last executing test programs: 51.099657055s ago: executing program 2 (id=549): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000ff80010000"], 0x26}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000280)={0x800, 0x3, 0x4, 0x4a, 0x3, 0xfffffffd}) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r2, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 50.287105801s ago: executing program 2 (id=552): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="0094", 0x2) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000000400)=ANY=[@ANYBLOB="68020000010501020000000000000000030000095402010002000000090000000707190002001f0073797a3000000000000000000000000000000000000000000000000000000000bbcece230dd1883d7d390a32b8a0d605f1badb28d7655e4bb21c060639272508d8f7f91ec4ea36da468fcbb77defeaa4a8d665cd796cd93b7c5488fd170227ea0010050000000000040000000d00040001000000000400000900ff03000000000800000008003a008712e6a708000000fcff0100010000000e000000de2c050000000000040000000400d34f0200000006000000fdff8100010000000100000029010700030000000f0000000000070003000000ff0763000700000003000000080000000100030000000000060000000400020002000000050000007f0041000000000004000000050009000000000001000000090080000100000000100000af02080001000000d60000000100050003000000000000008000080002000000030000000200af000000000005000000fbff07f1020000000900000001f07e0003000000030000000600fd6b421059ab753bc25b20c2694752fae5ff01000000f2b3000000000000020000003300000008000700000000000600000012f107000200000001800000040003000300000007000000a60201000300000009000000050007000000000007000000000000400200000006000000ff030bc1020000000800000004000500020000000000000a0b00660703000000000800000400a11d03000000ae00000000000500070000000004000001001000030000000400000001007700000000001ee500000100a1100300007dae0bb73d4bc53563eb6821000e0000"], 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x4000) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 50.172908696s ago: executing program 2 (id=553): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 48.127868705s ago: executing program 2 (id=561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.832226612s ago: executing program 2 (id=578): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 41.640273011s ago: executing program 2 (id=581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b0009008000", 0x2c}], 0x1) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 25.932410561s ago: executing program 32 (id=581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b0009008000", 0x2c}], 0x1) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 13.822031892s ago: executing program 1 (id=643): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000003c0)=[@in_dx={0x69, 0x20, {0x7835, 0x2}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x3, 0x2}}, @in_dx={0x69, 0x20, {0xd43b, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x3, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x8000}, @nested_vmlaunch={0x12f, 0x18}, @cpuid={0x64, 0x18, {0x7, 0x3}}, @wrmsr={0x65, 0x20, {0x318, 0x9}}, @out_dx={0x6a, 0x28, {0x8e1e, 0x2, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x2}}, @out_dx={0x6a, 0x28, {0xdb94, 0x0, 0x7fffffff}}, @code={0xa, 0x79, {"48b800000000008000000f23d80f21f835400000500f23f8f30fc77507c4a179c5f000c74424000d000000c74424020a000000c7442406000000000f011c2466baf80cb890698081ef66bafc0c66b84e6566efc481f950eed9e0f30f090f21be6466420f38095170"}}, @out_dx={0x6a, 0x28, {0x805d, 0x2, 0x977}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x33, 0x2}}], 0x2b9}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11.096168532s ago: executing program 3 (id=647): r0 = socket$inet6(0xa, 0x3, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d232000000fc02000000000000000000230000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=r0], 0xfc}}, 0x8000) 11.024825235s ago: executing program 0 (id=648): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000ff80010000"], 0x26}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000280)={0x800, 0x3, 0x4, 0x4a, 0x3, 0xfffffffd}) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r2, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 10.808095965s ago: executing program 3 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$drirender128(0xffffffffffffff9c, &(0x7f0000003540), 0x103c41, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x275c, &(0x7f0000000040)={0x0, 0x5bce, 0x10, 0x4, 0x111}, &(0x7f0000001140), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 9.799677329s ago: executing program 3 (id=650): r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 9.664735375s ago: executing program 3 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sync() sync() 9.619807417s ago: executing program 5 (id=614): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 9.608923247s ago: executing program 0 (id=653): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1, 0x5, 0xa}, {0xbd1, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x7}, {0x81, 0x2, 0x9}, 0x2000003, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x8000, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x5}, 0x0, 0x2, 0x0, 0x7, 0x8, 0x0, 0x4}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x4, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xeffd, 0x0, 0x1, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x1, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2008090) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f0000000500)="9e18cd9b8109274cebf1a9ec4d1e7b32d3087ea5d1aa9d2cc16ad23842b37665fc15cb2f7a7356a076a6774b4506186f93ef30e87570c1ddf1ce86d474bbe49301e90ada03db180fb34c0146f70d406cdf0afa6cb183cd5c4a9d31871cf6eae851e2236bc373e18488b77a568b1284399912e6a72514337d7c44a58a4eeddc66b4ea73d3f0cb24a24eb1e6a2c67e89988b3f5703f0cf78a9f33712e9", 0x9c}], 0x3}, 0x0) 9.232958114s ago: executing program 3 (id=655): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(r4, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100)=0xfffffffc, 0x56) 8.701125038s ago: executing program 0 (id=656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf2509000000050007000f00000005000800100000000c00060000000000000000000c00"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4048000) 8.569809703s ago: executing program 0 (id=657): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0xa00) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.80829391s ago: executing program 1 (id=661): r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6.786281881s ago: executing program 1 (id=662): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) get_robust_list(0x0, 0x0, 0x0) 6.487825525s ago: executing program 5 (id=663): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) stat(&(0x7f0000007780)='./file0\x00', &(0x7f00000077c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000007840), &(0x7f0000007880)=0x0, &(0x7f00000078c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000007900)='./file0\x00', &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007dc0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000007ec0)=0xe8) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000300)="94da083dd87b0e3ea494d7d2cbb7edab8bff4fbe7da6d2e540f636ed662c51e79b0f2d3ed0798e3280c9df7a07ff9af244d527e33e82a6eb3ec13d7007c3ac0b9b3971e7eafc476ea017662142e4d4cf1aafa2d253af5f6866e930d3baa852c25cfcbc85ca9f30bf6993784ced319d48446b13e74f2140fb22b4679d58c19b1328fbb3f418a67e5d2addb22635632ae8663dcc26de2691ff22a23df80ec29b83ebb81f92c606c1be7de8e7672852e8b9bf014cef6ea91d303c242c50057ad75ad199b3ae5c46748197d4693ae19aba2ef078c46d4bff34eba3966ae4c89673712a254a771093b201a77fa152", 0xec}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4000001}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000480)="b6d6dc273df79c84aaeb0510b33af1b8a2ae0f80ffdac9197191b3745b17e04cf0c49b63d3cccea5dcb199c0074311ac03beb88f7101bde4bb544f60732d7b9f872b0c76e357f0ad52d8d76813de6edbda138ce6470ef72245ac16fcdae29bead4526cf09783a28dcc731c92e1b4dde758daa9d8e22a680eafe7a32cebfbcc6b5a38dc2b97424959aa9c42367a4041c1de103c701125baa3298ac22de0e20554f143099f27c39d44b1e66a2d6af1a7765613fc081785e385d3f383ac039effd279f301329e89d6eae34f40f54f0fa487b9425dffa63797f8f14a56e5213ae8bfb332a6b15d69e6998b7f97e3ebbc440227c91135e4a8", 0xf6}, {&(0x7f0000000580)="c279791b213017c297823edd862a69659a4f922a1f5190f8b3c8723b19de1527215c4a494c1e58ba57af922af6a4c1ff3c43d6c5a0b30de8dc9d633cb5ce518d5124c28785d16ac7b5c00e5239411fed5272cf7d18e12bd416404730d343ba16d400ace09fe65d10c27abfd149c9efaa62108374a5f18e75be708aae33ef82a1fd42992d3cedb8f6e7ba510ed2ad3e445bcb7880f1a365e5b0a0e132f6969c3b22ebd3a57761867a220076a0327e15120951e7e1e9e23b350aaac47995c5a950c1d14b0798d1dc7af679c58bb4e375ff365b3c7c927d67126e", 0xd9}, {&(0x7f0000000700)="d94ff68f856ae79d2d5af30ae669ad7b339a32aaea959af4b246b83af9e80cc9a4175f8f53b745014ca6feee259108ed020e4f05ac2cf53c938cb34edadc956d0aee175416a55cbf302a165b8a4ed28bc0becccab5d150d865c29915fde2d1da99bdfaa8aa355ccc9898a51c40", 0x6d}, {&(0x7f0000000800)="1c08e483869d466ca126b0f5e8f38a48ccc2d9125cfaae0e690f9701b13e7d3fcd57eda61ce4b4e7d257890c1f4279999a633a815dd66b9a55f2e253102144567cd8cb343bbe4adc3fe9f176af772c52cbb6689393bc3ea6fb902b91f226843922a4e875128affb114533b99060947859855c3c128052bca7c", 0x79}, {&(0x7f0000000880)="a1fa41471c22911d6c54b300e4802ab724cf5ceff3c3925da262473848fed79fef9abd51b633f993d1bce427deee380446567ad236d6c4bc6c17757df90637fc439810d067e8c845fa812137a8c3fd11eb2ea98ed087e24388582f943b6606a7500c7b1e44f5d266950bf56c64b8e458b88af50923b9af17219bf28bc12475ccbbae3f3bc033497a3f8d211810", 0x8d}, {&(0x7f0000000940)="2e761de818d9e2a7fdffb9689db8e9477827d0117236287461ee25ce5ff9084ac9237a961ee27e0f02672e01052b11e0bbb16c703e5c6277c5339c0b4e62dbbff0745ef925ce661c58fd45cfaea9b0a636bdc96594eaa4bb05623a5787276541d13957577cdcbbbc75bf6b9e987163", 0x6f}, {&(0x7f00000009c0)="db904e87ff25d1ab79d1bc0b4975fe2ba974369ec48e600682f0ee9d77117175de2e9c3207ee281ae338dbade4873fd1ccb3e8536e1c7fa4615c8965695b04bcf7ac504be8cd0d54f95e60343c42a60712a59511388a174688b909853df38ab0b95d714687199fc5d4c211a27874cc5f7a546e3b8457d07ca922c658c2cac1660528a4566399acbb8fa5d17a5f6eb4c778e4521fc29c31858e6ebf0f89e500366320f768de8ed3f33b4cf55006c3240e94db00898b3e19beae56f9765492999caf3a55eaad34", 0xc6}, {&(0x7f0000000680)="93c39e400fc38d8b062e39050cad21ff34a4f37f1cf830ed7b010951edba9e6ae6f55f9f999ac10596286efd00b6b470a3661f2916804f7924af6a82d7a129", 0x3f}], 0x8, &(0x7f0000000b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, r3, r0]}}], 0x48, 0x40000}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000c80)="572acf4db34d40bba5b61b03d3c6f2032be8388ff9b7fdd920fe9570d04b872e7b807d79359a93b02d7217f7886ae9e2f3408e153ab5ddd2997c075eed421b8962eaddc2f9be1912f2832bcd1f2a468bb6b07c705884af7707022af23365257ebf790454b2ccca6b224dc9ffccf58242e20c9d273cbcdd09cf46b09513b270d3322b254cd2a29385ef49c07fd6128f90a6d3f8e3ea9aa3e89b7f1e441e51b262ca9293e073", 0xa5}, {&(0x7f0000000d80)="0b749747496766d5670a86699b66bb131117ea0922ec1fad71a7f98c6f5669cfef2816448a48b75533d3f10f55ddb28230d417ddff6b20c8b54aa209e0fc56fb67ab1da58b1e12e7e457cf95ddd72b44e094be282785ba240d3d11449d3b736ec053dd8a14082e2c7d65d4d257e3d20b206554d3ae3dc4bcd0b22a443b30b64b95f5a260bccb2bc881410387a83acda2d92cd34592b5c4816a478fb9afd10adcfe5a7acb142c57261615cbd219dd674fe96fcc8a4a960f9ee4927b20e917680ba223b9", 0xc3}], 