last executing test programs: 11.422875913s ago: executing program 3 (id=285): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_mount_image$minix(&(0x7f0000002580), &(0x7f0000000040)='./bus\x00', 0x2a14c5e, &(0x7f00000025c0)=ANY=[], 0x2, 0x239, &(0x7f0000000380)="$eJzs279PE2Ecx/HP3bWloEAUdTAxIRrRReqPycGoGxP/AIsEqhJrRNEBYiIs6mDC5Oagk4mJg6MxdTNO/gEOJm4aIkMTJwfOtN4P2ueux5n2quX9Wnj6fJ6He+7CtV96dwKwa13SuCxZKki6UpXWx6xeLwlARlzv51bODdl+CKC/XR+O7HYyXwiAjG1elp4dl37U7s/JKfhlQb0C+LIhqTrxSKvycntA0stPUi6oHzbXpMM5L7eKGmytL15IJ/z51pBRf9TnDwX5nm3JYJCfPOZvf6+GNaLRfD3ZrzEvnw/mH0qsd3KpqiMAAPqTpcmkvO0AW1cXKuXTsXm+kZ+JzQuN/GxCfi54PRC0Zp5O33vnXtiq55Nztyrz7ZYJIIL9F+f/5yNh20k4/3Mx53/r/wkAsre0vHJjtlJxH0iNRvmO1+M1/G8Ewh7HGNORhn/NYQeD/SuURlT/Hdt6HHP6+oS5753bCztc2Kik7hyof7ihiOjr1J9jEvTY3TjyTY2j3389XHzy5m38mH3P/Z7XKTdhB391M9VyrWWMbKmL+zVunAWzleLOplurrptyo5FvF+HNAcVOvxMByFrp7s3F0tLyyqkFR9K1ct7/wJ/6ttGo7Evt63sA/6/wQz8qXTN63OaX0x8+/qydf/XYnJp4G+FFSe/NC4IAAAAAAAAAAAAAACC1AzrY6yUAAAAAyIj59M/tkRSPJcU8Ndjc6PU+AgAAAAAAAAAAAAAAAADQb34HAAD///P/CD4=") write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) 11.156807755s ago: executing program 2 (id=289): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x100000000) 11.014694806s ago: executing program 2 (id=290): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5ff4, &(0x7f0000006c40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 10.21801624s ago: executing program 1 (id=294): syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x1, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/56) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18) 10.115157638s ago: executing program 3 (id=295): syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x80284504, &(0x7f0000000000)=""/56) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x6402}], 0x1, 0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) 9.882688207s ago: executing program 2 (id=296): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = io_uring_setup(0x675f, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0xfffffffd}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 9.8420545s ago: executing program 4 (id=297): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) 7.331085582s ago: executing program 1 (id=298): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, &(0x7f0000000140), 0x18) r3 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0xb0000008}) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) getpid() 7.327116672s ago: executing program 3 (id=299): setreuid(0xee01, 0xee00) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2714, 0x0, 0x0) 6.570794353s ago: executing program 4 (id=300): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 6.570444343s ago: executing program 3 (id=301): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000040010000000000000027000000f33d8e7b847ec8b36f110ab0ada0f01df04e90870d691d07e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@empty, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@private}}, 0x0) stat(&(0x7f0000000100)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x6, 0xd4a, 0x0, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b600300e4931133f6d9919fd48557d76811cd874f23105bbfc101831026d40798a2be4cc414e022161989779bae641ed1511200"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000080) 6.545891455s ago: executing program 2 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 6.521040097s ago: executing program 0 (id=303): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB='B\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000010000000d"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) accept4(r1, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000540)=0x80, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.186898584s ago: executing program 1 (id=304): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) 5.539870356s ago: executing program 0 (id=305): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 5.446653973s ago: executing program 3 (id=306): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) chdir(&(0x7f0000000140)='./bus\x00') 5.310750354s ago: executing program 4 (id=307): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000f00)={0x6, 0x0, [{0x2000, 0xf5, &(0x7f0000000a00)=""/245}, {0x3000, 0x8a, &(0x7f0000000b00)=""/138}, {0x4, 0x75, &(0x7f0000000bc0)=""/117}, {0xdddd1000, 0x67, &(0x7f0000000c80)=""/103}, {0x6000, 0x4f, &(0x7f0000000dc0)=""/79}, {0x8000000, 0x99, &(0x7f0000000e40)=""/153}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 5.142463677s ago: executing program 0 (id=308): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$eJzs3AuYTdX7OPD3XWvtMSSdJrkMa613c5LLMkmSS5JckiRJktwSkib5SkJiyC1pSEJyGZLLEJLLxKRxv98vCU2SJklCckvW/1H8fftVv++lvl/P85v38zz7sd6z9rv22vOeM2fvdZz5psvQmo1rVWtIRPCn4C//JAFALAAMBIBrACAAgHJx5eIu9OeUmPTnDsL+Wg+lXukZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzzdMLXstb9t14/T874/f//0OySo/9Ym3p67sCxPyzKVz/7I3r/39W8M/sxPXP3rj+2VXslZ4A+yvN/vfS+PWfHeT4wx6uf/bG9WcsO/t5HTgnXPF16Cu1QSR7fwZypZ9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayh9P+MgUAl9pXel6MMcYYY4wxxhj76/gcV3oGjDHGGGOMMcYY+89DECBBQQAxkANiISfkAgEAV0MeuAYicC3EwXWQF66HfJAfCkBBiIdCUBg0GLBAEEIRKApRuAGKwY1QHEpASSgFDkpDAtwEZeBmKAu3QDm4FcrDbVABKkIlqAy3QxW4A6rCnVAN7oLqUANqQi24G2rDPVAH7oW6cB/Ug/uhPjwADeBBaAgPQSN4GBrDI9AEHoWm0AyaQwto+W/lvwA94EXoCb0gCXpDH3gJ+kI/6A8DYCC8DIPgFRgMr0IyDIGh8BoMg9dhOLwBI2AkjII3YTS8BWNgLIyD8ZACE2AivA2T4B2YDFNgKkyDVJgOM+BdmAmzYDa8B3PgfZgL82A+LIA0+AAWwiJIhw9hMXwEGbAElsIyWA4rYCWsgtWwBtbCuh/7wgbYCJtgM2yBrbANtsMO2Akfwy74BHbDntfnAUAmfPZH+bD+d/NPXcqHvfApZEJXBAQUKFChwhiMwViMxVyYC3NjbsyDeTCCEYzDOMyLeTEf5sMCWADjMR4LY2E0aJCQsAgWwShGsRgWw+JYHEtiSXToMAETsAzejGWxLJbDclgey2MFrIgVsTJWxipYBatiVayG1bA6VseaWBPvxruxN9bBOlgX62I9rHdpeQobYkNshI2wMTbGJtgEm2JTbI7NsSW2xFbYCltja2yLbbEdtsP22B4TMRE7YAfsiB2xE3bCztgZu2AX7IrdsFvWCzkAX8QXsRdWF72xD/bBvpicoz8OwAH4Mg7CV/AVfBWTcQgOxdfwNXwdh+NJHIEjcRSOwiriLRyDY5HEeEzBFJyIE3ESTsLJOAWn4DRMxek4A2fgTJyFs/A9nIPv4/s4D+fhAkzDNFyIizAd03ExnsIMXIJLcRkuxxW4HFfhalyFa3EdrsUNuAE34SbcgltwG27DHbgDP0YFgJ/gHtyDyZiJmbgP9+F+3I8H8ABmYRYexIN4CA/hYTyMR/AIHsVjeByP4Qk8gSfxFJ7G03gWz+I5fC7+q0Yfl1iTDOICJZSIETEiVsSKXCKXyC1yizwij4iIiIgTcSKvyCvyiXyigCgg4kW8KCwKCyOMIBHGAICIiqgoJoqJ4qK4KClKCiecSBAJoowoI8qKsqKcuFWUF7eJCqKiaOMqi8qiimjrqoo7RTVRTVQXNURNUUvUErVFbVFH1BF1RV1RT9QT9cUDooHojf3xIXGhMo3FEGwihmJT0UzIi7/BWonh2Fq0EW3FE2IkjsD2opVLFE+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo7XqKXmIy9hZ9xDTsK/qJ/mKAmIk1xHs4J2dN8apIFkPEUPGaWICvi+HiDTFCjBSjxJtitHhLjBFjxTgxXqSICWKieFtMEu+IyWKKmCqmiVQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJNfCAWikUiXXwoFouPRIZYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lORKT4T+8TnYr/4QhwQX4os8ZU4KL4Wh8Q34rD4VhwR34mj4pg4Lr4XJ8QP4qQ4JU6LM+Ks+FGcEz+J88ILkCiFlFLJQMbIHDJW5pS55FUytwwu/nSvlXHyOplXXi/zyfyygCwo42UhWVhqaaSVJENZRBaVUXmDLCZvlMVlCVlSlpJOlpYJ8iZZRt4sy8pbZDl5qywvb5MVZEVZSVaWt8sq8g4JkV+OUV3WkDVlLXm3TIJ7ZB15r6wr75P15P2yvnxANpAPyobyIdlIPiwby0dkE/mobCqbyeayhWwpH5Ot5OOytWwj28onZDv5pGwvn5KJ8mnZQfqLT5FnZWf5nOwin5ddZTfZXf4kz0sve8peEnqD7CNfkn1lP9lfDpAD5ctykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZTpFT5TSZKqfL/hdHmi3lP8x/+3fyB/989E1ys9wit8ptcrvcIXfKj+UuuUvulrvlXrlXZspMuU/uk/vlfnlAHpBZMkselAflIXlIHpaH5RF5RB6Vx+QZ+b08IX+QJ+UpeUqekWflWXnu4s8AFCqhpFIqUDEqh4pVOVUudZXKra5WedQ1KqKuVXHqOpVXXa/yqfyqgCqo4lUhVVhpZZRVpEJVRBVVUXUDXnzCqJKqlHKqtEpQN/0r+aqYulEVVyV+lX9pfkl/ML+WqqVqpVqp1qq1aqvaqnaqnWqv2qtElag6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKkklqT7qJdVX9VP91QA1UL2sBqlBarAarJJVshqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKUSlqopqoJqlJarKarKaqqSpVpaoZaoaaqWaq2Wq2mqPmqLlqrpqv5qs0laYWqoUqXaWrxWqxylBL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVoTarzWqr2qq2q+1qp9qpdqldarfarfaqvSpTZap9ap/ar/arA+qAylJZ6qA6qA6pQ+qwOqyOqCPqqDqqjqvj6oQ6oU6qk+q0Oq3OqrPqnDqnzqvzFy77AhGIQAUqiAligtggNsgV5ApyB7mDPEGeIBJEgrggLsgbXB/kC/IHBYKCQXxQKCgc6MAENhAXix4NbgiKBTcGxYMSQcmgVOCC0kFCzMXO4JagXHBrUD64LagQVAwqBZWD24MqwR1B1eDOoFpwV1A9qBHUDGoFdwe1g3uCOsG9Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HToFnQPGgRtAxuDsr+ZeN7fzL/466n7qWTdG/dR7+k++p+ur8eoAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erKeoqfqaTpVT9cz9Lt6pp6lZ+v39Bz9vp6r5+n5eoFO0x/ohXqRTtcf6sX6I52hl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q536J36Y71Lf6J36z16r/5UZ+rP9D79ud6vv9AH9Jc6S3+lD+qv9SH9jT6sv9VH9Hf6qD6mj+vv9Qn9gz6pT+nT+ow+q3/U5/RP+rz2Fy7uL7y9G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emr8lr8pl8poApYOJNvClsCpsLyJApYoqYqImaYqaYKW6Km5KmpHHGmQSTYMqYMqasKWvKmXKmvClvKpgKppKpZG43t5s7zB3mTnOnucvcZWqYGqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqapqa5aW5ampamlWllWpvWpq1pa9qZdqa9aW8STaLpYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6miSTZPqYPqav6Wv6m/5moBloBplBZrAZbJJNshlqhpphZpgZboabEWakGXXhQtW8ZcaYsWacGW9STIqZaCaaSWaSmWwmm6lmqkk1qWaGmWFmmplmtplt5pg5Zq6Za+ab+SbNpJmFZqFJN+lmsVlsMkyGWWqWmuVmuVlpVprVZrVZa9aa9bDebDQbzWaz2Ww1W812s93sNDvNLrPL7Da7zV6z12SaTLPP7DP7zX5zwBwwWSbLHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81Zk//i+6U3sTanzWWvsrnt1TaPvcb+z7iALWjjbSFb2Gqbz+b/VWystcVtCVvSlrLOlrYJ9qbfxBVsRVvJVra32yr2Dlv1N3Fte4+tY++1de19tpa9+1dxPXu/rW8fsQ0QAWwz28i2sI3tI7aJfdQ2tc1sc9vCtrNP2vb2KZton7Yd7DO/iRfaRXa1XWPX2nV2t91jT9sz9pD9xp61P9qetpcdaF+2g+wrdrB91SbbIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk210+0M+66daWf9Jk6zH9g5Nt3OtfPsfLvg5/jCnNLth3ax/chm2ACW2mV2uV1hV9pV/3+uy+wGu9FusrvsJ3ar3Wa32x1256ULYbvH7rWf2kz7mT1ov7b77Rf2gD1ss+xXP8cXzu+w/dYesd/Zo/aYPW6/tyfsD+pS9oVz/97+ZM9bb4GQgCQpCiiGclAs5aRcdBXlpqspD11DEbqW4ug6ykvXUz7KTwWoIMVTISpMmgxZIgqpCBWlKN1Al6ZXkkqRo9KUQDdRGbqZytItVI5upfJ0G1WgilSJKtPtVIXuoKp0J1Wju6g61aCaVIvuptp0D9Whe6ku3Uf16H6qTw9QA3qQGtJD1Igepsb0CDWhR6kpNaPm1IJa0mPUih6n1tSG2tIT1I6epPb0FCXS09SBnqGO9DfqRM9SZ3qOutDz1JW6UXd6gXrQi9STelES9aY+9BL1pX7UnwbQQHqZBtErNJhepWQaQkPpNRpGr9NweoNG0EgaRW/SaHqLxtBYGkfjKYUm0ER6mybROzSZptBUmkapNJ1m0Ls0k2bRbHqP5tD7NJfm0XxaQGn0AS2kRZROH9Ji+ogyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+ph20Se0m/bQXvqUMukz2kef0376gg7Ql5RFX9FB+poO0Td0mL71veg7OkrH6Dh9TyfoBzpJp+g0naGz9COdo5/oPHmCEEMRylCFQRgT5ghjw5xhrvCqMHd4dZgnvCaMhNeGceF1Yd7w+jBfmD8sEBYM48NCYeFQhya0IYVhWCQsGkbDG8Ji4Y1h8bBEWDIsFbqwdJgQ3hSWCW8Oy4a3hOXCW8Py4W1hhbBi+Mh9lcPbwyrhHWHV8M6wWnhXWD2sEdYMa4V3h7XDe8I64b1h3fC+sGx4f1g/fCBsED4YNgwfChuFD4eNw0fCJuGjYdOwWdg8bBG2DB8LW4WPh63DNmHb8ImwXfhk2D58KkwMnw47hM/83H//oj/uTwp7h33Cl8KXQu/vlfOjC6Jp0Q+iC6OLounRD6OLox9FM6JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18oBDp1w0ikXuBiXw8W6nC6Xu8rldle7PO4aF3HXujh3ncvrrnf5XH5XwBV08a6QK+y0M846cqEr4oq6qLvBFXM3uuKuhCvpSjnnSrsE18K1dC1dK/e4a+3auLbuCfeEe9I96Z5yT7mnXQf3jOvo/uY6uWddZ/ece84977q6bq67e8H1cBPy/PKaTHJ9XB/X1/V1/V1/N9ANdIPcIDfYDXbJLtkNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOpbgUN9FNdJPcJDfZTXZT3VSX6lLdDDfDzXQzXZVZvxxlrpvr5rv5Ls2luYXuwjVjulvsFrsMl+GWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+2t+GdRlun1un9vv9rsD7kuX5b5yB93X7pD7xh1237oj7jt31B1zx9337oT7wZ10p9xpd8addT+6c+4nd955lxKZEJkYeTsyKfJOZHJkSmRqZFokNTI9MiPybmRmZFZkduS9yJzI+5G5kXmR+ZEFkbTIB5GFkUWR9MiHkcWRjyIZkSWRpZFlkeWRFRHvC20NfRFf1Ef9Db6Yv9EX9yV8SV/KO1/aJ/ibfBl/sy/rb/Hl/K2+vL/NV/AVfSX/qG/qm/nmvoVv6R/zrfzjvrVv49v6J3w7/6Rv75/yif5p38E/4zv6v/lO/lnf2T/nu/jnfVffzXf3L/ge/kXf0/fySb637+Nf8n19P9/fD/AD/ct+kH/FD/av+mQ/xA/1r/lh/nU/3L/hR/iRflTMm370pVtkGO9T/AQ/0b/tJ/l3/GQ/xU/103yqn+5n+Hf9TD/Lz/bv+Tn+fT/Xz/Pz/QKf5j/wC/0in+4/9Iv9Rz7DL7m0qOxX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/qP/S7/id/t9/i9/lOf6T/z+/znfr//wh/wX/os/5U/6L/2h/w3/rD/1h/x3/mj/pg/7r/3J/wP/qQ/5U/7M/6s/9Gf8z/58/ydNcYYY4yxf8qEy03x655flvN7/06O+Lud+wDA1dsKZv19/4UryvX5fmn3E/HtIgDwdK8uD13aqldPSkq6uG+GhKDoPIBLnwRd8POy8cV4CbSFJyER2kCZ351/P9HtLP2D8aO3AuT6u5xYuBxfHv9zAEz6nfEfe2LUwvLh6bj/Zfx5AMWLXs7JCZfjJdD25/WVNlD2D+afv9U/mH/OL1IAWv9dTm64HF+efwI8Ds9A4q/2ZIwxxhhjjDHGftFPVOp06f7z0v/4/L3783h1OScHXI7/0f05Y4wxxhhjjDHGrrxnu3V/6rFL39x7LDGxTaefH/lnGlX/lZ3/9UYT+E+NzI3fbXgPcOkRBQB/ckCACw353zyLLf+VYyVffLX8z67lZ3wA3Ytd/NLjX3fQ2D9fi3+ncaV+IzHGGGOMMcb+Uy5f9P/6cXWlJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVD/40/J3alz5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//8XnvpB") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 5.014227157s ago: executing program 1 (id=309): openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x40000000000001e9, &(0x7f0000000080)=[0x9, 0xfff, 0x4, 0xb, 0x662, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x3, 0x6], 0x0, 0x7}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 4.446885203s ago: executing program 0 (id=310): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 4.311983263s ago: executing program 1 (id=311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70000000fff7ffffffff0180c200000e08060001080006040002"], 0x2e) 3.286693186s ago: executing program 0 (id=312): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 3.138821578s ago: executing program 0 (id=313): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 3.082957362s ago: executing program 1 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000008c0)="26dea60173ce4e0c32d38a9c419a10f05eb1da0ddf521bb98c858838a044d836150450f3c2ddebf92179c299c1beaa51d61f43efa3d40fa9af596806ba7f647a07d268f251e1673e99c51be50d0cd879f77e970e0ab096278d474138bf5ee31a2a88b50cccd38796ab4f2ea583acc6e61eb9e8904152695c4f88adb4eba72bf76b9423e88a6e344af52c078413ed28969336c9365a09913970925bf2bf9e42ee49a9237f961eb98d0d6fd2645e8252a68ae957056b04d6b383c85bc518e4c496308439ebe01b9aedfb7efbd5402c8642a1a55f47b70500f22dcfdceda8", 0xdd}], 0x1) 2.101210481s ago: executing program 2 (id=315): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = io_uring_setup(0x675f, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0xfffffffd}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.763551858s ago: executing program 2 (id=316): syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 1.465225533s ago: executing program 4 (id=317): syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x1, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/56) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18) 1.176072106s ago: executing program 3 (id=318): syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x89a2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x80284504, &(0x7f0000000000)=""/56) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x6402}], 0x1, 0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) 226.129502ms ago: executing program 4 (id=319): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 4 (id=320): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.11' (ED25519) to the list of known hosts. [ 57.820580][ T4172] cgroup: Unknown subsys name 'net' [ 57.932317][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.433829][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.883884][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 60.979944][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.994816][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.044615][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.134585][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.141716][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.150433][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.163473][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.170636][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.179203][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.270070][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.277335][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.285805][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.294038][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.301113][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.309660][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.320169][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.337705][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.347587][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.355249][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.363707][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.370885][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.378948][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.386935][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.396304][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.405956][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.413252][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.421253][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.456412][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.464211][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.472186][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.503362][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.539243][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.550596][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.563276][ T4190] team0: Port device team_slave_0 added [ 61.581692][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.593244][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.610735][ T4190] team0: Port device team_slave_1 added [ 61.623083][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.678965][ T4188] team0: Port device team_slave_0 added [ 61.713596][ T4183] team0: Port device team_slave_0 added [ 61.721953][ T4184] team0: Port device team_slave_0 added [ 61.730290][ T4188] team0: Port device team_slave_1 added [ 61.737043][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.744669][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.771233][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.785123][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.792354][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.818315][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.838521][ T4183] team0: Port device team_slave_1 added [ 61.846476][ T4184] team0: Port device team_slave_1 added [ 61.871139][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.878373][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.886525][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.919784][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.926949][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.953131][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.965774][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.973054][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.980979][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.009870][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.017111][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.043443][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.064850][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.072233][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.098851][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.118280][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.125443][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.151888][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.175049][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.182316][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.208599][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.227129][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.234177][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.260219][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.283200][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.299491][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.306492][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.337288][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.374264][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.381148][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.388116][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.396131][ T4188] Cannot create hsr debugfs directory [ 62.413500][ T4191] team0: Port device team_slave_0 added [ 62.438490][ T4191] team0: Port device team_slave_1 added [ 62.468136][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.475489][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.482801][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.490484][ T4184] Cannot create hsr debugfs directory [ 62.507151][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.514010][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.520634][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.528336][ T4183] Cannot create hsr debugfs directory [ 62.553177][ T2301] Bluetooth: hci4: command 0x0409 tx timeout [ 62.559391][ T2301] Bluetooth: hci2: command 0x0409 tx timeout [ 62.566650][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 62.574515][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 62.605523][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.616215][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.632224][ T2301] Bluetooth: hci1: command 0x0409 tx timeout [ 62.648390][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.682582][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.689581][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.716039][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.857252][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.864942][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.871714][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.880184][ T4191] Cannot create hsr debugfs directory [ 63.019023][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.050096][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.059579][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.078915][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.143935][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.154611][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.167035][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.176480][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.250194][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.271128][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.286516][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.297063][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.310749][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.330868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.340424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.354584][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.373904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.383408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.394307][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.401887][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.430922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.440026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.449270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.460522][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.467753][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.502488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.513129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.535350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.544712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.554874][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.567016][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.580554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.589963][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.600435][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.610588][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.623385][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.633519][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.676978][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.704882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.716100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.725854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.734725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.742708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.751322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.761275][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.778139][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.792407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.802201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.810846][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.817988][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.833849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.843438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.852600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.861136][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.868406][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.901943][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.913870][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.925763][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.941405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.951701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.990593][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.001122][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.027782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.038897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.048189][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.055460][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.065368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.080558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.089769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.098809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.108014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.116250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.128813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.138766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.176152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.186393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.195418][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.202914][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.211255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.220577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.229838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.239155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.259009][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.268736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.301853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.310825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.320209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.328060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.338232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.347151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.361838][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.384069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.418499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.468056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.485401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.497609][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.515752][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.525563][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.554003][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.563604][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.585380][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.601722][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.624623][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.639842][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.642621][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 64.662514][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 64.678167][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.679492][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 64.685326][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.702347][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 64.708204][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.720658][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.723317][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 