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.294846][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.303486][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.312585][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.321591][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.330061][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.338137][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.346671][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.354661][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.361825][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.370481][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.378636][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.386732][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.394818][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.397912][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.403982][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.411971][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.424646][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.435922][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.437929][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.444388][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.456269][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.461029][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.475718][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.485422][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.493804][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.524479][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.974536][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 85.066103][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 85.113672][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 85.238577][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 85.273576][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.281819][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.290831][ T4276] device bridge_slave_0 entered promiscuous mode [ 85.320476][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 85.342397][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.349943][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.359503][ T4276] device bridge_slave_1 entered promiscuous mode [ 85.368081][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.375626][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.384571][ T4278] device bridge_slave_0 entered promiscuous mode [ 85.420456][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.427989][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.436886][ T4278] device bridge_slave_1 entered promiscuous mode [ 85.480520][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.490001][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.499469][ T4269] device bridge_slave_0 entered promiscuous mode [ 85.531098][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.544836][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.554810][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.562404][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.571043][ T4269] device bridge_slave_1 entered promiscuous mode [ 85.587401][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.638073][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.673801][ T4276] team0: Port device team_slave_0 added [ 85.680807][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.688301][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.696462][ T4271] device bridge_slave_0 entered promiscuous mode [ 85.721746][ T4278] team0: Port device team_slave_0 added [ 85.731907][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.742642][ T4276] team0: Port device team_slave_1 added [ 85.750068][ T4278] team0: Port device team_slave_1 added [ 85.758231][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.765795][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.775132][ T4283] device bridge_slave_0 entered promiscuous mode [ 85.783955][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.791106][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.800001][ T4271] device bridge_slave_1 entered promiscuous mode [ 85.809376][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.837026][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.844897][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.853412][ T4283] device bridge_slave_1 entered promiscuous mode [ 85.900862][ T4269] team0: Port device team_slave_0 added [ 85.927293][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.935520][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.962207][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.985845][ T4269] team0: Port device team_slave_1 added [ 85.992638][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.999950][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.029959][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.049959][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.061748][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.089123][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.103028][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.113682][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.120705][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.156185][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.176937][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.193401][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.221433][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.228735][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.255961][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.269052][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.276467][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.303228][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.317108][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.377600][ T4271] team0: Port device team_slave_0 added [ 86.395705][ T4278] device hsr_slave_0 entered promiscuous mode [ 86.403463][ T4278] device hsr_slave_1 entered promiscuous mode [ 86.437085][ T4269] device hsr_slave_0 entered promiscuous mode [ 86.444760][ T4269] device hsr_slave_1 entered promiscuous mode [ 86.452858][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.460883][ T4269] Cannot create hsr debugfs directory [ 86.469022][ T4271] team0: Port device team_slave_1 added [ 86.493907][ T4283] team0: Port device team_slave_0 added [ 86.510811][ T4283] team0: Port device team_slave_1 added [ 86.523094][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 86.530832][ T4276] device hsr_slave_0 entered promiscuous mode [ 86.538531][ T4276] device hsr_slave_1 entered promiscuous mode [ 86.545943][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.554032][ T4276] Cannot create hsr debugfs directory [ 86.602362][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 86.609048][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 86.616312][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 86.622779][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.623511][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 