0x2, &(0x7f00000011c0)=[@rights={{0x24, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, r3, r4]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r0, r2, r3, r4, r3, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r4, r2, r2, 0xffffffffffffffff, r4, r3]}}], 0xc8, 0x1}}, {{&(0x7f00000012c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000004b80)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r4, r2, r4, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r4, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r3, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x100, 0x4000}}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004c80)="e0e4b4378a18d25ebf6ea391de212c6f739ba98f740acbf1803614a6e7fd3937998bb9ca8ec459f83f597e5f020db0200a6951a6337eb8842af24da90661be079c10030ecc836d6c07687406ff1292c1990b843ee4f340bd5bd9d1cf2e73c53008aa95d16eaa3890efeb196675e084c71c727ab4b2b72929fdc5360a3779838c1f45cef61c7546e338e9d30422ddebee81a4a3c9c2c4d34ead2e894f710628bee0fde52aaa890fef22641d300c569c65963bd94c624fc8f531c07d057b11754427ad73ea0e8b13ded1baa03859067c346feadf2360b417a3a1071b13b74353e732358122479b728dc72223c037a1", 0xee}, {&(0x7f0000004d80)="85ba1988b16163f942edeb64e638b5f1d76a912f0551f8f7", 0x18}, {&(0x7f0000004dc0)="b10dcb4999d69e6160736c6fbfe22aa9a130938fc2444595442d660f87", 0x1d}], 0x3, &(0x7f0000007080)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r4, r2, r4, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x88, 0x40}}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000007140)="8d229e824d7d", 0x6}, {&(0x7f0000007180)="6a499cfcdc90576acc90086baa348859b173c1a036cc254c981850580f17c6f5f585", 0x22}, {&(0x7f00000071c0)}, {0x0}, {&(0x7f0000007240)}, {&(0x7f0000007280)="b734f5edfdc946a6791baea1a30f7e9a22", 0x11}, {&(0x7f00000072c0)="68591de6ed2ab4c674120bf5a8cb565f8eb3d4d0148722d820f9c3f845d8c2d89d01aafc7b4ac56449f9e89bf5b157d4919c4ad36c10da1a8bf0c6f161053ce3db39b840ef626c391fa10bec487bcbb59abc5f51939f21526c", 0x59}], 0x7, &(0x7f00000079c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r1, r7, r8}}}], 0xf0}}, {{&(0x7f0000007ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007d80)=[{&(0x7f0000007b40)="c6c4a1e43a4acf722f4f712904505316d42643ad7067a27b2136af2cf516b6006b72239aa5b993a728c86fd0c92d80df38954ca9755ea833c2818c79aa0887980805c40994cf6dab839880df7ba04bfdb292a97a7d1b5cc29c29c0c6be536b6a4bd8549cf3a5bb9b6da39471352d81c94ea9b0c0d2717bef98f81659651e7bcc81fb7e1bd9b5c22b3719d776272f4ced3288e7c666871d54113e038b09713d5f97bdcd21", 0xa4}, {&(0x7f0000007c00)="6086c63a5d29018074224990f981d41fcb4ebee92c507a1653738644908720a1124fa05c8fe6edc241349dbdfe955d4d722c943ff0086d77d55c9977f9f1cf04ba23f986cf2f5ffc0755d56b1b5434279d54d5f4b6c3376efaa4c493948a33877ad7f8789dc8a424399f28fa22b040c6ccd55077e8a248a93a937ab0", 0x7c}, {&(0x7f0000007c80)="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", 0xff}], 0x3, &(0x7f0000007f00)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [r4, r2, r3, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r10}}}], 0xb0, 0x4000}}], 0x7, 0x20048800) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 5.46766066s ago: executing program 5 (id=665): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000ff80010000"], 0x26}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000280)={0x800, 0x3, 0x4, 0x4a, 0x3, 0xfffffffd}) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r2, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 4.608026667s ago: executing program 1 (id=667): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="0094", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000000400)=ANY=[@ANYBLOB="68020000010501020000000000000000030000095402010002000000090000000707190002001f0073797a3000000000000000000000000000000000000000000000000000000000bbcece230dd1883d7d390a32b8a0d605f1badb28d7655e4bb21c060639272508d8f7f91ec4ea36da468fcbb77defeaa4a8d665cd796cd93b7c5488fd170227ea0010050000000000040000000d00040001000000000400000900ff03000000000800000008003a008712e6a708000000fcff0100010000000e000000de2c050000000000040000000400d34f0200000006000000fdff8100010000000100000029010700030000000f0000000000070003000000ff0763000700000003000000080000000100030000000000060000000400020002000000050000007f0041000000000004000000050009000000000001000000090080000100000000100000af02080001000000d60000000100050003000000000000008000080002000000030000000200af000000000005000000fbff07f1020000000900000001f07e0003000000030000000600fd6b421059ab753bc25b20c2694752fae5ff01000000f2b3000000000000020000003300000008000700000000000600000012f107000200000001800000040003000300000007000000a60201000300000009000000050007000000000007000000000000400200000006000000ff030bc1020000000800000004000500020000000000000a0b00660703000000000800000400a11d03000000ae00000000000500070000000004000001001000030000000400000001007700000000001ee500000100a1100300007dae0bb73d4bc53563eb6821000e0000"], 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x4000) keyctl$setperm(0x5, 0x0, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x4, 0x10, 0x9, 0x3011, r3, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0xc}, 0x50) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.86617627s ago: executing program 1 (id=668): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf2509000000050007000f00000005000800100000000c00060000000000000000000c00"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4048000) 3.730451245s ago: executing program 5 (id=670): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff}) open_tree(0xffffffffffffff9c, 0x0, 0x101) 3.583407762s ago: executing program 5 (id=671): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000003c0)=[@in_dx={0x69, 0x20, {0x7835, 0x2}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x3, 0x2}}, @in_dx={0x69, 0x20, {0xd43b, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x3, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x8000}, @nested_vmlaunch={0x12f, 0x18}, @cpuid={0x64, 0x18, {0x7, 0x3}}, @wrmsr={0x65, 0x20, {0x318, 0x9}}, @out_dx={0x6a, 0x28, {0x8e1e, 0x2, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x2}}, @out_dx={0x6a, 0x28, {0xdb94, 0x0, 0x7fffffff}}, @code={0xa, 0x79, {"48b800000000008000000f23d80f21f835400000500f23f8f30fc77507c4a179c5f000c74424000d000000c74424020a000000c7442406000000000f011c2466baf80cb890698081ef66bafc0c66b84e6566efc481f950eed9e0f30f090f21be6466420f38095170"}}, @out_dx={0x6a, 0x28, {0x805d, 0x2, 0x977}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x33, 0x2}}], 0x2b9}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.582873502s ago: executing program 4 (id=672): syz_open_dev$video4linux(0x0, 0x5, 0x20040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) 3.41337463s ago: executing program 1 (id=673): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 3.195943489s ago: executing program 4 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prlimit64(r1, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.182811724s ago: executing program 4 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8840) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) 1.474209945s ago: executing program 3 (id=676): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1.434561346s ago: executing program 0 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x4, 0xa4}, 0x50) 1.395586618s ago: executing program 4 (id=678): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="0094", 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x4, 0x10, 0x9, 0x3011, r2, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0xc}, 0x50) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 448.40646ms ago: executing program 0 (id=679): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1, 0x5, 0xa}, {0xbd1, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x7}, {0x81, 0x2, 0x9}, 0x2000003, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x8000, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x5}, 0x0, 0x2, 0x0, 0x7, 0x8, 0x0, 0x4}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x4, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xeffd, 0x0, 0x1, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x1, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2008090) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f0000000500)="9e18cd9b8109274cebf1a9ec4d1e7b32d3087ea5d1aa9d2cc16ad23842b37665fc15cb2f7a7356a076a6774b4506186f93ef30e87570c1ddf1ce86d474bbe49301e90ada03db180fb34c0146f70d406cdf0afa6cb183cd5c4a9d31871cf6eae851e2236bc373e18488b77a568b1284399912e6a72514337d7c44a58a4eeddc66b4ea73d3f0cb24a24eb1e6a2c67e89988b3f5703f0cf78a9f33712e9", 0x9c}], 0x3}, 0x0) 296.181007ms ago: executing program 4 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000ff80010000"], 0x26}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000280)={0x800, 0x3, 0x4, 0x4a, 0x3, 0xfffffffd}) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r2, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 0s ago: executing program 4 (id=681): sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6b", 0x39}], 0x1}, 0x0) r0 = syz_open_dev$media(0x0, 0x4, 0x62602) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_open_procfs$namespace(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x52200, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 54.251992][ T4172] cgroup: Unknown subsys name 'net' [ 54.394652][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.797917][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.232193][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.312835][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.334526][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 57.431742][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 57.454424][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.462065][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.470110][ T4185] device bridge_slave_0 entered promiscuous mode [ 57.496750][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.504233][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.512294][ T4185] device bridge_slave_1 entered promiscuous mode [ 57.542160][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.549267][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.556975][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.572041][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 57.587525][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.597419][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.605220][ T4187] device bridge_slave_0 entered promiscuous mode [ 57.618285][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.625551][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.635890][ T4187] device bridge_slave_1 entered promiscuous mode [ 57.643111][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.650383][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.658075][ T4184] device bridge_slave_1 entered promiscuous mode [ 57.671251][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.703451][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.751661][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.762440][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.784936][ T4185] team0: Port device team_slave_0 added [ 57.799846][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.810835][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.833175][ T4185] team0: Port device team_slave_1 added [ 