last executing test programs: 11.585955392s ago: executing program 3 (id=4): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c00", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000000)='syzkaller\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x9, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0xb9}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, 0xffffffffffffffff, 0x12, 0x0, @val=@tracing={0xffffffffffffffff, 0x34b00000000000}}, 0x1c) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f00000006c0)={0x0, 0x1, 0xac1d}) ioperm(0x7, 0x81, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000001ece1e40ad8871461ab08", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 10.828554467s ago: executing program 4 (id=5): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x5, 0x6, @tid=r0}, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x4, 0x5, 0x4, 0x100, 0x803, "000000ffff0600000800", "00000002", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="99177fa56f05ece65fbcee5586dd60000000001011ff0000898af70200000000001000000001fe80000000000000000a3289a90000aa00000e22001090780203000000000000509c390acc00177a20dae7e6e16f1ce85d12ea4b3f251c1e6745678582a7c028c1f56b3d19a9f076b52d4f627acdff55ebb6521fd40388193d49922a65aac0db2cf94c06bcaa28e1107b37ca623d957434681cf1267ef1e79e6c4929d1dc9b82368bd694c5c0c09dac19273190c311fd2f7debdbecc4f26e5c067d58615acd42a6e3b38642c362605cd6fd4d997db88b81f42e89499f0da3661953ae"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r7 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xc7) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x4) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) io_destroy(0x0) 8.331295385s ago: executing program 3 (id=7): socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xdd3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001700)=[{&(0x7f0000000380)="58000000140019234017908a840da2560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffee09000000fff5f20000000800030006010000418e01400004fce3", 0x58}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x72) 8.190103403s ago: executing program 2 (id=8): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x4, 0xc, 0x43, @private1, @private2, 0x40, 0x1, 0x9, 0x94}}) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 7.025593863s ago: executing program 2 (id=11): r0 = socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 6.812843085s ago: executing program 2 (id=12): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 5.576895678s ago: executing program 1 (id=16): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 4.826157093s ago: executing program 3 (id=17): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.557815669s ago: executing program 2 (id=18): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 4.321094073s ago: executing program 3 (id=19): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) 2.460031954s ago: executing program 0 (id=24): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b) 2.408035487s ago: executing program 1 (id=25): creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 2.368969949s ago: executing program 1 (id=26): setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x1, 0x1e, 0xf, 0x1, 0x3, 0xa}}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000020, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000005, 0x9c50, 0x8658, 0x100, 0x5, 0x6000000000, 0x1, 0x1}, 0x0) ioprio_get$pid(0x3, 0x0) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 1.410269336s ago: executing program 1 (id=27): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0xfefc, 0x1000}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.371696839s ago: executing program 2 (id=28): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 1.235917566s ago: executing program 1 (id=29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.186030559s ago: executing program 0 (id=30): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 912.705745ms ago: executing program 1 (id=31): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) 846.63991ms ago: executing program 0 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8}, 0x1c) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000003d00), 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x66, r2}) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000003d40)={0x0, 0x34325241, 0x1, @stepwise={0x4, 0x4, 0x4, 0xcac, 0x4, 0x4}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x62000) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000480)={0x53, 0x4, 0x0, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000b80), 0x0, 0x2, 0x10002, 0xfffffffd, 0x0}) syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380), &(0x7f0000000200)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001680)) r8 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000001c0)={0x0, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000000)={0x0, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 759.952545ms ago: executing program 0 (id=33): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod(0x0, 0x1000, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 667.74367ms ago: executing program 2 (id=34): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES16], 0x22) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x4, 0xc, 0x43, @private1, @private2, 0x40, 0x1, 0x9, 0x94}}) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 424.217974ms ago: executing program 3 (id=35): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 150.486451ms ago: executing program 0 (id=36): creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 0s ago: executing program 0 (id=37): setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x1, 0x1e, 0xf, 0x1, 0x3, 0xa}}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000020, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000005, 0x9c50, 0x8658, 0x100, 0x5, 0x6000000000, 0x1, 0x1}, 0x0) ioprio_get$pid(0x3, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 65.237104][ T4173] cgroup: Unknown subsys name 'net' [ 65.372191][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.885720][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.921009][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.959764][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 69.049056][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.062276][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.100067][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.133673][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.141658][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.150276][ T4193] device bridge_slave_0 entered promiscuous mode [ 