86.630576][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.669687][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.690226][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.697389][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.724520][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.782601][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.791954][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.820410][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.864806][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.872933][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.901278][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.023412][ T4271] device hsr_slave_0 entered promiscuous mode [ 87.031470][ T4271] device hsr_slave_1 entered promiscuous mode [ 87.040563][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.048510][ T4271] Cannot create hsr debugfs directory [ 87.138423][ T4283] device hsr_slave_0 entered promiscuous mode [ 87.148024][ T4283] device hsr_slave_1 entered promiscuous mode [ 87.166178][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.189990][ T4283] Cannot create hsr debugfs directory [ 87.510054][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.536449][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.576075][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.616551][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.639999][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.675802][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.708529][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.729921][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.810115][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.843772][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.879691][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.918862][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.944439][ T4283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.959358][ T4283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.970388][ T4283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.984519][ T4283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.109075][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.134208][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.147176][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.160604][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.172981][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.200389][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.223852][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.235611][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.249454][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.263977][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.272973][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.309806][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.331544][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.341649][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.352994][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.360455][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.372019][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.381982][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.391115][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.398604][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.411479][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.420798][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.430200][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.437582][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.446124][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.455392][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.465353][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.504038][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.517945][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.527738][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.535458][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.547816][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.557740][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.587785][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.602310][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 88.611289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.624835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.637078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.647237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.674981][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.683322][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 88.689403][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 88.695843][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 88.695860][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 88.713207][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.722091][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.733551][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.743832][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.753570][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.771636][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.783039][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.805413][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.814387][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.823706][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.838190][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.851219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.860810][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.870379][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.880282][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.891550][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.906527][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.934431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.944861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.962833][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.970109][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.992874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.001979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.019058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.029287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.044263][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.051616][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.066560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.094370][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.129516][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.153525][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.163650][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.174544][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.184455][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.194639][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.204599][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.214247][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.229431][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.238023][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.248079][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.257332][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.264645][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.278903][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