last executing test programs: 19.671293815s ago: executing program 3 (id=96): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)="62042700a80f007fffffff2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4", 0x2a}], 0x1}, 0x4008001) 19.326839212s ago: executing program 3 (id=100): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x755e, 0x4) 17.983152997s ago: executing program 3 (id=103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x5, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000f40)=""/249, 0xf9}], 0x1) socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f10000000100000000000000000000400000000005010000f800ffff3d00000000000000"], 0x0) 15.887179707s ago: executing program 0 (id=108): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x4000, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000240)='|') ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000540)='ocfs2\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r4) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 12.230158267s ago: executing program 2 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) listen(r2, 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e64, 0x100, @empty}, 0x1c) listen(r3, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff7ff8}]}) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r5, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) close_range(r4, r5, 0x0) 11.941711473s ago: executing program 0 (id=114): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timerfd_create(0x8, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="05b7be31aa3acd93a3bd7f0000000f00"]) 10.242638255s ago: executing program 0 (id=115): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x5, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58", 0x1d}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000f40)=""/249, 0xf9}], 0x1) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f10000000100000000000000000000400000000005010000f800ffff3d00000000000000"], 0x0) 10.242377385s ago: executing program 4 (id=116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r1, 0x0, 0x0, 0x200401) fallocate(r1, 0x0, 0x0, 0x200401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r5 = socket(0x2a, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x20000004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 9.105509037s ago: executing program 0 (id=117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xae6, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) 7.976867368s ago: executing program 4 (id=119): socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x2000) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000380)={0x0, 0x8000, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) mlock(&(0x7f0000794000/0x2000)=nil, 0x2000) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.442253639s ago: executing program 2 (id=120): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet6(0xa, 0x1, 0x8010000000000084) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 6.383318469s ago: executing program 4 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x48800) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r6 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f00000008c0)) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) 6.32142065s ago: executing program 2 (id=123): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x4000, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000240)='|') ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) 6.041996375s ago: executing program 1 (id=124): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000480)=""/21, 0x15}], 0x4}, 0x1}], 0x2, 0x2023, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x2, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147e98ea2b1cdfaf4e9530630c66996c4905b"}, 0xd8) 6.041437005s ago: executing program 3 (id=125): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timerfd_create(0x8, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="05b7be31aa3acd93a3bd7f0000000f00"]) 4.673388611s ago: executing program 0 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r1, 0x0, 0x0, 0x200401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 4.672747381s ago: executing program 4 (id=127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x5, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58", 0x1d}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000f40)=""/249, 0xf9}], 0x1) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f10000000100000000000000000000400000000005010000f800ffff3d00000000000000"], 0x0) 3.643043141s ago: executing program 4 (id=128): syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1a, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xc, 0x77, 0x2}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffeff}, 0x1c) close(r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3.621035072s ago: executing program 3 (id=129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r0, 0x0, 0x0, 0x200401) fallocate(r0, 0x0, 0x0, 0x200401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r4 = socket(0x2a, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x20000004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 3.538142353s ago: executing program 1 (id=130): r0 = socket(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x88, 0x68, 0x0, 0x20000000) r5 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x100000000000007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x401, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0xea2, 0x6, 0x4, 0x100, 0x5, {r7, @in6={{0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x2, 0x7, 0x4, 0xf, 0x5}}, &(0x7f00000001c0)=0xb0) prctl$PR_SET_MM_MAP(0x3f, 0xe, 0x0, 0x0) 2.943825255s ago: executing program 2 (id=131): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCFLSH(r0, 0x4b63, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() pipe(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r2, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r7, 0x2000000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r8, &(0x7f0000000080)="520003000100b8", 0x7) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0xf, 0xa, 0x2, "55ac07d401cc000000b28d0005009dd37828c92b00", 0x4c314356}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 2.904723765s ago: executing program 0 (id=132): epoll_create(0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x5, 0x101) r1 = socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e) socket$kcm(0x10, 0x7, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ftruncate(r5, 0xfffffffffffffbcd) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="0a00f5"], 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x40084) syz_emit_ethernet(0x137, &(0x7f0000000140)={@local, @random="6cf6566994c6", @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x121, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @multicast1}, {{0x4e22, 0x4001, r0, 0x41424344, 0x0, 0x0, 0x5, 0xe5}, {"8c1f44ce24babfb6ec1c72cf3ab84b86bb79faaacabb2e58ec84780d7137bd1b8a3fdb6f3120e2e9fae19b0dd68625b5e4eec84106ac5deeb1aaad0eecf823d268aad052ab8dfd6f9473f72b25fe193f1017d27ebe7bb2fb9e99924a6c2de3f630c3d80b9ad68d8f333731801836550a9d4574e8285734cc5a558428669aa060f38d3050a1d07c2ced580f94d064ee8dab92d680f279056a4f6594d9419d00f91836abc1794296879b1e58ef1cbc36d98d27c506000000edc21c2987cfb697a0f888630234d618fd9eb38fab5b3496bc88350d97f863ccfe7f28bebcd73cdcf70a93c300008d11fa98f83b273dde650a7f8b4fed98be48fdfe"}}}}}}, 0x0) 2.403774115s ago: executing program 1 (id=133): socket$kcm(0xa, 0x3, 0x87) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 1.286876656s ago: executing program 2 (id=134): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet6(0xa, 0x1, 0x8010000000000084) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 621.773018ms ago: executing program 1 (id=135): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 271.730725ms ago: executing program 4 (id=136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xae6, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) 151.019998ms ago: executing program 1 (id=137): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 68.885469ms ago: executing program 3 (id=138): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r4, 0x55e, 0x0, 0x3eae}, &(0x7f0000000040)=0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x7f, 0x1, 0x0, 0x1, 0x5, 0xc, 0x3, 0xa, 0xfd, 0xfffffffa, 0x2, 0x1, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8000008c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfbfffff8]}) 961.61µs ago: executing program 1 (id=139): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) timerfd_create(0x8, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="05b7be31aa3acd93a3bd7f0000000f00"]) 0s ago: executing program 2 (id=140): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x5, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58", 