69.170778][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.178158][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.186920][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.200906][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.208631][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.217066][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.234774][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.242090][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.250250][ T4193] device bridge_slave_1 entered promiscuous mode [ 69.313212][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.324792][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.338138][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.362526][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.406232][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.413344][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.421852][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.445005][ T4193] team0: Port device team_slave_0 added [ 69.464148][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.472120][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.480514][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.487804][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.494889][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.503540][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.513845][ T4193] team0: Port device team_slave_1 added [ 69.529114][ T4194] team0: Port device team_slave_0 added [ 69.535154][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.542334][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.550597][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.564582][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.572310][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.580954][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.596072][ T4194] team0: Port device team_slave_1 added [ 69.602106][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.609369][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.618217][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.659894][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.667241][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.693375][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.707080][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.738288][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.750102][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.757507][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.783915][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.797889][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.808874][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.819822][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.837154][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.844146][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.870892][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.894023][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.918491][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.925754][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.951952][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.991706][ T4186] team0: Port device team_slave_0 added [ 70.013075][ T4191] team0: Port device team_slave_0 added [ 70.024334][ T4191] team0: Port device team_slave_1 added [ 70.036398][ T4193] device hsr_slave_0 entered promiscuous mode [ 70.043711][ T4193] device hsr_slave_1 entered promiscuous mode [ 70.061382][ T4186] team0: Port device team_slave_1 added [ 70.075686][ T4185] team0: Port device team_slave_0 added [ 70.102809][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.110209][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.137111][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.155872][ T4185] team0: Port device team_slave_1 added [ 70.176288][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.183297][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.209940][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.241102][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.248463][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.274838][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.303756][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.311005][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.337600][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.349545][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.356611][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.382934][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.417353][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.424245][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.431369][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.439643][ T4194] Cannot create hsr debugfs directory [ 70.445953][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.453108][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.480216][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.517602][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.524668][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.531976][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.539810][ T4186] Cannot create hsr debugfs directory [ 70.585597][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.592807][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.599704][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.607754][ T4191] Cannot create hsr debugfs directory [ 70.626270][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 70.633246][ T4187] Bluetooth: hci0: command 0x0409 tx timeout [ 70.633503][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 70.657954][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 70.664132][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 70.686007][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.693175][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.700115][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.708003][ T4185] Cannot create hsr debugfs directory [ 