.289654][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.303257][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.310512][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.344362][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.362921][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.379347][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.395983][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.405492][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.423188][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.432014][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.447789][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.475717][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.503536][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.527873][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.557982][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.577465][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.622544][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.631523][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.665041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.680608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.695679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.706996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.728530][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.755079][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.772705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.800732][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.817380][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.829773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.842081][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.858958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.868608][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.878116][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.885497][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.899184][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.909948][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.932896][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.954682][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.978562][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.004179][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.011522][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.076876][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.090868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.129706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.163406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.194038][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.223588][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.248954][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.266927][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.306895][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.321892][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.353235][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.374608][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.393067][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.463548][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.485532][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.513142][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.521030][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.595403][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.630921][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.682733][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 90.696711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.714415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.762718][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 90.769009][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 90.775814][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 90.775833][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 90.789921][ T4276] device veth0_vlan entered promiscuous mode [ 90.823444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.835086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.846786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.861564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.889302][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.906385][ T4276] device veth1_vlan entered promiscuous mode [ 90.956931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.976750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.993005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.012838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.068018][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.081691][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.103410][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.111240][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.181347][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.205447][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.216116][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.234854][ T4276] device veth0_macvtap entered promiscuous mode [ 91.265815][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.276630][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.286290][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.299694][ T4269] device veth0_vlan entered promiscuous mode [ 91.320220][ T4276] device veth1_macvtap entered promiscuous mode [ 91.360266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.374657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.387792][ T4269] device veth1_vlan entered promiscuous mode [ 91.426207][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.436260][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.445705][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.455536][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.465423][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.474668][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.491461][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.508445][ T4283] device veth0_vlan entered promiscuous mode [ 91.529296][ T4278] device veth0_vlan entered promiscuous mode [ 91.537111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.546990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.556754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.566267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.575795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.584679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.596011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.604680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.626112][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.639137][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.649664][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.659420][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.668673][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.694681][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.703031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.714281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.737340][ T4283] device veth1_vlan entered promiscuous mode [ 91.791496][ T4278] device veth1_vlan entered promiscuous mode [ 