0x1d}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000f40)=""/249, 0xf9}], 0x1) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f10000000100000000000000000000400000000005010000f800ffff3d00000000000000"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. [ 72.502087][ T4254] cgroup: Unknown subsys name 'net' [ 72.615495][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.128071][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.068780][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.077883][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.094344][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.103610][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.112748][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.122686][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.130916][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.140030][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.149724][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.157591][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.157722][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.166200][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.180438][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.180822][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.188672][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.197223][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.204395][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.211545][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.219476][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.256696][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.264403][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.269884][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.290501][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.301200][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.330494][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.350532][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.358856][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.367402][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.378801][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.389219][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.785316][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 76.811056][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 76.874464][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 76.956023][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 77.001138][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 77.012044][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.021333][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.029935][ T4273] device bridge_slave_0 entered promiscuous mode [ 77.073400][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.080837][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.089247][ T4273] device bridge_slave_1 entered promiscuous mode [ 77.118256][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.125573][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.134141][ T4264] device bridge_slave_0 entered promiscuous mode [ 77.150265][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.157430][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.165896][ T4268] device bridge_slave_0 entered promiscuous mode [ 77.197409][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.204776][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.213376][ T4264] device bridge_slave_1 entered promiscuous mode [ 77.220804][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.227971][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.237012][ T4268] device bridge_slave_1 entered promiscuous mode [ 77.280097][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.318605][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.343133][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.355729][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.396127][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.409138][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.427937][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.435360][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.444017][ T4274] device bridge_slave_0 entered promiscuous mode [ 77.463305][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.470731][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.479709][ T4281] device bridge_slave_0 entered promiscuous mode [ 77.505275][ T4273] team0: Port device team_slave_0 added [ 77.514385][ T4273] team0: Port device team_slave_1 added [ 77.529251][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.536836][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.545839][ T4274] device bridge_slave_1 entered promiscuous mode [ 77.563883][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.571357][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.580638][ T4281] device bridge_slave_1 entered promiscuous mode [ 77.633883][ T4264] team0: Port device team_slave_0 added [ 77.643618][ T4268] team0: Port device team_slave_0 added [ 77.650801][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.657799][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.685003][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.701317][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.708493][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.735262][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.749450][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.776188][ T4264] team0: Port device team_slave_1 added [ 77.783589][ T4268] team0: Port device team_slave_1 added [ 77.795720][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.807286][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.853699][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.883475][ T4274] team0: Port device team_slave_0 added [ 77.893139][ T4274] team0: Port device team_slave_1 added [ 77.907298][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.914995][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.942253][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.954271][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.962301][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.988864][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.024621][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.032466][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.059901][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.072497][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.079629][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.106877][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.137648][ T4281] team0: Port device team_slave_0 added [ 78.151361][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.158457][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.185009][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.200939][ T4273] device hsr_slave_0 entered promiscuous mode [ 78.207849][ T4273] device hsr_slave_1 entered promiscuous mode [ 78.217758][ T4281] team0: Port device team_slave_1 added [ 78.234442][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.242349][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.269465][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.280868][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 78.289785][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 78.322175][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.330319][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.357266][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.368774][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 78.368794][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 78.402442][ T4264] device hsr_slave_0 entered promiscuous mode [ 78.410025][ T4264] device hsr_slave_1 entered promiscuous mode [ 78.416884][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.425276][ T4264] Cannot create hsr debugfs directory [ 78.439272][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 78.447156][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.454445][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.480981][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.510299][ T4274] device hsr_slave_0 entered promiscuous mode [ 78.517322][ T4274] device hsr_slave_1 entered promiscuous mode [ 78.525023][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.533220][ T4274] Cannot create hsr debugfs directory [ 78.584674][ T4268] device hsr_slave_0 entered promiscuous mode [ 78.592069][ T4268] device hsr_slave_1 entered promiscuous mode [ 78.598859][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.608076][ T4268] Cannot create hsr debugfs directory [ 78.668692][ T4281] device hsr_slave_0 entered