71.002202][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.018224][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.036686][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.046800][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.088065][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.103527][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.128438][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.137740][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.189686][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.214480][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.240951][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.274934][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.286345][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.300035][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.310248][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.319875][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.388297][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.407848][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.423188][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.434090][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.441247][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.453116][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.469058][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.479178][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.489299][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.503138][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.521997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.530829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.542472][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.573506][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.623325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.632941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.642721][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.650210][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.659504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.669253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.678749][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.685893][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.693951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.704451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.715010][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.722209][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.731653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.741307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.750624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.760083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.769455][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.776586][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.784818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.794275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.804255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.813326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.822581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.831050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.872989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.882525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.893059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.925171][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.933128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.943417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.952886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.963123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.971824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.980471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.989348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.998294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.009620][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.034165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.049071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.061562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.086432][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.097052][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.110831][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.131606][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.183186][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.193527][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.211471][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.221094][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.230135][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.239645][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.249112][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.256476][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.264691][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.275617][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.284986][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.292130][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.300689][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.310035][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.319878][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.328308][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.350766][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.379183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.397584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.406664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.417282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.427239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.436700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.464373][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.479424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.493048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.502726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.514463][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.521634][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.531121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.540942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.551067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.564280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.573644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.583034][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.590192][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.608693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.618786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.649839][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.670964][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.686223][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.695834][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.705630][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 72.712114][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 72.723056][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.725912][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 