91.816892][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.828987][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.838319][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.848079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.858036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.870719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.880660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.911358][ T4283] device veth0_macvtap entered promiscuous mode [ 91.947722][ T4269] device veth0_macvtap entered promiscuous mode [ 91.959121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.970019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.980605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.990465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.000017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.044065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.057774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.070613][ T4269] device veth1_macvtap entered promiscuous mode [ 92.085628][ T4283] device veth1_macvtap entered promiscuous mode [ 92.102342][ T4271] device veth0_vlan entered promiscuous mode [ 92.110254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.120724][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.130266][ T1169] cfg80211: failed to load regulatory.db [ 92.137392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.147373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.156419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.175005][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.221237][ T4271] device veth1_vlan entered promiscuous mode [ 92.229197][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.238519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.275829][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.293981][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.307167][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.324393][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.335479][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.347838][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.383652][ T4271] device veth0_macvtap entered promiscuous mode [ 92.392810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.402078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.413594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.423915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.433698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.444822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.454422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.464566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.480241][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.491118][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.493450][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.501136][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.512271][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.529500][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.543998][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.556280][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.567190][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.579312][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.590267][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.606108][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.617628][ T4271] device veth1_macvtap entered promiscuous mode [ 92.635387][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.645401][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.657374][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.667254][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.677487][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.690308][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.699712][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.715594][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724862][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.734338][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.743682][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.757586][ T4283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.769097][ T4283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.778391][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 92.786742][ T4283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.798122][ T4283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.824060][ T4278] device veth0_macvtap entered promiscuous mode [ 92.846643][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 92.853151][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 92.853692][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 92.859355][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 92.875632][ T4278] device veth1_macvtap entered promiscuous mode [ 92.925904][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.948904][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.960408][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.977001][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.988984][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.006144][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.030753][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.080387][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.092769][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.103666][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.116446][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.131152][ T4359] device vlan2 entered promiscuous mode [ 93.141803][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.154458][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.165051][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.176019][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.186566][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.197558][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.210114][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.258138][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.275413][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.287285][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.299212][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.309635][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.320902][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.332568][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.343782][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.356077][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.364671][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.501243][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.522362][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.537544][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.549235][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.569961][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583957][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.601627][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.611439][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634304][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.647306][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.657552][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.668742][