64.737850][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.745011][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.763106][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.783481][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.791668][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.809713][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.845369][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.878760][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.894455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.907692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.917652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.931718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.940869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.949054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.958355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.967589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.989388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.998065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.007907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.031935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.041512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.051332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.060727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.070531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.079811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.088698][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.095946][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.105201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.131010][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.157216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.167338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.178761][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.185960][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.195969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.203834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.238718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.249039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.258534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.268227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.277437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.287567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.296120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.317152][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.335675][ T4190] device veth0_vlan entered promiscuous mode [ 65.349892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.365307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.375727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.384769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.394555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.404468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.413310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.430847][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.443303][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.459596][ T4188] device veth0_vlan entered promiscuous mode [ 65.473210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.481399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.490121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.498335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.507502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.516697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.525665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.534779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.557747][ T4190] device veth1_vlan entered promiscuous mode [ 65.591440][ T4188] device veth1_vlan entered promiscuous mode [ 65.612443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.621238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.638497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.648899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.671929][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.697262][ T4184] device veth0_vlan entered promiscuous mode [ 65.710136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.721898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.730663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.738786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.748153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.757690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.767194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.776640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.806681][ T4184] device veth1_vlan entered promiscuous mode [ 65.824071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.833244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.845240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.854341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.875302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.884803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.900966][ T4190] device veth0_macvtap entered promiscuous mode [ 65.910013][ T4188] device veth0_macvtap entered promiscuous mode [ 65.937172][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.946419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.957545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.966673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.976206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.984895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.996015][ T4190] device veth1_macvtap entered promiscuous mode [ 66.011366][ T4188] device veth1_macvtap entered promiscuous mode [ 66.023524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.033824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.043193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.053989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.063914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.091775][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.109373][ T4184] device veth0_macvtap entered promiscuous mode [ 66.121165][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.130066][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.138910][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.149166][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.158370][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.167595][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.176478][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.192350][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.204759][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.216581][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.226009][ T4183] device veth0_vlan entered promiscuous mode [ 66.243094][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.252689][ T4184] device veth1_macvtap entered promiscuous mode [ 66.265379][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.275093][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.283879][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.292887][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.303648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.311758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.320879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.330252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.339271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.348829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.358231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.369834][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.382509][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.395380][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.429243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.439381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.451264][ T4183] device veth1_vlan entered promiscuous mode [ 66.461765][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.470756][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.485506][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.494623][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.518124][ T4191] device veth0_vlan entered promiscuous mode [ 66.527588][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.538460][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.547625][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.556293][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.567017][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.577580][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.588562][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.599432][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.613240][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.624869][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.636217][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.646542][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.657144][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.668586][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.680091][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.689145][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.698047][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.707193][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.717115][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 66.723515][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 66.725071][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.729642][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 66.743768][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 66.744690][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.758068][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.767237][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.776433][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.785866][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.794538][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 66.818071][ T4191] device