promiscuous mode [ 78.675792][ T4281] device hsr_slave_1 entered promiscuous mode [ 78.683196][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.691549][ T4281] Cannot create hsr debugfs directory [ 79.031951][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.044675][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.055689][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.068664][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.115517][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.127192][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.140718][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.151062][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.257325][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.296271][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.307732][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.318180][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.385630][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.405198][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.438429][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.447587][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.458510][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.472297][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.484357][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.503644][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.524426][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.534550][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.545646][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.553777][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.563799][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.586409][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.615171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.624869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.635165][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.642553][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.651858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.671161][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.682966][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.693398][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.718407][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.736553][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.779706][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.787627][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.796361][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.806095][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.815979][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.832911][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.848073][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.858863][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.889508][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.898259][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.907921][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.917642][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.927754][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.935350][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.944805][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.954468][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.968554][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.994572][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.003802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.013919][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.022341][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.031532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.048095][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.081513][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.096910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.144400][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.157347][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.170354][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.185940][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.207601][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.222545][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.234552][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.245733][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.258608][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.274574][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.285090][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.305270][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.316882][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.328776][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.349965][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.359156][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 80.360729][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.365335][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 80.375438][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.387271][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.429941][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.438741][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.439446][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 80.448344][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.452691][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 80.469638][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.489923][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.511567][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.520104][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 80.538131][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.554163][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.561607][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.627048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.637895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.653611][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.660866][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.670784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.680515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.692055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.700731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.710296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.719360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.728012][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.735209][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.744629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.760421][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.776712][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.792755][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.810343][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.837451][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.863750][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.874124][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.899723][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.920531][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.940128][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.959753][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.970010][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.990549][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.001343][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.015609][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.037958][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.050486][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.073969][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.105905][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.118516][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.132399][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.141918][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.151642][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.162055][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.184043][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.193811][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.203173][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.212865][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.227588][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.275305][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.290519][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.307292][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.316726][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.333766][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.341805][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