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.679298][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.690551][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.701136][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.713198][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.726608][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.746248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.756747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.792451][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.802104][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.816046][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.825306][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.882846][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.890844][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.949843][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.971968][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.980633][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.023522][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.032066][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.055293][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.074440][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.109306][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.129716][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.164568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.215632][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.233341][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.279443][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.292602][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.300694][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.415338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.423664][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.431553][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.480654][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.492031][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.511018][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.612631][ T4369] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.670139][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.721275][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.002962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.011799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.057205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.082162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.092583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.103646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.114874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.124166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.135884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.147496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.507782][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.380265][ T4388] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 99.297267][ T4404] device vlan2 entered promiscuous mode [ 99.382427][ T4325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.421985][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 99.646097][ T4325] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 99.673831][ T4325] usb 1-1: config 0 has no interface number 0 [ 99.704132][ T4325] usb 1-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 99.782281][ T4325] usb 1-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 100.705312][ T4325] usb 1-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 100.719778][ T4325] usb 1-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 0 [ 100.732427][ T4325] usb 1-1: config 0 interface 238 has no altsetting 0 [ 101.002837][ T4325] usb 1-1: string descriptor 0 read error: -71 [ 101.009436][ T4325] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 101.064228][ T4325] usb 1-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 101.156882][ T4325] usb 1-1: config 0 descriptor?? [ 101.223346][ T4325] usb 1-1: can't set config #0, error -71 [ 101.285530][ T4325] usb 1-1: USB disconnect, device number 2 [ 102.690646][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 103.986451][ T4425] ax25_connect(): syz.4.19 uses autobind, please contact jreuter@yaina.de [ 104.320176][ T4425] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 104.701070][ T4437] overlayfs: overlapping lowerdir path [ 104.796592][ T4439] ======================================================= [ 104.796592][ T4439] WARNING: The mand mount option has been deprecated and [ 104.796592][ T4439] and is ignored by this kernel. Remove the mand [ 104.796592][ T4439] option from the mount to silence this warning. [ 104.796592][ T4439] ======================================================= [ 104.833676][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.991009][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 105.161270][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 105.213802][ T4450] overlayfs: conflicting lowerdir path [ 111.489690][ T4462] sched: RT throttling activated [ 111.498763][ T4279] Bluetooth: hci3: Unknown advertising packet type: 0x7773 [ 111.498850][ T4279] Bluetooth: hci3: Malformed LE Event: 0x0d [ 111.652751][ T3653] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.043414][ T3653] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 112.071392][ T3653] usb 1-1: config 0 has no interface number 0 [ 112.082297][ T3653] usb 1-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 112.099861][ T3653] usb 1-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 112.112305][ T4324] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.470505][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.485592][ T4324] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 112.511535][ T4324] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.528472][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.581513][ T4324] usb 5-1: config 0 descriptor?? [ 112.752979][ T3653] usb 1-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 112.757627][ T4324] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 112.973690][ T3653] usb 1-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 0 [ 112.994779][ T3653] usb 1-1: config 0 interface 238 has no altsetting 0 [ 113.016714][ T4483] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 113.036087][ T3653] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 113.047036][ T3653] usb 1-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 113.056726][ T3653] usb 1-1: Product: syz [ 113.064863][ T3653] usb 1-1: Manufacturer: syz [ 113.078701][ T3653] usb 1-1: SerialNumber: syz [ 113.093463][ T3653] usb 1-1: config 0 descriptor?? [ 113.343930][ T26] usb 5-1: USB disconnect, device number 2 [ 114.990151][ T3653] usb 1-1: can't set config #0, error -71 [ 115.045274][ T3653] usb 1-1: USB disconnect, device number 3 [ 115.460180][ T4506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.33'. [ 115.539617][ T4507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.33'. [ 115.603280][ T4508] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.122439][ T4511] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 117.356898][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 117.495232][ T4527] overlayfs: overlapping lowerdir path [ 