57.839140][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.846201][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.854999][ T4183] device bridge_slave_0 entered promiscuous mode [ 57.894270][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.901359][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.909187][ T4183] device bridge_slave_1 entered promiscuous mode [ 57.924366][ T4187] team0: Port device team_slave_0 added [ 57.939212][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.946154][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.972224][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.991578][ T4187] team0: Port device team_slave_1 added [ 58.005844][ T4184] team0: Port device team_slave_0 added [ 58.019745][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.026704][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.053104][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.072686][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.089190][ T4184] team0: Port device team_slave_1 added [ 58.095041][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.102171][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.110567][ T4191] device bridge_slave_0 entered promiscuous mode [ 58.128113][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.145012][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.151975][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.177906][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.195566][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.202732][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.210817][ T4191] device bridge_slave_1 entered promiscuous mode [ 58.247419][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.254495][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.280464][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.306570][ T4185] device hsr_slave_0 entered promiscuous mode [ 58.313915][ T4185] device hsr_slave_1 entered promiscuous mode [ 58.323098][ T4183] team0: Port device team_slave_0 added [ 58.333866][ T4183] team0: Port device team_slave_1 added [ 58.340689][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.347626][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.373647][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.386256][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.412067][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.419189][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.445287][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.457716][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.514018][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.521143][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.547172][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.559694][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.566640][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.592612][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.617432][ T4187] device hsr_slave_0 entered promiscuous mode [ 58.624142][ T4187] device hsr_slave_1 entered promiscuous mode [ 58.631225][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.639186][ T4187] Cannot create hsr debugfs directory [ 58.646791][ T4191] team0: Port device team_slave_0 added [ 58.677959][ T4191] team0: Port device team_slave_1 added [ 58.698173][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.705000][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.714973][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.722585][ T4184] Cannot create hsr debugfs directory [ 58.771544][ T4183] device hsr_slave_0 entered promiscuous mode [ 58.778154][ T4183] device hsr_slave_1 entered promiscuous mode [ 58.785181][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.793858][ T4183] Cannot create hsr debugfs directory [ 58.810411][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.817367][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.843506][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.877663][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.884751][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.910913][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.979511][ T4188] Bluetooth: hci3: command 0x0409 tx timeout [ 58.979511][ T2308] Bluetooth: hci4: command 0x0409 tx timeout [ 58.980089][ T4188] Bluetooth: hci0: command 0x0409 tx timeout [ 58.998290][ T4188] Bluetooth: hci2: command 0x0409 tx timeout [ 59.004726][ T4188] Bluetooth: hci1: command 0x0409 tx timeout [ 59.038225][ T4191] device hsr_slave_0 entered promiscuous mode [ 59.044988][ T4191] device hsr_slave_1 entered promiscuous mode [ 59.051757][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.059802][ T4191] Cannot create hsr debugfs directory [ 59.230693][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.241849][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.251881][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.261478][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.317244][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.326356][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.344553][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.354980][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.425315][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.436408][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.446745][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.471600][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.501373][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.524649][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.533572][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.576974][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.586992][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.607743][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.616115][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.626160][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.643943][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.653766][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.663491][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.670682][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.686600][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.704926][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.713346][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.725671][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.734309][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.741376][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.750450][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.771845][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.785374][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.794716][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.805882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.814068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.826941][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.840983][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.854033][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.862890][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.872315][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.881367][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.893261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.904065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.930118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.940135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.948534][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.955611][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.963750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.973006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.982141][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.989246][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.997177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.025990][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.037310][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.050691][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.059912][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.068447][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.077368][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.085939][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.097870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.106878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.144078][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.175583][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.192463][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.207771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.218453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.227053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.235914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.245486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.254135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.263614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.272535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.281795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.289982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.305219][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.320655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.328394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.336817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.347472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.356334][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.363444][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.378231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.388119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.396961][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.404055][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.411835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.443894][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.465917][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.475250][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.504243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.512749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.521590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.530713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.547843][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.560072][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.582046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.591512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.600655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.608427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.620053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.628565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.637297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.646201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.655011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.682957][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.697910][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.707402][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.716858][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.723975][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.732084][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.742330][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.750821][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.757858][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.765730][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.774903][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.786066][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.795194][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.804517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.827616][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.844858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.853610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.861752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.871410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.880355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.889133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.897522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.916309][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.956371][ T4185] device veth0_vlan entered promiscuous mode [ 60.972154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.981842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.991058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.000909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.011050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.020112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.028567][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.035653][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.044214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.052819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.061077][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 61.067222][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 61.067626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.081856][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 61.088036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.088118][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 61.096660][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.102613][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 61.109135][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.123693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.131362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.141729][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.168998][ T4185] device veth1_vlan entered promiscuous mode [ 61.176556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.185817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.194466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.205719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.214292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.223962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.233177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.242313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.262331][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.294716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.307906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.319672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.328438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.338997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.347299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.366874][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.375221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.384996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.394291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.403624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.424203][ T4185] device veth0_macvtap entered promiscuous mode [ 61.440606][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.458315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.480238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.491575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.500565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.515040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.524450][ T4185] device veth1_macvtap entered promiscuous mode [ 61.567605][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.577556][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.585927][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.601062][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.614451][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.633545][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.663859][ T4187] device veth0_vlan entered promiscuous mode [ 61.673617][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.690663][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.715139][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.723916][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.734235][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.743716][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.752150][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.768037][ T4187] device veth1_vlan entered promiscuous mode [ 61.784037][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.798237][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.818611][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.836177][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.845384][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.854544][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.863908][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.872044][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.884462][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.894338][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.903196][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.911962][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.924390][ T4183] device veth0_vlan entered promiscuous mode [ 61.978278][ T4183] device veth1_vlan entered promiscuous mode [ 61.993395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.003528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.012559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.020656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.038225][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.072761][ T4187] device veth0_macvtap entered promiscuous mode [ 62.092934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.101841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.113580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.122418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.137410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.146245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.165662][ T4183] device veth0_macvtap entered promiscuous mode [ 62.178172][ T4187] device veth1_macvtap entered promiscuous mode [ 62.204758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.213720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.221987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.231157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.251506][ T4183] device veth1_macvtap entered promiscuous mode [ 62.273572][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.282515][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.287174][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.300090][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.308638][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.317433][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.333658][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.348060][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.360617][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.385184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.394480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.406139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.415418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.428005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.436460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.445572][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.456162][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.468314][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.477153][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.487891][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.498002][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.516626][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.528227][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.544788][ T4184] device veth0_vlan entered promiscuous mode [ 62.557465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.566210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.576556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.586328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.595271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.604140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.612884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.622427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.633404][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.644057][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.654110][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.665270][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.676644][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.685489][ T4191] device veth0_vlan entered promiscuous mode [ 62.695641][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.696387][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.708069][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.714542][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.728862][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.737572][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.748464][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.757068][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.765943][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.777588][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.786708][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.795672][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.804747][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.840701][ T4184] device veth1_vlan entered promiscuous mode [ 62.894393][ T4191] device veth1_vlan entered promiscuous mode [ 62.932961][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.951622][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.004855][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.015339][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.025045][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.034037][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.048137][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.063443][ T4184] device veth0_macvtap entered promiscuous mode [ 