veth1_vlan entered promiscuous mode [ 66.887748][ T4183] device veth0_macvtap entered promiscuous mode [ 66.900997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.909470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.919168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.928109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.937689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.959120][ T4183] device veth1_macvtap entered promiscuous mode [ 67.025416][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.040577][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.074266][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.078930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.090871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.099064][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.110592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.119957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.128949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.139216][ T4191] device veth0_macvtap entered promiscuous mode [ 67.167982][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.180683][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.186565][ T4191] device veth1_macvtap entered promiscuous mode [ 67.214769][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.223451][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.234951][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.246061][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.256477][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.267278][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.278975][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.289817][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.301588][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.314380][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.328925][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.339210][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.349991][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.360745][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.371325][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.381276][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.394096][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.405747][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.416647][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.425495][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.435920][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.445137][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.457286][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.468070][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.478307][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.489020][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.499158][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.509860][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.521569][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.551234][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.551755][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.571822][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.571884][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.589695][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.601718][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.614461][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.625268][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.635445][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.646229][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.657986][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.666609][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.675649][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.685434][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.694607][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.703555][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.714592][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.724024][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.734099][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.743312][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.772231][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.781001][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.792239][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.800991][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.874129][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.889206][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.901237][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.951276][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.983587][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.991620][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.036762][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.072731][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.108387][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.141812][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.201096][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.230477][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.239184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.256747][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.316556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.333850][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.377620][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.467346][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.575889][ T4306] loop3: detected capacity change from 0 to 128 [ 68.890601][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 68.896862][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 68.904271][ T4306] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.914977][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 68.932044][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 68.940362][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 68.948542][ T4306] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.998998][ T4295] syz.4.5 (4295) used greatest stack depth: 20000 bytes left [ 69.101683][ T4300] loop1: detected capacity change from 0 to 32768 [ 69.346865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 69.355490][ T4300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4300) [ 69.406800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.415927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.425052][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.434121][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.443188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.452272][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.461326][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.470409][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.479476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 70.511138][ T4300] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 70.585993][ T4300] BTRFS info (device loop1): using free space tree [ 71.373532][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.380284][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.439245][ T4300] BTRFS info (device loop1): has skinny extents [ 72.057263][ T4334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.104400][ T4300] BTRFS error (device loop1): open_ctree failed: -12 [ 72.375333][ T4369] loop0: detected capacity change from 0 to 2048 [ 72.754108][ T4369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.281699][ T4202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4202) [ 73.347972][ T4372] capability: warning: `syz.4.14' uses deprecated v2 capabilities in a way that may be insecure [ 73.402121][ T4251] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 73.762299][ T4251] usb 3-1: config 1 interface 0 has no altsetting 0 [ 73.932558][ T4251] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 73.945262][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.972108][ T4251] usb 3-1: Product: syz [ 73.976929][ T4251] usb 3-1: Manufacturer: syz [ 73.981755][ T4251] usb 3-1: SerialNumber: syz [ 74.165578][ T4393] netlink: set zone limit has 8 unknown bytes [ 74.692067][ T4393] netlink: set zone limit has 8 unknown bytes [ 74.841094][ T4379] loop0: detected capacity change from 0 to 32768 [ 74.891173][ T4384] loop1: detected capacity change from 0 to 32768 [ 74.907639][ T4379] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.12 (4379) [ 74.940677][ T4379] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 74.942797][ T4384] ======================================================= [ 74.942797][ T4384] WARNING: The mand mount option has been deprecated and [ 74.942797][ T4384] and is ignored by this kernel. Remove the mand [ 74.942797][ T4384] option from the mount to silence this warning. [ 74.942797][ T4384] ======================================================= [ 74.978185][ T4379] BTRFS info (device loop0): using free space tree [ 74.996860][ T4379] BTRFS info (device loop0): has skinny extents [ 75.109768][ T4251] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 75.134063][ T4384] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 75.203923][ T4361] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.309965][ T4379] BTRFS info (device loop0): enabling ssd optimizations [ 75.350428][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 75.573001][ T4361] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.587129][ T4361] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.606075][ T4361] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.615520][ T4361] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 75.627249][ T4361] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 75.752349][ T4361] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.768187][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.785910][ T4361] usb 4-1: Product: syz [ 75.795535][ T4361] usb 4-1: Manufacturer: syz [ 75.864817][ T4361] cdc_wdm 4-1:1.0: skipping garbage [ 75.873509][ T4361] cdc_wdm 4-1:1.0: skipping garbage [ 75.890661][ T4361] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 75.906965][ T4361] cdc_wdm 4-1:1.0: Unknown control protocol [ 76.098165][ T21] usb 4-1: USB disconnect, device number 2 [ 76.705017][ T4361] usb 3-1: USB disconnect, device number 2 [ 76.862623][ T4361] usblp0: removed [ 77.410245][ T4425] loop1: detected capacity change from 0 to 32768 [ 78.030350][ T4425] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 78.658505][ T4461] process 'syz.3.32' launched './file0' with NULL argv: empty string added [ 79.441814][ T4466] loop0: detected capacity change from 0 to 512 [ 79.467514][ T4433] loop2: detected capacity change from 0 to 32768 [ 79.527662][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 79.584860][ T4433] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit" [ 79.650460][ T4466] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 79.662551][ T4433] gfs2: fsid=commit: Now mounting FS (format 1801)... [ 79.731627][ T4466] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.788557][ T4459] loop4: detected capacity change from 0 to 32768 [ 79.799047][ T4433] gfs2: fsid=commit.s: journal 0 mapped with 5 extents in 0ms [ 79.867503][ T4459] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.935583][ T4466] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #12: comm syz.0.34: directory missing '.' [ 80.053483][ T4433] gfs2: fsid=commit.s: first mount done, others may mount [ 80.101412][ T4466] EXT4-fs (loop0): Remounting filesystem read-only [ 80.148711][ T26] audit: type=1800 audit(1755398202.713:2): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.33" name="bus" dev="loop4" ino=17059 res=0 errno=0 [ 80.460964][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 83.979906][ T4510] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.47'. [ 84.337611][ T4516] loop2: detected capacity change from 0 to 256 [ 84.477784][ T4516] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.677660][ T4251] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.802254][ T4251] usb 5-1: Using ep0 maxpacket: 8 [ 86.083277][ T4251] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 86.211657][ T4251] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.492008][ T4251] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.502497][ T4251] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.552224][ T4251] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.561491][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.804524][ T2857] cfg80211: failed to load regulatory.db [ 86.910191][ T4251] usb 5-1: usb_control_msg returned -71 [ 86.963756][ T4251] usbtmc 5-1:16.0: can't read capabilities [ 87.057848][ T4251] usb 5-1: USB disconnect, device number 2 [ 88.802535][ T4555] tipc: Started in network mode [ 88.807747][ T4555] tipc: Node identity 2, cluster identity 4711 [ 88.884303][ T4555] tipc: Node number set to 2 [ 88.902911][ T4555] tipc: Cannot configure node identity twice [ 89.034864][ T4559] loop3: detected capacity change from 0 to 512 [ 89.093926][ T4543] loop0: detected capacity change from 0 to 32768 [ 89.158594][ T4559] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 89.201775][ T4559] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.239784][ T4543] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 89.269399][ T4543] BTRFS info (device loop0): metadata ratio 2 [ 89.278743][ T4543] BTRFS info (device loop0): allowing degraded mounts [ 89.286054][ T4543] BTRFS info (device loop0): force zlib compression, level 3 [ 89.294882][ T4543] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 89.305296][ T4543] BTRFS info (device loop0): use zstd compression, level 3 [ 89.315015][ T4543] BTRFS info (device loop0): force clearing of disk cache [ 89.322693][ T4543] BTRFS info (device loop0): allowing degraded mounts [ 89.329615][ T4543] BTRFS info (device loop0): max_inline at 0 [ 89.336132][ T4543] BTRFS info (device loop0): using free space tree [ 89.343675][ T4543] BTRFS info (device loop0): has skinny extents [ 89.361824][ T4559] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.63: dir seems corrupt? Run e2fsck -D. [ 89.387183][ T4559] EXT4-fs (loop3): Remounting filesystem read-only [ 89.407625][ T4559] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.63: Directory index failed checksum [ 89.454579][ T4559] EXT4-fs (loop3): Remounting filesystem read-only [ 89.481890][ T4543] BTRFS info (device loop0): enabling ssd optimizations [ 89.496960][ T4583] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.63: dir seems corrupt? Run e2fsck -D. [ 89.517735][ T4543] BTRFS info (device loop0): clearing free space tree [ 89.545681][ T4543] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.574047][ T4583] EXT4-fs (loop3): Remounting filesystem read-only [ 89.591074][ T4543] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.614585][ T4583] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.63: Directory index failed checksum [ 89.680239][ T4583] EXT4-fs (loop3): Remounting filesystem read-only [ 89.737238][ T4543] BTRFS info (device loop0): creating free space tree [ 90.053100][ T4543] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.066204][ T26] audit: type=1800 audit(1755398212.633:3): pid=4563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="/" dev="fuse" ino=5 res=0 errno=0 [ 90.169167][ T4543] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.179732][ T4635] loop1: detected capacity change from 0 to 1024 [ 94.443475][ T4635] EXT4-fs (loop1): Ignoring removed nobh option [ 94.459169][ T4635] EXT4-fs (loop1): Ignoring removed bh option [ 95.508410][ T4635] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 103.051962][ C0] sched: RT throttling activated [ 103.864645][ T4737] syz.4.99 uses obsolete (PF_INET,SOCK_PACKET) [ 109.866787][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 111.047682][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.188530][ T4779] loop4: detected capacity change from 0 to 32768 [ 111.206537][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.263197][ T4779] (syz.4.114,4779,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.337836][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.360135][ T4779] (syz.4.114,4779,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.495131][ T4779] (syz.4.114,4779,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 111.522039][ T4779] (syz.4.114,4779,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 114.234279][ T26] audit: type=1400 audit(1755398235.453:4): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4809 comm="syz.1.124" [ 115.656517][ T4843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 115.672126][ T4251] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 115.757771][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 116.112316][ T4251] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.193749][ T4251] usb 1-1: not running at top speed; connect to a high speed hub [ 116.373017][ T4251] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 116.449111][ T4251] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 116.641073][ T4251] usb 1-1: config 129 descriptor has 1 excess byte, ignoring [ 116.678763][ T4251] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 116.719456][ T4251] usb 1-1: config 129 has no interface number 0 [ 116.735940][ T4251] usb 1-1: config 129 has no interface number 1 [ 116.753758][ T4251] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 116.804999][ T4251] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 116.870824][ T4251] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 117.027865][ T4251] usb 1-1: config 129 interface 135 has no altsetting 0 [ 117.035232][ T4251] usb 1-1: config 129 interface 5 has no altsetting 0 [ 117.222289][ T4251] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 117.231929][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.260300][ T4251] usb 1-1: Product: syz [ 117.272386][ T4251] usb 1-1: Manufacturer: syz [ 117.282513][ T4251] usb 1-1: SerialNumber: syz [ 117.569210][ T4251] usb 1-1: MIDIStreaming interface descriptor not found [ 118.334916][ T4251] usb 1-1: USB disconnect, device number 2 [ 120.442921][ T26] audit: type=1326 audit(1755398243.003:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.0.