72.748539][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.751115][ T4246] Bluetooth: hci0: command 0x041b tx timeout [ 72.763224][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 72.767693][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.779091][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.787384][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.794902][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.812610][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.832473][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.852160][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.884447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.894179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.902838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.912659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.922261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.931450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.940391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.953064][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.972041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.987171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.046711][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.067310][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.085890][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.093010][ T623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.102970][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.113176][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.122626][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.129952][ T623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.139226][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.148302][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.159739][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.170092][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.180050][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.194127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.205955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.214811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.223592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.247281][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.257645][ T4186] device veth0_vlan entered promiscuous mode [ 73.277977][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.291447][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.300309][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.361355][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.370856][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.380798][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.390541][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.399836][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.410129][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.419598][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.429152][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.442060][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.450892][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.459573][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.468184][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.477141][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.488376][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.496882][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.522313][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.538666][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.553016][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.566884][ T4186] device veth1_vlan entered promiscuous mode [ 73.586706][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.596009][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.604471][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.614335][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.627461][ T4193] device veth0_vlan entered promiscuous mode [ 73.640611][ T4194] device veth0_vlan entered promiscuous mode [ 73.660268][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.668754][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.684626][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.698854][ T4193] device veth1_vlan entered promiscuous mode [ 73.714954][ T4194] device veth1_vlan entered promiscuous mode [ 73.728342][ T4186] device veth0_macvtap entered promiscuous mode [ 73.739724][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.750051][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.762314][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.770605][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.780118][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.789929][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.830571][ T4186] device veth1_macvtap entered promiscuous mode [ 73.859293][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.870531][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.883464][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.894005][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.905029][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.914506][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.957707][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.969122][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.984264][ T4194] device veth0_macvtap entered promiscuous mode [ 73.994039][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.003733][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.021412][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.030376][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.041061][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.051502][ T4193] device veth0_macvtap entered promiscuous mode [ 74.062708][ T4194] device veth1_macvtap entered promiscuous mode [ 74.075118][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.087194][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.096117][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.104901][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.115033][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.123508][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.134730][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.159853][ T4191] device veth0_vlan entered promiscuous mode [ 74.167571][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.176330][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.187378][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.195397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.204440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.222436][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.243864][ T4193] device veth1_macvtap entered promiscuous mode [ 74.262151][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.272204][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.287762][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301461][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.326751][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.338650][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.351454][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.364870][ T4191] device veth1_vlan entered promiscuous mode [ 74.388753][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.399821][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.425918][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.437946][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.451814][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.487264][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.498168][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.519839][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.533594][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.544645][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.559151][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.571488][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.582206][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.592188][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.602371][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.611669][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.628183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.638111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.650091][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.661935][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.674026][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.684885][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.697337][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.733124][ T4191] device veth0_macvtap entered promiscuous mode [ 74.749669][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.764267][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.782112][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.790716][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 74.798452][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.806557][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 74.806646][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 74.806728][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 74.806883][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 74.818867][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.865070][ T4191] device veth1_macvtap entered promiscuous mode [ 74.912389][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.926242][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.934970][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.949406][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.958993][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.967907][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.977997][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042875][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.057313][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.070804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.084985][ T4185] device veth0_vlan entered promiscuous mode [ 75.102338][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.114326][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.124841][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.136748][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.148191][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.159129][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.170894][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.190004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.203715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.213085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.222898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.233269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.241602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.269944][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.282916][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.294409][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.304991][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.315058][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.325694][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.337545][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.347468][ T4185] device veth1_vlan entered promiscuous mode [ 75.353051][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.374671][ T623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.383460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.392535][ T623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.400921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.406073][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.420203][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.430291][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.439798][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.448913][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.477799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.488676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.531669][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.544174][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.597126][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.600469][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.613775][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.633802][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.641170][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.649221][ T4185] device veth0_macvtap entered promiscuous mode [ 75.670073][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.684790][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.707726][ T4185] device veth1_macvtap entered promiscuous mode [ 75.754912][ T623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.765616][ T623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.789554][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.801451][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.815735][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.827131][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.838092][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.849472][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.859721][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.872975][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.884961][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.906272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.917249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.926065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.934968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.948951][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.961658][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.994684][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.011342][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.021896][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.032699][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.043349][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.054697][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.071927][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.089259][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.105427][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.121784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.142472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.173742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.199234][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.216452][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.227060][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.236279][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.320712][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.349944][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.418095][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.556013][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.624497][ T623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.674268][ T623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.731701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.752424][ T4316] loop5: detected capacity change from 0 to 7 [ 76.770499][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.784533][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.820167][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.850924][ T4298] Dev loop5: unable to read RDB block 7 [ 76.856316][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 76.864828][ T4298] loop5: unable to read partition table [ 76.871007][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 76.877712][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 76.916251][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 76.923567][ T4298] loop5: partition table beyond EOD, truncated [ 76.963452][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 77.008372][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 77.039243][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.071369][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.114101][ T4316] Dev loop5: unable to read RDB block 7 [ 77.131265][ T4316] loop5: unable to read partition table [ 77.158802][ T4316] loop5: partition table beyond EOD, truncated [ 77.172676][ T4316] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.264022][ T26] audit: type=1326 audit(1770665573.732:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 77.357153][ T4232] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 77.379228][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.401474][ T26] audit: type=1326 audit(1770665573.792:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43b6fc684e code=0x7ffc0000 [ 77.459257][ T4232] usb 1-1: Product: syz [ 77.479946][ T4232] usb 1-1: Manufacturer: syz [ 77.533556][ T4232] usb 1-1: SerialNumber: syz [ 77.533582][ T26] audit: type=1326 audit(1770665573.812:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 77.620459][ T4232] usb 1-1: config 0 descriptor?? [ 77.722292][ T26] audit: type=1326 audit(1770665573.822:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 77.752709][ T4232] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 77.845536][ T26] audit: type=1326 audit(1770665573.822:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 77.993752][ T26] audit: type=1326 audit(1770665573.842:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 78.134043][ T26] audit: type=1326 audit(1770665573.842:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 78.195423][ T26] audit: type=1326 audit(1770665573.872:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 78.275400][ T26] audit: type=1326 audit(1770665573.872:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 78.347436][ T26] audit: type=1326 audit(1770665573.922:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b7005f79 code=0x7ffc0000 [ 78.806713][ T9] usb 1-1: Failed to submit usb control message: -110 [ 78.818932][ T9] usb 1-1: unable to send the bmi data to the device: -110 [ 78.865782][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.897980][ T9] usb 1-1: unable to get target info from device [ 78.935539][ T9] usb 1-1: could not get target info (-110) [ 78.969692][ T9] usb 1-1: could not probe fw (-110) [ 79.453776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.596655][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.755502][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 79.763332][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 80.147935][ T4286] usb 1-1: USB disconnect, device number 2 [ 80.375403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 80.384738][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 81.281459][ T4351] fuse: Unknown parameter 'group_id00000000000000000000' [ 81.423701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.433042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 81.442188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 81.451868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.460952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 82.043329][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 82.193678][ T4354] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 82.205452][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 82.645437][ T4266] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 82.845454][ T4266] usb 2-1: device descriptor read/64, error -71 [ 83.129736][ T4266] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 83.162005][ T4366] tipc: Started in network mode [ 83.198173][ T4366] tipc: Node identity 9aee6a116355, cluster identity 4711 [ 83.239720][ T4366] tipc: Enabled bearer , priority 0 [ 83.262613][ T4366] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17'. [ 83.318301][ T4367] tipc: Resetting bearer [ 83.335380][ T4266] usb 2-1: device descriptor read/64, error -71 [ 83.435199][ T4365] tipc: Disabling bearer [ 83.466349][ T4266] usb usb2-port1: attempt power cycle [ 83.784955][ T4374] binder: BINDER_SET_CONTEXT_MGR already set [ 83.793631][ T4374] binder: 4373:4374 ioctl 4018620d 200000004a80 returned -16 [ 83.801545][ T4286] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.886475][ T4266] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 83.905532][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.985508][ T4266] usb 2-1: device descriptor read/8, error -71 [ 84.155448][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 84.165653][ T4286] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 84.174104][ T4286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.184511][ T4286] usb 3-1: config 0 has no interfaces? [ 84.190661][ T4286] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 84.201112][ T4286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.211598][ T4286] usb 3-1: config 0 descriptor?? [ 84.226582][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 84.255603][ T4266] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 84.365629][ T4266] usb 2-1: device descriptor read/8, error -71 [ 84.455557][ T4232] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.471993][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.481929][ T4232] usb 4-1: Product: syz [ 84.491206][ T4266] usb usb2-port1: unable to enumerate USB device [ 84.499754][ T4232] usb 4-1: Manufacturer: syz [ 84.504661][ T4232] usb 4-1: SerialNumber: syz [ 84.523834][ T4232] usb 4-1: config 0 descriptor?? [ 84.815711][ T4232] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 85.455819][ T4386] fuse: Unknown parameter 'group_id00000000000000000000' [ 86.389768][ T4391] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 86.455884][ T1324] usb 3-1: USB disconnect, device number 2 [ 86.691958][ T4399] tipc: Started in network mode [ 86.705567][ T4399] tipc: Node identity 165a11889c93, cluster identity 4711 [ 86.719306][ T4399] tipc: Enabled bearer , priority 0 [ 86.729709][ T4399] device syzkaller0 entered promiscuous mode [ 86.781813][ T4399] tipc: Resetting bearer [ 86.794616][ T23] cfg80211: failed to load regulatory.db [ 86.813257][ T4401] tipc: Started in network mode [ 86.820128][ T4401] tipc: Node identity c629ba55c712, cluster identity 4711 [ 86.835886][ T4401] tipc: Enabled bearer , priority 0 [ 86.848507][ T4398] tipc: Resetting bearer [ 86.867681][ T4398] tipc: Disabling bearer [ 86.880934][ T4401] netlink: 44 bytes leftover after parsing attributes in process `syz.0.30'. [ 86.898808][ T4401] tipc: Resetting bearer [ 86.914667][ T4400] tipc: Disabling bearer [ 86.985549][ T4232] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 86.996277][ T4232] usb 4-1: USB disconnect, device number 2 [ 87.062531][ T4407] binder: BINDER_SET_CONTEXT_MGR already set [ 87.069455][ T4407] binder: 4406:4407 ioctl 4018620d 200000004a80 returned -16 [ 87.194052][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 87.753375][ T4419] fuse: Unknown parameter 'group_id00000000000000000000' [ 87.760906][ T4232] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.975382][ T4232] usb 4-1: device descriptor read/64, error -71 [ 87.986387][ T4422] ================================================================== [ 87.994858][ T4422] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 88.002121][ T4422] Read of size 8 at addr ffff8880298dca18 by task syz.0.37/4422 [ 88.009805][ T4422] [ 88.012177][ T4422] CPU: 0 PID: 4422 Comm: syz.0.37 Not tainted syzkaller #0 [ 88.019409][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.029790][ T4422] Call Trace: [ 88.033109][ T4422] [ 88.036088][ T4422] dump_stack_lvl+0x188/0x250 [ 88.040855][ T4422] ? show_regs_print_info+0x20/0x20 [ 88.046113][ T4422] ? _printk+0xda/0x130 [ 88.050403][ T4422] ? dvb_device_open+0xc6/0x370 [ 88.055389][ T4422] ? load_image+0x400/0x400 [ 88.059942][ T4422] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 88.065448][ T4422] print_address_description+0x60/0x2d0 [ 88.071035][ T4422] ? dvb_device_open+0xc6/0x370 [ 88.075933][ T4422] kasan_report+0xdf/0x130 [ 88.080396][ T4422] ? dvb_device_open+0xc6/0x370 [ 88.085314][ T4422] dvb_device_open+0xc6/0x370 [ 88.090028][ T4422] ? do_raw_spin_unlock+0x11d/0x230 [ 88.095273][ T4422] chrdev_open+0x5c5/0x6a0 [ 88.099737][ T4422] ? cd_forget+0x160/0x160 [ 88.104192][ T4422] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 88.109867][ T4422] ? fsnotify_perm+0x3a7/0x560 [ 88.114726][ T4422] ? cd_forget+0x160/0x160 [ 88.119194][ T4422] do_dentry_open+0x7ff/0xf80 [ 88.124049][ T4422] path_openat+0x26f5/0x2fa0 [ 88.128848][ T4422] ? verify_lock_unused+0x140/0x140 [ 88.134102][ T4422] ? slab_post_alloc_hook+0x4c/0x380 [ 88.139433][ T4422] ? do_filp_open+0x410/0x410 [ 88.144348][ T4422] do_filp_open+0x1e2/0x410 [ 88.148918][ T4422] ? vfs_tmpfile+0x300/0x300 [ 88.153589][ T4422] ? _raw_spin_unlock+0x24/0x40 [ 88.158787][ T4422] ? alloc_fd+0x598/0x630 [ 88.163177][ T4422] do_sys_openat2+0x150/0x4b0 [ 88.167900][ T4422] ? __lock_acquire+0x7d10/0x7d10 [ 88.172988][ T4422] ? do_sys_open+0xe0/0xe0 [ 88.177495][ T4422] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.183567][ T4422] ? lock_chain_count+0x20/0x20 [ 88.188679][ T4422] ? vtime_user_exit+0x2c8/0x3e0 [ 88.193752][ T4422] __x64_sys_openat+0x135/0x160 [ 88.198785][ T4422] do_syscall_64+0x4c/0xa0 [ 88.203243][ T4422] ? clear_bhb_loop+0x30/0x80 [ 88.208045][ T4422] ? clear_bhb_loop+0x30/0x80 [ 88.212764][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.218796][ T4422] RIP: 0033:0x7f7776fbb84e [ 88.223329][ T4422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.243058][ T4422] RSP: 002b:00007f7775234b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.251511][ T4422] RAX: ffffffffffffffda RBX: 00007f77752356c0 RCX: 00007f7776fbb84e [ 88.259525][ T4422] RDX: 0000000000040002 RSI: 00007f7775234c00 RDI: ffffffffffffff9c [ 88.267658][ T4422] RBP: 00007f7775234c00 R08: 0000000000000000 R09: 0000000000000000 [ 88.275664][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 88.283728][ T4422] R13: 00007f7777276128 R14: 00007f7777276090 R15: 00007fff7de16b28 [ 88.291848][ T4422] [ 88.294987][ T4422] [ 88.297421][ T4422] Allocated by task 1: [ 88.301523][ T4422] __kasan_kmalloc+0xb5/0xf0 [ 88.306172][ T4422] dvb_register_device+0x311/0x2170 [ 88.311681][ T4422] dvb_register_frontend+0x645/0x920 [ 88.317004][ T4422] vidtv_bridge_probe+0x9a1/0xf70 [ 88.322060][ T4422] platform_probe+0x137/0x1c0 [ 88.326770][ T4422] really_probe+0x284/0xc80 [ 88.331418][ T4422] __driver_probe_device+0x18c/0x330 [ 88.336825][ T4422] driver_probe_device+0x4f/0x420 [ 88.341968][ T4422] __driver_attach+0x46b/0x670 [ 88.346898][ T4422] bus_for_each_dev+0x182/0x1f0 [ 88.352043][ T4422] bus_add_driver+0x30a/0x5a0 [ 88.356757][ T4422] driver_register+0x32d/0x430 [ 88.361555][ T4422] vidtv_bridge_init+0x39/0x70 [ 88.366621][ T4422] do_one_initcall+0x272/0x730 [ 88.371432][ T4422] do_initcall_level+0x137/0x1f0 [ 88.376409][ T4422] do_initcalls+0x4b/0x90 [ 88.380881][ T4422] kernel_init_freeable+0x3e9/0x570 [ 88.386555][ T4422] kernel_init+0x19/0x1b0 [ 88.390924][ T4422] ret_from_fork+0x1f/0x30 [ 88.395384][ T4422] [ 88.397741][ T4422] Freed by task 4391: [ 88.401765][ T4422] kasan_set_track+0x4b/0x70 [ 88.406505][ T4422] kasan_set_free_info+0x1f/0x40 [ 88.411490][ T4422] ____kasan_slab_free+0xd5/0x110 [ 88.416549][ T4422] slab_free_freelist_hook+0xea/0x170 [ 88.421958][ T4422] kfree+0xef/0x2a0 [ 88.425802][ T4422] dvb_device_open+0x2e7/0x370 [ 88.430761][ T4422] chrdev_open+0x5c5/0x6a0 [ 88.435217][ T4422] do_dentry_open+0x7ff/0xf80 [ 88.440128][ T4422] path_openat+0x26f5/0x2fa0 [ 88.444778][ T4422] do_filp_open+0x1e2/0x410 [ 88.449546][ T4422] do_sys_openat2+0x150/0x4b0 [ 88.454424][ T4422] __x64_sys_openat+0x135/0x160 [ 88.459324][ T4422] do_syscall_64+0x4c/0xa0 [ 88.463785][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.469737][ T4422] [ 88.472096][ T4422] The buggy address belongs to the object at ffff8880298dca00 [ 88.472096][ T4422] which belongs to the cache kmalloc-256 of size 256 [ 88.486179][ T4422] The buggy address is located 24 bytes inside of [ 88.486179][ T4422] 256-byte region [ffff8880298dca00, ffff8880298dcb00) [ 88.499512][ T4422] The buggy address belongs to the page: [ 88.505189][ T4422] page:ffffea0000a63700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x298dc [ 88.515379][ T4422] head:ffffea0000a63700 order:1 compound_mapcount:0 [ 88.521996][ T4422] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 88.530038][ T4422] raw: 00fff00000010200 0000000000000000 0000000500000001 ffff888016c41b40 [ 88.538660][ T4422] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 88.547536][ T4422] page dumped because: kasan: bad access detected [ 88.554063][ T4422] page_owner tracks the page as allocated [ 88.559799][ T4422] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 19170397201, free_ts 0 [ 88.577919][ T4422] get_page_from_freelist+0x1bbd/0x1ca0 [ 88.583539][ T4422] __alloc_pages+0x1ee/0x480 [ 88.588170][ T4422] alloc_page_interleave+0x24/0x1e0 [ 88.593576][ T4422] new_slab+0xc0/0x4b0 [ 88.597681][ T4422] ___slab_alloc+0x80a/0xdd0 [ 88.602307][ T4422] __kmalloc_node+0x200/0x3b0 [ 88.607016][ T4422] kvmalloc_node+0x84/0x130 [ 88.611559][ T4422] v4l2_ctrl_new+0x70f/0x1310 [ 88.616353][ T4422] v4l2_ctrl_new_std+0x247/0x300 [ 88.621415][ T4422] handler_new_ref+0x14a/0x950 [ 88.626216][ T4422] v4l2_ctrl_add_handler+0x197/0x280 [ 88.631527][ T4422] vivid_create_controls+0x2a37/0x3460 [ 88.637223][ T4422] vivid_probe+0x3c47/0x67a0 [ 88.641860][ T4422] platform_probe+0x137/0x1c0 [ 88.646577][ T4422] really_probe+0x284/0xc80 [ 88.651110][ T4422] __driver_probe_device+0x18c/0x330 [ 88.656431][ T4422] page_owner free stack trace missing [ 88.661864][ T4422] [ 88.664244][ T4422] Memory state around the buggy address: [ 88.669906][ T4422] ffff8880298dc900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.677997][ T4422] ffff8880298dc980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.686228][ T4422] >ffff8880298dca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.694317][ T4422] ^ [ 88.699285][ T4422] ffff8880298dca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.707381][ T4422] ffff8880298dcb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.715499][ T4422] ================================================================== [ 88.723594][ T4422] Disabling lock debugging due to kernel taint [ 88.744244][ T4422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.751496][ T4422] CPU: 0 PID: 4422 Comm: syz.0.37 Tainted: G B syzkaller #0 [ 88.760269][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.770563][ T4422] Call Trace: [ 88.773876][ T4422] [ 88.776834][ T4422] dump_stack_lvl+0x188/0x250 [ 88.781680][ T4422] ? show_regs_print_info+0x20/0x20 [ 88.786920][ T4422] ? load_image+0x400/0x400 [ 88.791468][ T4422] panic+0x2e5/0x810 [ 88.795505][ T4422] ? bpf_jit_dump+0xd0/0xd0 [ 88.800052][ T4422] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 88.805719][ T4422] ? check_panic_on_warn+0x6c/0xa0 [ 88.810870][ T4422] ? dvb_device_open+0xc6/0x370 [ 88.815845][ T4422] check_panic_on_warn+0x80/0xa0 [ 88.821246][ T4422] ? dvb_device_open+0xc6/0x370 [ 88.826382][ T4422] end_report+0x6d/0xf0 [ 88.830575][ T4422] kasan_report+0x102/0x130 [ 88.835211][ T4422] ? dvb_device_open+0xc6/0x370 [ 88.840189][ T4422] dvb_device_open+0xc6/0x370 [ 88.845024][ T4422] ? do_raw_spin_unlock+0x11d/0x230 [ 88.850277][ T4422] chrdev_open+0x5c5/0x6a0 [ 88.854734][ T4422] ? cd_forget+0x160/0x160 [ 88.859276][ T4422] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 88.864936][ T4422] ? fsnotify_perm+0x3a7/0x560 [ 88.870012][ T4422] ? cd_forget+0x160/0x160 [ 88.874468][ T4422] do_dentry_open+0x7ff/0xf80 [ 88.879202][ T4422] path_openat+0x26f5/0x2fa0 [ 88.884215][ T4422] ? verify_lock_unused+0x140/0x140 [ 88.889445][ T4422] ? slab_post_alloc_hook+0x4c/0x380 [ 88.894775][ T4422] ? do_filp_open+0x410/0x410 [ 88.899488][ T4422] do_filp_open+0x1e2/0x410 [ 88.904022][ T4422] ? vfs_tmpfile+0x300/0x300 [ 88.908651][ T4422] ? _raw_spin_unlock+0x24/0x40 [ 88.913534][ T4422] ? alloc_fd+0x598/0x630 [ 88.917896][ T4422] do_sys_openat2+0x150/0x4b0 [ 88.922614][ T4422] ? __lock_acquire+0x7d10/0x7d10 [ 88.927669][ T4422] ? do_sys_open+0xe0/0xe0 [ 88.932116][ T4422] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.938134][ T4422] ? lock_chain_count+0x20/0x20 [ 88.943092][ T4422] ? vtime_user_exit+0x2c8/0x3e0 [ 88.948148][ T4422] __x64_sys_openat+0x135/0x160 [ 88.953046][ T4422] do_syscall_64+0x4c/0xa0 [ 88.957531][ T4422] ? clear_bhb_loop+0x30/0x80 [ 88.962267][ T4422] ? clear_bhb_loop+0x30/0x80 [ 88.967060][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.973242][ T4422] RIP: 0033:0x7f7776fbb84e [ 88.977689][ T4422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.997458][ T4422] RSP: 002b:00007f7775234b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.005924][ T4422] RAX: ffffffffffffffda RBX: 00007f77752356c0 RCX: 00007f7776fbb84e [ 89.014066][ T4422] RDX: 0000000000040002 RSI: 00007f7775234c00 RDI: ffffffffffffff9c [ 89.022084][ T4422] RBP: 00007f7775234c00 R08: 0000000000000000 R09: 0000000000000000 [ 89.030173][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 89.038182][ T4422] R13: 00007f7777276128 R14: 00007f7777276090 R15: 00007fff7de16b28 [ 89.046190][ T4422] [ 89.049506][ T4422] Kernel Offset: disabled [ 89.054194][ T4422] Rebooting in 86400 seconds..