63.098018][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.114853][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.127124][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.128189][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.142827][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 63.144356][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 63.148996][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 63.165698][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 63.172104][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 63.178556][ T4294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.210172][ T4184] device veth1_macvtap entered promiscuous mode [ 63.222734][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.237674][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.255000][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.269479][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.279667][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.293196][ T4191] device veth0_macvtap entered promiscuous mode [ 63.317732][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.339060][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.350734][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.362567][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.373732][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.385545][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.398077][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.422002][ T4191] device veth1_macvtap entered promiscuous mode [ 63.454996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.476051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.503697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.516871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.672940][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.684554][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.694753][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.706097][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.716108][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.727455][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.744369][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.762740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.426954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.541137][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.556032][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.565279][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.574058][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.608740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 64.618734][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 64.628735][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 64.638731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 64.647804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 64.656802][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 64.665789][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 64.674781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 64.683775][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 64.692748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 64.755702][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.785318][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.795989][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.806930][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.816907][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.827853][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.838855][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.849531][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.866459][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.920505][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.936774][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.218975][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 65.507776][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 65.523962][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.533757][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 65.554672][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 65.563441][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.583768][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.590861][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.595227][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 65.648873][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.665580][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.675920][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.692777][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.714927][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.726939][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.743213][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.753882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.766277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.813448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.856330][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.158104][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.209438][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.258298][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.621801][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.649753][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.694049][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.737738][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.757620][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.792659][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.891587][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.930898][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.958623][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.983357][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.001030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.010043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.065560][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.118187][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.126109][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.505821][ T4321] ODEBUG: Out of memory. ODEBUG disabled [ 68.035412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.128868][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 69.308979][ T13] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 69.367572][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.460879][ T13] usb 3-1: Product: syz [ 69.481430][ T4337] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.546026][ T13] usb 3-1: Manufacturer: syz [ 69.603900][ T13] usb 3-1: SerialNumber: syz [ 69.776934][ T13] usb 3-1: config 0 descriptor?? [ 69.928997][ T13] usb 3-1: can't set config #0, error -71 [ 69.996245][ T13] usb 3-1: USB disconnect, device number 2 [ 71.143560][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.152017][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.715891][ T4374] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 77.118142][ T4391] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 77.715464][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.307865][ T4391] team0: Port device bond0 added [ 79.179771][ T4392] ALSA: mixer_oss: invalid OSS volume '' [ 79.237872][ T4403] (syz.3.27,4403,1):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 80.040709][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.200067][ T4413] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 81.728835][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 83.207144][ T1111] cfg80211: failed to load regulatory.db [ 83.309143][ T13] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 83.329805][ T13] usb 3-1: config 0 has no interface number 0 [ 83.336063][ T13] usb 3-1: config 0 interface 184 has no altsetting 0 [ 84.248880][ T13] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.275576][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.332399][ T13] usb 3-1: Product: syz [ 84.357100][ T13] usb 3-1: Manufacturer: syz [ 84.394742][ T13] usb 3-1: config 0 descriptor?? [ 84.429004][ T13] usb 3-1: can't set config #0, error -71 [ 84.464533][ T13] usb 3-1: USB disconnect, device number 3 [ 84.658831][ T4242] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.664384][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 84.676364][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 84.683946][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.694131][ T4201] Workqueue: hci4 hci_rx_work [ 84.698862][ T4201] Call Trace: [ 84.702153][ T4201] [ 84.705139][ T4201] dump_stack_lvl+0x168/0x230 [ 84.709833][ T4201] ? show_regs_print_info+0x20/0x20 [ 84.715066][ T4201] ? load_image+0x3b0/0x3b0 [ 84.719587][ T4201] sysfs_create_dir_ns+0x252/0x280 [ 84.724706][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 84.729735][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 84.734436][ T4201] ? le_conn_complete_evt+0xcbc/0x1590 [ 84.739928][ T4201] ? hci_event_packet+0xe05/0x12f0 [ 84.745158][ T4201] ? process_one_work+0x863/0x1000 [ 84.750457][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 84.755657][ T4201] kobject_add_internal+0x662/0xd00 [ 84.760868][ T4201] kobject_add+0x152/0x210 [ 84.765302][ T4201] ? kobject_init+0x1d0/0x1d0 [ 84.769992][ T4201] ? klist_children_get+0x50/0x50 [ 84.775025][ T4201] ? get_device_parent+0x121/0x3f0 [ 84.780145][ T4201] device_add+0x483/0xfb0 [ 84.784485][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 84.789445][ T4201] le_conn_complete_evt+0xcbc/0x1590 [ 84.794744][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 84.799979][ T4201] ? __mutex_trylock_common+0x14f/0x250 [ 84.805538][ T4201] hci_le_meta_evt+0x289/0x3b80 [ 84.810563][ T4201] ? hci_event_packet+0x36d/0x12f0 [ 84.815679][ T4201] ? hci_event_packet+0x2e2/0x12f0 [ 84.820792][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 84.825835][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 84.831900][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 84.837552][ T4201] ? mark_lock+0x94/0x320 [ 84.841883][ T4201] ? mutex_unlock+0x10/0x10 [ 84.846395][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 84.852446][ T4201] ? lock_chain_count+0x20/0x20 [ 84.857322][ T4201] ? __rwlock_init+0x140/0x140 [ 84.862093][ T4201] hci_event_packet+0xe05/0x12f0 [ 84.867408][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 84.872632][ T4201] ? rcu_lock_release+0x20/0x20 [ 84.877514][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 84.882721][ T4201] hci_rx_work+0x255/0xa10 [ 84.887142][ T4201] process_one_work+0x863/0x1000 [ 84.892083][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 84.897710][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 84.902996][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 84.908038][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 84.913421][ T4201] ? wq_worker_running+0x97/0x170 [ 84.918447][ T4201] worker_thread+0xaa8/0x12a0 [ 84.923146][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 84.929040][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 84.934253][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 84.939453][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 84.945355][ T4201] kthread+0x436/0x520 [ 84.949602][ T4201] ? rcu_lock_release+0x20/0x20 [ 84.954583][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 84.959211][ T4201] ret_from_fork+0x1f/0x30 [ 84.963670][ T4201] [ 84.970600][ T4201] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.984093][ T4201] Bluetooth: hci4: failed to register connection device [ 85.019002][ T4242] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 85.068041][ T4242] usb 5-1: config 0 has no interface number 0 [ 85.168888][ T4242] usb 5-1: too many endpoints for config 0 interface 231 altsetting 238: 205, using maximum allowed: 30 [ 85.411112][ T4242] usb 5-1: config 0 interface 231 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 85.424597][ T4242] usb 5-1: config 0 interface 231 has no altsetting 0 [ 85.519529][ T4432] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 85.591374][ T4242] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 85.622227][ T4242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.560866][ T4242] usb 5-1: Product: syz [ 86.566652][ T4242] usb 5-1: Manufacturer: syz [ 86.572219][ T4242] usb 5-1: SerialNumber: syz [ 86.656312][ T4242] usb 5-1: config 0 descriptor?? [ 86.748957][ T4242] usb 5-1: can't set config #0, error -71 [ 86.764524][ T4242] usb 5-1: USB disconnect, device number 2 [ 88.201175][ T9] Bluetooth: (null): Invalid header checksum [ 88.207730][ T9] Bluetooth: (null): Invalid header checksum [ 88.265527][ T9] Bluetooth: (null): Invalid header checksum [ 88.272744][ T9] Bluetooth: (null): Invalid header checksum [ 88.769177][ T4242] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.581902][ T4468] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.991811][ T4242] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 90.032032][ T4471] Zero length message leads to an empty skb [ 90.038403][ T4242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.087710][ T4242] usb 5-1: Product: syz [ 90.098870][ T4242] usb 5-1: Manufacturer: syz [ 90.628993][ T4242] usb 5-1: SerialNumber: syz [ 90.691345][ T4242] usb 5-1: config 0 descriptor?? [ 90.760215][ T4242] hub 5-1:0.0: bad descriptor, ignoring hub [ 90.774786][ T4242] hub: probe of 5-1:0.0 failed with error -5 [ 91.448979][ T4242] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 91.583366][ T4242] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.689307][ T4242] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 91.712536][ T4242] usb 5-1: media controller created [ 91.766630][ T4242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.850231][ T4490] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 93.944639][ T4242] DVB: Unable to find symbol dib7000p_attach() [ 93.951809][ T4242] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 94.278794][ T4242] rc_core: IR keymap rc-dib0700-rc5 not found [ 94.287258][ T4242] Registered IR keymap rc-empty [ 94.309147][ T4242] dvb-usb: could not initialize remote control. [ 94.315617][ T4242] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 94.370997][ T4242] usb 5-1: USB disconnect, device number 3 [ 94.448410][ T4242] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 96.243128][ T4524] xt_cgroup: xt_cgroup: no path or classid specified [ 100.489981][ T4562] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 107.691841][ T9] Bluetooth: (null): Invalid header checksum [ 107.699804][ T9] Bluetooth: (null): Invalid header checksum [ 107.799437][ T9] Bluetooth: (null): Invalid header checksum [ 111.610257][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.990150][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.013434][ T21] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 112.037672][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.066189][ T21] usb 3-1: config 0 descriptor?? [ 112.752713][ T21] hid-alps 0003:044E:1215.0001: unknown main item tag 0x0 [ 112.811347][ T21] hid-alps 0003:044E:1215.0001: hidraw0: USB HID v58.6c Device [HID 044e:1215] on usb-dummy_hcd.2-1/input0 [ 112.983558][ T21] usb 3-1: USB disconnect, device number 4 [ 113.058613][ T4698] fido_id[4698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 116.556735][ T4744] device batadv_slave_0 entered promiscuous mode [ 117.318008][ T4742] device batadv_slave_0 left promiscuous mode [ 117.689002][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.749605][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 119.268960][ T13] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.310443][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.359102][ T13] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 119.427029][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.443268][ T4771] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 119.605739][ T13] usb 4-1: config 0 descriptor?? [ 120.768480][ T13] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 121.215471][ T2308] usb 4-1: USB disconnect, device number 2 [ 121.487881][ T4791] fido_id[4791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 121.649091][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.319147][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.469867][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.488137][ T4233] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 123.532973][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.576636][ T4233] usb 2-1: config 0 descriptor?? [ 123.658329][ T4818] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 125.238689][ C0] sched: RT throttling activated [ 125.611837][ T4233] usbhid 2-1:0.0: can't add hid device: -71 [ 125.655340][ T4233] usbhid: probe of 2-1:0.0 failed with error -71 [ 126.581347][ T4233] usb 2-1: USB disconnect, device number 2 [ 128.177648][ T4869] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 128.710411][ T4871] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 131.194641][ T4906] delete_channel: no stack [ 131.784334][ T4908] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 131.806125][ T4912] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 132.642977][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.649688][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.587205][ T4958] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 138.213984][ T4974] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 141.144687][ T5000] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 147.716357][ T5065] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 148.293603][ T4338] Bluetooth: (null): Invalid header checksum [ 148.318026][ T4338] Bluetooth: (null): Invalid header checksum [ 148.399673][ T4338] Bluetooth: (null): Invalid header checksum [ 148.522296][ T4336] Bluetooth: (null): Invalid header checksum [ 151.893504][ T5107] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 156.258250][ T5143] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 156.282404][ T5146] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 158.403276][ T4293] Bluetooth: (null): Invalid header checksum [ 158.444630][ T4293] Bluetooth: (null): Invalid header checksum [ 158.611162][ T4293] Bluetooth: (null): Invalid header checksum [ 158.694315][ T5163] atomic_op ffff88802b851998 conn xmit_atomic 0000000000000000 [ 161.235045][ T5186] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 163.002692][ T5206] atomic_op ffff888076cd2998 conn xmit_atomic 0000000000000000 [ 163.114696][ T5208] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 167.439175][ T4341] Bluetooth: (null): Invalid header checksum [ 167.568757][ T4341] Bluetooth: (null): Invalid header checksum [ 167.601956][ T4341] Bluetooth: (null): Invalid header checksum [ 167.694383][ T4293] Bluetooth: (null): Invalid header checksum [ 167.783509][ T4336] Bluetooth: (null): Invalid header checksum [ 168.103068][ T4336] Bluetooth: (null): Invalid header checksum [ 168.312850][ T4336] Bluetooth: (null): Invalid header checksum [ 168.319269][ T4336] Bluetooth: (null): Invalid header checksum [ 168.325446][ T4336] Bluetooth: (null): Invalid header checksum [ 168.431541][ T5246] atomic_op ffff88807a8c6998 conn xmit_atomic 0000000000000000 [ 168.823915][ T5251] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 172.218085][ T5272] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 173.685024][ T5281] atomic_op ffff888024237198 conn xmit_atomic 0000000000000000 [ 174.820205][ T5295] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 177.353596][ T5322] atomic_op ffff8880773fd198 conn xmit_atomic 0000000000000000 [ 178.146658][ T5338] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 178.558779][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 179.986316][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 180.231829][ T5345] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 180.239275][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.272561][ T13] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.326143][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.338888][ T13] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 180.358455][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.457007][ T13] usb 2-1: config 0 descriptor?? [ 180.739502][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 180.749169][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 180.776180][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 181.445466][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 182.628785][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 182.634778][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 182.668492][ T13] usb 2-1: USB disconnect, device number 3 [ 184.662289][ T5377] atomic_op ffff88807a172998 conn xmit_atomic 0000000000000000 [ 189.245621][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.598841][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 191.488990][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.620225][ T7] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.659169][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.666013][ T7] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 191.675602][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.686295][ T7] usb 2-1: config 0 descriptor?? [ 191.890985][ T5417] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 192.606954][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 193.361764][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 193.567270][ T7] usb 2-1: USB disconnect, device number 4 [ 193.571574][ T5428] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 194.036427][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.044787][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.012341][ T5459] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.064320][ T5462] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 199.031061][ T5474] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 199.259544][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.618845][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 199.738990][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.787559][ T1111] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.746485][ T1111] usb 4-1: config 0 interface 0 has no altsetting 0 [ 200.754723][ T1111] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 200.764371][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.903420][ T1111] usb 4-1: config 0 descriptor?? [ 200.989590][ T1111] usb 