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bbce37be9 code=0x0 [ 120.469471][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.830206][ T4903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.150'. [ 120.843703][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 120.940859][ T4909] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 121.017052][ T4909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.154815][ T4909] bond1: (slave vlan2): making interface the new active one [ 121.167404][ T4909] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 122.326912][ T4912] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 123.266528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 123.746021][ T4932] Zero length message leads to an empty skb [ 123.862107][ T4932] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.158'. [ 125.320394][ T4361] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.812140][ T4361] usb 2-1: Using ep0 maxpacket: 8 [ 126.952370][ T4361] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.977448][ T4976] netlink: 268 bytes leftover after parsing attributes in process `syz.4.173'. [ 126.993178][ T4361] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.013452][ T4361] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 127.034895][ T4361] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 127.038251][ T4976] unsupported nla_type 65024 [ 127.257828][ T4361] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 127.331064][ T4361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.897398][ T4361] usb 2-1: can't set config #1, error -71 [ 127.968005][ T4361] usb 2-1: USB disconnect, device number 2 [ 128.218951][ T4991] loop1: detected capacity change from 0 to 4096 [ 128.298630][ T4991] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 128.319132][ T4990] loop4: detected capacity change from 0 to 40427 [ 128.381872][ T4990] F2FS-fs (loop4): invalid crc value [ 128.398346][ T4990] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.449360][ T4990] F2FS-fs (loop4): Start checkpoint disabled! [ 128.490934][ T4990] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 128.539437][ T26] audit: type=1800 audit(1755398251.103:6): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.176" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 128.712284][ T4361] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.012115][ T4361] usb 4-1: Using ep0 maxpacket: 32 [ 129.142161][ T4361] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 129.158030][ T4361] usb 4-1: config 0 has no interface number 1 [ 129.324504][ T4394] attempt to access beyond end of device [ 129.324504][ T4394] loop4: rw=2049, want=40968, limit=40427 [ 129.338080][ T4361] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 129.354920][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.393777][ T4361] usb 4-1: Product: syz [ 129.411851][ T4361] usb 4-1: Manufacturer: syz [ 129.432378][ T4361] usb 4-1: SerialNumber: syz [ 129.469703][ T4361] usb 4-1: config 0 descriptor?? [ 130.345920][ T4361] snd-usb-audio: probe of 4-1:0.74 failed with error -22 [ 130.420573][ T4361] usb 4-1: USB disconnect, device number 3 [ 130.733086][ T4202] udevd[4202]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.805778][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812290][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106152][ T5039] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.931209][ T26] audit: type=1326 audit(1755398256.493:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78cf6bbe9 code=0x7fc00000 [ 134.276831][ T5056] loop3: detected capacity change from 0 to 256 [ 134.448355][ T5056] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 134.911803][ T4361] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 134.920623][ T4361] Bluetooth: hci0: Injecting HCI hardware error event [ 134.930140][ T4196] Bluetooth: hci0: hardware error 0x00 [ 138.669343][ T5094] loop3: detected capacity change from 0 to 4096 [ 139.083625][ T26] audit: type=1800 audit(1755398261.653:8): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.207" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 141.531155][ T5133] loop0: detected capacity change from 0 to 64 [ 141.545418][ T5110] loop4: detected capacity change from 0 to 32768 [ 141.684458][ T5110] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.211 (5110) [ 141.711318][ T5110] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 141.778656][ T26] audit: type=1326 audit(1755398264.343:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2d4b8be9 code=0x7ffc0000 [ 141.814668][ T5110] BTRFS info (device loop4): use no compression [ 141.880726][ T5110] BTRFS info (device loop4): use zlib compression, level 3 [ 141.904368][ T5110] BTRFS info (device loop4): using free space tree [ 141.921281][ T5110] BTRFS info (device loop4): has skinny extents [ 141.927934][ T26] audit: type=1326 audit(1755398264.373:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2d4b8be9 code=0x7ffc0000 [ 142.310238][ T5110] BTRFS info (device loop4): enabling ssd optimizations [ 143.470709][ T26] audit: type=1326 audit(1755398266.033:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5173 comm="syz.2.226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13e6ff8be9 code=0x0 [ 143.914928][ T4202] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (4202) [ 147.714461][ T5223] loop4: detected capacity change from 0 to 512 [ 147.814592][ T5223] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 147.866131][ T5223] UDF-fs: Scanning with blocksize 512 failed [ 148.354452][ T5223] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 148.361887][ T5223] UDF-fs: Scanning with blocksize 1024 failed [ 148.460487][ T5223] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 148.504456][ T5223] UDF-fs: Scanning with blocksize 2048 failed [ 148.538146][ T5223] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 148.580951][ T5223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.015915][ T5226] loop0: detected capacity change from 0 to 32768 [ 149.061251][ T5240] loop3: detected capacity change from 0 to 64 [ 149.558397][ T5226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.243 (5226) [ 149.973268][ T5226] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 150.032095][ T5226] BTRFS info (device loop0): metadata ratio 2 [ 150.113015][ T5226] BTRFS info (device loop0): allowing degraded mounts [ 150.318847][ T5226] BTRFS info (device loop0): force zlib compression, level 3 [ 150.491383][ T5226] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 150.580564][ T5226] BTRFS info (device loop0): use zstd compression, level 3 [ 150.883679][ T5226] BTRFS info (device loop0): force clearing of disk cache [ 150.915770][ T5226] BTRFS info (device loop0): turning on flush-on-commit [ 150.923620][ T5226] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 150.942690][ T5226] BTRFS info (device loop0): trying to use backup root at mount time [ 150.950897][ T5226] BTRFS info (device loop0): using free space tree [ 151.018619][ T5226] BTRFS info (device loop0): has skinny extents [ 151.218360][ T5226] BTRFS error (device loop0): open_ctree failed: -12 [ 152.427377][ T4202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4202) [ 155.433748][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.645242][ T5346] loop1: detected capacity change from 0 to 512 [ 158.819068][ T5346] EXT4-fs (loop1): Unrecognized mount option "rootcontext=user_u" or missing value [ 162.240253][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.273090][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.329228][ T5384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.401692][ T5389] loop1: detected capacity change from 0 to 2048 [ 162.646959][ T5397] loop3: detected capacity change from 0 to 64 [ 162.659026][ T5389] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none. [ 162.808441][ T5389] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.288: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 162.855940][ T5389] EXT4-fs (loop1): Remounting filesystem read-only [ 163.181907][ T5403] loop4: detected capacity change from 0 to 128 [ 163.232209][ T5403] EXT4-fs (loop4): Ignoring removed nobh option [ 163.282429][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 163.352453][ T5403] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.379458][ T5463] loop0: detected capacity change from 0 to 256 [ 168.512630][ T5463] exfat: Deprecated parameter 'utf8' [ 168.518061][ T5463] exfat: Deprecated parameter 'utf8' [ 168.549646][ T5463] exfat: Deprecated parameter 'utf8' [ 168.649858][ T5463] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 173.780166][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 173.844609][ T5505] ================================================================== [ 173.853253][ T5505] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 173.860328][ T5505] Read of size 8 at addr ffff8880276afa08 by task syz.4.320/5505 [ 173.868067][ T5505] [ 173.870407][ T5505] CPU: 0 PID: 5505 Comm: syz.4.320 Not tainted 5.15.189-syzkaller #0 [ 173.878480][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.888578][ T5505] Call Trace: [ 173.891883][ T5505] [ 173.894925][ T5505] dump_stack_lvl+0x168/0x230 [ 173.899639][ T5505] ? show_regs_print_info+0x20/0x20 [ 173.904865][ T5505] ? _printk+0xcc/0x110 [ 173.909047][ T5505] ? ax25_release+0x5ca/0x870 [ 173.913780][ T5505] ? load_image+0x3b0/0x3b0 [ 173.918324][ T5505] print_address_description+0x60/0x2d0 [ 173.923899][ T5505] ? ax25_release+0x5ca/0x870 [ 173.928611][ T5505] kasan_report+0xdf/0x130 [ 173.933055][ T5505] ? ax25_release+0x5ca/0x870 [ 173.937762][ T5505] ax25_release+0x5ca/0x870 [ 173.942564][ T5505] sock_close+0xd5/0x240 [ 173.946832][ T5505] ? sock_mmap+0x90/0x90 [ 173.951093][ T5505] __fput+0x234/0x930 [ 173.955094][ T5505] task_work_run+0x125/0x1a0 [ 173.959743][ T5505] exit_to_user_mode_loop+0x10f/0x130 [ 173.965125][ T5505] exit_to_user_mode_prepare+0xb1/0x140 [ 173.970680][ T5505] syscall_exit_to_user_mode+0x16/0x40 [ 173.976153][ T5505] do_syscall_64+0x58/0xa0 [ 173.980596][ T5505] ? clear_bhb_loop+0x30/0x80 [ 173.985272][ T5505] ? clear_bhb_loop+0x30/0x80 [ 173.989955][ T5505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.995878][ T5505] RIP: 0033:0x7f58fc0abbe9 [ 174.000308][ T5505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.020081][ T5505] RSP: 002b:00007fffbf9cec38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 174.028541][ T5505] RAX: 0000000000000000 RBX: 000000000002a68c RCX: 00007f58fc0abbe9 [ 174.036539][ T5505] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 174.044547][ T5505] RBP: 00007f58fc2d4da0 R08: 0000000000000001 R09: 0000000bbf9cef2f [ 174.052547][ T5505] R10: 0000001b31620000 R11: 0000000000000246 R12: 00007f58fc2d2fac [ 174.060551][ T5505] R13: 00007f58fc2d2fa0 R14: ffffffffffffffff R15: 00007fffbf9ced50 [ 174.068565][ T5505] [ 174.071603][ T5505] [ 174.073936][ T5505] Allocated by task 5506: [ 174.078279][ T5505] __kasan_kmalloc+0xb5/0xf0 [ 174.082892][ T5505] ax25_dev_device_up+0x50/0x580 [ 174.087982][ T5505] ax25_device_event+0x483/0x4f0 [ 174.092958][ T5505] raw_notifier_call_chain+0xcb/0x160 [ 174.098362][ T5505] __dev_notify_flags+0x178/0x2d0 [ 174.103418][ T5505] dev_change_flags+0xe3/0x1a0 [ 174.108226][ T5505] dev_ifsioc+0x147/0xe70 [ 174.112587][ T5505] dev_ioctl+0x55f/0xe50 [ 174.116861][ T5505] sock_do_ioctl+0x222/0x2f0 [ 174.121479][ T5505] sock_ioctl+0x4ed/0x6e0 [ 174.125839][ T5505] __se_sys_ioctl+0xfa/0x170 [ 174.130453][ T5505] do_syscall_64+0x4c/0xa0 [ 174.134893][ T5505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.140816][ T5505] [ 174.143157][ T5505] Freed by task 5506: [ 174.147145][ T5505] kasan_set_track+0x4b/0x70 [ 174.151756][ T5505] kasan_set_free_info+0x1f/0x40 [ 174.156714][ T5505] ____kasan_slab_free+0xd5/0x110 [ 174.161903][ T5505] slab_free_freelist_hook+0xea/0x170 [ 174.167304][ T5505] kfree+0xef/0x2a0 [ 174.171137][ T5505] ax25_device_event+0x4b4/0x4f0 [ 174.176100][ T5505] raw_notifier_call_chain+0xcb/0x160 [ 174.181531][ T5505] __dev_notify_flags+0x178/0x2d0 [ 174.186577][ T5505] dev_change_flags+0xe3/0x1a0 [ 174.191365][ T5505] dev_ifsioc+0x147/0xe70 [ 174.195758][ T5505] dev_ioctl+0x55f/0xe50 [ 174.200040][ T5505] sock_do_ioctl+0x222/0x2f0 [ 174.204651][ T5505] sock_ioctl+0x4ed/0x6e0 [ 174.209003][ T5505] __se_sys_ioctl+0xfa/0x170 [ 174.213639][ T5505] do_syscall_64+0x4c/0xa0 [ 174.218079][ T5505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.223998][ T5505] [ 174.226333][ T5505] Last potentially related work creation: [ 174.232060][ T5505] kasan_save_stack+0x35/0x60 [ 174.236769][ T5505] kasan_record_aux_stack+0xb8/0x100 [ 174.242130][ T5505] insert_work+0x54/0x3d0 [ 174.246483][ T5505] __queue_work+0x9c5/0xd50 [ 174.251005][ T5505] queue_work_on+0x11d/0x1d0 [ 174.255612][ T5505] inet6addr_event+0x9c/0xc0 [ 174.260221][ T5505] atomic_notifier_call_chain+0x15d/0x280 [ 174.265957][ T5505] ipv6_add_addr+0xb30/0xde0 [ 174.270569][ T5505] inet6_addr_add+0x43a/0x9c0 [ 174.275268][ T5505] inet6_rtm_newaddr+0x5d7/0x840 [ 174.280226][ T5505] rtnetlink_rcv_msg+0x9b9/0xe60 [ 174.285190][ T5505] netlink_rcv_skb+0x1e0/0x430 [ 174.289991][ T5505] netlink_unicast+0x774/0x920 [ 174.294779][ T5505] netlink_sendmsg+0x8ab/0xbc0 [ 174.299565][ T5505] __sys_sendto+0x423/0x580 [ 174.304120][ T5505] __x64_sys_sendto+0xda/0xf0 [ 174.308828][ T5505] do_syscall_64+0x4c/0xa0 [ 174.313270][ T5505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.319189][ T5505] [ 174.321526][ T5505] Second to last potentially related work creation: [ 174.328206][ T5505] kasan_save_stack+0x35/0x60 [ 174.332904][ T5505] kasan_record_aux_stack+0xb8/0x100 [ 174.338208][ T5505] insert_work+0x54/0x3d0 [ 174.342555][ T5505] __queue_work+0x9c5/0xd50 [ 174.347080][ T5505] queue_work_on+0x11d/0x1d0 [ 174.351678][ T5505] call_usermodehelper_exec+0x26b/0x460 [ 174.357250][ T5505] kobject_uevent_env+0x681/0x890 [ 174.362327][ T5505] device_add+0x91c/0xfb0 [ 174.366678][ T5505] __video_register_device+0x38e1/0x4670 [ 174.372328][ T5505] vivid_create_devnodes+0xd4f/0x2cd0 [ 174.377803][ T5505] vivid_probe+0x50a1/0x6950 [ 174.382414][ T5505] platform_probe+0x137/0x1c0 [ 174.387112][ T5505] really_probe+0x284/0xc80 [ 174.391633][ T5505] __driver_probe_device+0x18c/0x330 [ 174.396939][ T5505] driver_probe_device+0x4f/0x420 [ 174.401983][ T5505] __driver_attach+0x46b/0x670 [ 174.406764][ T5505] bus_for_each_dev+0x175/0x1e0 [ 174.411633][ T5505] bus_add_driver+0x30a/0x5a0 [ 174.416337][ T5505] driver_register+0x32d/0x430 [ 174.421121][ T5505] vivid_init+0x39/0x70 [ 174.425293][ T5505] do_one_initcall+0x1ee/0x680 [ 174.430096][ T5505] do_initcall_level+0x137/0x1f0 [ 174.435093][ T5505] do_initcalls+0x4b/0x90 [ 174.439441][ T5505] kernel_init_freeable+0x3ce/0x560 [ 174.444658][ T5505] kernel_init+0x19/0x1b0 [ 174.449004][ T5505] ret_from_fork+0x1f/0x30 [ 174.453454][ T5505] [ 174.455797][ T5505] The buggy address belongs to the object at ffff8880276afa00 [ 174.455797][ T5505] which belongs to the cache kmalloc-192 of size 192 [ 174.469864][ T5505] The buggy address is located 8 bytes inside of [ 174.469864][ T5505] 192-byte region [ffff8880276afa00, ffff8880276afac0) [ 174.483034][ T5505] The buggy address belongs to the page: [ 174.488681][ T5505] page:ffffea00009dabc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x276af [ 174.498855][ T5505] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 174.506414][ T5505] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016841a00 [ 174.515091][ T5505] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 174.523795][ T5505] page dumped because: kasan: bad access detected [ 174.530248][ T5505] page_owner tracks the page as allocated [ 174.535968][ T5505] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 16821204820, free_ts 0 [ 174.550927][ T5505] get_page_from_freelist+0x1b77/0x1c60 [ 174.556483][ T5505] __alloc_pages+0x1e1/0x470 [ 174.561078][ T5505] alloc_page_interleave+0x24/0x1e0 [ 174.566277][ T5505] new_slab+0xc0/0x4b0 [ 174.570342][ T5505] ___slab_alloc+0x81e/0xdf0 [ 174.574954][ T5505] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 174.580339][ T5505] call_usermodehelper_setup+0x8a/0x260 [ 174.585917][ T5505] kobject_uevent_env+0x65e/0x890 [ 174.590949][ T5505] device_add+0x91c/0xfb0 [ 174.595289][ T5505] __video_register_device+0x38e1/0x4670 [ 174.600935][ T5505] vivid_create_devnodes+0x1453/0x2cd0 [ 174.606398][ T5505] vivid_probe+0x50a1/0x6950 [ 174.611026][ T5505] platform_probe+0x137/0x1c0 [ 174.615706][ T5505] really_probe+0x284/0xc80 [ 174.620223][ T5505] __driver_probe_device+0x18c/0x330 [ 174.625516][ T5505] driver_probe_device+0x4f/0x420 [ 174.630538][ T5505] page_owner free stack trace missing [ 174.635900][ T5505] [ 174.638225][ T5505] Memory state around the buggy address: [ 174.643854][ T5505] ffff8880276af900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 174.651913][ T5505] ffff8880276af980: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 174.660005][ T5505] >ffff8880276afa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.668062][ T5505] ^ [ 174.672409][ T5505] ffff8880276afa80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 174.680466][ T5505] ffff8880276afb00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.688523][ T5505] ================================================================== [ 174.696576][ T5505] Disabling lock debugging due to kernel taint [ 174.758796][ T5505] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 174.766048][ T5505] CPU: 1 PID: 5505 Comm: syz.4.320 Tainted: G B 5.15.189-syzkaller #0 [ 174.775526][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.785603][ T5505] Call Trace: [ 174.788916][ T5505] [ 174.791869][ T5505] dump_stack_lvl+0x168/0x230 [ 174.796574][ T5505] ? show_regs_print_info+0x20/0x20 [ 174.801801][ T5505] ? load_image+0x3b0/0x3b0 [ 174.806338][ T5505] panic+0x2c9/0x7f0 [ 174.810257][ T5505] ? bpf_jit_dump+0xd0/0xd0 [ 174.814780][ T5505] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 174.820690][ T5505] ? _raw_spin_unlock+0x40/0x40 [ 174.825558][ T5505] ? print_memory_metadata+0x314/0x400 [ 174.831042][ T5505] ? ax25_release+0x5ca/0x870 [ 174.835748][ T5505] check_panic_on_warn+0x80/0xa0 [ 174.840712][ T5505] ? ax25_release+0x5ca/0x870 [ 174.845412][ T5505] end_report+0x6d/0xf0 [ 174.849603][ T5505] kasan_report+0x102/0x130 [ 174.854129][ T5505] ? ax25_release+0x5ca/0x870 [ 174.858829][ T5505] ax25_release+0x5ca/0x870 [ 174.863362][ T5505] sock_close+0xd5/0x240 [ 174.867735][ T5505] ? sock_mmap+0x90/0x90 [ 174.871997][ T5505] __fput+0x234/0x930 [ 174.876001][ T5505] task_work_run+0x125/0x1a0 [ 174.880617][ T5505] exit_to_user_mode_loop+0x10f/0x130 [ 174.886018][ T5505] exit_to_user_mode_prepare+0xb1/0x140 [ 174.891591][ T5505] syscall_exit_to_user_mode+0x16/0x40 [ 174.897096][ T5505] do_syscall_64+0x58/0xa0 [ 174.901520][ T5505] ? clear_bhb_loop+0x30/0x80 [ 174.906200][ T5505] ? clear_bhb_loop+0x30/0x80 [ 174.910881][ T5505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.916787][ T5505] RIP: 0033:0x7f58fc0abbe9 [ 174.921217][ T5505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.940858][ T5505] RSP: 002b:00007fffbf9cec38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 174.949314][ T5505] RAX: 0000000000000000 RBX: 000000000002a68c RCX: 00007f58fc0abbe9 [ 174.957292][ T5505] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 174.965297][ T5505] RBP: 00007f58fc2d4da0 R08: 0000000000000001 R09: 0000000bbf9cef2f [ 174.973373][ T5505] R10: 0000001b31620000 R11: 0000000000000246 R12: 00007f58fc2d2fac [ 174.981841][ T5505] R13: 00007f58fc2d2fa0 R14: ffffffffffffffff R15: 00007fffbf9ced50 [ 174.989840][ T5505] [ 174.993232][ T5505] Kernel Offset: disabled [ 174.997591][ T5505] Rebooting in 86400 seconds..