.356803][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.367270][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.383057][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.391288][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.406123][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.421110][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.455549][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.466020][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.489890][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.530587][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.572395][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.584200][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.596936][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.608502][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.620764][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.630999][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.642406][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.652072][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.667352][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.680527][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.747366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.769935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.828263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.851807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.896250][ T4273] device veth0_vlan entered promiscuous mode [ 81.916977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.936483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.995097][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.015560][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.064070][ T4273] device veth1_vlan entered promiscuous mode [ 82.104777][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.115363][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.134361][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.144231][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.153860][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.161787][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.170303][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.178489][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.194539][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.207703][ T4268] device veth0_vlan entered promiscuous mode [ 82.236991][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.248268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.257192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.276577][ T4268] device veth1_vlan entered promiscuous mode [ 82.326753][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.338726][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.354154][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.366236][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.391328][ T4273] device veth0_macvtap entered promiscuous mode [ 82.429496][ T4273] device veth1_macvtap entered promiscuous mode [ 82.440652][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 82.446843][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 82.454640][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.465057][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.474342][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.483607][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.498800][ T4264] device veth0_vlan entered promiscuous mode [ 82.519290][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 82.519919][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 82.541575][ T4268] device veth0_macvtap entered promiscuous mode [ 82.554244][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.563851][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.573551][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.582598][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.592410][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.600497][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 82.610011][ T4264] device veth1_vlan entered promiscuous mode [ 82.627721][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.639734][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.647949][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.658054][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.666957][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.678375][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.700130][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.712499][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.722926][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.733755][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.743275][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.761383][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.770245][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.780709][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.793003][ T4268] device veth1_macvtap entered promiscuous mode [ 82.829732][ T4274] device veth0_vlan entered promiscuous mode [ 82.849623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.863957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.874061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.883866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.892075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.901043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.909956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.922261][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.934745][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.948069][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.969815][ T4264] device veth0_macvtap entered promiscuous mode [ 82.981995][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.991539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.002614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.014185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.024008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.033137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.047519][ T4274] device veth1_vlan entered promiscuous mode [ 83.061491][ T4264] device veth1_macvtap entered promiscuous mode [ 83.080224][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.092399][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.104911][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.118850][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.128765][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.138406][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.149001][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.194787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.208097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.218032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.229548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.263925][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.276130][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.286682][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.298210][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.311431][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.356724][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.366942][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.376426][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.385602][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.395154][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.405998][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.430934][ T4274] device veth0_macvtap entered promiscuous mode [ 83.439847][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.452747][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.463435][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.474248][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.486455][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.500043][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510600][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.525406][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.537032][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.574838][ T4274] device veth1_macvtap entered promiscuous mode [ 83.588394][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.598601][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.607448][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.617151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.627213][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.636969][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.647100][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.658374][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.693990][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.699905][ T4281] device veth0_vlan entered promiscuous mode [ 83.724708][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.783344][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.797730][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.810699][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.821658][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.832627][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.843928][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.854937][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.866486][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.876924][ T4281] device veth1_vlan entered promiscuous mode [ 83.882707][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.891886][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.912623][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.923028][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.933508][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.944009][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.956001][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.969679][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.980320][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.993493][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.006087][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.018061][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.030364][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.072646][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.081533][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.091200][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.104211][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.113798][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.124844][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.135181][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.175836][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.188504][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.209453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.220682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.236198][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.237992][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.256713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.269224][ T4281] device veth0_macvtap entered promiscuous mode [ 84.308416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.317578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.330359][ T4281] device veth1_macvtap entered promiscuous mode [ 84.351242][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.362754][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.428124][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.448661][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.465644][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.482772][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.497368][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.509343][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.523153][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 84.530563][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 84.537495][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.551417][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.562761][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.574945][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.599636][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 84.602177][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 84.616193][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.627741][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.628329][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.650097][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.659027][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.679993][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 84.686565][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.702309][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.729746][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.747088][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.762297][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.775031][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.787271][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.809806][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.823658][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.833553][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.842987][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.852176][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.880392][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.894113][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.920381][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.981033][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.011772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.162490][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.250501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.259142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 85.267535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 85.277676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 85.286240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 85.294993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 85.304353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.312856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 85.321468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 85.894257][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.002583][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.057799][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.073703][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.085430][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.113636][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.133526][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.133822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.176036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.212476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.249179][ T4331] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.473232][ T4331] usb 3-1: Using ep0 maxpacket: 16 [ 86.513919][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 86.806316][ T4331] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 86.846911][ T32] cfg80211: failed to load regulatory.db [ 87.089737][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.180515][ T4331] usb 3-1: Product: syz [ 87.208488][ T4331] usb 3-1: Manufacturer: syz [ 87.423285][ T4331] usb 3-1: SerialNumber: syz [ 87.441246][ T4331] usb 3-1: config 0 descriptor?? [ 87.453783][ T4331] hub 3-1:0.0: bad descriptor, ignoring hub [ 87.460756][ T4331] hub: probe of 3-1:0.0 failed with error -5 [ 87.484322][ T4331] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 87.872765][ T22] usb 3-1: USB disconnect, device number 2 [ 88.249006][ T4365] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 88.460235][ T4365] usb 2-1: not running at top speed; connect to a high speed hub [ 88.475706][ T4365] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 88.546666][ T4365] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.587811][ T4365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.612582][ T4365] usb 2-1: Product: syz [ 88.626263][ T4365] usb 2-1: Manufacturer: syz [ 88.642028][ T4365] usb 2-1: SerialNumber: syz [ 88.703891][ T4434] Zero length message leads to an empty skb [ 89.311690][ T4365] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 89.438614][ T4365] usb 2-1: USB disconnect, device number 2 [ 89.455610][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.669102][ T4365] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.870900][ T4365] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 92.942853][ T4365] usb 2-1: config 1 has no interface number 0 [ 92.978040][ T4365] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 93.060034][ T4365] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 93.100573][ T4365] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.149884][ T4365] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 93.162404][ T4365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.175236][ T4365] usb 2-1: Product: syz [ 93.180407][ T4365] usb 2-1: Manufacturer: syz [ 93.186267][ T4365] usb 2-1: SerialNumber: syz [ 93.216931][ T4460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.228702][ T4460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.101046][ T4365] usb 2-1: Expected 3 endpoints, found: 2 [ 94.199756][ T4269] Bluetooth: hci4: command 0x0405 tx timeout [ 94.200905][ T4469] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.922383][ T4331] usb 2-1: USB disconnect, device number 3 [ 96.156995][ T4482] netlink: 'syz.1.25': attribute type 10 has an invalid length. [ 96.237878][ T4482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25'. [ 96.296864][ T4482] device team0 entered promiscuous mode [ 96.318145][ T4482] device team_slave_0 entered promiscuous mode [ 96.340583][ T4482] device team_slave_1 entered promiscuous mode [ 96.368373][ T4482] bridge0: port 3(team0) entered blocking state [ 96.459673][ T4482] bridge0: port 3(team0) entered disabled state [ 96.571673][ T4482] bridge0: port 3(team0) entered blocking state [ 96.578557][ T4482] bridge0: port 3(team0) entered forwarding state [ 97.357133][ T4494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 98.326367][ T4500] device veth0_vlan left promiscuous mode [ 98.334016][ T4500] device veth0_vlan entered promiscuous mode [ 98.790011][ T4512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 100.262566][ T4525] netlink: 132 bytes leftover after parsing attributes in process `syz.4.37'. [ 101.309212][ T951] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.810907][ T951] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 101.819200][ T951] usb 3-1: config 1 has no interface number 0 [ 101.825472][ T951] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 101.836771][ T951] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 101.848413][ T951] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.873997][ T951] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 101.894637][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.903361][ T951] usb 3-1: Product: syz [ 101.908460][ T951] usb 3-1: Manufacturer: syz [ 101.913674][ T951] usb 3-1: SerialNumber: syz [ 102.052534][ T4528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.234072][ T4528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.902657][ T951] usb 3-1: Expected 3 endpoints, found: 2 [ 103.250264][ T951] usb 3-1: USB disconnect, device number 3 [ 104.829982][ T4556] device syzkaller0 entered promiscuous mode [ 120.229885][ T4671] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 122.194127][ T4703] loop1: detected capacity change from 0 to 512 [ 122.380443][ T4703] ext3: Unknown parameter 'euid' [ 133.000566][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.007474][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.829246][ T7] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 135.114736][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.135009][ T7] usb 3-1: config 0 has no interface number 0 [ 135.572257][ T7] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.607710][ T4812] o2cb: This node has not been configured. [ 135.619775][ T7] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 135.631569][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.640955][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.690586][ T4812] o2cb: Cluster check failed. Fix errors before retrying. [ 135.715469][ T4812] (syz.1.111,4812,0):user_dlm_register:674 ERROR: status = -22 [ 135.726479][ T4812] (syz.1.111,4812,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 135.806465][ T7] usb 3-1: config 0 descriptor?? [ 135.833697][ T4819] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.889609][ T7] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 136.154194][ T4796] usb 3-1: USB disconnect, device number 4 [ 136.154364][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 136.199181][ T2184] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 137.236855][ T4838] ALSA: mixer_oss: invalid OSS volume 'u' [ 137.379407][ T2184] usb 2-1: device descriptor read/all, error -71 [ 138.343915][ T4819] sctp: failed to load transform for md5: -4 [ 138.423009][ T4835] sctp: failed to load transform for md5: -4 [ 143.871593][ T4402] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.436854][ T4402] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.446244][ T4402] usb 5-1: config 1 has no interface number 0 [ 145.452754][ T4402] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 145.495386][ T4402] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 145.508161][ T4402] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.551386][ T4402] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 145.625655][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.664082][ T4402] usb 5-1: Product: syz [ 145.692478][ T4402] usb 5-1: Manufacturer: syz [ 145.727088][ T4402] usb 5-1: SerialNumber: syz [ 145.748046][ T4402] usb 5-1: can't set config #1, error -71 [ 145.811400][ T4402] usb 5-1: USB disconnect, device number 2 [ 147.534556][ T4943] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 147.546474][ T4943] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 147.554930][ T4943] CPU: 1 PID: 4943 Comm: syz.3.138 Not tainted syzkaller #0 [ 147.562395][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.572665][ T4943] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 147.578388][ T4943] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd 96 15 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 bc 96 15 fa 4d 8b 24 24 48 83 c3 [ 147.598227][ T4943] RSP: 0018:ffffc9000510fa80 EFLAGS: 00010206 [ 147.604371][ T4943] RAX: 0000000000000005 RBX: ffff888056378700 RCX: 0000000000080000 [ 147.612379][ T4943] RDX: ffffc90010949000 RSI: 0000000000000e31 RDI: 0000000000000e32 [ 147.620391][ T4943] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005d6f226 [ 147.628407][ T4943] R10: ffffed1005d6f226 R11: 1ffff11005d6f225 R12: 0000000000000028 [ 147.636701][ T4943] R13: dffffc0000000000 R14: ffff88802eb79000 R15: dffffc0000000000 [ 147.644897][ T4943] FS: 00007f7cc6a186c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 147.654390][ T4943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.661095][ T4943] CR2: 000000110c24f928 CR3: 000000007f2c5000 CR4: 00000000003506e0 [ 147.669373][ T4943] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.677562][ T4943] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.685875][ T4943] Call Trace: [ 147.689187][ T4943] [ 147.692148][ T4943] pcl818_detach+0x62/0xd0 [ 147.696607][ T4943] comedi_device_detach_locked+0x16e/0x710 [ 147.702562][ T4943] comedi_unlocked_ioctl+0xd0b/0x1050 [ 147.708064][ T4943] ? __lock_acquire+0x7c50/0x7c50 [ 147.713133][ T4943] ? comedi_poll+0x8b0/0x8b0 [ 147.717982][ T4943] ? __fget_files+0x28/0x4d0 [ 147.722816][ T4943] ? bpf_lsm_file_ioctl+0x5/0x10 [ 147.727801][ T4943] ? security_file_ioctl+0x7c/0xa0 [ 147.733147][ T4943] ? comedi_poll+0x8b0/0x8b0 [ 147.737777][ T4943] __se_sys_ioctl+0xfa/0x170 [ 147.742503][ T4943] do_syscall_64+0x4c/0xa0 [ 147.746977][ T4943] ? clear_bhb_loop+0x60/0xb0 [ 147.752022][ T4943] ? clear_bhb_loop+0x60/0xb0 [ 147.757110][ T4943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.763141][ T4943] RIP: 0033:0x7f7cc5b8eec9 [ 147.767791][ T4943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.787981][ T4943] RSP: 002b:00007f7cc6a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.796466][ T4943] RAX: ffffffffffffffda RBX: 00007f7cc5de6180 RCX: 00007f7cc5b8eec9 [ 147.804567][ T4943] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 147.813112][ T4943] RBP: 00007f7cc5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.821399][ T4943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.829689][ T4943] R13: 00007f7cc5de6218 R14: 00007f7cc5de6180 R15: 00007ffd7742e528 [ 147.837805][ T4943] [ 147.841185][ T4943] Modules linked in: [ 147.846482][ T4943] ---[ end trace 0000000000000000 ]--- [ 147.852273][ T4943] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 147.857889][ T4943] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd 96 15 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 bc 96 15 fa 4d 8b 24 24 48 83 c3 [ 147.877843][ T4943] RSP: 0018:ffffc9000510fa80 EFLAGS: 00010206 [ 147.884288][ T4943] RAX: 0000000000000005 RBX: ffff888056378700 RCX: 0000000000080000 [ 147.892395][ T4943] RDX: ffffc90010949000 RSI: 0000000000000e31 RDI: 0000000000000e32 [ 147.900614][ T4943] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005d6f226 [ 147.908720][ T4943] R10: ffffed1005d6f226 R11: 1ffff11005d6f225 R12: 0000000000000028 [ 147.916993][ T4943] R13: dffffc0000000000 R14: ffff88802eb79000 R15: dffffc0000000000 [ 147.925518][ T4943] FS: 00007f7cc6a186c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 147.934783][ T4943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.947918][ T4943] CR2: 000000110c24f928 CR3: 000000007f2c5000 CR4: 00000000003506e0 [ 147.956519][ T4943] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.964533][ T4943] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.972826][ T4943] Kernel panic - not syncing: Fatal exception [ 147.979410][ T4943] Kernel Offset: disabled [ 147.983790][ T4943] Rebooting in 86400 seconds..