117.522574][ T4527] overlayfs: overlapping lowerdir path [ 120.478286][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 120.562908][ T4545] Zero length message leads to an empty skb [ 122.473154][ T4279] Bluetooth: hci3: Unknown advertising packet type: 0x7773 [ 122.473208][ T4279] Bluetooth: hci3: Malformed LE Event: 0x0d [ 125.370035][ T4572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'. [ 125.454622][ T4573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.45'. [ 125.905895][ T125] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.118595][ T125] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 126.147445][ T125] usb 2-1: config 0 has no interface number 0 [ 126.178307][ T125] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 126.209841][ T4579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 126.229179][ T125] usb 2-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 126.249920][ T125] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 126.290872][ T125] usb 2-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 0 [ 126.321809][ T125] usb 2-1: config 0 interface 238 has no altsetting 0 [ 126.361762][ T125] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 127.025170][ T125] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 127.060500][ T125] usb 2-1: Product: syz [ 127.091687][ T125] usb 2-1: Manufacturer: syz [ 127.133223][ T125] usb 2-1: SerialNumber: syz [ 127.201373][ T125] usb 2-1: config 0 descriptor?? [ 127.330597][ T125] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 128.210584][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 128.248239][ T26] usb 2-1: USB disconnect, device number 2 [ 131.583985][ T4279] Bluetooth: hci4: Unknown advertising packet type: 0x7773 [ 131.584470][ T4279] Bluetooth: hci4: Malformed LE Event: 0x0d [ 131.972285][ T4325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.454324][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.518034][ T4325] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 133.143526][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.241611][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.309997][ T4325] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.374718][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 134.389915][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.593507][ T4325] usb 2-1: config 0 descriptor?? [ 135.368086][ T4325] usb 2-1: can't set config #0, error -71 [ 135.415739][ T4325] usb 2-1: USB disconnect, device number 3 [ 135.628475][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 139.232233][ T4636] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.255574][ T4649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 139.449061][ T4636] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 139.478256][ T4636] usb 4-1: config 0 has no interface number 0 [ 139.521906][ T4636] usb 4-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 139.669951][ T4636] usb 4-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 140.004875][ T4636] usb 4-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 140.102314][ T4636] usb 4-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 0 [ 140.155780][ T4636] usb 4-1: config 0 interface 238 has no altsetting 0 [ 140.195474][ T4636] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 140.236721][ T4636] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 140.332529][ T4636] usb 4-1: Product: syz [ 140.352208][ T4636] usb 4-1: Manufacturer: syz [ 140.357898][ T4636] usb 4-1: SerialNumber: syz [ 140.414103][ T4636] usb 4-1: config 0 descriptor?? [ 140.501839][ T4636] ni6501 4-1:0.238: driver 'ni6501' failed to auto-configure device. [ 141.027412][ T4279] Bluetooth: hci3: Unknown advertising packet type: 0x7773 [ 141.027566][ T4279] Bluetooth: hci3: Malformed LE Event: 0x0d [ 142.341743][ T4279] Bluetooth: hci1: Unknown advertising packet type: 0x7773 [ 142.342353][ T4279] Bluetooth: hci1: Malformed LE Event: 0x0d [ 142.357009][ T4636] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.159778][ T22] usb 4-1: USB disconnect, device number 2 [ 143.314299][ T4636] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.345453][ T4636] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 143.400092][ T4636] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.410782][ T4325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.424386][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 143.452258][ T4636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.481810][ T4636] usb 5-1: config 0 descriptor?? [ 143.501498][ T4636] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 143.562194][ T22] usb 5-1: USB disconnect, device number 4 [ 143.595802][ T4325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.875803][ T4325] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 144.238443][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 144.637075][ T4325] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.915972][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.239938][ T4325] usb 1-1: config 0 descriptor?? [ 145.246164][ T4325] usb 1-1: can't set config #0, error -71 [ 145.283441][ T4325] usb 1-1: USB disconnect, device number 4 [ 146.440582][ T4706] ================================================================== [ 146.449067][ T4706] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 146.456689][ T4706] Read of size 8 at addr ffff888029806418 by task syz.2.78/4706 [ 146.464583][ T4706] [ 146.466976][ T4706] CPU: 0 PID: 4706 Comm: syz.2.78 Not tainted syzkaller #0 [ 146.474418][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.485054][ T4706] Call Trace: [ 146.488489][ T4706] [ 146.492106][ T4706] dump_stack_lvl+0x188/0x24e [ 146.497986][ T4706] ? read_lock_is_recursive+0x10/0x10 [ 146.503934][ T4706] ? show_regs_print_info+0x12/0x12 [ 146.509195][ T4706] ? load_image+0x400/0x400 [ 146.513767][ T4706] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 146.519948][ T4706] ? __virt_addr_valid+0x188/0x540 [ 146.525296][ T4706] ? __virt_addr_valid+0x465/0x540 [ 146.531579][ T4706] ? dvb_device_open+0xc6/0x370 [ 146.537137][ T4706] print_report+0xa8/0x210 [ 146.541888][ T4706] kasan_report+0x10b/0x140 [ 146.546558][ T4706] ? dvb_device_open+0xc6/0x370 [ 146.551565][ T4706] dvb_device_open+0xc6/0x370 [ 146.556315][ T4706] ? do_raw_spin_unlock+0x11d/0x230 [ 146.562033][ T4706] chrdev_open+0x5c5/0x6a0 [ 146.566944][ T4706] ? cd_forget+0x160/0x160 [ 146.571743][ T4706] ? fsnotify_perm+0x39b/0x550 [ 146.577011][ T4706] ? cd_forget+0x160/0x160 [ 146.581830][ T4706] do_dentry_open+0x7e9/0x10d0 [ 146.586943][ T4706] path_openat+0x2635/0x2ee0 [ 146.592062][ T4706] ? verify_lock_unused+0x140/0x140 [ 146.597853][ T4706] ? do_syscall_64+0x4c/0xa0 [ 146.602953][ T4706] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.609272][ T4706] ? do_filp_open+0x430/0x430 [ 146.614109][ T4706] do_filp_open+0x1f1/0x430 [ 146.618772][ T4706] ? vfs_tmpfile+0x480/0x480 [ 146.624037][ T4706] ? _raw_spin_unlock+0x24/0x40 [ 146.629246][ T4706] ? alloc_fd+0x58f/0x630 [ 146.634603][ T4706] do_sys_openat2+0x150/0x4b0 [ 146.639357][ T4706] ? do_sys_open+0xe0/0xe0 [ 146.644010][ T4706] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 146.650338][ T4706] ? lock_chain_count+0x20/0x20 [ 146.655432][ T4706] __x64_sys_openat+0x135/0x160 [ 146.660520][ T4706] do_syscall_64+0x4c/0xa0 [ 