4-1: can't set config #0, error -71 [ 201.658664][ T1111] usb 4-1: USB disconnect, device number 3 [ 202.510002][ T5510] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 204.066711][ T5514] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 205.044886][ T5524] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 208.645633][ T5556] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 208.666360][ T5556] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 208.752435][ T4263] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 209.058764][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 209.989065][ T4263] usb 4-1: device descriptor read/all, error -71 [ 211.398380][ T5575] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 212.829540][ T5588] syz.2.376 uses obsolete (PF_INET,SOCK_PACKET) [ 219.672268][ T5640] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 229.021215][ T5738] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 240.568201][ T5853] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 247.596820][ T5906] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 248.497770][ T5916] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 254.245925][ T5978] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 255.466311][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.621645][ T5992] (syz.4.492,5992,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 255.965929][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.978322][ T5989] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 259.483818][ T6022] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 259.580256][ T6022] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 260.859559][ T6038] (syz.0.506,6038,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 262.629110][ T6044] delete_channel: no stack [ 263.168103][ T6055] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 266.121322][ T6089] (syz.3.523,6089,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 275.163454][ T6174] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 275.308998][ T4290] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 275.674480][ T6157] sctp: failed to load transform for md5: -2 [ 276.133198][ T4290] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.145542][ T4290] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 276.154884][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.165286][ T4290] usb 2-1: config 0 descriptor?? [ 276.647530][ T4290] pwc: Askey VC010 type 2 USB webcam detected. [ 277.127912][ T4290] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.179162][ T4290] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.219219][ T4290] pwc: recv_control_msg error -32 req 02 val 2c00 [ 277.290392][ T4290] pwc: recv_control_msg error -32 req 04 val 1000 [ 277.351390][ T4290] pwc: recv_control_msg error -32 req 04 val 1300 [ 277.424406][ T4290] pwc: recv_control_msg error -32 req 04 val 1400 [ 277.470000][ T4290] pwc: recv_control_msg error -32 req 02 val 2000 [ 277.531364][ T4290] pwc: recv_control_msg error -32 req 02 val 2100 [ 278.569220][ T4290] pwc: recv_control_msg error -71 req 02 val 2500 [ 278.609096][ T4290] pwc: recv_control_msg error -71 req 02 val 2400 [ 278.669046][ T4290] pwc: recv_control_msg error -71 req 02 val 2600 [ 278.808710][ T4241] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 278.837451][ T4290] pwc: recv_control_msg error -71 req 02 val 2900 [ 278.859969][ T4290] pwc: recv_control_msg error -71 req 02 val 2800 [ 278.888815][ T4290] pwc: recv_control_msg error -71 req 04 val 1100 [ 278.939051][ T4290] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.976128][ T4290] pwc: Registered as video103. [ 278.986262][ T4290] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 279.014565][ T4290] usb 2-1: USB disconnect, device number 5 [ 279.128766][ T4241] usb 1-1: Using ep0 maxpacket: 32 [ 279.288922][ T4241] usb 1-1: unable to get BOS descriptor or descriptor too short [ 279.390039][ T4241] usb 1-1: config 56 has an invalid interface number: 222 but max is 0 [ 279.406581][ T4241] usb 1-1: config 56 has no interface number 0 [ 279.805892][ T4241] usb 1-1: config 56 interface 222 has no altsetting 0 [ 279.914384][ T6224] sctp: failed to load transform for md5: -2 [ 280.059998][ T4241] usb 1-1: New USB device found, idVendor=2020, idProduct=2031, bcdDevice=3b.23 [ 280.215449][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.230273][ T4241] usb 1-1: Product: syz [ 280.237441][ T4241] usb 1-1: Manufacturer: syz [ 281.044058][ T4241] usb 1-1: SerialNumber: syz [ 281.138499][ T4241] usb 1-1: can't set config #56, error -71 [ 281.158467][ T4241] usb 1-1: USB disconnect, device number 2 [ 281.247481][ T6245] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 285.212091][ T6290] device vlan2 entered promiscuous mode [ 285.549564][ T6296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 285.600967][ T6298] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 285.954708][ T6302] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 286.165912][ T6288] sctp: failed to load transform for md5: -2 [ 287.018587][ T6311] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.026652][ T6311] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 287.036959][ T6311] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.045969][ T6311] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 292.087414][ T6353] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 293.237876][ T6361] vivid-008: disconnect [ 293.846260][ T6357] vivid-008: reconnect [ 295.376895][ T6368] sctp: failed to load transform for md5: -2 [ 301.650170][ T6412] sctp: failed to load transform for md5: -4 [ 301.730739][ T4183] syz-executor (4183) used greatest stack depth: 20448 bytes left [ 301.809782][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 302.162644][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.357911][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.145832][ T6423] device bridge_slave_0 entered promiscuous mode [ 303.210440][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.813652][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 303.936878][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.502290][ T6423] device bridge_slave_1 entered promiscuous mode [ 304.579846][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.639000][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.743711][ T6423] team0: Port device team_slave_0 added [ 304.760718][ T6423] team0: Port device team_slave_1 added [ 304.922994][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.940272][ T6450] binder: BINDER_SET_CONTEXT_MGR already set [ 304.955911][ T6450] binder: 6448:6450 ioctl 4018620d 200000004a80 returned -16 [ 304.973554][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.037998][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.073834][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.095896][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.172265][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.293748][ T6423] device hsr_slave_0 entered promiscuous mode [ 305.315340][ T6423] device hsr_slave_1 entered promiscuous mode [ 305.345205][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.364185][ T6423] Cannot create hsr debugfs directory [ 305.794566][ T6423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.852361][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.627'. [ 305.868704][ T6423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.896738][ T6423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.930858][ T6423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 307.074699][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 307.223712][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.241863][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.164893][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.176909][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.203121][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.369896][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.390442][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.397526][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.839395][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.889458][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.901924][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.971266][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.978484][ T5410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.171387][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 309.185499][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.196701][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.209584][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.220495][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.237815][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.246930][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.266147][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.280002][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.294076][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.321689][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.344230][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.403325][ T6423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.192711][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.440964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.599379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.118722][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 312.525759][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.542988][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.604159][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.626961][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.671998][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.715406][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.756445][ T6423] device veth0_vlan entered promiscuous mode [ 312.809202][ T6423] device veth1_vlan entered promiscuous mode [ 312.943838][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.959599][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.992493][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.023901][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.056308][ T6423] device veth0_macvtap entered promiscuous mode [ 313.097437][ T6423] device veth1_macvtap entered promiscuous mode [ 