146.664998][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 146.669906][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 146.674824][ T4706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.681030][ T4706] RIP: 0033:0x7fe0c555cfce [ 146.685501][ T4706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.705790][ T4706] RSP: 002b:00007fe0c646fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.715061][ T4706] RAX: ffffffffffffffda RBX: 00007fe0c64706c0 RCX: 00007fe0c555cfce [ 146.723725][ T4706] RDX: 0000000000044e02 RSI: 00007fe0c646fc00 RDI: ffffffffffffff9c [ 146.732561][ T4706] RBP: 00007fe0c646fc00 R08: 0000000000000000 R09: 0000000000000000 [ 146.741636][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 146.750785][ T4706] R13: 00007fe0c5816128 R14: 00007fe0c5816090 R15: 00007fffc41979d8 [ 146.759266][ T4706] [ 146.762350][ T4706] [ 146.764992][ T4706] Allocated by task 1: [ 146.769224][ T4706] kasan_set_track+0x4b/0x70 [ 146.774149][ T4706] __kasan_kmalloc+0x8e/0xa0 [ 146.779082][ T4706] dvb_register_device+0x311/0x2150 [ 146.784493][ T4706] dvb_register_frontend+0x645/0x920 [ 146.790208][ T4706] vidtv_bridge_probe+0x9a1/0xf70 [ 146.796538][ T4706] platform_probe+0x137/0x1c0 [ 146.801356][ T4706] really_probe+0x2aa/0xc70 [ 146.806201][ T4706] __driver_probe_device+0x18c/0x330 [ 146.811901][ T4706] driver_probe_device+0x4f/0x420 [ 146.817504][ T4706] __driver_attach+0x44a/0x6e0 [ 146.822599][ T4706] bus_for_each_dev+0x182/0x1f0 [ 146.827709][ T4706] bus_add_driver+0x30a/0x5a0 [ 146.832702][ T4706] driver_register+0x32d/0x430 [ 146.838043][ T4706] vidtv_bridge_init+0x39/0x67 [ 146.843230][ T4706] do_one_initcall+0x26a/0x840 [ 146.848482][ T4706] do_initcall_level+0x137/0x1e4 [ 146.853561][ T4706] do_initcalls+0x4b/0x8a [ 146.858134][ T4706] kernel_init_freeable+0x415/0x5be [ 146.863546][ T4706] kernel_init+0x19/0x1b0 [ 146.868098][ T4706] ret_from_fork+0x1f/0x30 [ 146.872960][ T4706] [ 146.875504][ T4706] The buggy address belongs to the object at ffff888029806400 [ 146.875504][ T4706] which belongs to the cache kmalloc-256 of size 256 [ 146.891364][ T4706] The buggy address is located 24 bytes inside of [ 146.891364][ T4706] 256-byte region [ffff888029806400, ffff888029806500) [ 146.904712][ T4706] [ 146.907186][ T4706] The buggy address belongs to the physical page: [ 146.913934][ T4706] page:ffffea0000a60180 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888029806400 pfn:0x29806 [ 146.925820][ T4706] head:ffffea0000a60180 order:1 compound_mapcount:0 compound_pincount:0 [ 146.934497][ T4706] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 146.942744][ T4706] raw: 00fff00000010200 ffffea0000a55908 ffffea0001f66088 ffff888017441b40 [ 146.951559][ T4706] raw: ffff888029806400 000000000010000f 00000001ffffffff 0000000000000000 [ 146.960352][ T4706] page dumped because: kasan: bad access detected [ 146.966817][ T4706] page_owner tracks the page as allocated [ 146.972753][ T4706] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19705116854, free_ts 0 [ 146.993164][ T4706] post_alloc_hook+0x173/0x1a0 [ 146.997990][ T4706] get_page_from_freelist+0x1a1e/0x1ab0 [ 147.003711][ T4706] __alloc_pages+0x1ec/0x4f0 [ 147.008685][ T4706] alloc_page_interleave+0x24/0x1e0 [ 147.014829][ T4706] alloc_slab_page+0x5d/0x160 [ 147.019672][ T4706] new_slab+0x87/0x2c0 [ 147.024076][ T4706] ___slab_alloc+0xbc6/0x1240 [ 147.029342][ T4706] __kmem_cache_alloc_node+0x1a0/0x260 [ 147.035155][ T4706] kmalloc_trace+0x26/0xe0 [ 147.039894][ T4706] bus_add_driver+0xda/0x5a0 [ 147.044923][ T4706] driver_register+0x32d/0x430 [ 147.049834][ T4706] i2c_register_driver+0xb6/0x160 [ 147.054999][ T4706] do_one_initcall+0x26a/0x840 [ 147.060078][ T4706] do_initcall_level+0x137/0x1e4 [ 147.065162][ T4706] do_initcalls+0x4b/0x8a [ 147.071455][ T4706] kernel_init_freeable+0x415/0x5be [ 147.077175][ T4706] page_owner free stack trace missing [ 147.083461][ T4706] [ 147.085928][ T4706] Memory state around the buggy address: [ 147.092056][ T4706] ffff888029806300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.100442][ T4706] ffff888029806380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.109535][ T4706] >ffff888029806400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.118059][ T4706] ^ [ 147.123036][ T4706] ffff888029806480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.131470][ T4706] ffff888029806500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.140006][ T4706] ================================================================== [ 147.239409][ T4706] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.247586][ T4706] CPU: 0 PID: 4706 Comm: syz.2.78 Not tainted syzkaller #0 [ 147.254854][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.265151][ T4706] Call Trace: [ 147.268644][ T4706] [ 147.271789][ T4706] dump_stack_lvl+0x188/0x24e [ 147.276531][ T4706] ? memcpy+0x3c/0x60 [ 147.280948][ T4706] ? show_regs_print_info+0x12/0x12 [ 147.286308][ T4706] ? load_image+0x400/0x400 [ 147.291323][ T4706] panic+0x2e5/0x730 [ 147.295310][ T4706] ? bpf_jit_dump+0xd0/0xd0 [ 147.300069][ T4706] ? check_panic_on_warn+0x6c/0xa0 [ 147.305416][ T4706] check_panic_on_warn+0x80/0xa0 [ 147.310671][ T4706] ? dvb_device_open+0xc6/0x370 [ 147.315662][ T4706] end_report+0x66/0x110 [ 147.320158][ T4706] kasan_report+0x118/0x140 [ 147.325239][ T4706] ? dvb_device_open+0xc6/0x370 [ 147.330685][ T4706] dvb_device_open+0xc6/0x370 [ 147.335435][ T4706] ? do_raw_spin_unlock+0x11d/0x230 [ 147.340783][ T4706] chrdev_open+0x5c5/0x6a0 [ 147.345268][ T4706] ? cd_forget+0x160/0x160 [ 147.349841][ T4706] ? fsnotify_perm+0x39b/0x550 [ 147.354751][ T4706] ? cd_forget+0x160/0x160 [ 147.359361][ T4706] do_dentry_open+0x7e9/0x10d0 [ 147.364445][ T4706] path_openat+0x2635/0x2ee0 [ 147.369395][ T4706] ? verify_lock_unused+0x140/0x140 [ 147.375157][ T4706] ? do_syscall_64+0x4c/0xa0 [ 147.380278][ T4706] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.386981][ T4706] ? do_filp_open+0x430/0x430 [ 147.391839][ T4706] do_filp_open+0x1f1/0x430 [ 147.396590][ T4706] ? vfs_tmpfile+0x480/0x480 [ 147.401787][ T4706] ? _raw_spin_unlock+0x24/0x40 [ 147.406956][ T4706] ? alloc_fd+0x58f/0x630 [ 147.411790][ T4706] do_sys_openat2+0x150/0x4b0 [ 147.416884][ T4706] ? do_sys_open+0xe0/0xe0 [ 147.421894][ T4706] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 147.428201][ T4706] ? lock_chain_count+0x20/0x20 [ 147.433112][ T4706] __x64_sys_openat+0x135/0x160 [ 147.438130][ T4706] do_syscall_64+0x4c/0xa0 [ 147.442785][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 147.447546][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 147.452366][ T4706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.458543][ T4706] RIP: 0033:0x7fe0c555cfce [ 147.463286][ T4706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.483402][ T4706] RSP: 002b:00007fe0c646fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.492218][ T4706] RAX: ffffffffffffffda RBX: 00007fe0c64706c0 RCX: 00007fe0c555cfce [ 147.500345][ T4706] RDX: 0000000000044e02 RSI: 00007fe0c646fc00 RDI: ffffffffffffff9c [ 147.508632][ T4706] RBP: 00007fe0c646fc00 R08: 0000000000000000 R09: 0000000000000000 [ 147.517027][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 147.525221][ T4706] R13: 00007fe0c5816128 R14: 00007fe0c5816090 R15: 00007fffc41979d8 [ 147.533907][ T4706] [ 147.537893][ T4706] Kernel Offset: disabled [ 147.542426][ T4706] Rebooting in 86400 seconds..