313.166668][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.183941][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.197572][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.244943][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.263768][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.275867][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.294048][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.345546][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.376082][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.404168][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.476409][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.503639][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.525708][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.557849][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.651173][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.670882][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.729145][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.739258][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.752063][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.765344][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.776231][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.787351][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.797890][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.823286][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.868698][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.919459][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.942459][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.991395][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.055751][ T6423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.075056][ T6423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.110807][ T6423] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.150988][ T6423] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.265057][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 314.413047][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.476504][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.521293][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.705392][ T3045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.726215][ T3045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.523848][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.706767][ T6553] vivid-008: disconnect [ 315.726513][ T6550] vivid-008: reconnect [ 315.742952][ T6556] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 315.787579][ T6558] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 316.648950][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 316.912894][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.929969][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.744894][ T6604] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 322.028329][ T6620] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 324.977495][ T6644] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 325.345152][ T4201] ================================================================== [ 325.353534][ T4201] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 325.361358][ T4201] Read of size 1 at addr ffff8880243cbc00 by task kworker/u5:8/4201 [ 325.369335][ T4201] [ 325.371655][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 325.379200][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.389246][ T4201] Workqueue: hci0 hci_rx_work [ 325.393941][ T4201] Call Trace: [ 325.397219][ T4201] [ 325.400166][ T4201] dump_stack_lvl+0x168/0x230 [ 325.404873][ T4201] ? show_regs_print_info+0x20/0x20 [ 325.410090][ T4201] ? load_image+0x3b0/0x3b0 [ 325.414596][ T4201] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 325.419970][ T4201] print_address_description+0x60/0x2d0 [ 325.425515][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 325.430618][ T4201] kasan_report+0xdf/0x130 [ 325.435047][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 325.440157][ T4201] hci_le_meta_evt+0x12c0/0x3b80 [ 325.445094][ T4201] ? hci_event_packet+0x2a0/0x12f0 [ 325.450227][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 325.456320][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 325.461963][ T4201] ? mark_lock+0x94/0x320 [ 325.466297][ T4201] ? mutex_unlock+0x10/0x10 [ 325.470803][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 325.476781][ T4201] ? lock_chain_count+0x20/0x20 [ 325.481642][ T4201] ? __rwlock_init+0x140/0x140 [ 325.486412][ T4201] hci_event_packet+0xe05/0x12f0 [ 325.491346][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 325.496549][ T4201] ? rcu_lock_release+0x20/0x20 [ 325.501400][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 325.506594][ T4201] hci_rx_work+0x255/0xa10 [ 325.511015][ T4201] process_one_work+0x863/0x1000 [ 325.515962][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 325.521601][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 325.526908][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 325.531937][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 325.537311][ T4201] ? wq_worker_running+0x97/0x170 [ 325.542327][ T4201] worker_thread+0xaa8/0x12a0 [ 325.546997][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 325.552886][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 325.558085][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 325.563286][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 325.569223][ T4201] kthread+0x436/0x520 [ 325.573302][ T4201] ? rcu_lock_release+0x20/0x20 [ 325.578148][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 325.582736][ T4201] ret_from_fork+0x1f/0x30 [ 325.587164][ T4201] [ 325.590184][ T4201] [ 325.592502][ T4201] Allocated by task 6649: [ 325.596823][ T4201] __kasan_kmalloc+0xb5/0xf0 [ 325.601439][ T4201] __alloc_skb+0x22c/0x750 [ 325.605874][ T4201] vhci_write+0xbc/0x450 [ 325.610112][ T4201] vfs_write+0x712/0xd00 [ 325.614354][ T4201] ksys_write+0x14d/0x250 [ 325.618677][ T4201] do_syscall_64+0x4c/0xa0 [ 325.623090][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.628978][ T4201] [ 325.631301][ T4201] The buggy address belongs to the object at ffff8880243cb800 [ 325.631301][ T4201] which belongs to the cache kmalloc-1k of size 1024 [ 325.645470][ T4201] The buggy address is located 0 bytes to the right of [ 325.645470][ T4201] 1024-byte region [ffff8880243cb800, ffff8880243cbc00) [ 325.659176][ T4201] The buggy address belongs to the page: [ 325.664810][ T4201] page:ffffea000090f200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x243c8 [ 325.674962][ T4201] head:ffffea000090f200 order:3 compound_mapcount:0 compound_pincount:0 [ 325.683281][ T4201] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 325.691256][ T4201] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841dc0 [ 325.699842][ T4201] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 325.708430][ T4201] page dumped because: kasan: bad access detected [ 325.714843][ T4201] page_owner tracks the page as allocated [ 325.720553][ T4201] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4254, ts 61923736842, free_ts 61642467293 [ 325.737565][ T4201] get_page_from_freelist+0x1b77/0x1c60 [ 325.743117][ T4201] __alloc_pages+0x1e1/0x470 [ 325.747705][ T4201] new_slab+0xc0/0x4b0 [ 325.751772][ T4201] ___slab_alloc+0x81e/0xdf0 [ 325.756374][ T4201] __kmalloc+0x1cd/0x330 [ 325.760617][ T4201] ___neigh_create+0x6d2/0x2250 [ 325.765467][ T4201] ip6_finish_output2+0xa01/0x1500 [ 325.770575][ T4201] ndisc_send_skb+0xbea/0x14a0 [ 325.775340][ T4201] ndisc_send_ns+0x63c/0x840 [ 325.779929][ T4201] addrconf_dad_work+0xa47/0x1520 [ 325.784948][ T4201] process_one_work+0x863/0x1000 [ 325.789885][ T4201] worker_thread+0xaa8/0x12a0 [ 325.794566][ T4201] kthread+0x436/0x520 [ 325.798632][ T4201] ret_from_fork+0x1f/0x30 [ 325.803061][ T4201] page last free stack trace: [ 325.807728][ T4201] free_unref_page_prepare+0x637/0x6c0 [ 325.813189][ T4201] free_unref_page+0x94/0x280 [ 325.817857][ T4201] __unfreeze_partials+0x1a5/0x200 [ 325.823101][ T4201] put_cpu_partial+0x12d/0x190 [ 325.827864][ T4201] qlist_free_all+0x35/0x90 [ 325.832371][ T4201] kasan_quarantine_reduce+0x150/0x160 [ 325.837827][ T4201] __kasan_slab_alloc+0x2f/0xd0 [ 325.842673][ T4201] slab_post_alloc_hook+0x4c/0x380 [ 325.847781][ T4201] kmem_cache_alloc_trace+0x103/0x2a0 [ 325.853147][ T4201] load_elf_binary+0x1b8e/0x2890 [ 325.858091][ T4201] bprm_execve+0xa92/0x17d0 [ 325.862590][ T4201] kernel_execve+0x82a/0x900 [ 325.867183][ T4201] call_usermodehelper_exec_async+0x207/0x350 [ 325.873253][ T4201] ret_from_fork+0x1f/0x30 [ 325.877663][ T4201] [ 325.879979][ T4201] Memory state around the buggy address: [ 325.885601][ T4201] ffff8880243cbb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.893664][ T4201] ffff8880243cbb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.901736][ T4201] >ffff8880243cbc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.909810][ T4201] ^ [ 325.914046][ T4201] ffff8880243cbc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.922099][ T4201] ffff8880243cbd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.930160][ T4201] ================================================================== [ 325.938214][ T4201] Disabling lock debugging due to kernel taint [ 325.949989][ T4201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 325.957223][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:8 Tainted: G B syzkaller #0 [ 325.966184][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.976250][ T4201] Workqueue: hci0 hci_rx_work [ 325.980954][ T4201] Call Trace: [ 325.984244][ T4201] [ 325.987198][ T4201] dump_stack_lvl+0x168/0x230 [ 325.991921][ T4201] ? show_regs_print_info+0x20/0x20 [ 325.997131][ T4201] ? load_image+0x3b0/0x3b0 [ 326.001645][ T4201] panic+0x2c9/0x7f0 [ 326.005560][ T4201] ? bpf_jit_dump+0xd0/0xd0 [ 326.010080][ T4201] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 326.015975][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 326.020844][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 326.025953][ T4201] check_panic_on_warn+0x80/0xa0 [ 326.030895][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 326.036011][ T4201] end_report+0x6d/0xf0 [ 326.040176][ T4201] kasan_report+0x102/0x130 [ 326.044679][ T4201] ? hci_le_meta_evt+0x12c0/0x3b80 [ 326.049792][ T4201] hci_le_meta_evt+0x12c0/0x3b80 [ 326.054745][ T4201] ? hci_event_packet+0x2a0/0x12f0 [ 326.059883][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 326.065943][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 326.071570][ T4201] ? mark_lock+0x94/0x320 [ 326.075892][ T4201] ? mutex_unlock+0x10/0x10 [ 326.080391][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 326.086384][ T4201] ? lock_chain_count+0x20/0x20 [ 326.091254][ T4201] ? __rwlock_init+0x140/0x140 [ 326.096015][ T4201] hci_event_packet+0xe05/0x12f0 [ 326.100950][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 326.106166][ T4201] ? rcu_lock_release+0x20/0x20 [ 326.111017][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 326.116211][ T4201] hci_rx_work+0x255/0xa10 [ 326.120637][ T4201] process_one_work+0x863/0x1000 [ 326.125576][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 326.131199][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 326.136484][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 326.141505][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 326.146869][ T4201] ? wq_worker_running+0x97/0x170 [ 326.151910][ T4201] worker_thread+0xaa8/0x12a0 [ 326.156601][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 326.162486][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 326.167679][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 326.172869][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 326.178755][ T4201] kthread+0x436/0x520 [ 326.182813][ T4201] ? rcu_lock_release+0x20/0x20 [ 326.187657][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 326.192236][ T4201] ret_from_fork+0x1f/0x30 [ 326.196651][ T4201] [ 326.199928][ T4201] Kernel Offset: disabled [ 326.204271][ T4201] Rebooting in 86400 seconds..